<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="4004">
<package pkgid="0f8d5ec9f9c0467a6eda83d6019b89fc1b4776d01025605ef789cf6fac8b2245" name="NetworkManager" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="5f41a2564c8c5c75805a32b79f2e08889c073d2b8c1909de4a3c84586473eab5" name="NetworkManager" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="6a3df1d277ee82d9259c4f110d734d60c6a2fb4a502c67254ed8a5ac3615a075" name="NetworkManager" arch="src">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="653ebcd77c9122b9cff3a5567b1b9a47776317ed5c71efd52e8d50194e07c5b0" name="NetworkManager" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="35641421e97eda2089458ff6be65a85dac457d7f100a2deeba3e5a2752333d83" name="NetworkManager-bluetooth" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="c22fc1c46e01742a25f440d713f36b7ee5c08ab774c187651abf18c06ba1c6ea" name="NetworkManager-bluetooth" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="938fe25f3adc316897c75898e6135c7756e3002d7929120368949aea1a3af781" name="NetworkManager-bluetooth" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="b81fa123d4fe0916ff28973a838c653b4da8334abcd0605702acc6a650de232d" name="NetworkManager-cloud-setup" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="36ceade5bdd52cc0c9c528f8967a4f61d9a0a70b0759d6636a507957fb5686e4" name="NetworkManager-cloud-setup" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="701e172ee7ab2a53ea8421f89189157806cf388d8f01587dea812ee367b17942" name="NetworkManager-cloud-setup" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="441bac4dc563ce9342d133a92a72c7cdaf228aa6eced9f45b9e46299f234e623" name="NetworkManager-pppoe" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="bcb7d9b14ccbd82dcdd19007cfa26051a099deadbbb2138697a75dd42b140649" name="NetworkManager-pppoe" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="285f6316b44b5ab10c6c49c36c39b1ebfb29707fd6f7da64298797b71d99773a" name="NetworkManager-pppoe" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="48429d282632b77f1b20f7293df9e047325db9628e71a8bf82cba46c4169bd8b" name="NetworkManager-tui" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="73a0d547c23cb849d8b7eaef33bd306b8cf6d95330cf0f03216fe588d3d49a3d" name="NetworkManager-tui" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="2c3e5d0ad48d4a144a3c556930b50008d4acccb700d964745fb14f177e8f92f5" name="NetworkManager-tui" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="ec3830cdb929c96c0464e33546c4207fcfa76cb441754e13052b8e01908f5dda" name="NetworkManager-wwan" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="5ea2bdc6a26e7181a036ab39ddf51b19419a96a62d1067e1c4490a775fe6358c" name="NetworkManager-wwan" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="b38f6c5a1f9486f176092393ac3746e5e1c5baaecf2747f08965df1b4f4b76b1" name="NetworkManager-wwan" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="bb3038ba6df6dc7a9e49ab3697d1422d2759619cce9db0fcd7a47ed2b0256d12" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.12.1"/>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
</package>
<package pkgid="07b353f5a4202b528d95ef5267aa004f2313604ec74030ae56fff1a92739b0bb" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.12.1"/>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
</package>
<package pkgid="96e6e52c65a018108058b95480ead655d9a3587e08ba710faabde36b4c2108f9" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.12.1"/>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
</package>
<package pkgid="b57d10255d90c01375006b468627cfed5fcea92057eaf2e072d1011e5db1fad7" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.12.1"/>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
</package>
<package pkgid="4cc81da096915a196b249f1ecd839f381039d783fbcc7e65b3808317f62b3afd" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.17.3"/>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
</package>
<package pkgid="0d37cb289f5ae0c3aca00e209845104b20ce488c2884975990f0e9ab3076a574" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.17.3"/>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
</package>
<package pkgid="6c45cb89fe7423bae7c5b0f28116ab1949383ae1263c8ff75117d2f5e8d552f7" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.17.3"/>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
</package>
<package pkgid="a9c58f0f38171eb13786c04037abdd743f41e6681b01fe6578698ddb776cdd4f" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.17.3"/>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
</package>
<package pkgid="bd9492cd906dbf1d084580582422926baf8bd3659d4e347b8808635a03439891" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="9338bc325b60e59b7a48492a7ffd6e7e302ba111ed0ee369bd67e9c4fb6c488f" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="862585b96b291271b7c68f130ab3ab75afc51eac570e5afff94270572a767130" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="520a1a79da52c509673b5dff77405c93ff366e30912447d842d78c4a46fb3007" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.20.1"/>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
  <changelog author="ro@suse.de" date="1706875200">- silence the output in the case of broken symlinks (bsc#1218232)</changelog>
  <changelog author="ro@suse.de" date="1710763200">- add patch git-48-477bc3c05fcdabf9319e84278a1cba2c12c9ed5a.patch
  home and end button not working from ssh client (bsc#1221407)
- use autosetup in prep stage of specfile</changelog>
  <changelog author="ro@suse.de" date="1712923200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  drop the stderr redirection for csh (bsc#1221361)
- add git-49-3f8f26123d91f70c644677a323134fc79318c818.patch
  drop sysctl.d/50-default-s390.conf (bsc#1211721)
- add aaa_base-preinstall.patch
  make sure the script does not exit with 1 if a file
  with content is found (bsc#1222547)</changelog>
  <changelog author="ro@suse.de" date="1714651200">- modify git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to also fix the typo to set JAVA_BINDIR in the csh variant
  of the alljava profile script (bsc#1221361)</changelog>
</package>
<package pkgid="f5fa1142db59370ef19dcbbde52b994baaa74e55689ad51c19aa87088e267981" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="2d9cd00800f7ef65ac5f5524fb1227f10ebdb9e2ea06ca08e2e8d947dbf351d8" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="2a7c2126b5e581ac05ee8a053221d803b1a6fe144cac1ad4ad5690e9b15a83d0" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="2dc73f3ef22c6319257ab268fe8fd1f4628d9a06652a426fd84a37b465809d80" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.6.2"/>
  <changelog author="ro@suse.de" date="1566475200">- Add patch git-07-82a17f1689e8957635c8ccaae7c9b3bff7f94d49.patch
  * add sysctl.d/51-network.conf to tighten network security a bit
    see also (boo#1146866) (jira#SLE-9132)</changelog>
  <changelog author="ro@suse.de" date="1570622400">- Add patch git-08-9875dffab3ddda0c3e8399f935f059246c961f2a.patch
  * Add s390x compressed kernel support (bsc#1151023)
- Add git-09-c6cd010dd8b6efddd71c30f00a923d8f2537584c.patch
  * Fix LC_NAME and LC_ADDRESS in sh.ssh
- Add patch git-10-43091e644ff54997468a215b891dcaa75173f133.patch
  * fix string test to arithmetic test in /etc/profile.d/wsl.sh</changelog>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
</package>
<package pkgid="da835c5a25586b7faca6ffc6d0354dd63a604a2cb0e450ea08ad994f1ae5d681" name="aaa_base" arch="aarch64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="5692ddb58838a5e2a62c3f2ef4e88c74866146b2762a7521f8b7b87802edb1eb" name="aaa_base" arch="s390x">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="31c02efb3cee5bf744be9af8280ced23014b51b3821ecabb9745da881330daec" name="aaa_base" arch="src">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="9c019e19eea4377c378cee2f6b97a89f48fe870ee7287578f2441750e4d4a90f" name="aaa_base" arch="x86_64">
  <version epoch="0" ver="84.87+git20180409.04c9dae" rel="150300.10.9.1"/>
  <changelog author="ro@suse.de" date="1570708800">- Add patch git-11-b20083a930f766939f47dddc66d089c9fee5d38a.patch
  * check if variables can be set before modifying them
    to avoid warnings on login with a restricted shell
    (bsc#1138869)</changelog>
  <changelog author="ro@suse.de" date="1571227200">- Add patch git-12-80d14205f913cc67a98c562f988ea700a56c369b.patch
  * service: check if there is a second argument before using it
    (bsc#1051143)</changelog>
  <changelog author="werner@suse.de" date="1571313600">- Add patch git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  Use official key binding functions in inputrc
  that is replace up-history with previous-history, down-history with
  next-history and backward-delete-word with backward-kill-word
  (bsc#1084934).  Add some missed key escape sequences for urxvt-unicode
  terminal as well (boo#1007715).</changelog>
  <changelog author="werner@suse.de" date="1574251200">- Clear broken ghost entry in patch
  git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  which breaks (lib)readline (bsc#1157278)</changelog>
  <changelog author="ro@suse.de" date="1579176000">- Add patch git-14-12023f2e8aae5b2ac3a895301945566b9f5eb9c3.patch
  drop dev.cdrom.autoclose = 0 from sysctl config (bsc#1160970)</changelog>
  <changelog author="ro@suse.de" date="1581076800">- Add patch git-15-27e2c6180a45cca63d71ffa5de7b32dec749d2cd.patch
  change rp_filter to 2 to follow the current default (bsc#1160735)</changelog>
  <changelog author="ro@suse.de" date="1583236800">- Add patch git-16-ed897a1090cafb678f75dbed8802bd671d3c1921.patch
  get_kernel_version: fix for current kernel on s390x (from azouhr)
  (bsc#1151023) (bsc#1139939)
- Add patch git-17-fe967bddbd74af9aba435900878397c0c7ea0b0b.patch
  added "-h"/"--help" to "old" command (from Bernhard Lang)
- Add patch git-18-bb11f02d5dd940803c08d25b0cfd3650d9de7d41.patch
  change feedback url from http://www.suse.de/feedback to
  https://github.com/openSUSE/aaa_base/issues</changelog>
  <changelog author="werner@suse.de" date="1588852800">- Add patch git-19-1149066a54a372b30b7cbd79cd222e11d96dc984.patch
  * Not all XTerm based emulators do have an terminfo entry (boo#1087982)
- Add patch git-20-6452441f2054b4b290c089ce6269889993b95fc1.patch
  * Better support of Midnight Commander (bsc#1170527)</changelog>
  <changelog author="ro@suse.de" date="1599652800">- Add patch git-21-0064ecd132c30a939125acbc5b9a1c7bcd180fa0.patch
  * add screen.xterm-256color to DIR_COLORS
- Add patch git-22-f5e90d70d119b6aa12d019947029f9337aec378d.patch
  * check for Packages.db and use this instead of Packages
    (boo#1171762)
- Add patch git-23-8f1fe28287466235ade9c62fa5995eba9e642660.patch
  * Rename path() to _path() to avoid using a general name.
- Add patch git-24-2de52ae391e2963eb1913183a6b0530c7e781b55.patch
  * DIR_COLORS add TERM rxvt-unicode-256color (bug#1006973)
- Add patch git-25-287cf7cb851c0636fa46a610015d2d22ad36acea.patch
  * sort TERM entries in etc/DIR_COLORS
- Add patch git-26-0c2f2340cc6ebb51f20b36e550adc517a6b2ae42.patch
  * DIR_COLORS: merge TERM entries with list from (bug#1006973)
- Add patch git-27-abf7927eebbd4d7f47a362d49ae7856520682c49.patch
  * refresh_initrd call modprobe as /sbin/modprobe (bug#1011548)
- Add patch git-28-3351bcc9613ba022503103e7e4ffd01e7bd8e0fd.patch
  * etc/profile add some missing ;; in case esac statements
- Add patch git-29-5220a5f6ba250503ccda326e65ca069d245a5ebe.patch
  * profile and csh.login: on s390x set TERM to dumb on serial console
    for sclp_line0 and ttyS0 console (bug#1153946)
- Add patch git-30-b9dd70f33a124556f16dbbafc89585a82218ad61.patch
  * backup-rpmdb: exit if zypp.pid is there and running
    (bug#1161239)
- Add patch git-31-52dc403d54f2c926ee5cc892d1a8a830a45d7412.patch
  * also add color alias for ip command, jira#sle-9880, bsc#1153943
- Add patch git-32-0ee79834ea9ebf6573a7b903f374c21e53a56c14.patch
  * alias.bash check if ip command knows color=auto (jsc#SLE-7679)</changelog>
  <changelog author="ro@suse.de" date="1606824000">- Add patch git-33-d12420cc66e6d26a9dff6c0e86e00de232151c82.patch
  * Avoid semicolon within (t)csh login script on S/390.
    (bsc#1179431)</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Include all fixes and changes for systemwide inputrc to remove
  the 8 bit escape sequence which interfere with UTF-8 multi byte
  characters as well as support the vi mode of readline library.
  This is done with the patches
  * git-41-f00ca2600331602241954533a1b1610d1da57edf.patch
  * git-42-f39a8d18719c3b34373e0e36098f0f404121b5c5.patch
  before the changed patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  rename it to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  and also add the patches
  * git-44-425f3e9b44ba9ead865d70ff6690d5f2869442dc.patch
  * git-45-bf0a31597d0ed3562bfc5e6be0ade2fe5dc1f7a1.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1635336000">- Add patch git-34-9a1bc15517d6da56d75182338c0f1bc4518b2b75.patch
  * sysctl.d/50-default.conf:
    allow everybody to create IPPROTO_ICMP sockets (bsc#1174504)
- Add patch git-35-91f496b1f65af29832192bad949685a7bc25da0a.patch
  * sysctl.d/50-default.conf: fix ping_group_range syntax error</changelog>
  <changelog author="jgonzalez@suse.com" date="1635940800">- Add git-36-16d1cb895c2742e96a56af98111f8281bedd3188.patch:
  * Add $HOME/.local/bin to PATH, if it exists (bsc#1192248)</changelog>
  <changelog author="ro@suse.de" date="1637150400">- use autopatch
  - update first two patches from git originals to have the
    same apply depth as the rest:
  - git-01-61c106aac03930e03935172eaf94d92c02a343bd.patch
  - git-02-4e5fe2a6ec5690b51a369d2134a1119962438fd1.patch
  - fix get_kernel_version.c to work also for recent kernels
    on the s390/X platform (bsc#1191563)
  - git-37-dfc5b8af96bec249e44a83d573af1f95a661a85c.patch
  - support xz compressed kernel (bsc#1162581)
  - git-38-4c0060639f6fa854830a708a823976772afe7764.patch
  - Fixing possible resource leak
  - git-39-df622b89bc92fd882a6715c5743095528a643546.patch
  - excluding new kernel string in version search</changelog>
  <changelog author="werner@suse.de" date="1637928000">- Port change from Thu Sep 30 08:51:55 UTC 2022 forword to
  current version which includes a rename of patch
    git-13-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  to
    git-43-14003c19eaa863ae9d80a0ebb9b5cab6273a5a9e.patch
  as otherwise autopatch macro does not work anymore</changelog>
  <changelog author="pgajdos@suse.com" date="1642593600">- fix (bsc#1194883) - aaa_base: Set net.ipv4.ping_group_range to
  allow ICMP ping
- added patches
  + git-40-d004657a244d75b372a107c4f6097b42ba1992d5.patch</changelog>
  <changelog author="werner@suse.de" date="1652875200">- Add patch git-46-78b2a0b29381c16bec6b2a8fc7eabaa9925782d7.patch
  * The wrapper rootsh is not a restricted shell (bsc#1199492)</changelog>
  <changelog author="ro@suse.de" date="1695038400">- Add patch git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  * respect /etc/update-alternatives/java when setting JAVA_HOME
    (bsc#1215434,bsc#1107342)</changelog>
  <changelog author="ro@suse.de" date="1699272000">- replace git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  by git-47-056fc66c699a8544c7692a03c905fca568f5390b.patch
  * fix the issues from bsc#1107342 and bsc#1215434 and just
    use the settings from update-alternatives to set JAVA_HOME</changelog>
  <changelog author="ro@suse.de" date="1705320000">- fix git-47-04210f8df15da0ba4d741cfe1693af06f5978a1d.patch
  to actually apply</changelog>
</package>
<package pkgid="5484aa6de6c3820f4d68cc97581e8ca4add3f15da523acf7f08676c8741c69d7" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="d6c4f0fc5703df7a02c27ca93e0043c14394e6e4b54d19f00505549c9cb78b09" name="abseil-cpp" arch="src">
  <version epoch="0" ver="20240116.1" rel="150500.13.3.5"/>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1709467200">- update to 20240116.1:
  * Add absl::NoDestructor&lt;T&gt; to simplify defining static types
    that do not need to be destructed upon program exit.
  * Add configurable verbose logging (also known as VLOG).
  * Added absl::Overload(), which returns a functor that provides
    overloads based on the functors passed to it. Note that this
    functionality requires C++17 or newer.
  * Breaking Change: AbslHashValue() no longer accepts C-style
    arrays as a parameter, caller need to wrap C-string literals in
    absl::string_view.
  * Breaking Change: absl::weak_equality and absl::strong_equality
    have been removed. The corresponding std types were removed
    before C++20 was finalized</changelog>
</package>
<package pkgid="64881de00d395f1b20d3e087dec1bcb7ab6b063bb177d9a87ed568ad910a3812" name="apparmor" arch="src">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="bd6b71ebf44c22942bdd2c5e2091796318ba8793538e0cf23d41b6dd245c7ee0" name="apparmor" arch="src">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="478a63a17ff4e171d077b13172e81ba78ed83361cc17489d5f81bef7bf7731b8" name="apparmor-parser" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="753b7c0e7b8cd6d2e2db1662d4fcfb92c666a94ef21c23fdef3e8c763f7e5630" name="apparmor-parser" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="553e271db148a7fadab9e24ea58390acb329ae1fd87705d746112c680d60556a" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="2e8fab95637d3db744eba597be4e7039b16cb1cb74fa5931a471b1adcd0ce71f" name="apparmor-parser" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="d3491f4924d75ae46ccc11aea568447a1d7f522a4e80fa05fc66b8afbb8b7b20" name="apparmor-parser" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="65af14dd2b2e34cde57d5bc89b51cc93370c05548c2a81ad4739bb6a8bcab143" name="apparmor-parser" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="f7b5fbbea0660dfb07d9d48fc18ede4554ef54097e861bc808ef3fd44908bcd4" name="audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="ca7c1876560637d148b184b8fc5f374aa6be375e9eb4b35250582cca39b37b44" name="audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="5ad9e23d83bafa093f98d0e771d5d108ff734cff6c5db40f092960f68799bc35" name="audit" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="04a80f48d1c763c169d388d78c77f61ca32ddc7599c0e99fa870ace0643b49e4" name="audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="5ab5340ecfd61232dca0ad2d887b1b563c6c2b30f932867383223fbbbd75a72e" name="audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="f5fe5c65a6e7d2a3a56d9edb62d382f1df04ce0710a594ae736acf32630969fb" name="audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="24ee9e1afd1a1d5bfbdf419825969f25124da13dfc4a5b2ab517dbfcd7555f2f" name="audit" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="559e081f19bc7e82964a7f12453b9857fe51fc7583c0551101b9f5519fde5cf4" name="audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="727e9ca56a779705f1da30ad8fa5fb0bf94915e5ab61ec335ad4e8aeff25593b" name="audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="241cd243c521f05ea586d9d51d57ce7a049dc8f724c037e782826d67d524752a" name="audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="facf3c733a1f8b7a8d6b550b9f29ebb53ee2a12df1194ffae7da7cc1b9ab7769" name="audit" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="a1d93b3e0b9bce7192869a13fe165f17b34e7dec4a4d020ec17da45405088bec" name="audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="99bd839961c13e3c94693c256b4b3ede2c15dbaac88723c9666650e2656ac20c" name="audit-audispd-plugins" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="2c06ada0068df07438fbe19307f87598f85a06deb62be516e620d56647b54812" name="audit-audispd-plugins" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="2385df899829618e17bc21ff8cf8c1a8a7c1a67f3b925d36aaa66445ecf6aafb" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="4087d62c77d6389798666739566307bb3b7bdfcfaf105b71bbdef272469d5b30" name="audit-audispd-plugins" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="1dba3410d6d90eeb7c2c59483c7cd8752e1543d9fa88ce13b1c0965ed3586bd5" name="audit-audispd-plugins" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="3682780bbb4933c49d7706451a7ed184ea7da0e021f6b48a797a932ca722d9ad" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="79c2ad821203c04419dba67d7991afffd76e5c84e753bca137ff91150fe4b412" name="audit-audispd-plugins" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="3375b8eb9e1299a06265795845ff4b387bd953a258fefdce5da47a84e10e349d" name="audit-audispd-plugins" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="b50c4195249ee0fc865a145b9bd9da73737e511f95b4e0f1be02efe65e39bc46" name="audit-audispd-plugins" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="d8a0bcc54c1b3565dcd21bf0712a99469bedf1636a5f4e6656063d8cae1a09fc" name="audit-secondary" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="f4f9e1be818a1784d4ec8781e05e8c7b2d86845227ce12deee0de1ac9cc1e9f3" name="audit-secondary" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="303b0228ccf7e5e6e2fe73eb4c8c870b096899ac4545ef0d993bc29ff1019977" name="audit-secondary" arch="src">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="818ec10f98c55323c8ab573fcffcc9a7d1024b09aa7405994a68774ea26ea1f2" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="b4d71589e2f252d6c6c38a95433a5c16e1f0a030045f82e6d5a6dd1a35078425" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="8cb5ddf996f9eed46907027623ad1dc3f603692f2e6df2c587f6c479e1c2cf99" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="f9976b2883d4a306242c0b4427000fbbd3ccf693524dc9d0f51402835a94bef0" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="4f4f87b746290f4d28ceb28de8eaa23e80cad51995cba3a664f99da40e993c63" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="382dcd04740c7b908fe4edea02253d95416a2f2648403f10ed421ed3550af6f9" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="5862c30e26cee3fe88657172b64ddf58dca385950f64de5575f9fd219ef8e4a8" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="dc1eed122296dbefbbc16a2ece60e99b90455c547c13ff52026503914344d8bf" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="b229bb45ced680f3a352a065021a83bd0d0b6ed75d4402d307fd444c372c00c0" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="caaaa07b92de93ffbc7ceeef9c7d29fdaff1de7f565db434071285faf2a7e24d" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="624a3bf589171805d8cfaca4e0dafed32ecf8655a2ff67abc9460a29a4897af5" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="5bd583f8a6a52701f0c76b519953e923a06acde7d2a7a58b170f1e85ff391e71" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="37872443688e17a8abbfe0183af77ddf9bd8d5074bd5d88273cda41455e6957c" name="avahi" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="6ff0727b34ea5025d0e54e55664913b29ba5c29e5089d8f06b06dba12eea0003" name="avahi" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="a9f6b999deb29daba9d22da41aab1737a552eb0db7d8e304a9b50eca3abf0f81" name="avahi" arch="src">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="3f04504b447d38f9758c0c00f6884b47339ee4178beecc14b74663e88ff3e158" name="avahi" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="b302be17cd24786cabf1a50abae29cfe8e162f041e5ad4eb4e9a62fd1a06384a" name="aws-cli" arch="noarch">
  <version epoch="0" ver="1.27.89" rel="150200.30.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1662033600">- Update to version 1.25.64
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.64/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663156800">- Update to version 1.25.72
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.72/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663675200">- Update to version 1.25.76
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.76/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1664884800">- Update to version 1.25.85
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.85/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666008000">- Update to version 1.25.91
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.91/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666699200">- Update to version 1.26.0
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.26.0/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667563200">- Update to version 1.27.2
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.2/CHANGELOG.rst
- Relax upper version constraint for python-colorama in
  BuildRequires and Requires to 0.5.0 (bsc#1204917)
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668427200">- Update to version 1.27.8
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.8/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669982400">- Update to version 1.27.21
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.21/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1670587200">- Update to version 1.27.26
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.26/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1672747200">- Update to version 1.27.41
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.41/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674216000">- Update to version 1.27.52
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.52/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to version 1.27.58
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.58/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675425600">- Update to version 1.27.60
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.60/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to version 1.27.66
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.66/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to version 1.27.71
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.71/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to version 1.27.78
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.78/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to version 1.27.89
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.89/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)</changelog>
</package>
<package pkgid="e421d78cc0d15bb889b57be438104e37bc0a10ef751f20278225009af495847d" name="aws-cli" arch="src">
  <version epoch="0" ver="1.27.89" rel="150200.30.11.1"/>
  <changelog author="adrian.glaubitz@suse.com" date="1662033600">- Update to version 1.25.64
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.64/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663156800">- Update to version 1.25.72
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.72/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1663675200">- Update to version 1.25.76
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.76/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1664884800">- Update to version 1.25.85
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.85/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666008000">- Update to version 1.25.91
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.25.91/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666699200">- Update to version 1.26.0
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.26.0/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667563200">- Update to version 1.27.2
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.2/CHANGELOG.rst
- Relax upper version constraint for python-colorama in
  BuildRequires and Requires to 0.5.0 (bsc#1204917)
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668427200">- Update to version 1.27.8
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.8/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669982400">- Update to version 1.27.21
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.21/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1670587200">- Update to version 1.27.26
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.26/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1672747200">- Update to version 1.27.41
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.41/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674216000">- Update to version 1.27.52
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.52/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to version 1.27.58
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.58/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675425600">- Update to version 1.27.60
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.60/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to version 1.27.66
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.66/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to version 1.27.71
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.71/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to version 1.27.78
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.78/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to version 1.27.89
  + For detailed changes see
    https://github.com/aws/aws-cli/blob/1.27.89/CHANGELOG.rst
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)</changelog>
</package>
<package pkgid="9d64b23713be0f9e0e29e7a31d5ed5294e1c9584b7247b36a49bec1f3dcec1a3" name="biosdevname" arch="src">
  <version epoch="0" ver="0.7.3.7.g495ab76" rel="150000.5.6.1"/>
  <changelog author="trenn@suse.de" date="1402660800">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="msuchanek@suse.com" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Update to version 0.7.3.7.g495ab76 (bsc#1217455):
  * Add SMBIOS 3.x support
  * Read DMI entries from /sys/firmware/dmi/tables/DMI
  * Add buffer read helper using read explicitly
  * man: fix all_ethN indentation
  * Netronome biosdevname support (#8)
  * Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
  * Add support for ExaNIC network cards (#5)
- Removed patches now upstream:
  - dmidecode-prevent-infinite-recursion.patch
  - biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  - biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="5084d39baa9e68076673ed193b910285bb371a86e52b992a890e0a4f52efbd65" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3.7.g495ab76" rel="150000.5.6.1"/>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1527076800">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
  <changelog author="dimstar@opensuse.org" date="1579694400">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="msuchanek@suse.com" date="1597320000">- Read DMI info rom sysfs (bsc#1174491).
  * biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  * biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Update to version 0.7.3.7.g495ab76 (bsc#1217455):
  * Add SMBIOS 3.x support
  * Read DMI entries from /sys/firmware/dmi/tables/DMI
  * Add buffer read helper using read explicitly
  * man: fix all_ethN indentation
  * Netronome biosdevname support (#8)
  * Prevent infinite recursion in dmidecode.c::smbios_setslot by (#7)
  * Add support for ExaNIC network cards (#5)
- Removed patches now upstream:
  - dmidecode-prevent-infinite-recursion.patch
  - biosdevname-Add-buffer-read-helper-using-read-explicitly.patch
  - biosdevname-Read-DMI-entries-from-sys-firmware-dmi-tables-DMI.patch</changelog>
</package>
<package pkgid="5c5c7d96c7295f800a9696a4b212db0418642e5f60faec1d24f6f849b95f9f8d" name="blog" arch="aarch64">
  <version epoch="0" ver="2.26" rel="150300.4.6.1"/>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
  <changelog author="jengelh@inai.de" date="1555761600">- Implement shared library packaging guideline.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567166400">- Add blog-Remove-unused-header.patch: Fix build with new glibc
  (gh#bitstreamout/showconsole#3).</changelog>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Add patch blog.dif
  * Fix big endian cast problems to be able to read commands
    and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="e4251a44c35102dbb20e2f33aaac36a3e79de6caecdae2c70ee1792971a0a8e7" name="blog" arch="s390x">
  <version epoch="0" ver="2.26" rel="150300.4.6.1"/>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
  <changelog author="jengelh@inai.de" date="1555761600">- Implement shared library packaging guideline.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567166400">- Add blog-Remove-unused-header.patch: Fix build with new glibc
  (gh#bitstreamout/showconsole#3).</changelog>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Add patch blog.dif
  * Fix big endian cast problems to be able to read commands
    and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="2c88a65562bdcc40228f8ef5ce9582f7a6761e1b881695c4fb6545782269f471" name="blog" arch="src">
  <version epoch="0" ver="2.26" rel="150300.4.6.1"/>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
  <changelog author="jengelh@inai.de" date="1555761600">- Implement shared library packaging guideline.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567166400">- Add blog-Remove-unused-header.patch: Fix build with new glibc
  (gh#bitstreamout/showconsole#3).</changelog>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Add patch blog.dif
  * Fix big endian cast problems to be able to read commands
    and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="1e828a44f102ea33c4b1562b6a4a6f87ab890ff777041f7231eab9e9a3c2fae6" name="blog" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150300.4.6.1"/>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
  <changelog author="jengelh@inai.de" date="1555761600">- Implement shared library packaging guideline.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567166400">- Add blog-Remove-unused-header.patch: Fix build with new glibc
  (gh#bitstreamout/showconsole#3).</changelog>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Add patch blog.dif
  * Fix big endian cast problems to be able to read commands
    and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="5a4a5a53fb0a867555579fe9aba3f286cefd3ab0005d0f550e95a1c372676a9a" name="bluez" arch="src">
  <version epoch="0" ver="5.62" rel="150400.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="81ed8f2c0cfefbbf4a36856ebfe4885c644c559877ba77ee983302f1f66d8c52" name="bluez" arch="src">
  <version epoch="0" ver="5.62" rel="150400.4.16.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- Add sdpd-Fix-leaking-buffers-stored-in-cstates-cache.patch
  sdpd: Fix leaking buffers stored in cstates cache
  (bsc#1192760)(CVE-2021-41229)</changelog>
</package>
<package pkgid="c6102a261c982450b888e5477905356421d583a506211921e194038eadc67ee2" name="bluez" arch="src">
  <version epoch="0" ver="5.62" rel="150400.4.19.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- Add sdpd-Fix-leaking-buffers-stored-in-cstates-cache.patch
  sdpd: Fix leaking buffers stored in cstates cache
  (bsc#1192760)(CVE-2021-41229)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="98b68c2d9242024c777daaba8374c5ef38fcfd39f25680fba4f9dfe49f0ef0f7" name="brltty" arch="src">
  <version epoch="0" ver="6.4" rel="150400.4.3.3"/>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="mgorse@suse.com" date="1586433600">- Update to version 6.1:
  + See ChangeLog for changes.
- Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.8.0, and sover is now 0_8
- Add brltty-gcc10.patch: fix build with -fno-common.
- Adjust line to remove xsession file.
- Remove brltty-alsa.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mgorse@suse.com" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
  <changelog author="mgorse@suse.com" date="1609502400">- Update to version 6.2:
  + See ChangeLog for changes.
- Update api_version: now 0.8.1.
- Replace brltty-5.5-systemd-install.patch with
  brltty-fix-install-dirs.patch: also adjust udev directory.
- Drop brltty-gcc10.patch: fixed upstream.
- Move udev rules patching to %build.
- Use the Makefile to install udev and polkit rules and docs.
- Brltty-config has been renamed to brltty-config.sh.
- Remove polkit conditional: we always have it enabled.
- Remove old espeak support: Leap prior to 15.0 is no longer
  supported.
- Add python3-setuptools to BuildRequires: required by rpm during
  checks.
- Add doxygen to BuildRequires: needed to build manual.
- Create a brltty user on install: now expected by service.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610884800">- Starting with the TCL 8.6.11 package, the default install path
  for the TCL library is corrected to /usr/lib64/tcl: adjust the
  move command for our tcl module basedon this change.</changelog>
  <changelog author="mgorse@suse.com" date="1612267200">- Update to version 6.3:
  + See ChangeLog for changes.
- API version is now 0.8.2.
- Drop brltty-fix-install-dirs.patch: no longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1632571200">- Update to version 6.4:
  + See ChangeLog for changes.
- API version is now 0.8.3.
- Add at-spi2 to BuildRequires. Now needed for at-spi driver.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633089600">- Use sysuser-tools to process included sysusers.d file correctly
  (bsc#1191465)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633176000">- Move sysusers.d to separate package
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637668800">- Add all sysusers.d Requires</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="olaf@aepfle.de" date="1671278400">- Use tmpfiles_create_package
- Use sysuser-tools unconditionally (bsc#1205161)</changelog>
</package>
<package pkgid="d6348417f435c23804ed3c2bc29a491352b9e0c44c2aa6638e6e110d246f420d" name="brltty" arch="src">
  <version epoch="0" ver="6.4" rel="150400.4.5.1"/>
  <changelog author="mgorse@suse.com" date="1514980800">- Fix %pre, %post, and %postun: brltty.service is now
  brltty@.service (boo#1074096).</changelog>
  <changelog author="aloisio@gmx.com" date="1520251200">- Update to version 5.6
  * General updates:
    + BRLTTY has been relicensed to the LGPL (from the GPL).
    + Better cursor routing handling of status line updates and
    vertical scrolling.
    + The Track Screen Scroll setting has been added.
    + The Word Wrap setting has been added.
    + Panning left when using a contraction table now word wraps.
    + Typing dismisses an alert message.
    + The test for when INFO does text maximization instead has
    been fixed.
    + Overrides are now applied when the preferences haven't yet
    been saved.
    + The Inceptor braille driver (from Innovision) has been added.
  * The Baum braille driver:
    + On models with B9 and B10 by the joystick, both are
    interpreted as Space.
    + Input packet handling for Pronto! V3 models has been fixed.
  * The EuroBraille braille driver:
    + Improved autodetection when using Bluetooth.
    + The Esytime braille keyboard can be used over Bluetooth and
    USB.
    + For Esytime models, B5 has been renamed to B8.
  * The HIMS braille driver:
    + The Smart Beetle is now recognized when using Bluetooth.
  * The HumanWare braille driver:
    + The BrailleNote Touch is recognized when using USB.
  * BrlAPI changes:
    + The version is now 0.6.7 (it was 0.6.6).
    + The brlapi_getModelIdentifier() function has been added to
    the API.
    + The default character set is now based on the user's locale.
    + Sessions would occasionally hang when connecting.
    + PolKit authentication is no longer attempted when it isn't
    available.
    + Reading raw key codes no longer uses key ranges.
  * Text tables:
    + The lt (Lithuanian) table has been updated.
    + The uk (Ukrainian) table has been added.
  * Contraction tables:
    + The fr-abrege (French) table has been updated.
    + The lt (Lithuanian) table has been added.
    + Support has been added for LibLouis tables.
    + brltty-ctb's output is now UTF-8 (rather than ASCII).
  * Key tables:
    + The ifPlatform and ifNotPlatform directives have been added.
  * Systemd changes:
    + Path (rather than target) units are now used to manage BRLTTY
    instances.
  * Build features:
    + Add the reload target to the make files for Systemd and Udev.
    + A make file for install/uninstall of the AppStream rules has
    been added.
    + Python 3.6 is supported.
- Use espeak-ng when available</changelog>
  <changelog author="aloisio@gmx.com" date="1520856000">- Use correct license</changelog>
  <changelog author="ro@suse.de" date="1526385600">- use brltty.path for systemd macros (boo#1074096 again)</changelog>
  <changelog author="mgorse@suse.com" date="1551355200">- Update to version 6.0:
  + Too many changes; please read ChangeLog :
  - Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.7.0, and sover is now 0_7
- brltty-systemd-wrapper now installs into /usr/libexec
- Pass libexecdir in configure
- LICENSE-GPL no longer exists
- Package binaries new in 6.0</changelog>
  <changelog author="olaf@aepfle.de" date="1553601600">- Use alsa API properly. Consumers are expected to use
  &lt;alsa/asoundlib.h&gt; instead of &lt;asoundlib.h&gt;.
  This is in preparation of an change to pkgconfig(alsa) to
  not pollute CFLAGS with -I/usr/include/alsa anymore (bsc#1130333)
  brltty-alsa.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1560945600">- BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
  allow OBS to shortcut by using systemd-devel-mini.</changelog>
  <changelog author="ro@suse.de" date="1570622400">- change udev rule again to also not automatically use the braille
  driver for USB IDs 10c4:ea60 and 10c4:ea80 as these are generic
  IDs of generic UART bridges and should not be used for higher
  level devices (bsc#1093378, bsc#1093455, bsc#1007652)</changelog>
  <changelog author="mgorse@suse.com" date="1586433600">- Update to version 6.1:
  + See ChangeLog for changes.
- Rebased brltty-5.5-systemd-install.patch
- api_version is now 0.8.0, and sover is now 0_8
- Add brltty-gcc10.patch: fix build with -fno-common.
- Adjust line to remove xsession file.
- Remove brltty-alsa.patch</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1594123200">- Fixes for %_libexecdir changing to /usr/libexec</changelog>
  <changelog author="mgorse@suse.com" date="1602676800">- Add coreutils and util-linux to post requires (boo#1177656).</changelog>
  <changelog author="mgorse@suse.com" date="1609502400">- Update to version 6.2:
  + See ChangeLog for changes.
- Update api_version: now 0.8.1.
- Replace brltty-5.5-systemd-install.patch with
  brltty-fix-install-dirs.patch: also adjust udev directory.
- Drop brltty-gcc10.patch: fixed upstream.
- Move udev rules patching to %build.
- Use the Makefile to install udev and polkit rules and docs.
- Brltty-config has been renamed to brltty-config.sh.
- Remove polkit conditional: we always have it enabled.
- Remove old espeak support: Leap prior to 15.0 is no longer
  supported.
- Add python3-setuptools to BuildRequires: required by rpm during
  checks.
- Add doxygen to BuildRequires: needed to build manual.
- Create a brltty user on install: now expected by service.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610884800">- Starting with the TCL 8.6.11 package, the default install path
  for the TCL library is corrected to /usr/lib64/tcl: adjust the
  move command for our tcl module basedon this change.</changelog>
  <changelog author="mgorse@suse.com" date="1612267200">- Update to version 6.3:
  + See ChangeLog for changes.
- API version is now 0.8.2.
- Drop brltty-fix-install-dirs.patch: no longer needed.</changelog>
  <changelog author="mgorse@suse.com" date="1632571200">- Update to version 6.4:
  + See ChangeLog for changes.
- API version is now 0.8.3.
- Add at-spi2 to BuildRequires. Now needed for at-spi driver.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633089600">- Use sysuser-tools to process included sysusers.d file correctly
  (bsc#1191465)</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633176000">- Move sysusers.d to separate package
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637668800">- Add all sysusers.d Requires</changelog>
  <changelog author="ohering@suse.de" date="1639483200">- Add python-rpm-macros (bsc#1180125)</changelog>
  <changelog author="olaf@aepfle.de" date="1671278400">- Use tmpfiles_create_package
- Use sysuser-tools unconditionally (bsc#1205161)</changelog>
</package>
<package pkgid="56f86cc3b6f305da76f4a2392afdc75a295eb28be0e6d06369ed7b8cd2e6beee" name="btrfsprogs" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.5.3.1"/>
  <changelog author="dsterba@suse.cz" date="1581854400">- Update to 5.4.1
  * build: fix docbook5 build
  * check: do extra verification of extent items, inode items and chunks
  * qgroup: return ENOTCONN if quotas not running (needs updated kernel)
  * other: various test fixups</changelog>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
</package>
<package pkgid="a7fd423ebe5eb53a253f1c79da991c434d100a85c0bce3db6bfd99e731765953" name="btrfsprogs" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.5.3.1"/>
  <changelog author="dsterba@suse.cz" date="1581854400">- Update to 5.4.1
  * build: fix docbook5 build
  * check: do extra verification of extent items, inode items and chunks
  * qgroup: return ENOTCONN if quotas not running (needs updated kernel)
  * other: various test fixups</changelog>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
</package>
<package pkgid="58c23b41dad97f4dd961f818d398be1d8e98c58d89854185b493ca29acafd68d" name="btrfsprogs" arch="src">
  <version epoch="0" ver="5.14" rel="150400.5.3.1"/>
  <changelog author="dsterba@suse.cz" date="1581854400">- Update to 5.4.1
  * build: fix docbook5 build
  * check: do extra verification of extent items, inode items and chunks
  * qgroup: return ENOTCONN if quotas not running (needs updated kernel)
  * other: various test fixups</changelog>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
</package>
<package pkgid="788f0724d0a9de77044c1542e86163f139ea4330e8533c40792dceff7c9595c7" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.5.3.1"/>
  <changelog author="dsterba@suse.cz" date="1581854400">- Update to 5.4.1
  * build: fix docbook5 build
  * check: do extra verification of extent items, inode items and chunks
  * qgroup: return ENOTCONN if quotas not running (needs updated kernel)
  * other: various test fixups</changelog>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
</package>
<package pkgid="8c763c0bd76de72e61f9f0f0674d4476d940e5f8ef51de8341133bc625b06ece" name="btrfsprogs" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.5.6.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="d12dc5433f0b8c5f5902c97b6e256cc79fcd528e7f483a4ec02009e8085e0ff4" name="btrfsprogs" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.5.6.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="d2fcec39e3ce2793563b5ea1270172899629197fcfabaf267e4a736017d861e6" name="btrfsprogs" arch="src">
  <version epoch="0" ver="5.14" rel="150400.5.6.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="dcbc1efd9dfcaaee0a6816c3576ae9e05e76edd880237b7c2e6d1e027171f408" name="btrfsprogs" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.5.6.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="fe46429ee6b6045ce75c1e102b1dd6ec92bab62568f5a227b7ac61dc7a6b3b1c" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="5.14" rel="150400.5.3.1"/>
  <changelog author="dsterba@suse.cz" date="1581854400">- Update to 5.4.1
  * build: fix docbook5 build
  * check: do extra verification of extent items, inode items and chunks
  * qgroup: return ENOTCONN if quotas not running (needs updated kernel)
  * other: various test fixups</changelog>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
</package>
<package pkgid="b6366d24b74161bd0b5000e4b6e15035ba874c399013bdd7ed045e2b8beca7cb" name="btrfsprogs-udev-rules" arch="noarch">
  <version epoch="0" ver="5.14" rel="150400.5.6.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="9564dd456dd073ef4321deec412458007d3eee122de6a146b51a3848ccd2cb65" name="c-ares" arch="src">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="c61422f6839d38bd946acbf5c27612c2d99bd5c3c7d0ef20af8c3070f5dbf48c" name="c-ares" arch="src">
  <version epoch="0" ver="1.19.1" rel="150000.3.26.1"/>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- CVE-2024-25629.patch: fix out of bounds read in ares__read_line()
  (bsc#1220279, CVE-2024-25629)</changelog>
</package>
<package pkgid="bb772de4cd443befbdef068d4e1969be8fb85f532a49bcd0006eaab907e10273" name="ca-certificates" arch="noarch">
  <version epoch="0" ver="2+git20240416.98ae794" rel="150300.4.3.3"/>
  <changelog author="ledest@gmail.com" date="1415448000">- fix bashism in postun script</changelog>
  <changelog author="lnussel@suse.de" date="1427198400">- Update to version 2+git20150324.e3ee392:
  + p11-kit 0.23.1 supports pem-directory-hash now
- use service file to generate tarball</changelog>
  <changelog author="lnussel@suse.de" date="1427284800">- require p11-kit-tools &gt;= 0.23.1</changelog>
  <changelog author="lnussel@suse.de" date="1447243200">- Update to version 2+git20151110.c15593c:
  + set proper umask (boo#948724)</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Run update-ca-certificate by systemd unit when the content of
  one of the paths changes. Needed for read-only root and/or
  transactional updates.</changelog>
  <changelog author="lnussel@suse.de" date="1502107200">- Update to version 2+git20170807.10b2785:
  * Check TRANSACTIONAL_UPDATE is set (boo#1045942)
  * Add systemd units</changelog>
  <changelog author="kukuk@suse.de" date="1511438400">- Don't require systemd, since we could be used in environments
  like container images, where we don't have systemd. If systemd
  is installed the systemd units will be used, else they are not
  needed.</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Re-add systemd requires, else package will be installed to early
  and services never enabled [bsc#1071776].</changelog>
  <changelog author="kukuk@suse.de" date="1513252800">- Revert last change since we fixed systemd-preset-branding and
  this requires is no longer needed.</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="lnussel@suse.de" date="1615291200">- backport bash rewrite from Factory to make sure to trigger in
  transactional mode (boo#1179884)</changelog>
  <changelog author="lnussel@suse.de" date="1616068800">- openssl is no longer required but coreutils and findutils are
  (boo#1183680). Keep openssl(cli) at runtime for now nevertheless as this
  package might be the only one pulling it in.</changelog>
  <changelog author="lnussel@suse.com" date="1713268800">- Update to version 2+git20240416.98ae794 (bsc#1221184):
  * Use flock to serialize calls (boo#1188500)
  * Make certbundle.run container friendly
  * Create /var/lib/ca-certificates if needed</changelog>
</package>
<package pkgid="6354532e7f31b9d41b538a79f9abe36bec9eb587097d1c5093e1dbaea233a42d" name="ca-certificates" arch="src">
  <version epoch="0" ver="2+git20240416.98ae794" rel="150300.4.3.3"/>
  <changelog author="lnussel@suse.de" date="1401883200">- don't keep certificates with marker (bnc#875647)</changelog>
  <changelog author="lnussel@suse.de" date="1403524800">- fix directory permissions for real this time (bnc#871639)</changelog>
  <changelog author="meissner@suse.com" date="1405598400">- clarify the start order of the generators, as certbundle.run
  semi-depends on etc_ssl.run via a timestamp. (bnc#883386)</changelog>
  <changelog author="lnussel@suse.de" date="1406721600">- removed the version in the Obsoletes. The package in SLE11 got
  version updated (bnc#887099).</changelog>
  <changelog author="lnussel@suse.de" date="1407153600">- add p11 kit header to set label of migrated certificates to the
  file name of the previous one (bnc#890205)</changelog>
  <changelog author="lnussel@suse.de" date="1407240000">- use rpm -qf to determine if a ssl cert is owned by some other
  package and therefore doesn't need to be migrated (related to
  bnc#890205).</changelog>
  <changelog author="ledest@gmail.com" date="1415448000">- fix bashism in postun script</changelog>
  <changelog author="lnussel@suse.de" date="1427198400">- Update to version 2+git20150324.e3ee392:
  + p11-kit 0.23.1 supports pem-directory-hash now
- use service file to generate tarball</changelog>
  <changelog author="lnussel@suse.de" date="1427284800">- require p11-kit-tools &gt;= 0.23.1</changelog>
  <changelog author="lnussel@suse.de" date="1447243200">- Update to version 2+git20151110.c15593c:
  + set proper umask (boo#948724)</changelog>
  <changelog author="kukuk@suse.de" date="1497873600">- Run update-ca-certificate by systemd unit when the content of
  one of the paths changes. Needed for read-only root and/or
  transactional updates.</changelog>
  <changelog author="lnussel@suse.de" date="1502107200">- Update to version 2+git20170807.10b2785:
  * Check TRANSACTIONAL_UPDATE is set (boo#1045942)
  * Add systemd units</changelog>
  <changelog author="kukuk@suse.de" date="1511438400">- Don't require systemd, since we could be used in environments
  like container images, where we don't have systemd. If systemd
  is installed the systemd units will be used, else they are not
  needed.</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Re-add systemd requires, else package will be installed to early
  and services never enabled [bsc#1071776].</changelog>
  <changelog author="kukuk@suse.de" date="1513252800">- Revert last change since we fixed systemd-preset-branding and
  this requires is no longer needed.</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="jsikes@suse.de" date="1537358400">- Changed "openssl" requirement to "openssl(cli)"
  * (bsc#1101470)</changelog>
  <changelog author="lnussel@suse.de" date="1615291200">- backport bash rewrite from Factory to make sure to trigger in
  transactional mode (boo#1179884)</changelog>
  <changelog author="lnussel@suse.de" date="1616068800">- openssl is no longer required but coreutils and findutils are
  (boo#1183680). Keep openssl(cli) at runtime for now nevertheless as this
  package might be the only one pulling it in.</changelog>
  <changelog author="lnussel@suse.com" date="1713268800">- Update to version 2+git20240416.98ae794 (bsc#1221184):
  * Use flock to serialize calls (boo#1188500)
  * Make certbundle.run container friendly
  * Create /var/lib/ca-certificates if needed</changelog>
</package>
<package pkgid="4084001ff5f7fbe15d5f642b027ae224bcb7c975fc2b4ac62fcff140a42b98fc" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.62" rel="150200.30.1"/>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="meissner@suse.com" date="1612872000">- Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994)
- Added new root CAs:
  - NAVER Global Root Certification Authority
- Removed old root CA:
  - GeoTrust Global CA
  - GeoTrust Primary Certification Authority
  - GeoTrust Primary Certification Authority - G3
  - GeoTrust Universal CA
  - GeoTrust Universal CA 2
  - thawte Primary Root CA
  - thawte Primary Root CA - G2
  - thawte Primary Root CA - G3
  - VeriSign Class 3 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G5</changelog>
  <changelog author="meissner@suse.com" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
  <changelog author="meissner@suse.com" date="1671710400">- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch</changelog>
  <changelog author="meissner@suse.com" date="1692014400">- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1</changelog>
</package>
<package pkgid="2a0cf766c51938b710e216bf801147655e3e62c4dc46b19f66c56417318a2fab" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.62" rel="150200.30.1"/>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store (bsc#1071152,
  bsc#1071390, bsc#1010996)
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜBİTAK UEKAE Kök Sertifika Hizmet Sağlayıcısı - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı
  * TÜRKTRUST Elektronik Sertifika Hizmet Sağlayıcısı H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sağlayıcısı_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
  <changelog author="meissner@suse.com" date="1547726400">- updated to 2.30 state of the Mozilla NSS Certificate store. (bsc#1121446)
- Removed CAs:
  - AC Raiz Certicamara S.A.
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - Visa eCommerce Root
- Added Root CAs:
  - Certigna Root CA (email and server auth)
  - GTS Root R1 (server auth)
  - GTS Root R2 (server auth)
  - GTS Root R3 (server auth)
  - GTS Root R4 (server auth)
  - OISTE WISeKey Global Root GC CA (email and server auth)
  - UCA Extended Validation Root (server auth)
  - UCA Global G2 Root (email and server auth)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1564920000">- update to 2.34 state of the Mozilla NSS Certificate store (bsc#1144169)
- Removed CAs:
  - Certinomis - Root CA
- includes added root CAs from the 2.32 version:
  - emSign ECC Root CA - C3 (email and server auth)
  - emSign ECC Root CA - G3 (email and server auth)
  - emSign Root CA - C1 (email and server auth)
  - emSign Root CA - G1 (email and server auth)
  - Hongkong Post Root CA 3 (server auth)</changelog>
  <changelog author="lnussel@suse.de" date="1573560000">- export correct p11kit trust attributes so Firefox detects built in
  certificates (boo#1154871). Courtesy of Fedora.</changelog>
  <changelog author="lnussel@suse.de" date="1576670400">- make sure p11-kit with patches is installed on SLE (boo#1154871)</changelog>
  <changelog author="meissner@suse.com" date="1579003200">- update to 2.40 state of the Mozilla NSS Certificate store (bsc#1160160)
- removed:
  - Certplus Class 2 Primary CA
  - Deutsche Telekom Root CA 2
  - CN=Swisscom Root CA 2
  - UTN-USERFirst-Client Authentication and Email
- added:
  - Entrust Root Certification Authority - G4</changelog>
  <changelog author="meissner@suse.com" date="1585224000">- also run update-ca-certificates in %posttrans</changelog>
  <changelog author="meissner@suse.com" date="1596024000">- update to 2.42 state of the Mozilla NSS Certificate store (bsc#1174673)
  Removed CAs:
  - AddTrust External CA Root
  - AddTrust Class 1 CA Root
  - LuxTrust Global Root 2
  - Staat der Nederlanden Root CA - G2
  - Symantec Class 1 Public Primary Certification Authority - G4
  - Symantec Class 2 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G3
  Added CAs:
  - certSIGN Root CA G2
  - e-Szigno Root CA 2017
  - Microsoft ECC Root Certificate Authority 2017
  - Microsoft RSA Root Certificate Authority 2017</changelog>
  <changelog author="meissner@suse.com" date="1603108800">- Updated to 2.44 state of the Mozilla NSS Certificate store (bsc#1177864)
- Removed CAs:
  - EE Certification Centre Root CA
  - Taiwan GRCA
- Added CAs:
  - Trustwave Global Certification Authority
  - Trustwave Global ECC P256 Certification Authority
  - Trustwave Global ECC P384 Certification Authority</changelog>
  <changelog author="meissner@suse.com" date="1612872000">- Updated to 2.46 state of the Mozilla NSS Certificate store (bsc#1181994)
- Added new root CAs:
  - NAVER Global Root Certification Authority
- Removed old root CA:
  - GeoTrust Global CA
  - GeoTrust Primary Certification Authority
  - GeoTrust Primary Certification Authority - G3
  - GeoTrust Universal CA
  - GeoTrust Universal CA 2
  - thawte Primary Root CA
  - thawte Primary Root CA - G2
  - thawte Primary Root CA - G3
  - VeriSign Class 3 Public Primary Certification Authority - G4
  - VeriSign Class 3 Public Primary Certification Authority - G5</changelog>
  <changelog author="meissner@suse.com" date="1632484800">- remove the DST_Root_CA_X3.pem trust, as it expires september 30th 2021.
  (bsc#1190858)</changelog>
  <changelog author="meissner@suse.com" date="1633176000">- updated to 2.50 state of the Mozilla NSS Certificate store (bsc#1188006)
- Added CAs:
  + HARICA Client ECC Root CA 2021
  + HARICA Client RSA Root CA 2021
  + HARICA TLS ECC Root CA 2021
  + HARICA TLS RSA Root CA 2021
  + TunTrust Root CA</changelog>
  <changelog author="meissner@suse.com" date="1651492800">- Updated to 2.54 state of Mozilla SSL root CAs (bsc#1199079)
  Added:
  - Autoridad de Certificacion Firmaprofesional CIF A62634068
  - D-TRUST BR Root CA 1 2020
  - D-TRUST EV Root CA 1 2020
  - GlobalSign ECC Root CA R4
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4
  - HiPKI Root CA - G1
  - ISRG Root X2
  - Telia Root CA v2
  - vTrus ECC Root CA
  - vTrus Root CA
  Removed:
  - Cybertrust Global Root
  - DST Root CA X3
  - DigiNotar PKIoverheid CA Organisatie - G2
  - GlobalSign ECC Root CA R4
  - GlobalSign Root CA R2
  - GTS Root R1
  - GTS Root R2
  - GTS Root R3
  - GTS Root R4</changelog>
  <changelog author="meissner@suse.com" date="1661774400">- Updated to 2.56 state of Mozilla SSL root CAs (bsc#1202868)
  Added:
  - Certainly Root E1
  - Certainly Root R1
  - DigiCert SMIME ECC P384 Root G5
  - DigiCert SMIME RSA4096 Root G5
  - DigiCert TLS ECC P384 Root G5
  - DigiCert TLS RSA4096 Root G5
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  Removed:
  - Hellenic Academic and Research Institutions RootCA 2011</changelog>
  <changelog author="meissner@suse.com" date="1671710400">- Updated to 2.60 state of Mozilla SSL root CAs (bsc#1206622)
  Removed CAs:
  - Global Chambersign Root
  - EC-ACC
  - Network Solutions Certificate Authority
  - Staat der Nederlanden EV Root CA
  - SwissSign Platinum CA - G2
  Added CAs:
  - DIGITALSIGN GLOBAL ROOT ECDSA CA
  - DIGITALSIGN GLOBAL ROOT RSA CA
  - Security Communication ECC RootCA1
  - Security Communication RootCA3
  Changed trust:
  - TrustCor certificates only trusted up to Nov 30 (bsc#1206212)
- Removed CAs (bsc#1206212) as most code does not handle "valid before nov 30 2022"
  and it is not clear how many certs were issued for SSL middleware by TrustCor:
  - TrustCor RootCert CA-1
  - TrustCor RootCert CA-2
  - TrustCor ECA-1
  Patch: remove-trustcor.patch</changelog>
  <changelog author="meissner@suse.com" date="1692014400">- Updated to 2.62 state of Mozilla SSL root CAs (bsc#1214248)
  Added:
  - Atos TrustedRoot Root CA ECC G2 2020
  - Atos TrustedRoot Root CA ECC TLS 2021
  - Atos TrustedRoot Root CA RSA G2 2020
  - Atos TrustedRoot Root CA RSA TLS 2021
  - BJCA Global Root CA1
  - BJCA Global Root CA2
  - LAWtrust Root CA2 (4096)
  - Sectigo Public Email Protection Root E46
  - Sectigo Public Email Protection Root R46
  - Sectigo Public Server Authentication Root E46
  - Sectigo Public Server Authentication Root R46
  - SSL.com Client ECC Root CA 2022
  - SSL.com Client RSA Root CA 2022
  - SSL.com TLS ECC Root CA 2022
  - SSL.com TLS RSA Root CA 2022
  Removed CAs:
  - Chambers of Commerce Root
  - E-Tugra Certification Authority
  - E-Tugra Global Root CA ECC v3
  - E-Tugra Global Root CA RSA v3
  - Hongkong Post Root CA 1</changelog>
</package>
<package pkgid="27df5f5e20a7507d4d3aceb8a75f537672423f5b6785e42d84e8bcc723b4c964" name="cairo" arch="src">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="9d9062ac7272251880208ba98125ebfee2d0a4746c4df82552ba868d406d4a91" name="catatonit" arch="aarch64">
  <version epoch="0" ver="0.1.7" rel="150300.10.5.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
</package>
<package pkgid="f2068c0eba45ae41ee3729e7dc92d3a0ba35cfba7b4dc824d5b71f5b93c978b3" name="catatonit" arch="s390x">
  <version epoch="0" ver="0.1.7" rel="150300.10.5.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
</package>
<package pkgid="0d19258e9be9736a40058faa2973efbbad480a4fa8364b664a40a37b6aa7575c" name="catatonit" arch="src">
  <version epoch="0" ver="0.1.7" rel="150300.10.5.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
</package>
<package pkgid="878a7726284fa882a9d935e9adb32e11f6dac6e7be1f5bab1614809d2863f5a7" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.1.7" rel="150300.10.5.2"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
</package>
<package pkgid="41c29dee538a69221ac92860b1c9e88d4b0042e7b0bdf92e9fd5b8e96a01eb0a" name="catatonit" arch="aarch64">
  <version epoch="0" ver="0.2.0" rel="150300.10.8.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="1691c92943224117f41d89af9c6350f75ef5f50a0c771f3b65c2a78d86db56f9" name="catatonit" arch="s390x">
  <version epoch="0" ver="0.2.0" rel="150300.10.8.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="e93313e4018d7fe186c3f7859de5b2f65283b94ffdcf877f3dd8242feae8cc37" name="catatonit" arch="src">
  <version epoch="0" ver="0.2.0" rel="150300.10.8.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="7735d0f430389c3078ce21b172996207e3d33f1f01932ffec3203892f9f182ff" name="catatonit" arch="x86_64">
  <version epoch="0" ver="0.2.0" rel="150300.10.8.1"/>
  <changelog author="asarai@suse.com" date="1522152000">- Initial import of catatonit v0.1.0.</changelog>
  <changelog author="asarai@suse.com" date="1522152001">- Update to catatonit v0.1.1, which includes a fix for the libtool requirement.
  This lets us build on much older distributions.</changelog>
  <changelog author="asarai@suse.com" date="1522324800">- Update to catatonit v0.1.2 and update links to point to openSUSE repo.</changelog>
  <changelog author="jengelh@inai.de" date="1522756800">- Update package descriptions.</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix build to correctly build a static binary (which will allow it to work in
  all containers). This was caused by forgetting to include
  'glibc-devel-static'. I've added a check to ensure it doesn't happen by
  accident again.
- Add catatonit-rpmlintrc to include filters for "static binary" warnings,
  since this is intentional.</changelog>
  <changelog author="asarai@suse.com" date="1524052800">- Update to catatonit v0.1.3, which includes a fix for docker compatiblity so
  that dockerd doesn't give spurrious warnings.</changelog>
  <changelog author="asarai@suse.com" date="1548763200">- Update to catatonit v0.1.4, which includes support for "-g".</changelog>
  <changelog author="asarai@suse.com" date="1583150400">- Update to catatonit v0.1.5, which fixes two bugs where catatonit would hang
  endlessly when pid1 died in very specific ways. bsc#1176155</changelog>
  <changelog author="asarai@suse.com" date="1631793600">- Update to catatonit v0.1.6, which fixes a few bugs -- mainly ones related to
  socket activation or features somewhat adjacent to socket activation (such as
  passing file descriptors).
- Update catatonit-rpmlintrc in order to cover that static binaries are now an
  error not a warning.</changelog>
  <changelog author="dimstar@opensuse.org" date="1637841600">- Add 99bb9048f.patch: configure.ac: call AM_INIT_AUTOMAKE only
  once. Fix build with autocnf 2.71 / automake 1.16.5.</changelog>
  <changelog author="rbrown@suse.com" date="1649678400">- Update to catatont v0.1.7
- This release adds the ability for catatonit to be used as the only
  process in a pause container, by passing the -P flag (in this mode no
  subprocess is spawned and thus no signal forwarding is done).</changelog>
  <changelog author="asarai@suse.com" date="1696248000">- Update to catatonit v0.2.0.
  * Change license to GPL-2.0-or-later.
- Remove upstreamed patches:
  - 99bb9048f.patch</changelog>
</package>
<package pkgid="38d675c4421a02c20e5e9a84831a8fa7e562572329aabbcb1901ac230a18d909" name="ceph" arch="src">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="94fe53713f9e4fd5c632f17f170988a93f0e5434141d42373966edba89ee0efa" name="ceph" arch="src">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="24122a822efc64852913983df93827c758350f6b833adb79b86d28beb1b0847f" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="3c655f5b6dae30a9e22723ccc179ee0580a9f1c6a38205dcf5031030b0708309" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="bee9689c7a61dd8a55526ac9b2a5c6853d045131dfa3ba7372e5ba2b9f7c098b" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="88dc63a567fd4f89a451840f1832962b1bce631cf91398582a3f0983a17ba616" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="7fa52e77dabb5928d646110d1680d92f6e5b14af097fb105cf6d419d1e7eec63" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="7f5f3f381dbeacff61423e8731592a67dc3db2ccb61d31afbfbba9cbca1339a2" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="bf9da4870bf9a77943b8a2fd5fdee8c6282849d6298b9fe9a94847ffb9d2eb18" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="2350960791009e6aab21afbd20ddd0ce9beb4acf01d0165e7db2a7853594ca20" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="642bbf709f4fab9cd2d20a531d5d4ccb7a08f97c5ae6f2b36d52997ca9080e82" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="2e5776465308c22866c8dfff728f40cd7e3765c8f010e5ec4e56318bbf49d29a" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="ecd39335e529476b669e0946e9bff81c6947dff69ab687ff3f7b8e40341ef55c" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="8d233dda3e49f4e333a5f5294c3b48e43fa5034d6e0d3565b283b850033c59b4" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="12703ccd307386d0bbe156b3a79ba2362082416d255d7f561296e0b25b7c42b2" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="2e71bfd7f8aca08cbd94f5b02643ca53ba6a35c46e5e4bdd99b661d339e69833" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="4baf881af681d13ca620ed3bf27765b9c3f0959faaebc49ba35ff1b98a56160f" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="5b93c008f55d322adab097201cdcd7d5d5d92cd102848f5bd883aca874b0011f" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="90dd2078f76be064505eac3e71c899749cc1abe0653e8fd8906a912de5d81164" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="97b333140593b027ea551d5ff9750d42ec114bbffc11633e95c1cb6ea451ac3b" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="1e74443ef43e8521674e4738808cef158f27d897100e4ea717d6cac5f13aa97f" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="4481f1441a6f4c1f115cbdaf167e7640919ea2d322d39b733a797db1a4f1b0b2" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="3b6614955ba1a3ff5bac523d175db8e87e0c5ddf86f734aa007d17c9a93ffa31" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="9da208928adb8feb399e9306f12693f036df98d8549fb7b54bdf412e47f4851e" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="e2f1f16da1088410353e046e1582a29f3852a1af3ac66c25b89c60c8177b0fcb" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="c6fa23ae082555d6ea55fe248b1900271edb6339a2f50139b884be6204cd5169" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="0b997d5b9413679f49df757cf99ba095c8262759bd9bf122881032a558297610" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="5e1a179192782a3713a4f580930aadd74d003f6c4f0852604cc1595558da5b90" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.10" rel="150000.25.14.1"/>
  <changelog author="jgleissner@suse.com" date="1507896000">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
</package>
<package pkgid="9d7f849cea3cd3ca4a86dfc159f7dcc740b123394ce898431b1bf3da30537c2c" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="872b7559abbb7871a9f1ccdb99c4ecbec29d7023ded33b0a6e0d61f6999c3743" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.11" rel="150000.25.17.1"/>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
</package>
<package pkgid="5f6a990bd96e68cf302f79b98da1b7d81cb8322e53e22c33dbd123d31de0cf0f" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="bf6b28687084d02aa3ff06ee9c2b8e026a877c538fb7f4d4a78b2e8011b886ca" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.12" rel="150000.25.20.1"/>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
</package>
<package pkgid="087cbdac3f1f4b11afdce5a8d3cbcc5af5789677a8a724f04d820603f648a5d8" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="e8fc7d4400b590db9bb136aebdb27767a096b9028cac7a5540b37026cdae5c51" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.14" rel="150000.25.23.1"/>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
  <changelog author="jgleissner@suse.com" date="1705492800">- Update to version 1.9:
  + Drop package dependency on sysconfig-netconfig
  + Improve log level handling
  + Support IPv6 IMDS endpoint in EC2 (bsc#1218069)</changelog>
  <changelog author="jgleissner@suse.com" date="1705665600">- Update to version 1.10:
  + Drop cloud-netconfig-nm sub package and include NM dispatcher
    script in main packages (bsc#1219007)
  + Spec file cleanup</changelog>
  <changelog author="jgleissner@suse.com" date="1707393600">- Update to version 1.11:
  + Revert address metadata lookup in GCE to local lookup (bsc#1219454)
  + Fix hang on warning log messages
  + Check whether getting IPv4 addresses from metadata failed and abort
    if true
  + Only delete policy rules if they exist
  + Skip adding/removing IPv4 ranges if metdata lookup failed
  + Improve error handling and logging in Azure
  + Set SCRIPTDIR when installing netconfig wrapper</changelog>
  <changelog author="jgleissner@suse.com" date="1708948800">- Add Provides/Obsoletes for dropped cloud-netconfig-nm
- Install dispatcher script into /etc/NetworkManager/dispatcher.d
  on older distributions
- Add BuildReqires: NetworkManager to avoid owning dispatcher.d
  parent directory</changelog>
  <changelog author="rjschwei@suse.com" date="1709985600">- Update to version 1.12 (bsc#1221202)
  + If token access succeeds using IPv4 do not use the IPv6 endpoint
    only use the IPv6 IMDS endpoint if IPv4 access fails.</changelog>
  <changelog author="rjschwei@suse.com" date="1709985601">- Add version settings to Provides/Obsoletes</changelog>
  <changelog author="jgleissner@suse.com" date="1710936000">- Update to version 1.14
  + Use '-s' instead of '--no-progress-meter' for curl (bsc#1221757)</changelog>
</package>
<package pkgid="0da5948d2c61c55e5da62261227ba62bec64153352e27a25ddc4ae6c46157368" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="684b414ee3eecc09331c2eb97925f3d412c95f8184b06dd2b3b75dbd9463b3a3" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.7" rel="150000.25.8.1"/>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
</package>
<package pkgid="e96addec1958e48b5aa2ee7f4ec229b5d5bdf1a6081f5f25df1ba12ff2be61e4" name="cloud-netconfig-gce" arch="noarch">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="2a53a5a86a5560e8b608cd7447f0050a7bc8843a6ad70297c77c03ac52ba27f7" name="cloud-netconfig-gce" arch="src">
  <version epoch="0" ver="1.8" rel="150000.25.11.1"/>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
  <changelog author="jgleissner@suse.com" date="1548936000">- Update to version 0.9:
  + run cloud-netconfig periodically (bsc#1118783 bsc#1122013)
  + do not treat eth0 special wrt routing policies (bsc#1123008)
  + reduce timeout on metadata read (bsc#1112822)</changelog>
  <changelog author="jgleissner@suse.com" date="1558008000">- Update to version 1.0:
  + pause and retry if API call throttling is detected in Azure
    (bsc#1135257 bsc#1135263)</changelog>
  <changelog author="jgleissner@suse.com" date="1574337600">- Update to version 1.1
  + fix use of GATEWAY variable (bsc#1157117, bsc#1157190)
  + remove secondary IPv4 address only when added by cloud-netconfig
    (bsc#1144282)
  + simplify routing setup for single NIC systems (partly fixes
    bsc#1135592)</changelog>
  <changelog author="jgleissner@suse.com" date="1574769600">- Update to version 1.2:
  + support AWS IMDSv2 token</changelog>
  <changelog author="jgleissner@suse.com" date="1574769601">- Update to version 1.3:
  + Fix IPv4 address handling on secondary NICs in Azure</changelog>
  <changelog author="jgleissner@suse.com" date="1574942400">- Removed obsolete Group tag from spec file</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="jgleissner@suse.com" date="1580817600">- Update to version 1.4:
  + copy routes from default routing table (bsc#1162705, bsc#1162707)
  + make CLOUD_NETCONFIG_MANAGE default configurable</changelog>
  <changelog author="jgleissner@suse.com" date="1604577600">- Update to version 1.5:
  + Add support for GCE (bsc#1159460, bsc#1178486)
  + Improve default gateway determination</changelog>
  <changelog author="jgleissner@suse.com" date="1630065600">- Update to version 1.6:
  + Ignore proxy when accessing metadata (bsc#1187939)
  + Print warning in case metadata is not accessible
  + Documentation update</changelog>
  <changelog author="suse-beta@cboltz.de" date="1663502400">- /etc/netconfig.d/ moved to /usr/libexec/netconfig/netconfig.d/ in
  Tumbleweed, update path (poo#116221)</changelog>
  <changelog author="jgleissner@suse.com" date="1671192000">- Update to version 1.7:
  + Overhaul policy routing setup (issue #19)
  + Support alias IPv4 ranges (issue #14)
  + Add support for NetworkManager (bsc#1204549)
  + Remove dependency on netconfig
  + Install into libexec directory
  + Clear stale ifcfg files for accelerated NICs (bsc#1199853)
  + More debug messages
  + Documentation update</changelog>
  <changelog author="jgleissner@suse.com" date="1693396800">- Update to version 1.8:
  + Fix Azure metadata check (bsc#1214715)
  + Fix cleanup on ifdown</changelog>
</package>
<package pkgid="a7c8fca509d3dac31d43461e0b7c8b241fee7494d9f9f9c1b28213f6909a0c2e" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.2" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="7d30ecdc55697d544fc663b9eba0f6768332091218b25163abf8a15270fd69d4" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.2" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="d9404703e04a9603fbf3d2f27b866495d0ce5bc2560329cffc55cdff064ea054" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.3" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="e884d71114ea4535dabb64d892f46635fb58fcf81ba3bea5398c35da3f3c50a8" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.3" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="6dcf5a787b4c5412b248f58def316f0ebfb7d677ef7a63f891f24b20e8018fdf" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.5" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="c2e8a49b2d377b718a8cfcf55eceedb7825b59f98b1e789b3ae5ab46489f6303" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.5" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="847607a21d6b97e123dd1ce10bf8ec7028964cedba93bc2784cfca03871175bc" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.6" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="83160df3467a59f21fe46a1d17f4f99679398af5d887960b35cb1fe07f01f589" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.6" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="0fa0a91f94694a200bc00e33323e566ac155b0569250dc128ee7cc83789db09e" name="cloud-regionsrv-client" arch="noarch">
  <version epoch="0" ver="10.1.7" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="5c630ea5e9039747f9d9a8efe3f0315f008747062a539952334dcadec0601c7b" name="cloud-regionsrv-client" arch="src">
  <version epoch="0" ver="10.1.7" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="eb8c90a5c3f15d2f66fa75989bcb89a9a6844adc27cf78a0dc811ef87b300230" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="d50cc83f0f8b4ae729ba1d00569c45293c80ecc84a6c0868cdf6fb23bf7d40a2" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="4a36027309d62ae7698e9c5c5a076c78164670b9987e4c5870406304c358309b" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="67dd506200cfb843d0a1c0caadd9bea9e9935615b2302195fb80ef73b81ffba0" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="607559670e6e141fe1a622deeb9509c21b60b3ea7f1acce257ce8b6b7fcd324e" name="cloud-regionsrv-client-addon-azure" arch="noarch">
  <version epoch="0" ver="1.0.5" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="01f36838871b0cab476e0501a0a30abaf454369130419d33209f661756918252" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="2e95d2b8350862593de00c2a176ddcc32b1cc0eff6074846e4e6efb66a12049c" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="997db7017b43ce16d6730aef2ec8e878cfa74f138ddb4a70793cd9f106d59c1d" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="36c9e539e2bfc1729ac1c54f973605d0a2999652e39d3c9e1c257ab46d8a1e13" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="831c3b1dc52c7506ad422bada408c5b10a967a775fee4a96e9e0ca69d4924778" name="cloud-regionsrv-client-generic-config" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="49b2b1148e4ae00927daec8e486e450eebc82b759ae78bdbcbdba3b5c3781136" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="b95a62234bca0fb814e914a589e61639adc2e0912d4d7dfef481e38f40cd504d" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="0fc3d6bbd1f2e8a6c109f022811bc5de1a531fcc8cb9ae8870e3dedc52d33c64" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="b1751925018b92f72c7a0a702eac4b1549bc3929454251050e766e0d7ddd281a" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="c74a9beaac2b38bf8c629bf24a2b860a189b8f9f51b7b47238d2220817c5845d" name="cloud-regionsrv-client-plugin-azure" arch="noarch">
  <version epoch="0" ver="2.0.0" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="98dd598672e9d7f80ab43e2dd3ffedd9d7b8b71fbaba7a8cc30aa41770a7aff0" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="78fd8ec031ec9b35c2869853fd5162c933b0b0031cb1b31c9a50c43d4cb81bf4" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="7fad6592da76012d213dc93afaf76888c5a2043962a30831caf88ac22447ad1e" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="4b6bc3e2c6a051d7fa8de73cbaaf8d89f36057e81eba8802a4cf4cb718b32351" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="7e9f9d1900b88859be47e70b914b1bde9b94b9eaa05f33b72e2b326c09cf0ce9" name="cloud-regionsrv-client-plugin-ec2" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="dfdb0e5c703d1d534b415ec9fba6d1a473459197890f0c50688aaeff925a4c39" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.102.1"/>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
</package>
<package pkgid="c2d9b7b4f35dcc335c9d69f4f8c3224ac759a8a1dc3098002c86c359417b8f49" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.105.1"/>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
</package>
<package pkgid="eb6566d25f1c941052d7536bcb2415280a1ca01aebb8e3aebf669a8d375bb3bc" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.108.1"/>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
  <changelog author="jesus.bv@suse.com" date="1700740800">- Update to version 10.1.4 (bsc#1217451)
  + Fetch cert for new update server during failover</changelog>
  <changelog author="rjschwei@suse.com" date="1701864000">- Update to version 10.1.5 (bsc#1217583)
  + Fix fallback path when IPv6 network path is not usable
  + Enable an IPv6 fallback path in IMDS access if it cannot be accessed
    over IPv4
  + Enable IMDS access over IPv6</changelog>
  <changelog author="rjschwei@suse.com" date="1706097600">- Update EC2 plugin to 1.0.4 (bsc#1219156, bsc#1219159)
  + Fix the algorithm to determine the region from the availability zone
    information retrieved from IMDS.
- Update to version 10.1.6
  + Support specifying an IPv6 address for a manually configured target
    update server.</changelog>
  <changelog author="rjschwei@suse.com" date="1708603200">- Update to version 10.1.7 (bsc#1220164, bsc#1220165)
  + Fix the failover path to a new target update server. At present a new
    server is not found since credential validation fails. We targeted
    the server detected in down condition to verify the credentials instead
    of the replacement server.</changelog>
</package>
<package pkgid="9f03872c6e3680683447119d408b5992d2a97ff0f1be5dc86297ead1893368ec" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.96.1"/>
  <changelog author="jesusbv@suse.com" date="1627560000">- New package to enable/disable access due to AHB
  This references bsc#1182026, (jsc#SLE-21246, jsc#SLE-21247, jsc#SLE-21248, jsc#SLE-21249, jsc#SLE-21250)</changelog>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
</package>
<package pkgid="73d6cb352c25b5e3bec2b70d9bd561ae46832977b63394f03d3e4cb10d152ecd" name="cloud-regionsrv-client-plugin-gce" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="150000.6.99.1"/>
  <changelog author="rjschwei@suse.com" date="1632830400">- Avoid race confition with ca-certificates (bsc#1189362)
  + Make the service run after ca-sertificates is done
  + Attempt multiple times to update the trust chain</changelog>
  <changelog author="rjschwei@suse.com" date="1636718400">- Update to version 9.3.0 (jsc#PCT-130)
  + Support AHB-v3
  + Support registration of BYOS instances against the update infrastructure
  + Properly extract the region for local zones in AWS to ensure instances
    get connected to the proper update servers
  + Azure addon service and executable rename
  + Support non SLE repos
  + Fix handling of regionservers configured with DNS names</changelog>
  <changelog author="rjschwei@suse.com" date="1642161600">- Follow up changes to (jsc#PCT-130, bsc#1182026)
  + Fix executable name for AHB service/timer
  + Update manpage for BYOS instance registration</changelog>
  <changelog author="rjschwei@suse.com" date="1643976000">- Update to version 10.0.0 (bsc#1195414, bsc#1195564)
  + Refactor removes check_registration() function in utils implementation
  + Only start the registration service for PAYG images
  - addon-azure sub-package to version 1.0.1</changelog>
  <changelog author="rjschwei@suse.com" date="1645617600">- Update -addon-azure to 1.0.2 (bsc#1196305)
  + The is-registered() function expects a string of the update server FQDN.
    The regionsrv-enabler-azure passed an Object of type SMT. Fix the call
    in regionsrv-enabler-azure.
- Update -plugin-azure to 2.0.0 (bsc#1196146)
  + Lower case the region hint to reduce issues with Azure region name
    case inconsistencies</changelog>
  <changelog author="rjschwei@suse.com" date="1647604800">- Update to version 10.0.1 (bsc#1197113)
  + Provide status feedback on registration, success or failure
  + Log warning message if data provider is configured but no data
    can be retrieved
- Update -addon-azure to 1.0.3 follow up fix for (bsc#1195414, bsc#1195564)
  + The repo enablement timer cannot depend on guestregister.service</changelog>
  <changelog author="rjschwei@suse.com" date="1647604801">- Update to version 10.0.2
  + Fix name of logfile in error message
  + Fix variable scoping to properly detect registration error
  + Cleanup any artifacts on registration failure
  + Fix latent bug with /etc/hosts population
  + Do not throw error when attemting to unregister a system that is not
    registered
  + Skip extension registration if the extension is recommended by the
    baseproduct as it gets automatically installed</changelog>
  <changelog author="rjschwei@suse.com" date="1649937600">- Update to version 10.0.3 (bsc#1198389)
  - Descend into the extension tree even if top level module is recommended
  - Cache license state for AHB support to detect type switch
  - Properly clean suse.com credentials when switching from SCC to update
    infrastructure
  - New log message to indicate base product registration success</changelog>
  <changelog author="rjschwei@suse.com" date="1652961600">- Update to version 10.0.4 (bsc#1199668)
  - Store the update server certs in the /etc path instead of /usr to
    accomodate read only setup of SLE-Micro</changelog>
  <changelog author="rjschwei@suse.com" date="1658318400">- Update to version 10.0.5 (bsc#1201612)
  - Handle exception when trying to deregister a system form the server</changelog>
  <changelog author="rjschwei@suse.com" date="1661428800">- Follow up fix to 10.0.4 (bsc#1202706)
  - While the source code was updated to support SLE Micro the spec file
    was not updated for the new locations of the cache and the certs.
    Update the spec file to be consistent with the code implementation.</changelog>
  <changelog author="james.mason@suse.com" date="1668600000">- Add patch to block IPv6 on SLE12 (bsc#1203382)</changelog>
  <changelog author="rjschwei@suse.com" date="1669118400">- Update to version 10.0.7 (bsc#1191880, bsc#1195925, bsc#1195924)
  - Implement functionality to detect if an update server has a new cert.
    Import the new cert when it is detected.
  - Forward port fix-for-sles12-disable-ipv6.patch
- From 10.0.6 (bsc#1205089)
  - Credentials are equal when username and password are the same ignore
    other entries in the credentials file
  - Handle multiple zypper names in process table, zypper and Zypp-main
    to properly detect the running process</changelog>
  <changelog author="rjschwei@suse.com" date="1670328000">- Guard dmidecode dependency (bsc#1206082)</changelog>
  <changelog author="rjschwei@suse.com" date="1671105600">- Update to version 10.0.8 (bsc#1206428)
  - Fix regression introduced by 10.0.7. When the hosts file was modified
    such that there is no empty line at the end of the file the content
    after removing the registration data does not match the content prior
    to registration. The update fixes the issue triggered by an index
    logic error.</changelog>
  <changelog author="amunoz@suse.com" date="1676289600">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="amunoz@suse.com" date="1676289601">- Update to version 10.1.0 (bsc#1207133, bsc#1208097, bsc#1208099 )
  - Removes a warning about system_token entry present in the credentials
  file.
  - Adds logrotate configuration for log rotation.</changelog>
  <changelog author="rjschwei@suse.com" date="1680782400">- Update to version 10.1.1 (bsc#1210020, bsc#1210021)
  + Clean up the system if baseproduct registraion fails to leave the
    system in prestine state
  + Log when the registercloudguest command is invoked with --clean</changelog>
  <changelog author="rjschwei@suse.com" date="1683806400">- Update to version 10.1.2 (bsc#1211282)
  + Properly handle Ipv6 when checking update server responsiveness. If not
    available fall back and use IPv4 information
  + Use systemd_ordered to allow use in a container without pulling systemd
    into the container as a requirement</changelog>
  <changelog author="rjschwei@suse.com" date="1694779200">- Update to version 10.1.3 (bsc#1214801)
  + Add a warning if we detect a Python package cert bundle for certifi
    This will help with debugging and point to potential issues when
    using SUSE images in AWS, Azure, and GCE</changelog>
</package>
<package pkgid="f4dfca6ae31622b2193af8b76100754380cb86877fcf7067b0d41bfbd1b8477c" name="cni" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="150100.3.10.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="aee73bbdb757accfe7c9bb39c7cd679aa8161c22f4d9e7d0b926ff28bf7d537f" name="cni" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="150100.3.10.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="154f4a3729b4ff89abf3ffbf3efcce346553d7c20289e78d1c61165ba49f698c" name="cni" arch="src">
  <version epoch="0" ver="0.7.1" rel="150100.3.10.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="e40b84194eae3104961fca4be15a4f6d85d4425781be0ba10765dba7e64ea4ca" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="150100.3.10.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="eb723a2aebd7c654b9f08c9abf9a24d8ee8e5a27aae688e0ed33b7e5da7f9d75" name="cni" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="150100.3.12.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="8c23e250fa0e10bbac3a345f14b8068989ca1e51ddd001ab55f28e09d47a92ac" name="cni" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="150100.3.12.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="8fbb3426bcf840fda8f631dd3cc0f5820b9a95d90a80e4aafecefec8db9c3d2f" name="cni" arch="src">
  <version epoch="0" ver="0.7.1" rel="150100.3.12.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="0c57b61b9e75abe17909187ba79bab5a96cc15bfb494c27f4e0fc652a9abfc7a" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="150100.3.12.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="fb80ab5129ea3992cd52bd65af2a5ec52e57d4ce52d3037480b10124a2ba79f6" name="cni" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="150100.3.14.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="c903b5db8d993998d79c6be4e869a72db492bd6d8ef760e59daeb7b1c85af47b" name="cni" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="150100.3.14.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="b3196e321ee4761338282b69ccaf99fa1c4c1614ae943a82543f4f87368364d4" name="cni" arch="src">
  <version epoch="0" ver="0.7.1" rel="150100.3.14.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="576dbd421f71fafce8821692554373409eb954dbd873a10f84858b28e7d35c6e" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="150100.3.14.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="2ad5d7dbfa4a57c3d3f402e11ae8e65b7a1898e8e04f86e39a3443773b1ecc37" name="cni" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="150100.3.16.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="6bf27a0740d9a1c6bff5fc49f793d367c3e1bb92d563fce8ca6c1ba93ae7e524" name="cni" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="150100.3.16.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="d1a59eb73aa7987ff71870a239d730025b8052bbc447300ac9d64a223e21f64e" name="cni" arch="src">
  <version epoch="0" ver="0.7.1" rel="150100.3.16.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="cbf87fa69573634d325f8f57c21c8533eda7c9dec76d8d6e0e9f90a8e5a9acb1" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="150100.3.16.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="1db935c9ade883b88cf07138a3ad81865d8dcffbc0845fffe2277d839a5c08db" name="cni" arch="aarch64">
  <version epoch="0" ver="0.7.1" rel="150100.3.18.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="5113a40605ac2da6dfabfff12b2d0f9514771e48594c2dc3099cd257ad13b22f" name="cni" arch="s390x">
  <version epoch="0" ver="0.7.1" rel="150100.3.18.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="b10195de5e133f877bcaa8612cb4bb2bf793e63324c806484c6d2d76b8a2bea4" name="cni" arch="src">
  <version epoch="0" ver="0.7.1" rel="150100.3.18.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="7eb8db81950f6c56fcd5d153508be5fdc04847d5232662a66d09081844e9421e" name="cni" arch="x86_64">
  <version epoch="0" ver="0.7.1" rel="150100.3.18.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1487851200">- Initial version</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1488369600">- Update to version 0.4.0:
  * plugins/noop: return a helpful message for test authors
  * host-local: trim whitespace from container IDs and disk file contents
  * travis: roll forward the versions of Go that we test
  * MAINTAINERS: hi CaseyC!
  * ipam/host-local: Move allocator and config to backend
  * ipam/host-local: add ResolvConf argument for DNS configuration
  * spec: notice of version</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1490184000">- Update to version 0.5.0:
  * Documentation: Add conventions doc
  * noop: allow specifying debug file in config JSON
  * Spec/Conventions: Update to include plugin config
  * spec: add network configuration list specification
  * api,libcni: add network config list-based plugin chaining
  * Update CONVENTIONS.md
  * skel: adds PluginMainWithError which returns a *types.Error
  * testutils: pass netConf in for version operations; pass raw result out for tests
  * types: make Result an interface and move existing Result to separate package
  * macvlan/ipvlan: use common RenameLink method
  * plugins/flannel: organize test JSON alphabetically
  * pkg/ipam: add testcases
  * spec/plugins: return interface details and multiple IP addresses to runtime
  * spec, libcni, pkg/invoke: Use OS-agnostic separator when parsing CNI_PATH
  * pkg/utils/sysctl/sysctl_linux.go: fix build tag.
  * pkg/utils/sysctl/sysctl_linux.go: fix typo.
  * invoke: Enable plugin file names with extensions
  * CONVENTIONS.md: Update details on port-mappings
  * Update with feedback
  * More markups
  * spec: Remove `routes` from Network Configuration
  * docs: consolidate host-local documentation
  * pkg/ns: refactored so that builds succeed on non-linux platforms
  * Fix grammar
  * plugins/main/ptp: set the Sandbox property on the response
  * README: List multus as 3rd party plugin
  * Replace Michael Bridgen with Bryan Boreham
  * pkg/ns, pkg/types: refactored non linux build fix code to
  * pkg/ip: refactored so that builds succeed on non-linux platforms
  * vendor: Update vishvanana/netlink dependency
  * libcni: up-convert a Config to a ConfigList when no other configs are found.
  * docs: CNI versioning for 0.3.0 upgrade
  * docs: Edits to v0.3.0 upgrade guidance
  * docs: minor improvements to 0.3.0 upgrade guidance
  * docs: add small upgrade instructions
  * docs: minor improvements to spec-upgrades
  * docs: fill-out and correct version conversion table
  * docs: table formatting is hard
  * pkg/testutils: return errors after restoring stdout
  * pkg/types: misc current types testcase cleanups
  * Minor rewording about default config version
  * spec,libcni: add support for injecting runtimeConfig into plugin stdin data
  * Check n.IPAM before use it in LoadIPAMConfig function
  * do not error if last_reserved_ip is missing for host local ipam
  * add test for ensuring initial subnet creation does not contain an error
  * fix unrelated failing tests</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1490270400">- Update to version 0.5.1:
  * readme.md: Add link to community sync
  * pkg/ip: do not leak types from vendored netlink package
  * pkg/ip: SetupVeth returns net.Interface
  * pkg/ip: improve docstring for SetupVeth
  * Added Romana to list of CNI providers...
  * plugins/meta/flannel: If net config is missing do not return err on DEL
  * plugins/*: Don't error if the device doesn't exist</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1491825600">- Update to version 0.5.2:
  * Rename build script to avoid conflict with bazel
  * Enable s390x build
  * Update community sync detail
  * Added entry for CNI-Genie
  * travis: shift forward to Go 1.8 and 1.7
  * spec/plugins: fix 'ip'-&gt;'ips' in the spec, bump to 0.3.1
  * libcni: Improved error messages.
  * libcni: Fixed tests that were checking error strings.
  * Documentation: Added documentation for `cnitool`.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1503921600">- Update to version 0.6.0:
  * Conventions: add convention around chaining interfaces
  * pkg/types: safer typecasting for TextUnmarshaler when loading args
  * pkg/types: modify LoadArgs to return a named error when an unmarshalable condition is detected
  * Update note about next Community Sync, 2017-06-21
  * types: fix marshalling of omitted "interfaces" key in IPConfig JSON
  * Update and document release process
  * scripts/release.sh: Add in s390x architecture
  * cnitool: add support for CNI_ARGS
  * README plugins list: add Linen CNI plugin</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Remove the dependency with the cni-plugins
- Recommend the cni-plugins</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1516017600">- Make /var/lib/cni writable</changelog>
  <changelog author="kmacinnes@suse.com" date="1516276800">- Add snapper as a requirement, to provide mksubvolume</changelog>
  <changelog author="kmacinnes@suse.com" date="1517227200">- Use full/absolute path for mksubvolume
- Change snapper Requires to a Requires(post)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1522843200">- Remove creating subvolumes. This should be in another package (kubernetes-kubelet)</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558094400">- Update to version 0.7.0:
  * Spec changes:
    + Use more RFC2119 style language in specification (must, should...)
    + add notes about ADD/DEL ordering
    + Make the container ID required and unique.
    + remove the version parameter from ADD and DEL commands.
    + Network interface name matters
    + be explicit about optional and required structure members
    + add CHECK method
    + Add a well-known error for "try again"
    + SPEC.md: clarify meaning of 'routes'
  * Library changes:
    + pkg/types: Makes IPAM concrete type
    + libcni: return error if Type is empty
    + skel: VERSION shouldn't block on stdin
    + non-pointer instances of types.Route now correctly marshal to JSON
    + libcni: add ValidateNetwork and ValidateNetworkList functions
    + pkg/skel: return error if JSON config has no network name
    + skel: add support for plugin version string
    + libcni: make exec handling an interface for better downstream testing
    + libcni: api now takes a Context to allow operations to be timed out or cancelled
    + types/version: add helper to parse PrevResult
    + skel: only print about message, not errors
    + skel,invoke,libcni: implementation of CHECK method
    + cnitool: Honor interface name supplied via CNI_IFNAME environment variable.
    + cnitool: validate correct number of args
    + Don't copy gw from IP4.Gateway to Route.GW When converting from 0.2.0
    + add PrintTo method to Result interface
    + Return a better error when the plugin returns none
- Install sleep binary into CNI plugin directory
- Restore build.sh script which was removed upstream</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1563278400">- Update to version 0.7.1 (bsc#1160460):
  * Library changes:
    + invoke : ensure custom envs of CNIArgs are prepended to process envs
    + add GetNetworkListCachedResult to CNI interface
    + delegate : allow delegation funcs override CNI_COMMAND env automatically in heritance
  * Documentation &amp; Convention changes:
    + Update cnitool documentation for spec v0.4.0
    + Add cni-route-override to CNI plugin list
  * Build and test changes:
    + Release: bump go to v1.12</changelog>
  <changelog author="sgrunert@suse.com" date="1578916800">- Set correct CNI version for 99-loopback.conf</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch
- disable usage of go modules to fix build failures with go 1.19</changelog>
</package>
<package pkgid="36e1863a76d4b160ab89aea80f65d53feb23ff8bbb6a6c52bc7a9d42357e16a9" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="0.8.6" rel="150100.3.13.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="280445f6da2515ec4ec270a556cf7ef53f3c6d3f4714d9ab6ac088e70bf255ed" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="0.8.6" rel="150100.3.13.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="94493ed82f44c037ae73dacf0b240588451e7373cc15e80d8cd98e3a00255f36" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="150100.3.13.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="389eac93836f03baf3262cabab517d17aef5354037bf4328b95320e43ed2ad23" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="150100.3.13.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="2a252bdbde1ee734e5d41c2141cfb09b4971a128a2cbfd091872d5dbd96cedb7" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="0.8.6" rel="150100.3.15.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="117ae4e7bf328befdd110e46f8870b42cf9211d587b6f79cba6efc0c38e55bd9" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="0.8.6" rel="150100.3.15.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="1cdf6a82daad14ead64ce0f1191a0a9389018a84f8c159702b2acb8a51797d0a" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="150100.3.15.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="fa0797d89804555ba9f0b311acba276892e7001008e72d293677c278f1a8bc7e" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="150100.3.15.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="095abc2be41012f8ec2b3b714c66454b0cfedee8d3dd9a57644b3a2fc7382310" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="0.8.6" rel="150100.3.17.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="4b153703d5d2716412aebc3b03157f18b0839645231b1ee0bde2848c841ec70f" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="0.8.6" rel="150100.3.17.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="c5ca1a849f621db2d2bffa1ac071ea3eff041be153a885491f36c779d99c24d6" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="150100.3.17.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="c92a27d9bb6392c99a7f6c48b17042553794a6d805239134ae5adf42cf86d676" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="150100.3.17.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="053ae5d1d2b98ad4ba8a1f90153c772b55d3a460f9834525d27d4642491fdb59" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="0.8.6" rel="150100.3.20.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="24a7a32bb4fcb96313c7ba120506f6cb2c8513d3c66ebbbe7ade8d254c1ab447" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="0.8.6" rel="150100.3.20.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="ffe3e3f7ede753028e84a9ad8a82e6de507f0e2ae75f1c6e75649c81728f52dd" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="150100.3.20.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="cffb5374c98752466c9c1663613e9c39f7b54d7dd00321aa501387044d55c44c" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="150100.3.20.1"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="9b2895068dbc55819c267e21b21b4a8b89a3680db5aab174c973e56530342ab0" name="cni-plugins" arch="aarch64">
  <version epoch="0" ver="0.8.6" rel="150100.3.22.3"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="0828e58ece546cb5eec3166e3349a1e989131557c9c7356aa69e5d9f11617a48" name="cni-plugins" arch="s390x">
  <version epoch="0" ver="0.8.6" rel="150100.3.22.3"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="6dec32082dcee9783032818e1d3532ad6af73ae0605deeef4d641a4236fb4a10" name="cni-plugins" arch="src">
  <version epoch="0" ver="0.8.6" rel="150100.3.22.3"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="46588dcf0a270389761412c95ff3f5d748afbaf20baba730d9abb6c6db71e72e" name="cni-plugins" arch="x86_64">
  <version epoch="0" ver="0.8.6" rel="150100.3.22.3"/>
  <changelog author="alvaro.saurin@suse.com" date="1503921600">- Initial version from CNI plugins v0.6.0</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1503921601">- Install docs in the cni-plugins dir</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1513684800">- Require cni</changelog>
  <changelog author="dcassany@suse.com" date="1528113600">- Make use of %license macro</changelog>
  <changelog author="dcassany@suse.com" date="1528200000">- Refactor %license usage to a simpler form</changelog>
  <changelog author="alvaro.saurin@suse.com" date="1544616000">- Updated to a supported version of Go (due to security reasons)</changelog>
  <changelog author="sgrunert@suse.com" date="1548417600">- Updated plugins to v0.7.4:
  - Add host-device plugin, which simply moves a device from the
    host network namespace
  - Portmap now uses a more efficient rule structure
  - host-local can receive ranges as a RuntimeArgument
  - DHCP daemon can be containerized
  - DHCP now correctly parses routes
  - Various Windows build fixes
  - Waiting for DAD is skipped when possible
  - Bridge now uses a stable mac
  - Fix a regression where the interface's MAC address was no
    longer populated in the return type.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1558353600">- Updated plugins to v0.8.0:
  + New plugins:
  * bandwidth - limit incoming and outgoing bandwidth
  * firewall - add containers to firewall rules
  * sbr - convert container routes to source-based routes
  * static - assign a fixed IP address
  * win-bridge, win-overlay: Windows plugins
  + Plugin features / changelog:
  * CHECK Support
  * macvlan:
  - Allow to configure empty ipam for macvlan
  - Make master config optional
  * bridge:
  - Add vlan tag to the bridge cni plugin
  - Allow the user to assign VLAN tag
  - L2 bridge Implementation.
  * dhcp:
  - Include Subnet Mask option parameter in DHCPREQUEST
  - Add systemd unit file to activate socket with systemd
  - Add container ifName to the dhcp clientID, making the
    clientID value
  * flannel:
  - Pass through runtimeConfig to delegate
  * host-local:
  - host-local: add ifname to file tracking IP address used
  * host-device:
  - Support the IPAM in the host-device
  - Handle empty netns in DEL for loopback and host-device
  * tuning:
  - adds 'ip link' command related feature into tuning
  + Bug fixes &amp; minor changes
  * Correctly DEL on ipam failure for all plugins
  * Fix bug on ip revert if cmdAdd fails on macvlan and host-device
  * host-device: Ensure device is down before rename
  * Fix -hostprefix option
  * some DHCP servers expect to request for explicit router options
  * bridge: release IP in case of error
  * change source of ipmasq rule from ipn to ip
  + Build fixes:
  * test: add coveralls support
  * plugins: correctly output build version, cosmetic cleanups
  * Move Windows tests to Travis
- from version v0.7.5:
  + This release takes a minor change to the portmap plugin:
  * Portmap: append, rather than prepend, entry rules
  + This fixes a potential issue where firewall rules may
    be bypassed by port mapping
- Include patch to fix the build on i586:
  + 0001_use_Go_facilities_to_get_a_socket.patch
- Use new build_linux.sh script instead of removed build.sh</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1559822400">- Updated plugins to v0.8.1:
  + Bugs:
  * bridge: fix ipMasq setup to use correct source address
  * fix compilation error on 386
  * bandwidth: get bandwidth interface in host ns through
    container interface
  + Improvements:
  * Release: bump go to v1.12
  * host-device: add pciBusID property
- Drop patches merged upstream:
  + 0001_use_Go_facilities_to_get_a_socket.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1565956800">- Update plugins to v0.8.2
  + New features:
  * Support "args" in static and tuning
  * Add Loopback DSR support, allow l2tunnel networks
    to be used with the l2bridge plugin
  * host-local: return error if same ADD request is seen twice
  * bandwidth: fix collisions
  * Support ips capability in static and mac capability in tuning
  * pkg/veth: Make host-side veth name configurable
  + Bug fixes:
  * Fix: failed to set bridge addr: could not add IP address to "cni0": file exists
  * host-device: revert name setting to make retries idempotent (#357).
  * Vendor update go-iptables. Vendor update go-iptables to
    obtain commit f1d0510cabcb710d5c5dd284096f81444b9d8d10
  * Update go.mod &amp; go.sub
  * Remove link Down/Up in MAC address change to prevent route flush (#364).
  * pkg/ip unit test: be agnostic of Linux version, on Linux 4.4 the syscall
    error message is "invalid argument" not "file exists"
  * bump containernetworking/cni to v0.7.1</changelog>
  <changelog author="sgrunert@suse.com" date="1573473600">- Update to version 0.8.3:
  * Enhancements:
  * static: prioritize the input sources for IPs (#400).
  * tuning: send gratuitous ARP in case of MAC address update (#403).
  * bandwidth: use uint64 for Bandwidth value (#389).
  * ptp: only override DNS conf if DNS settings provided (#388).
  * loopback: When prevResults are not supplied to loopback plugin, create results to return (#383).
  * loopback support CNI CHECK and result cache (#374).
  * Better input validation:
  * vlan: add MTU validation to loadNetConf (#405).
  * macvlan: add MTU validation to loadNetConf (#404).
  * bridge: check vlan id when loading net conf (#394).
  * Bugfixes:
  * bugfix: defer after err check, or it may panic (#391).
  * portmap: Fix dual-stack support (#379).
  * firewall: don't return error in DEL if prevResult is not found (#390).
  * bump up libcni back to v0.7.1 (#377).
  * Tests:
  * integration: fix ip address collision in integration tests (#409).
  * testutils: newNS() works in a rootless user namespace (#401).
  * Bump Go version (#386).
  * Cleanup netns after test suite (#375).
  * Docs:
  * contributing doc: revise test script name to run (#396).
  * contributing doc: describe cnitool installation (#397).</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to version 0.8.4 (bsc#1160460):
  * add support for mips64le
  * Add missing cniVersion in README example
  * bump go-iptables module to v0.4.5
  * iptables: add idempotent functions
  * portmap doesn't fail if chain doesn't exist
  * fix portmap port forward flakiness
  * Add Bruce Ma and Piotr Skarmuk as owners</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1592395200">- Update to version 0.8.6 (bsc#1172410 CVE-2020-10749)
  * New features
  * Support device id in host device plugin (#471).
  * win-bridge: add support for portMappings capability (#475).
  * Make host-device to work with virtio net device (#453).
  * Small improvements
  * ptp, bridge: disable accept_ra on the host-side interface (#484).
  * modify the error url of windowscontainer (#460).
  * portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin
    rule only allow the * container itself to access the ports it is exposing thru
    the host IP. Other containers in the same subnet might also want to access this
    service via the host IP, so apply this rule to the whole subnet instead of just
    for the container.
  * Unlock OS thread after netns is restored (#455).
  * Bugfixes
  * plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used
    which routed an entire cidr based on source, not only the bound address.
  * check bridge's port state (#468). fix #463
  * Reset the route flag before moving the rule (#472).
  * replace juju/errors because of CNCF license scan (#458). ref to #457
  * loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin.
    The IPv6 address check loops over IPv4 addresses.
- from version 0.8.5
  * Bugfixes
  * bridge: Fix for the case where kernel doesn't have CONFIG_BRIDGE_VLAN_FILTERING
    (#434) fixes #370.
  * vlan: Fix vlan plugin returning error when device is already removed (#438).
  * Improvements
  * sysctl: Improve support of sysctl name separators (#437).</changelog>
  <changelog author="dcermak@suse.com" date="1668686400">- Add patch to fix bsc#1181961 aka CVE-2021-20206
  added 0001-tighten-up-plugin-finding-logic.patch</changelog>
</package>
<package pkgid="fd9162a4ace41434d64151b09545408e2d345cbc6e6d98beb95d6a0fbdd99c70" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.10" rel="150400.3.17.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="7bb8968413119233b8d9590820fdbfb1c78e090c8a598ff07aa2ca814c24596e" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.10" rel="150400.3.17.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="730a14d48ff819613fca4f92aa6f38ac578d78314e9895c8ae4ef79ac155d92d" name="conmon" arch="src">
  <version epoch="0" ver="2.1.10" rel="150400.3.17.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="862c819bfcd4604eb517f39139af49c930b195ca30acf433ac892c6b04aa4629" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.10" rel="150400.3.17.1"/>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to version 2.1.8:
  * stdio: ignore EIO for terminals (bsc#1217773)
  * ensure console socket buffers are properly sized
  * conmon: drop return after pexit()
  * ctrl: make accept4 failures fatal
  * logging: avoid opening /dev/null for each write
  * oom: restore old OOM score
  * Use default umask 0022
  * cli: log parsing errors to stderr
  * Changes to build conmon for riscv64
  * Changes to build conmon for ppc64le
  * Fix close_other_fds on FreeBSD</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695902400">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
  <changelog author="dcermak@suse.com" date="1702641600">- New upstream release 2.1.9
  [#]## Bug fixes
  * fix some issues flagged by SAST scan
  * src: fix write after end of buffer
  * src: open all files with O_CLOEXEC
  * oom-score: restore oom score before running exit command
  [#]## Features
  * Forward more messages on the sd-notify socket
  * logging: -l passthrough accepts TTYs</changelog>
  <changelog author="dcermak@suse.com" date="1702900800">- Add fix-incorrect-free-in-conn_sock.patch
  This fixes a regression in 2.1.9
  (https://github.com/containers/conmon/issues/475 and
  https://github.com/containers/conmon/issues/477)</changelog>
  <changelog author="dcermak@suse.com" date="1702987200">- New upstream release 2.1.10
  Bug fixes:
  * Fix incorrect free in conn_sock (removes fix-incorrect-free-in-conn_sock.patch)
  * logging: Respect log-size-max immediately after open</changelog>
</package>
<package pkgid="0e13c965b78537d7f812728aa5aae93e012bfaec082b5eae72f835bacb5d7a1d" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="150400.3.6.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="bd86a240018cdbe11e6ac0a89e793a0bb9e3370e873efaaea4c5b79d62217db5" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.5" rel="150400.3.6.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="27354e0be07bb810f7eb4a581be9ffe70704345903782123692d084e0f4f7759" name="conmon" arch="src">
  <version epoch="0" ver="2.1.5" rel="150400.3.6.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="41ec4866587b87a483ee3268cfe25e64cac1ca445e70890f35a3e9fa9bc74c88" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="150400.3.6.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="91362baa2ad1de434b9ebc79c7c35ad438f2bdd373b2d69345967e9678dbe073" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.5" rel="150400.3.8.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="7424558e6b1b3e62dbb0a88a182ae09086a2b94ab487340f3ce8cd6176059cbb" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.5" rel="150400.3.8.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="bbcea6df9a0c8912b4ee4a0d275af92402556ce3ad0f90a6a3506c85b1ea45df" name="conmon" arch="src">
  <version epoch="0" ver="2.1.5" rel="150400.3.8.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="56fcb0c48b19f7441859a046cbfc063092a4fc904cbe1b19351c04a7b9b2f045" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.5" rel="150400.3.8.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="pgajdos@suse.com" date="1678968000">- build against go 1.19 [bsc#1209307]</changelog>
</package>
<package pkgid="79d51d100e992cf911a021379eaf82115a7941e3bc7a3f54f496217ddc37f344" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.7" rel="150400.3.11.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
</package>
<package pkgid="3f919d55a9f773a271ac6d4e9593a49c9585b756dadbafae10bab3000108ed43" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.7" rel="150400.3.11.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
</package>
<package pkgid="7e16bcb826183489178faeb04271cd0e27e977d99bf08341e305f79dc98c8492" name="conmon" arch="src">
  <version epoch="0" ver="2.1.7" rel="150400.3.11.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
</package>
<package pkgid="9387647d6d20069233c04446294706683cb65f082171a4f1948df4b1630383fd" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.7" rel="150400.3.11.1"/>
  <changelog author="sgrunert@suse.com" date="1583409600">- Update to v2.0.11
  - log: reject --log-tag with k8s-file
  - chmod std files pipes
  - adjust score to -1000 to prevent conmon from ever being OOM
    killed
  - container OOM: verify cgroup hasn't been cleaned up before
    reporting OOM</changelog>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
</package>
<package pkgid="3aff848046a47cd387f196a8ff06591c45b70941d29e8be5d0ea62334ca8decc" name="conmon" arch="aarch64">
  <version epoch="0" ver="2.1.7" rel="150400.3.14.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="0db82a52ec538e24a463ae6722756ca3e2e2e581acd6364c64d0fe14e97963bc" name="conmon" arch="s390x">
  <version epoch="0" ver="2.1.7" rel="150400.3.14.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="dad106c93823f4d5a801022cdbd3b77ba458fa97cf12a6a14c9f1f8806099ad1" name="conmon" arch="src">
  <version epoch="0" ver="2.1.7" rel="150400.3.14.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="ee827d7b8890035a7e145b6b219ad795cc7a9455d098fc8f475bb7c536faee0d" name="conmon" arch="x86_64">
  <version epoch="0" ver="2.1.7" rel="150400.3.14.1"/>
  <changelog author="rhafer@suse.com" date="1584446400">- Update to v2.0.12
  - oom: fix potential race between verification steps</changelog>
  <changelog author="sgrunert@suse.com" date="1585137600">- Update to v2.0.14
  - drop usage of splice(2)
  - avoid hanging on stdin
  - stdio: sometimes quit main loop after io is done
  - ignore sigpipe</changelog>
  <changelog author="sgrunert@suse.com" date="1585915200">- Update to v2.0.15
  - store status while waiting for pid</changelog>
  <changelog author="rhafer@suse.com" date="1585915201">- Enable support for journald logging (bsc#1162432)</changelog>
  <changelog author="sgrunert@suse.com" date="1589803200">- Update to v2.0.16
  - tty: flush pending data when fd is ready</changelog>
  <changelog author="sgrunert@suse.com" date="1590580800">- Update to v2.0.17
  - Add option to delay execution of exit command</changelog>
  <changelog author="sgrunert@suse.com" date="1596024000">- Update to v2.0.20 (bsc#1175821)
  - journald: fix logging container name
  - container logging: Implement none driver - "off", "null" or
    "none" all work.
  - ctrl: warn if we fail to unlink
  - Drop fsync calls
  - Reap PIDs before running exit command
  - Fix log path parsing
  - Add --sync option to prevent conmon from double forking
  - Add --no-sync-log option to instruct conmon to not sync the
    logs of the containers upon shutting down. This feature fixes a
    regression where we unconditionally dropped the log sync. It is
    possible the container logs could be corrupted on a sudden
    power-off. If you need container logs to remain in consistent
    state after a sudden shutdown, please update from v2.0.19 to
    v2.0.20</changelog>
  <changelog author="dmueller@suse.com" date="1600689600">- Update to version 2.0.21:
  * bump to v2.0.21
  * protect against kill(-1)
  * Makefile: enable debuginfo generation
  * Remove go.sum file and add go.mod
  * Fail if conmon config could not be written
  * nix: remove double definition for e2fsprogs
  * Speedup static build by utilizing CI cache on `/nix` folder
  * Fix nix build for failing e2fsprogs tests
  * test: fix CI
  * Use Podman for building</changelog>
  <changelog author="sgrunert@suse.com" date="1610452800">- Update to version 2.0.22:
  * added man page
  * attach: always chdir
  * conn_sock: Explicitly free a heap-allocated string
  * refactor I/O and add SD_NOTIFY proxy support</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1614254400">- Update to version 2.0.26:
  * conn_sock: do not fail on EAGAIN
  * fix segfault from a double freed pointer
  * Fix a bug where conmon could never spawn a container, because
    a disagreement between the caller and itself on where the attach
    socket was.
  * improve --full-attach to ignore the socket-dir directly. that
    means callers don't need to specify a socket dir at all (and
    can remove it)
  * add full-attach option to allow callers to not truncate a very
    long path for the attach socket
  * close only opened FDs
  * set locale to inherit environment</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1617105600">- Update to version 2.0.27:
  * bump to v2.0.27
  * Add CRI-O integration test GitHub action
  * exec: don't fail on EBADFD
  * close_fds: fix close of external fds
  * Add arm64 static build binary
  * bump to v2.0.27-dev</changelog>
  <changelog author="alexandre.vicenzi@suse.com" date="1627041600">- Update to version 2.0.29:
  * Reset OOM score back to 0 for container runtime
  * call functions registered with atexit on SIGTERM
  * conn_sock: fix potential segfault</changelog>
  <changelog author="info@paolostivanin.com" date="1632484800">- Update to version 2.0.30:
  * Remove unreachable code path
  * exit: report if the exit command was killed
  * exit: fix race zombie reaper
  * conn_sock: allow watchdog messages through the notify socket proxy
  * seccomp: add support for seccomp notify</changelog>
  <changelog author="rpm@fthiessen.de" date="1651752000">- Update to version 2.1.0
  * logging: buffer partial messages to journald
  * exit: close all fds &gt;= 3
  * fix: cgroup: Free memory_cgroup_file_path if open fails.
    Call g_free instead of free.
- Update to version 2.0.32
  * Fix: Avoid mainfd_std{in,out} sharing the same file descriptor.
  * exit_command: Fix: unset subreaper attribute before running exit command
- Update to version 2.0.31
  * logging: new mode -l passthrough
  * ctr_logs: use container name or ID as SYSLOG_IDENTIFIER for journald
  * conmon: Fix: free userdata files before exec cleanup</changelog>
  <changelog author="idesmi@protonmail.com" date="1656504000">- Update to version 2.1.2:
  * add log-global-size-max option to limit the total output conmon processes (CVE-2022-1708 boo#1200285)
  * journald: print tag and name if both are specified
  * drop some logs to debug level</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 2.1.3:
  * Port conmon to FreeBSD
  * Stop using g_unix_signal_add() to avoid threads
  * Rename CLI optionlog-size-global-max to log-global-size-max</changelog>
  <changelog author="fvogt@suse.com" date="1667563200">- Add patch to fix build with make &gt;= 4.4:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch</changelog>
  <changelog author="dcermak@suse.com" date="1669204800">- Update to version 2.1.5:
  * don't leak syslog_identifier
  * logging: do not read more that the buf size
  * logging: fix error handling
  * Makefile: Fix install for FreeBSD
  * signal: Track changes to get_signal_descriptor in the FreeBSD version
  * Packit: initial enablement
- Update to version 2.1.4:
  * Fix a bug where conmon crashed when it got a SIGCHLD</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- New upstream release 2.1.7
  2.1.7:
  [#]## Bug Fixes
  Fix leaking symbolic links in the opt_socket_path directory
  cgroup: Stumble on if we can't set up oom handling (bsc#1208737)
  2.1.6:
  [#]## Bug Fixes
  * Fix OOM watcher for cgroupv2 `oom_kill` events
  [#]## Misc
  * Use --detach instead of -d
  * ctrl: drop fifo perms to 0660
- Remove merged patch:
  * 0001-Fix-tools-Makefile-with-GNU-make-4.4.patch
- Bump go version to 1.19 (bsc#1209307)</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695988800">- go 1.19 EOL, swith to go &gt;= 1.20
  * [bsc#1215806]</changelog>
</package>
<package pkgid="5bfcb5a35cb7703708ec148b3ded43b239b616d5798dd5f6a510fc5e0cbf98db" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.19" rel="150000.90.3"/>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="meissner@suse.com" date="1683201600">- unversion to golang requires to always use the current default go. (bsc#1210298)</changelog>
</package>
<package pkgid="c7a3173f92a5880f1f23669685b2e1d863e221f9304e7ba0d8f035a86574b4d9" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.19" rel="150000.90.3"/>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="meissner@suse.com" date="1683201600">- unversion to golang requires to always use the current default go. (bsc#1210298)</changelog>
</package>
<package pkgid="d0022130cfee32be1b4c3bbe37ac7f4741721ea40171791926727e5a727adc6a" name="containerd" arch="src">
  <version epoch="0" ver="1.6.19" rel="150000.90.3"/>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="meissner@suse.com" date="1683201600">- unversion to golang requires to always use the current default go. (bsc#1210298)</changelog>
</package>
<package pkgid="0bbe8999f88ec64aa9cd9d5ebc673367ac7b8f0d18b3aa411d41cd5727bbe4a2" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.19" rel="150000.90.3"/>
  <changelog author="asarai@suse.com" date="1626264000">[ This patch was only released in SLES and Leap. ]
- Add patch for GHSA-c72p-9xmj-rx3w. CVE-2021-32760 bsc#1188282
  + bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="asarai@suse.com" date="1626782400">- Update to containerd v1.4.8, to fix CVE-2021-32760. bsc#1188282
- Remove upstreamed patches:
  - bsc1188282-use-chmod-path-for-checking-symlink.patch</changelog>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="meissner@suse.com" date="1683201600">- unversion to golang requires to always use the current default go. (bsc#1210298)</changelog>
</package>
<package pkgid="35452e92397a66e960a20753fa4d159fc53ee649a65e76254134d08cf1964a96" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="6e2b23cc362cfcec84792bb3bf2a90cdf5104d5f267d5eb8dc724146278249cf" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="a9502efb0fb280c7a99422748f26ce7386399f19646e094e67e2c0c010efceec" name="containerd" arch="src">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="ba167df73b6f5f67237d27f7d90e55a3e869077953aa9537b2fb56756e433e5e" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.93.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="5cb10dc3a213814033157f1d7bdbc9b116e394263960fb46f6f4e46a88b83727" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="b4f43097ef410ee2472268c24968541bbb92248d808ee39263f1ef4702b95394" name="containerd" arch="s390x">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="d10f7882fabfaa38f2a6c5df86010654ee63a1df05695d6a5ac43a8185259b1e" name="containerd" arch="src">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="b158ed1e4273459c38b77f51bdd534c5b59012a21efe9dccf0dd9f7689eea138" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.6.21" rel="150000.95.1"/>
  <changelog author="dcermak@suse.com" date="1633089600">- Install systemd service file as well (fixes bsc#1190826)</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to containerd v1.4.11, to fix CVE-2021-41103 bsc#1191121. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1633521601">- Update to containerd v1.4.11, to fix CVE-2021-41103. bsc#1191355
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
</package>
<package pkgid="0b702e954cdfb560ebdabd455443729dc9cf84f6652086b97a44dfe90882e440" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="508d8c987569955feae56c13a76de0d33581ad67d034ab6a832fcb4b15d251bb" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="6c0ed88a1a813e0d0e63ff7e2731563ddafd1e44bf729f947bfe7c43037b5710" name="containerd" arch="src">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="ffe4d877cb43b009ccabc59cdcc58e5a58891c876fd65c63b8de49c95186d9b7" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.10" rel="150000.106.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="7ba3bc79ca41db0064e969b85784dffa090825d3de29ca90252179feee12117d" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.10" rel="150000.108.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="ea185697338182ed5d27783f1868f2ee90b7062081a183b231c1d5a0aafcdad9" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.10" rel="150000.108.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="4e1457d501af143894ba536929d8341fcb9421de91cbca20e5caa8b5899a0675" name="containerd" arch="src">
  <version epoch="0" ver="1.7.10" rel="150000.108.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="69794ea7566312d0b8829d0a400805d78e9b30601582325303e9856029279d03" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.10" rel="150000.108.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1701691200">- Update to containerd v1.7.10. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.10&gt;
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1704715200">- Add patch for bsc#1217952:
  + 0002-shim-Create-pid-file-with-0644-permissions.patch</changelog>
</package>
<package pkgid="a1634c9ae58c9d6c557eb6533db28f986b7b08674a2def7437eb2bb274ebe241" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="270a056cc5ed1e9b34ef96d31619c98ff18bfe1c6dbcde4f315d95310afee263" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="99af1341d77b8711d5f27b9133227fdea7eeae719ac1890c8a36680a1e23e31a" name="containerd" arch="src">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="9c640d5e50b38122f4013c48266339b1e7266cda832f70c4c4b737129af981d0" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.7" rel="150000.100.1"/>
  <changelog author="asarai@suse.com" date="1637323200">- Update to containerd v1.4.12 for Docker 20.10.11-ce. bsc#1192814
  bsc#1193273 CVE-2021-41190</changelog>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="94366b6471ebae62ff2057674c5a53b910daf8055418a021281be7fad86efb09" name="containerd" arch="aarch64">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="7135991c78e69fce45b8523cdcc77c48e0f5b3fd94fd325fc9590778586b9c6f" name="containerd" arch="s390x">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="ce360e545ebda16670bb21f7ed97d0086cc2e339b587b1c033f75e2d41c8bf6f" name="containerd" arch="src">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="16c9911872258bfdff7fa97f0b31fb978959d5ce66ed63875bb680fa252b1dd7" name="containerd" arch="x86_64">
  <version epoch="0" ver="1.7.8" rel="150000.103.1"/>
  <changelog author="asarai@suse.com" date="1646222400">[ This patch was only released in SLES and Leap. ]
- Add patch for CVE-2022-23648. bsc#1196441
  + CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1646308800">- Update to containerd v1.4.13 to fix CVE-2022-23648. bsc#1196441
- Remove upstreamed patch:
  - CVE-2022-23648.patch</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to containerd v1.5.11 to fix CVE-2022-24769. bsc#1197517</changelog>
  <changelog author="asarai@suse.com" date="1654516800">- Update to containerd v1.5.12. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.5.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1654516801">[ This patch was only released in SLES and Leap. ]
- Backport patch to fix GHSA-5ffw-gxpp-mxpf CVE-2022-31030. bsc#1200145
  + bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to containerd v1.6.6 to fix CVE-2022-31030 and meet the requirements
  of Docker v20.10.17-ce. bsc#1200145
- Remove upstreamed patches:
  - bsc1200145-Limit-the-response-size-of-ExecSync.patch</changelog>
  <changelog author="dmueller@suse.com" date="1669723200">- add devel subpackage, which is needed by open-vm-tools</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to containerd v1.6.9 for Docker v20.10.21-ce. Also includes a fix for
  CVE-2022-27191. boo#1206065 bsc#1197284 Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.9&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670328001">- Update to containerd v1.6.11. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.11&gt;</changelog>
  <changelog author="asarai@suse.com" date="1670500800">- Update to containerd v1.6.12 to fix CVE-2022-23471 bsc#1206235. Upstream
  release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.12&gt;</changelog>
  <changelog author="asarai@suse.com" date="1675944000">- Update to containerd v1.6.16 for Docker v23.0.1-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.16&gt;</changelog>
  <changelog author="asarai@suse.com" date="1677672000">- Re-build containerd to use updated golang-packaging. jsc#1342</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to containerd v1.6.19 for Docker v23.0.2-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.19&gt;
  Includes fixes for:
  - CVE-2023-25153 bsc#1208423
  - CVE-2023-25173 bsc#1208426</changelog>
  <changelog author="asarai@suse.com" date="1681819200">- Update to containerd v1.6.20 for Docker v23.0.4-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.20&gt;</changelog>
  <changelog author="meissner@suse.com" date="1683201600">[ This was only released in SLE. ]
- unversion to golang requires to always use the current default go.
  (bsc#1210298)</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to containerd v1.6.21 for Docker v23.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.6.21&gt; bsc#1211578
- Require a minimum Go version explicitly rather than using golang(API).
  Fixes the change for bsc#1210298.</changelog>
  <changelog author="priyanka.saggu@suse.com" date="1693483200">- Add `Provides: cri-runtime` to use containerd as container runtime in Factory
  Kubernetes packages</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to containerd v1.7.6 for Docker v24.0.6-ce. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.6&gt; bsc#1215323</changelog>
  <changelog author="asarai@suse.com" date="1697198400">- Update to containerd v1.7.7. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.7&gt;
- Add patch to fix build on SLE-12:
  + 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to containerd v1.7.8. Upstream release notes:
  &lt;https://github.com/containerd/containerd/releases/tag/v1.7.8&gt; bsc#1200528
- Rebase patches:
  * 0001-BUILD-SLE12-revert-btrfs-depend-on-kernel-UAPI-inste.patch</changelog>
</package>
<package pkgid="a28e6a4c5d4b5e275062215504db1194d95fc9f245a858278652affa8cefde10" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.51.0" rel="150400.4.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="edd0b30b2aee1de1a4a372e1f8d12850a378c1e85d9473a42424853757612020" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.51.0" rel="150400.4.16.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="34c29706af568796beec6189749f73f6627ba0b8537748d7d2673f6d601f5ba3" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.51.0" rel="150400.4.20.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="9ada44a6131197431ded933dc6edc4ac1e2193228dfcab9247e9d25ef1a51fdc" name="containerized-data-importer" arch="src">
  <version epoch="0" ver="1.51.0" rel="150400.4.23.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="8cf453d2215e0a85443cdbdbbe99350262d8c7b3a65307e675a9d1bf9c0267f2" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="150400.4.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="52a17c08341ce2fcf2a5ef44c4704158f3f01ae49bbc4263bc45617a41aedf4d" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="150400.4.16.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="22fb021a221bad68740992ee2b0ff16829fd233a7e75ce6694b994fd4d3e1bba" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="150400.4.20.2"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="8a34cff19d50644deb2152197cf42c218489b7e254de0b9a08e36e0ac24711f8" name="containerized-data-importer-manifests" arch="x86_64">
  <version epoch="0" ver="1.51.0" rel="150400.4.23.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1619006400">- Preparation for submission to SLE15 SP2
  jsc#SLE-11089 jsc#ECO-3633</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697600">- Set default reg_path='registry.opensuse.org/kubevirt'
- Add _constraints file with disk requirements
- Drop CDI_VERSION env var since its not used during the build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1619697601">- Include release number into docker tag
- Add cdi_containers_meta build service</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512000">- Disable changelog generation via tar_scm service (too verbose)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1621512001">- Update to version 1.34.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.34.0</changelog>
  <changelog author="fvogt@suse.com" date="1622808000">- Add REGISTRY variable</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1623672000">- Use registry.suse.com as the default fallback for sle
- Rename macro registry_path to kubevirt_registry_path
- Update to version 1.35.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.35.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1625054400">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1626091200">- Update to version 1.36.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.36.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1628596800">- Update to version 1.37.1
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.37.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1633953600">- Update to version 1.40.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.40.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1636718400">- Update to version 1.41.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.41.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1637928000">- Detect SLE15 SP4 build environment</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639915200">- Update to version 1.42.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.42.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641816000">- Update to version 1.43.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.43.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1650974400">- Increase storage requirements in _constraints (bsc#1198791)</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Pack only cdi-operator and cdi-cr release manifests</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Update to version 1.51.0
  Release notes https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.51.0
- Fix CVE-2022-1996 go-restful: CORS bypass (bsc#1200528)
  0001-Update-go-restful-to-2.16.0.patch
- Include additional tools used by cdi-importer:
  cdi-containerimage-server
  cdi-image-size-detection
  cdi-source-update-poller</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1666008000">- Build tools/cdi-containerimage-server with CGO_ENABLED=0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1677844800">- Use recent golang compiler (bsc#1208916)</changelog>
</package>
<package pkgid="2fbd633fd6fb34c0127aba7c24816436f9678304329ea68e2d175f4907d3fab0" name="coreutils" arch="aarch64">
  <version epoch="0" ver="8.32" rel="150400.9.3.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1489147200">- Update to 8.27
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-testsuite.spec
- coreutils.keyring: Update (now ascii-armored) by
    'osc service localrun download_files'.
- coreutils-tests-port-to-timezone-2017a.patch: Add patch to
  workaround a FP test failure with newer timezone-2017a.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
</package>
<package pkgid="6fd0d10c14991a24468d4b2088c227cba2652d8230fbc80628d5695854b26c53" name="coreutils" arch="s390x">
  <version epoch="0" ver="8.32" rel="150400.9.3.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1489147200">- Update to 8.27
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-testsuite.spec
- coreutils.keyring: Update (now ascii-armored) by
    'osc service localrun download_files'.
- coreutils-tests-port-to-timezone-2017a.patch: Add patch to
  workaround a FP test failure with newer timezone-2017a.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
</package>
<package pkgid="8bc384d877bc78593f81b9b689520e83491a5abfb9d555ad3aa8c53645e7362c" name="coreutils" arch="src">
  <version epoch="0" ver="8.32" rel="150400.9.3.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1489147200">- Update to 8.27
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-testsuite.spec
- coreutils.keyring: Update (now ascii-armored) by
    'osc service localrun download_files'.
- coreutils-tests-port-to-timezone-2017a.patch: Add patch to
  workaround a FP test failure with newer timezone-2017a.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
</package>
<package pkgid="34f6205f2e6b99fe07629e026376de2b6af7c4f83fd4848c024d9133842d83d0" name="coreutils" arch="x86_64">
  <version epoch="0" ver="8.32" rel="150400.9.3.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1489147200">- Update to 8.27
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-ocfs2_reflinks.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
  * coreutils-testsuite.spec
- coreutils.keyring: Update (now ascii-armored) by
    'osc service localrun download_files'.
- coreutils-tests-port-to-timezone-2017a.patch: Add patch to
  workaround a FP test failure with newer timezone-2017a.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
</package>
<package pkgid="6e588d986f5396f61e522d7ced6f4756e23036a2a1844abf197c2187ad420e0d" name="coreutils" arch="aarch64">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="f926e9b97d825bf362bab843b9cf5755c011aa25dbc6822394fab8413b731010" name="coreutils" arch="s390x">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="f81cc4e0f5ea5f5de70095456a020b275b59c0161cf4644e9a889361e5e17290" name="coreutils" arch="src">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="e22285e41ab6361c1368ecbacea6be3ca9fae0947af4abebf73d5a876c47693d" name="coreutils" arch="x86_64">
  <version epoch="0" ver="8.32" rel="150400.9.6.1"/>
  <changelog author="mail@bernhard-voelker.de" date="1493726400">- coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch:
  Add upstream patch to fix an heap overflow security issue
  in date(1) and touch(1) with a large TZ variable
  (CVE-2017-7476, rh#1444774, boo#1037124).</changelog>
  <changelog author="ghe@suse.com" date="1502884800">- Drop coreutils-ocfs2_reflinks.patch
  OCFS2 file system has supported file clone ioctls like btrfs,
  then, coreutils doesn't need this patch from the kernel v4.10-rc1</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1504526400">- Update to 8.28
  (for details see included NEWS file)
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.keyring: Update from upstream (Savannah).
- Remove now-upstream patches:
  * coreutils-cve-2017-7476-out-of-bounds-with-large-tz.patch
  * coreutils-tests-port-to-timezone-2017a.patch
- coreutils.spec: Add "BuildRequires: user(bin)" for the tests.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1514462400">- Update to 8.29:
  * Noteworthy changes in release 8.29 (2017-12-27) [stable]
  * * Bug fixes
  b2sum no longer crashes when processing certain truncated check files.
  [bug introduced with b2sum coreutils-8.26]
  dd now ensures the correct cache ranges are specified for the "nocache"
  and "direct" flags.  Previously some pages in the page cache were not
  invalidated.  [bug introduced for "direct" in coreutils-7.5,
  and with the "nocache" implementation in coreutils-8.11]
  df no longer hangs when given a fifo argument.
  [bug introduced in coreutils-7.3]
  ptx -S no longer infloops for a pattern which returns zero-length matches.
  [the bug dates back to the initial implementation]
  shred --remove will again repeatedly rename files with shortening names
  to attempt to hide the original length of the file name.
  [bug introduced in coreutils-8.28]
  stty no longer crashes when processing settings with -F also specified.
  [bug introduced in fileutils-4.0]
  tail --bytes again supports non seekable inputs on all systems.
  On systems like android it always tried to process as seekable inputs.
  [bug introduced in coreutils-8.24]
  timeout will again notice its managed command exiting, even when
  invoked with blocked CHLD signal, or in a narrow window where
  this CHLD signal from the exiting child was missed.  In each case
  timeout would have then waited for the time limit to expire.
  [bug introduced in coreutils-8.27]
  * * New features
  timeout now supports the --verbose option to diagnose forced termination.
  * * Improvements
  dd now supports iflag=direct with arbitrary sized files on all file systems.
  tail --bytes=NUM will efficiently seek to the end of block devices,
  rather than reading from the start.
  Utilities which do not support long options (other than the default --help
  and --version), e.g. cksum and sleep, now use more consistent error diagnostic
  for unknown long options.
  * * Build-related
  Default man pages are now distributed which are used if perl is
  not available on the build system, or when cross compiling.
- Refresh patches (line number changes only):
  * coreutils-i18n.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1530619200">- Update to 8.30:
  * Noteworthy changes in release 8.30 (2018-07-01) [stable]
  * * Bug fixes
  'cp --symlink SRC DST' will again correctly validate DST.
  If DST is a regular file and SRC is a symlink to DST,
  then cp will no longer allow that operation to clobber DST.
  Also with -d, if DST is a symlink, then it can always be replaced,
  even if it points to SRC on a separate device.
  [bugs introduced with coreutils-8.27]
  'cp -n -u' and 'mv -n -u' now consistently ignore the -u option.
  Previously, this option combination suffered from race conditions
  that caused -u to sometimes override -n.
  [bug introduced with coreutils-7.1]
  'cp -a --no-preserve=mode' now sets appropriate default permissions
  for non regular files like fifos and character device nodes etc.,
  and leaves mode bits of existing files unchanged.
  Previously it would have set executable bits on created special files,
  and set mode bits for existing files as if they had been created.
  [bug introduced with coreutils-8.20]
  'cp --remove-destination file symlink' now removes the symlink
  even if it can't be traversed.
  [bug introduced with --remove-destination in fileutils-4.1.1]
  ls no longer truncates the abbreviated month names that have a
  display width between 6 and 12 inclusive.  Previously this would have
  output ambiguous months for Arabic or Catalan locales.
  'ls -aA' is now equivalent to 'ls -A', since -A now overrides -a.
  [bug introduced in coreutils-5.3.0]
  'mv -n A B' no longer suffers from a race condition that can
  overwrite a simultaneously-created B.  This bug fix requires
  platform support for the renameat2 or renameatx_np syscalls, found
  in recent Linux and macOS kernels.  As a side effect, ‘mv -n A A’
  now silently does nothing if A exists.
  [bug introduced with coreutils-7.1]
  * * Changes in behavior
  'cp --force file symlink' now removes the symlink even if
  it is self referential.
  ls --color now matches file extensions case insensitively.
  * * New features
  cp --reflink now supports --reflink=never to enforce a standard copy.
  env supports a new -v/--debug option to show verbose information about
  each processing step.
  env supports a new -S/--split-string=S option to split a single argument
  string into multiple arguments. Used to pass multiple arguments in scripts
  (shebang lines).
  md5sum accepts a new option: --zero (-z) to delimit the output lines with a
  NUL instead of a newline character.  This also disables file name escaping.
  This also applies to sha*sum and b2sum.
  rm --preserve-root now supports the --preserve-root=all option to
  reject any command line argument that is mounted to a separate file system.
  * * Improvements
  cut supports line lengths up to the max file size on 32 bit systems.
  Previously only offsets up to SIZE_MAX-1 were supported.
  stat and tail now know about the "exfs" file system, which is a
  version of XFS.  stat -f --format=%T now reports the file system type,
  and tail -f uses inotify.
  wc avoids redundant processing of ASCII text in multibyte locales,
  which is especially significant on macOS.
  * * Build-related
  Adjust to glibc &gt;= 2.28  (bsc#1182550, jsc#SLE-13520, jsc#SLE-13756)
- Refresh patches (line number changes only):
  * coreutils-build-timeout-as-pie.patch
  * coreutils-disable_tests.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * (License): osc changed the value from "GPL-3.0+" to "GPL-3.0-or-later".
  * (build): Make sure that parse-datetime.{c,y} ends up in debuginfo (rh#1555079).
- coreutils-i18n.patch:
  * src/exand.c,src/unexpand.c: Avoid -Wcomment warning.
  * src/cut.c (cut_characters_or_cut_bytes_no_split): Change idx from size_t
    to uintmax_t type to avoid a regression on i586, armv7l and ppc.
    Compare upstream, non-MB commit:
    https://git.sv.gnu.org/cgit/coreutils.git/commit/?id=d1a754c8272
    (cut_fields_mb): Likewise for field_idx.
  * tests/misc/cut.pl: Remove downstream tweaks as upstream MB tests are
    working since a while.
- coreutils.keyring: Update Assaf Gordon's GPG public key.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1552305600">- Update to 8.31:
  * Noteworthy changes in release 8.31 (2019-03-10) [stable]
  * * Bug fixes
  'base64 a b' now correctly diagnoses 'b' as the extra operand, not 'a'.
  [bug introduced in coreutils-5.3.0]
  When B already exists, 'cp -il A B' no longer immediately fails
  after asking the user whether to proceed.
  [This bug was present in "the beginning".]
  df no longer corrupts displayed multibyte characters on macOS.
  [bug introduced with coreutils-8.18]
  seq no longer outputs inconsistent decimal point characters
  for the last number, when locales are misconfigured.
  [bug introduced in coreutils-7.0]
  shred, sort, and split no longer falsely report ftruncate errors
  when outputting to less-common file types.  For example, the shell
  command 'sort /dev/null -o /dev/stdout | cat' no longer fails with
  an "error truncating" diagnostic.
  [bug was introduced with coreutils-8.18 for sort and split, and
  (for shared memory objects only) with fileutils-4.1 for shred]
  sync no longer fails for write-only file arguments.
  [bug introduced with argument support to sync in coreutils-8.24]
  'tail -f file | filter' no longer exits immediately on AIX.
  [bug introduced in coreutils-8.28]
  'tail -f file | filter' no longer goes into an infinite loop
  if filter exits and SIGPIPE is ignored.
  [bug introduced in coreutils-8.28]
  * * Changes in behavior
  cksum, dd, hostid, hostname, link, logname, sleep, tsort, unlink,
  uptime, users, whoami, yes: now always process --help and --version options,
  regardless of any other arguments present before any optional '--'
  end-of-options marker.
  nohup now processes --help and --version as first options even if other
  parameters follow.
  'yes a -- b' now outputs 'a b' instead of including the end-of-options
  marker as before: 'a -- b'.
  echo now always processes backslash escapes when the POSIXLY_CORRECT
  environment variable is set.
  When possible 'ln A B' now merely links A to B and reports an error
  if this fails, instead of statting A and B before linking.  This
  uses fewer system calls and avoids some races.  The old statting
  approach is still used in situations where hard links to directories
  are allowed (e.g., NetBSD when superuser).
  ls --group-directories-first will also group symlinks to directories.
  'test -a FILE' is not supported anymore.  Long ago, there were concerns about
  the high probability of humans confusing the -a primary with the -a binary
  operator, so POSIX changed this to 'test -e FILE'.  Scripts using it were
  already broken and non-portable; the -a unary operator was never documented.
  wc now treats non breaking space characters as word delimiters
  unless the POSIXLY_CORRECT environment variable is set.
  * * New features
  id now supports specifying multiple users.
  'date' now supports the '+' conversion specification flag,
  introduced in POSIX.1-2017.
  printf, seq, sleep, tail, and timeout now accept floating point
  numbers in either the current or the C locale.  For example, if the
  current locale's decimal point is ',', 'sleep 0,1' and 'sleep 0.1'
  now mean the same thing.  Previously, these commands accepted only
  C-locale syntax with '.' as the decimal point.  The new behavior is
  more compatible with other implementations in non-C locales.
  test now supports the '-N FILE' unary operator (like e.g. bash) to check
  whether FILE exists and has been modified since it was last read.
  env now supports '--default-signal[=SIG]', '--ignore-signal[=SIG]', and
  '--block-signal[=SIG], to setup signal handling before executing a program.
  env now supports '--list-signal-handling' to indicate non-default
  signal handling before executing a program.
  * * New commands
  basenc is added to complement existing base64,base32 commands,
  and encodes and decodes printable text using various common encodings:
  base64,base64url,base32,base32hex,base16,base2,z85.
  * * Improvements
  ls -l now better aligns abbreviated months containing digits,
  which is common in Asian locales.
  stat and tail now know about the "sdcardfs" file system on Android.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  stat now prints file creation time when supported by the file system,
  on GNU Linux systems with glibc &gt;= 2.28 and kernel &gt;= 4.11.
- Refresh patches (line number changes only):
  * coreutils-disable_tests.patch
  * coreutils-i18n.patch
  * coreutils-misc.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils.spec:
  * Version: bump version.
  * URL: Use https scheme.
  * %description: Add 'basenc' tool.
  * Change gitweb to cgit URL with https in a comment.
- coreutils.keyring:
  * Update for added section headers ('GPG keys of &lt;MAINTAINER&gt;').</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- switch to multibuild
- add coreutils-single subpackage that contains a single binary coreutils tool
  similar to busybox
- package LC_CTIME directories also in lang package
- split off doc package
- remove info macros, handled by file trigger nowadays</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1579521600">- minor: remove obsolete comment in spec file.</changelog>
  <changelog author="lnussel@suse.de" date="1580212800">- disable single and testsuite builds in rings/staging
- remove duplicate "coreutils" in flavor to make it look nicer in OBS</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1583755200">- Update to 8.32:
  * Noteworthy changes in release 8.32 (2020-03-05) [stable]
  * * Bug fixes
  cp now copies /dev/fd/N correctly on platforms like Solaris where
  it is a character-special file whose minor device number is N.
  [bug introduced in fileutils-4.1.6]
  dd conv=fdatasync no longer reports a "Bad file descriptor" error
  when fdatasync is interrupted, and dd now retries interrupted calls
  to close, fdatasync, fstat and fsync instead of incorrectly
  reporting an "Interrupted system call" error.
  [bugs introduced in coreutils-6.0]
  df now correctly parses the /proc/self/mountinfo file for unusual entries
  like ones with '\r' in a field value ("mount -t tmpfs tmpfs /foo$'\r'bar"),
  when the source field is empty ('mount -t tmpfs "" /mnt'), and when the
  filesystem type contains characters like a blank which need escaping.
  [bugs introduced in coreutils-8.24 with the introduction of reading
  the /proc/self/mountinfo file]
  factor again outputs immediately when stdout is a tty but stdin is not.
  [bug introduced in coreutils-8.24]
  ln works again on old systems without O_DIRECTORY support (like Solaris 10),
  and on systems where symlink ("x", ".") fails with errno == EINVAL
  (like Solaris 10 and Solaris 11).
  [bug introduced in coreutils-8.31]
  rmdir --ignore-fail-on-non-empty now works correctly for directories
  that fail to be removed due to permission issues.  Previously the exit status
  was reversed, failing for non empty and succeeding for empty directories.
  [bug introduced in coreutils-6.11]
  'shuf -r -n 0 file' no longer mistakenly reads from standard input.
  [bug introduced with the --repeat feature in coreutils-8.22]
  split no longer reports a "output file suffixes exhausted" error
  when the specified number of files is evenly divisible by 10, 16, 26,
  for --numeric, --hex, or default alphabetic suffixes respectively.
  [bug introduced in coreutils-8.24]
  seq no longer prints an extra line under certain circumstances (such as
  'seq -f "%g " 1000000 1000000').
  [bug introduced in coreutils-6.10]
  * * Changes in behavior
  Several programs now check that numbers end properly.  For example,
  'du -d 1x' now reports an error instead of silently ignoring the 'x'.
  Affected programs and options include du -d, expr's numeric operands
  on non-GMP builds, install -g and -o, ls's TABSIZE environment
  variable, mknod b and c, ptx -g and -w, shuf -n, and sort --batch-size
  and --parallel.
  date now parses military time zones in accordance with common usage:
    "A" to "M"  are equivalent to UTC+1 to UTC+12
    "N" to "Y"  are equivalent to UTC-1 to UTC-12
    "Z" is "zulu" time (UTC).
  For example, 'date -d "09:00B" is now equivalent to 9am in UTC+2 time zone.
  Previously, military time zones were parsed according to the obsolete
  rfc822, with their value negated (e.g., "B" was equivalent to UTC-2).
  [The old behavior was introduced in sh-utils 2.0.15 ca. 1999, predating
  coreutils package.]
  ls issues an error message on a removed directory, on GNU/Linux systems.
  Previously no error and no entries were output, and so indistinguishable
  from an empty directory, with default ls options.
  uniq no longer uses strcoll() to determine string equivalence,
  and so will operate more efficiently and consistently.
  * * New Features
  ls now supports the --time=birth option to display and sort by
  file creation time, where available.
  od --skip-bytes now can use lseek even if the input is not a regular
  file, greatly improving performance in some cases.
  stat(1) supports a new --cached= option, used on systems with statx(2)
  to control cache coherency of file system attributes,
  useful on network file systems.
  * * Improvements
  stat and ls now use the statx() system call where available, which can
  operate more efficiently by only retrieving requested attributes.
  stat and tail now know about the "binderfs", "dma-buf-fs", "erofs",
  "ppc-cmm-fs", and "z3fold" file systems.
  stat -f -c%T now reports the file system type, and tail -f uses inotify.
  * * Build-related
  gzip-compressed tarballs are distributed once again
- Refresh patches:
  * coreutils-disable_tests.patch
  * coreutils-getaddrinfo.patch
  * coreutils-i18n.patch
  * coreutils-invalid-ids.patch
  * coreutils-remove_hostname_documentation.patch
  * coreutils-remove_kill_documentation.patch
  * coreutils-skip-gnulib-test-tls.patch
  * coreutils-tests-shorten-extreme-factor-tests.patch
- coreutils-i18n.patch:
  * uniq: remove collation handling as required by newer POSIX; see
  - https://git.savannah.gnu.org/cgit/coreutils.git/commit/?id=8e81d44b5
  - https://www.austingroupbugs.net/view.php?id=963
- coreutils-ls-restore-8.31-behavior-on-removed-dirs.patch:
  * Add patch for 'ls' to restore 8.31 behavior on removed directories.
- coreutils.spec:
  * Version: bump version.
  * %check: re-enable regular 'make check' for non-multibuild package.
  * reference the above new patch.
- coreutils.keyring:
  * Update from upstream (Savannah).</changelog>
  <changelog author="dmueller@suse.com" date="1588593600">- add coreutils-use-python3.patch to minimally port away from
  python 2.x use of pyinotify in the testsuite</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1592049600">- coreutils-gnulib-disable-test-float.patch: Add patch to temporarily
  disable the gnulib test 'test-float' failing on ppc and ppc64le.
- coreutils.spec: Reference the patch.  While at it, avoid conditional
  Patch and Source entries as that break cross-platform builds from
  source RPMs.</changelog>
  <changelog author="dimstar@opensuse.org" date="1594900800">- Drop suse-module-tools BuildRequires: this was used for the macro
  regenerate_initrd_post/posttrans, which have been moved to
  rpm-config-SUSE in Jan 2019.</changelog>
  <changelog author="mail@bernhard-voelker.de" date="1598875200">- gnulib-test-avoid-FP-perror-strerror.patch: Add patch to
  avoid false-positive error in gnulib tests 'test-perror2' and
  'test-strerror_r', visible on armv7l.
- coreutils.spec: Reference the patch.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="zpetrova@suse.com" date="1635163200">- coreutils-df-fuse-portal-dummy.patch:
  df: Add "fuse.portal" as a dummy file system (used in flatpak
  implementations). (bsc#1189152)</changelog>
  <changelog author="ailiop@suse.com" date="1706529600">- tail: fix tailing sysfs files where PAGE_SIZE &gt; BUFSIZ (bsc#1219321)
  - add coreutils-tail-fix-tailing-sysfs-files-where-PAGE_SIZE-BUFSIZ.patch</changelog>
  <changelog author="tabraham@suse.com" date="1712059200">- ls: avoid triggering automounts (bsc#1221632)
  - add coreutils-ls-avoid-triggering-automounts.patch</changelog>
</package>
<package pkgid="e98502330e65c62613722ecc1953b62f05263289ee7237a971dc2216c17a372d" name="cpio" arch="aarch64">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="1f31c481ae06512b804c51f4e76e4b637ead3d7cd2b62777dd886b67d9727e2e" name="cpio" arch="s390x">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="1c298f7a79057d934ec9893e5f59c06c0d9cdafe295d57ca2ebdcf50215f30db" name="cpio" arch="src">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="5e11adc2e99e4bdf72d18c0d8947a624912ad2b50b31f9759482122f3990529a" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.13" rel="150400.3.3.1"/>
  <changelog author="kstreitova@suse.com" date="1455883200">- add cpio-2.12-out_of_bounds_write.patch to fix an out of bounds
  write in a way cpio parses certain cpio files [bsc#963448],
  [CVE-2016-2037]</changelog>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
</package>
<package pkgid="8a531cef423708de94c25207dca0338fa4423984c032fd52788d1cb180cf5e93" name="cpio" arch="aarch64">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="0ca87787e31e6407a436c058a06a8172ddfe6b74c92672331fb560c8a84a549f" name="cpio" arch="s390x">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="ae7729815ba1e674de121c124fb5485876c4d1a354fa60321594d647f1ac203d" name="cpio" arch="src">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="cbc2d14dddebff945bf47329fcaa16699429f0f858cc0a5d71d1e7ea77891e2d" name="cpio" arch="x86_64">
  <version epoch="0" ver="2.13" rel="150400.3.6.1"/>
  <changelog author="svalx@svalx.net" date="1457006400">- Disable mt building: this binary from mt_st package offers
  advanced capabilities with the same functionality.
- Enable rmt building: 'dump' package no longer include it, besides
  cpio code base for rmt is more fresh.
- Reflect those changes in the package description.</changelog>
  <changelog author="kstreitova@suse.com" date="1457006401">- fix typos in the description
- add 'Require: mt_st' in order not to surprise users by the missing
  'mt' binary</changelog>
  <changelog author="mpluskal@suse.com" date="1457179200">- Recommend mt_st as it is not hard dependency</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- cleanup with spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490356800">- Enable mt building
- Separated cpio-mt subpackge
- Change recommend to own mt subpackge
- Remove cpio-mt.patch - those features available in original mt-st package
- Switch to use alternatives system for mt
- Disable rmt building: this binary fully identical to rmt from tar
- Change default rmt dir to /usr/bin</changelog>
  <changelog author="mpluskal@suse.com" date="1490616000">- Use macro for configure and make install
- Use update-alternatives according to current documentation
- Enable testsuite</changelog>
  <changelog author="kstreitova@suse.com" date="1491912000">- modify cpio-2.12-out_of_bounds_write.patch to fix a regression
  causing cpio to crash for tar and ustar archive types
  [bsc#1028410]</changelog>
  <changelog author="mpluskal@suse.com" date="1536926400">- Use URL to fetch keyring
- Do not force building with PIE, it is default now anyways
- Use https for URLs
- Install license</changelog>
  <changelog author="bwiedemann@suse.com" date="1537963200">- Use gettextize --no-changelog to drop build date
  to make package build reproducible (boo#1047218)</changelog>
  <changelog author="lnussel@suse.de" date="1568894400">- Do not recommend lang package. The lang package already has a
  supplements.</changelog>
  <changelog author="kstreitova@suse.com" date="1572868800">- add cpio-2.12-CVE-2019-14866.patch to fix a security issue where
  cpio does not properly validate the values written in the header
  of a TAR file through the to_oct() function [bsc#1155199]
  [CVE-2019-14866]</changelog>
  <changelog author="kstreitova@suse.com" date="1585483200">- starting with GCC 10, the default of '-fcommon' option will
  change to '-fno-common'. Because cpio build fails with
  'fno-common', add '-fcommon' option to optflags as a temporary
  workaround for this problem till it's properly fixed [bsc#1160870]</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 2.13:
  * CVE-2015-1197, CVE-2016-2037, CVE-2019-14866
- remove patches (upstream):
  cpio-2.12-out_of_bounds_write.patch, cpio-2.12-CVE-2019-14866.patch,
  cpio-2.12-util.c_no_return_in_nonvoid_fnc.patch,
  cpio-check_for_symlinks.patch</changelog>
  <changelog author="dmueller@suse.com" date="1599825600">- add cpio-revert-CVE-2015-1197-fix.patch as recommended by upstream
  to fix https://lists.gnu.org/archive/html/bug-cpio/2019-11/msg00016.html</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="danilo.spinella@suse.com" date="1628510400">- Fix CVE-2021-38185 Remote code execution caused by an integer overflow in ds_fgetstr
  (CVE-2021-38185, bsc#1189206)
  * fix-CVE-2021-38185.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1629288000">- Fix regression in last update (bsc#1189465)
  * fix-CVE-2021-38185_2.patch
  * fix-CVE-2021-38185_3.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1635422400">- Update keyring</changelog>
  <changelog author="danilo.spinella@suse.com" date="1705060800">- Fix CVE-2023-7207, path traversal vulnerability (bsc#1218571)
  * fix-CVE-2023-7207.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1706529600">- Fix cpio not working after the fix in bsc#1218571, fixes bsc#1219238
  * fix-bsc1219238.patch</changelog>
</package>
<package pkgid="60918d773ae6782c6b1888bf104b1fd10e97346fabaf1618c36361f94c4dbdaa" name="cpupower" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="dc18135692211b5fbf0c2a1e7fdafe0e088196537fb791fd6845bd35b44e6ca8" name="cpupower" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="51a983a12a0eaa0765c10c702a8b92fcf40b8c53345bdf4f8e45a8b2f03616cb" name="cpupower" arch="src">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="1bc8e9bfd7270556fe3058c08095befea62df36929bb029c8b138be79200a9c4" name="cpupower" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="4a00408444528537f212651cfb987d43c2a0580580428c00c8c8e297ad380a31" name="cpuset" arch="noarch">
  <version epoch="0" ver="1.6.1" rel="150100.3.6.1"/>
  <changelog author="mgalbraith@suse.com" date="1451390400">- Merge new cpuset upstream.  Update URL, and add post v1.5.6 fixes.
- New patches:
  Fix-crash-with-SCHED_IDLE-policy.patch (bnc#959992)
  Handle-unknown-scheduler-policy-codes-gracefully.patch (bnc#959992)
  Parse-proc-pid-stat-properly.patch
  Docu-remove-mention-about-nonexistent-option.patch (bnc#957323)
  Docu-fix-asciidoc-build-error.patch
  Update-URLs-after-project-migration.patch
  Docu-fixed-a-typo.patch
  Fix-typo-in-setup-py.patch</changelog>
  <changelog author="mgalbraith@suse.com" date="1451476800">- Remove obsolete 'Authors' section from cpuset.spec.</changelog>
  <changelog author="lpechacek@suse.com" date="1452686400">- Update to ae629aa1dc95, release 1.5.7
- Deleted patches:
  Docu-fix-asciidoc-build-error.patch
  Docu-fixed-a-typo.patch
  Docu-remove-mention-about-nonexistent-option.patch
  Fix-crash-with-SCHED_IDLE-policy.patch
  Fix-typo-in-setup-py.patch
  Handle-unknown-scheduler-policy-codes-gracefully.patch
  Parse-proc-pid-stat-properly.patch
  Update-URLs-after-project-migration.patch
  cset-make-it-handle-cgroup-mounts.patch</changelog>
  <changelog author="idonmez@suse.com" date="1452686401">- Cleanup spec file
- Use source url</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="lpechacek@suse.com" date="1490356800">- Fix SLE 11 build in Devel project</changelog>
  <changelog author="lpechacek@suse.com" date="1518091200">- Update to 02ef9e09e1da, release v1.6pre1 (bsc#1079868)</changelog>
  <changelog author="tchvatal@suse.com" date="1522152000">- Do not require -devel but use only setuptools module
- Use ~ in version as without it the package is newer than
  release 1.6
- Reduce the compat py2/py3 choicer, SLE12 can be python3</changelog>
  <changelog author="lpechacek@suse.com" date="1544529600">- Update to 6c46d71a1c6e, release v1.6</changelog>
  <changelog author="jengelh@inai.de" date="1544529601">- Use noun phrase in summary.</changelog>
  <changelog author="lpechacek@suse.com" date="1636718400">- Add cpuset-1.6-Fix_invalid_parentheses.patch to fix
  a semantic error. (bsc#1191418)</changelog>
  <changelog author="mkoutny@suse.com" date="1690977600">- Update to 394c8b0, release v1.6.1
  * Fix --syset typo (bsc#1210468)
  * fix doc typo (bsc#1210468)
- Remove cpuset-1.6-Fix_invalid_parentheses.patch: in upstream tarball</changelog>
</package>
<package pkgid="87bc5c1c47f2f5b0d7bc36edbd1861ac22f240e0b8d101d51cc4629ea27cb624" name="cpuset" arch="src">
  <version epoch="0" ver="1.6.1" rel="150100.3.6.1"/>
  <changelog author="alext@novell.com" date="1259582400">- Update to svn 251, release 1.5.2
- Fix bug bnc#558395: cset couldn't delete cpu set
- Fix bug bnc#558399 - cset unable to move thread
- Fixed failure to delete cpuset if removed tasks stil
  preset since they can be tardy to leave
- Quiet down not found and unmovable task output
- Add example init.d cset file in documentation directory</changelog>
  <changelog author="alext@novell.com" date="1265889600">- Update to hg 18:e50c7714a80d, release 1.5.3
- Fix failure of finding cpusets in a case-sensitive manner
- Code repository and hosting moved to http://code.google.com/p/cpuset
- Updated dates and details</changelog>
  <changelog author="alext@novell.com" date="1273233600">- Update to hg 23:c6e5393187b2, release 1.5.4
- Fix exception when running tasks with non-existent uids</changelog>
  <changelog author="alext@novell.com" date="1280836800">- Update to hg 28:a73efd0e8871, release 1.5.5
- Fix Issue#3: cset fails to create cpu sets if some cpus are offline</changelog>
  <changelog author="alext@novell.com" date="1307620800">- Update to hg 33:74eb810ae9d9, release 1.5.6
- Fix Issue#5: LOGNAME not set wnen exec with --user arg</changelog>
  <changelog author="jengelh@medozas.de" date="1316260800">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="mgalbraith@suse.com" date="1401192000">- Make cset handle cgroup/cpuset mount types (SUSE bnc#625079, SUSE bnc#834223)</changelog>
  <changelog author="mgalbraith@suse.com" date="1401278400">- Explicitly state that the previous commit..
  "Make cset handle cgroup/cpuset mount types"
  ..added patch cset-make-it-handle-cgroup-mounts.patch</changelog>
  <changelog author="mgalbraith@suse.com" date="1451390400">- Merge new cpuset upstream.  Update URL, and add post v1.5.6 fixes.
- New patches:
  Fix-crash-with-SCHED_IDLE-policy.patch (bnc#959992)
  Handle-unknown-scheduler-policy-codes-gracefully.patch (bnc#959992)
  Parse-proc-pid-stat-properly.patch
  Docu-remove-mention-about-nonexistent-option.patch (bnc#957323)
  Docu-fix-asciidoc-build-error.patch
  Update-URLs-after-project-migration.patch
  Docu-fixed-a-typo.patch
  Fix-typo-in-setup-py.patch</changelog>
  <changelog author="mgalbraith@suse.com" date="1451476800">- Remove obsolete 'Authors' section from cpuset.spec.</changelog>
  <changelog author="lpechacek@suse.com" date="1452686400">- Update to ae629aa1dc95, release 1.5.7
- Deleted patches:
  Docu-fix-asciidoc-build-error.patch
  Docu-fixed-a-typo.patch
  Docu-remove-mention-about-nonexistent-option.patch
  Fix-crash-with-SCHED_IDLE-policy.patch
  Fix-typo-in-setup-py.patch
  Handle-unknown-scheduler-policy-codes-gracefully.patch
  Parse-proc-pid-stat-properly.patch
  Update-URLs-after-project-migration.patch
  cset-make-it-handle-cgroup-mounts.patch</changelog>
  <changelog author="idonmez@suse.com" date="1452686401">- Cleanup spec file
- Use source url</changelog>
  <changelog author="sfalken@opensuse.org" date="1489060800">- Edited %files to clear unpackaged files builderror in
  openSUSE:Factory</changelog>
  <changelog author="lpechacek@suse.com" date="1490356800">- Fix SLE 11 build in Devel project</changelog>
  <changelog author="lpechacek@suse.com" date="1518091200">- Update to 02ef9e09e1da, release v1.6pre1 (bsc#1079868)</changelog>
  <changelog author="tchvatal@suse.com" date="1522152000">- Do not require -devel but use only setuptools module
- Use ~ in version as without it the package is newer than
  release 1.6
- Reduce the compat py2/py3 choicer, SLE12 can be python3</changelog>
  <changelog author="lpechacek@suse.com" date="1544529600">- Update to 6c46d71a1c6e, release v1.6</changelog>
  <changelog author="jengelh@inai.de" date="1544529601">- Use noun phrase in summary.</changelog>
  <changelog author="lpechacek@suse.com" date="1636718400">- Add cpuset-1.6-Fix_invalid_parentheses.patch to fix
  a semantic error. (bsc#1191418)</changelog>
  <changelog author="mkoutny@suse.com" date="1690977600">- Update to 394c8b0, release v1.6.1
  * Fix --syset typo (bsc#1210468)
  * fix doc typo (bsc#1210468)
- Remove cpuset-1.6-Fix_invalid_parentheses.patch: in upstream tarball</changelog>
</package>
<package pkgid="9c8d1b21f324c3d740deb74d22841fb8e1b1c9d2b88cd05874916d50e6a1f7a0" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20210917.c9d86d1" rel="150400.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1605182400">- Initial packaging, git version 20200918 (jsc#SLE-15832)</changelog>
  <changelog author="pmonreal@suse.com" date="1608638400">- Add crypto-policies-typos.patch to fix some typos</changelog>
  <changelog author="pmonreal@suse.com" date="1611230400">- Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230401">- Fix the man pages generation
- Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230402">- Update to git version 20210118
  * Output sigalgs required by nss &gt;=3.59
  * Bump Python requirement to 3.6
  * Kerberos 5: Fix policy generator to account for macs
  * Add AES-192 support (non-TLS scenarios)
  * Add documentation of the --check option</changelog>
  <changelog author="pmonreal@suse.com" date="1612267200">- Update to git version 20210127
  * Bump Python requirement to 3.6
  * Output sigalgs required by nss &gt;=3.59
  * Do not require bind during build
  * Break build cycles with openssl and gnutls</changelog>
  <changelog author="dimstar@opensuse.org" date="1612267201">- Convert to use a proper git source _service:
  + To update, one just needs to update the commit/revision in the
    _service file and run `osc service dr`.
  + The version of the package is defined by the commit date of the
    revision, followed by the abbreviated git hash (The same
    revision used before results thus in a downgrade to 20210118,
    but as this is a alltime new package, this is acceptable.</changelog>
  <changelog author="pmonreal@suse.com" date="1612526400">- Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Use gzip instead of xz in obscpio and sources</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Add a BuildIgnore for crypto-policies</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Use tar_scm service, not obs_scm: With crypto-policies entering
  Ring0 (distro bootstrap) we want to be sure to keep the buildtime
  deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
  pulled this in for us.</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Update to version 20210213.5c710c0: [bsc#1180938]
  * setup_directories(): perform safer creation of directories
  * save_config(): avoid re-opening output file for each iteration
  * save_config(): break after first match to avoid unnecessary stat() calls
  * CryptoPolicy.parse(): actually stop parsing line on syntax error
  * ProfileConfig.parse_string(): correctly extended subpolicies
  * Exclude RC4 from LEGACY
  * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
  * code style: fix 'not in' membership testing
  * pylintrc: tighten up a bit
  * formatting: avoid long lines
  * formatting: use f-strings instead of format()
  * formatting: reformat all python code with autopep8
  * nss: postponing the version check again, to 3.61
  * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"</changelog>
  <changelog author="pmonreal@suse.com" date="1614168000">- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
  * The minimum DTLS protocol version in the DEFAULT and FUTURE
    policies is DTLS1.2.
  * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e</changelog>
  <changelog author="pmonreal@suse.com" date="1614254400">- Remove not needed scripts: fips-finish-install fips-mode-setup</changelog>
  <changelog author="pmonreal@suse.com" date="1614254401">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]</changelog>
</package>
<package pkgid="3b1447c5698c8d222a20959b202e056a0ccf79b5edd4e8dd24123df63c74e97d" name="crypto-policies" arch="src">
  <version epoch="0" ver="20210917.c9d86d1" rel="150400.3.3.1"/>
  <changelog author="vcizek@suse.com" date="1605182400">- Initial packaging, git version 20200918 (jsc#SLE-15832)</changelog>
  <changelog author="pmonreal@suse.com" date="1608638400">- Add crypto-policies-typos.patch to fix some typos</changelog>
  <changelog author="pmonreal@suse.com" date="1611230400">- Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230401">- Fix the man pages generation
- Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230402">- Update to git version 20210118
  * Output sigalgs required by nss &gt;=3.59
  * Bump Python requirement to 3.6
  * Kerberos 5: Fix policy generator to account for macs
  * Add AES-192 support (non-TLS scenarios)
  * Add documentation of the --check option</changelog>
  <changelog author="pmonreal@suse.com" date="1612267200">- Update to git version 20210127
  * Bump Python requirement to 3.6
  * Output sigalgs required by nss &gt;=3.59
  * Do not require bind during build
  * Break build cycles with openssl and gnutls</changelog>
  <changelog author="dimstar@opensuse.org" date="1612267201">- Convert to use a proper git source _service:
  + To update, one just needs to update the commit/revision in the
    _service file and run `osc service dr`.
  + The version of the package is defined by the commit date of the
    revision, followed by the abbreviated git hash (The same
    revision used before results thus in a downgrade to 20210118,
    but as this is a alltime new package, this is acceptable.</changelog>
  <changelog author="pmonreal@suse.com" date="1612526400">- Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Use gzip instead of xz in obscpio and sources</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Add a BuildIgnore for crypto-policies</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Use tar_scm service, not obs_scm: With crypto-policies entering
  Ring0 (distro bootstrap) we want to be sure to keep the buildtime
  deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
  pulled this in for us.</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Update to version 20210213.5c710c0: [bsc#1180938]
  * setup_directories(): perform safer creation of directories
  * save_config(): avoid re-opening output file for each iteration
  * save_config(): break after first match to avoid unnecessary stat() calls
  * CryptoPolicy.parse(): actually stop parsing line on syntax error
  * ProfileConfig.parse_string(): correctly extended subpolicies
  * Exclude RC4 from LEGACY
  * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
  * code style: fix 'not in' membership testing
  * pylintrc: tighten up a bit
  * formatting: avoid long lines
  * formatting: use f-strings instead of format()
  * formatting: reformat all python code with autopep8
  * nss: postponing the version check again, to 3.61
  * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"</changelog>
  <changelog author="pmonreal@suse.com" date="1614168000">- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
  * The minimum DTLS protocol version in the DEFAULT and FUTURE
    policies is DTLS1.2.
  * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e</changelog>
  <changelog author="pmonreal@suse.com" date="1614254400">- Remove not needed scripts: fips-finish-install fips-mode-setup</changelog>
  <changelog author="pmonreal@suse.com" date="1614254401">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]</changelog>
</package>
<package pkgid="c71c2d6235e833e5b659eff4a8d3987f527975b4332303c95761b31ec77d2c32" name="crypto-policies" arch="noarch">
  <version epoch="0" ver="20210917.c9d86d1" rel="150400.3.6.1"/>
  <changelog author="pmonreal@suse.com" date="1608638400">- Add crypto-policies-typos.patch to fix some typos</changelog>
  <changelog author="pmonreal@suse.com" date="1611230400">- Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230401">- Fix the man pages generation
- Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230402">- Update to git version 20210118
  * Output sigalgs required by nss &gt;=3.59
  * Bump Python requirement to 3.6
  * Kerberos 5: Fix policy generator to account for macs
  * Add AES-192 support (non-TLS scenarios)
  * Add documentation of the --check option</changelog>
  <changelog author="pmonreal@suse.com" date="1612267200">- Update to git version 20210127
  * Bump Python requirement to 3.6
  * Output sigalgs required by nss &gt;=3.59
  * Do not require bind during build
  * Break build cycles with openssl and gnutls</changelog>
  <changelog author="dimstar@opensuse.org" date="1612267201">- Convert to use a proper git source _service:
  + To update, one just needs to update the commit/revision in the
    _service file and run `osc service dr`.
  + The version of the package is defined by the commit date of the
    revision, followed by the abbreviated git hash (The same
    revision used before results thus in a downgrade to 20210118,
    but as this is a alltime new package, this is acceptable.</changelog>
  <changelog author="pmonreal@suse.com" date="1612526400">- Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Use gzip instead of xz in obscpio and sources</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Add a BuildIgnore for crypto-policies</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Use tar_scm service, not obs_scm: With crypto-policies entering
  Ring0 (distro bootstrap) we want to be sure to keep the buildtime
  deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
  pulled this in for us.</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Update to version 20210213.5c710c0: [bsc#1180938]
  * setup_directories(): perform safer creation of directories
  * save_config(): avoid re-opening output file for each iteration
  * save_config(): break after first match to avoid unnecessary stat() calls
  * CryptoPolicy.parse(): actually stop parsing line on syntax error
  * ProfileConfig.parse_string(): correctly extended subpolicies
  * Exclude RC4 from LEGACY
  * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
  * code style: fix 'not in' membership testing
  * pylintrc: tighten up a bit
  * formatting: avoid long lines
  * formatting: use f-strings instead of format()
  * formatting: reformat all python code with autopep8
  * nss: postponing the version check again, to 3.61
  * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"</changelog>
  <changelog author="pmonreal@suse.com" date="1614168000">- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
  * The minimum DTLS protocol version in the DEFAULT and FUTURE
    policies is DTLS1.2.
  * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e</changelog>
  <changelog author="pmonreal@suse.com" date="1614254400">- Remove not needed scripts: fips-finish-install fips-mode-setup</changelog>
  <changelog author="pmonreal@suse.com" date="1614254401">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]</changelog>
  <changelog author="pmonreal@suse.com" date="1689595200">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages.
  * Adapt the fips-mode-setup script for SLE [jsc#PED-5041]
  * Rebase crypto-policies-FIPS.patch
  * Simplify the man pages creation:
  - Rebase crypto-policies-no-build-manpages.patch
  - Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems. Ship the man 8 pages for
  fips-mode-setup and fips-finish-install [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Make the supported versions change in the update-crypto-policies(8)
  man page persistent [bsc#1209998].
  * Add patch crypto-policies-supported.patch
  * Rebase patches:
  - crypto-policies-asciidoc.patch
  - crypto-policies-no-build-manpages.patch</changelog>
</package>
<package pkgid="6784cfec7e4bc403389b8a3bf538c43d26b44fb335526a393235e216370b1922" name="crypto-policies" arch="src">
  <version epoch="0" ver="20210917.c9d86d1" rel="150400.3.6.1"/>
  <changelog author="pmonreal@suse.com" date="1608638400">- Add crypto-policies-typos.patch to fix some typos</changelog>
  <changelog author="pmonreal@suse.com" date="1611230400">- Test only supported modules
- Add crypto-policies-test_supported_modules_only.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230401">- Fix the man pages generation
- Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1611230402">- Update to git version 20210118
  * Output sigalgs required by nss &gt;=3.59
  * Bump Python requirement to 3.6
  * Kerberos 5: Fix policy generator to account for macs
  * Add AES-192 support (non-TLS scenarios)
  * Add documentation of the --check option</changelog>
  <changelog author="pmonreal@suse.com" date="1612267200">- Update to git version 20210127
  * Bump Python requirement to 3.6
  * Output sigalgs required by nss &gt;=3.59
  * Do not require bind during build
  * Break build cycles with openssl and gnutls</changelog>
  <changelog author="dimstar@opensuse.org" date="1612267201">- Convert to use a proper git source _service:
  + To update, one just needs to update the commit/revision in the
    _service file and run `osc service dr`.
  + The version of the package is defined by the commit date of the
    revision, followed by the abbreviated git hash (The same
    revision used before results thus in a downgrade to 20210118,
    but as this is a alltime new package, this is acceptable.</changelog>
  <changelog author="pmonreal@suse.com" date="1612526400">- Do not build the manpages to avoid build cycles
- Add crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1612785600">- Use gzip instead of xz in obscpio and sources</changelog>
  <changelog author="pmonreal@suse.com" date="1612785601">- Add a BuildIgnore for crypto-policies</changelog>
  <changelog author="dimstar@opensuse.org" date="1612872000">- Use tar_scm service, not obs_scm: With crypto-policies entering
  Ring0 (distro bootstrap) we want to be sure to keep the buildtime
  deps as low as possible.
- Add python3-base BuildRequires: previously, OBS' tar service
  pulled this in for us.</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Update to version 20210213.5c710c0: [bsc#1180938]
  * setup_directories(): perform safer creation of directories
  * save_config(): avoid re-opening output file for each iteration
  * save_config(): break after first match to avoid unnecessary stat() calls
  * CryptoPolicy.parse(): actually stop parsing line on syntax error
  * ProfileConfig.parse_string(): correctly extended subpolicies
  * Exclude RC4 from LEGACY
  * Introduce rc4_md5_in_krb5 to narrow AD_SUPPORT
  * code style: fix 'not in' membership testing
  * pylintrc: tighten up a bit
  * formatting: avoid long lines
  * formatting: use f-strings instead of format()
  * formatting: reformat all python code with autopep8
  * nss: postponing the version check again, to 3.61
  * Revert "Unfortunately we have to keep ignoring the openssh check for sk-"</changelog>
  <changelog author="pmonreal@suse.com" date="1614168000">- Disable DTLS0.9 protocol in GnuTLS DEFAULT policy. [bsc#1180938]
  * The minimum DTLS protocol version in the DEFAULT and FUTURE
    policies is DTLS1.2.
  * Fixed upstream: 05203d21f6d0ea9bbdb351e4600f1e273720bb8e</changelog>
  <changelog author="pmonreal@suse.com" date="1614254400">- Remove not needed scripts: fips-finish-install fips-mode-setup</changelog>
  <changelog author="pmonreal@suse.com" date="1614254401">- Update to version 20210225.05203d2:
  * Disable DTLS0.9 protocol in the DEFAULT policy.
  * policies/FIPS: insignificant reformatting
  * policygenerators/libssh: respect ssh_certs
  * policies/modules/OSPP: tighten to follow RHEL 8
  * crypto-policies(7): drop not-reenableable comment
  * follow up on disabling RC4</changelog>
  <changelog author="pmonreal@suse.com" date="1632484800">- Update to version 20210917.c9d86d1:
  * openssl: fix disabling ChaCha20
  * pacify pylint 2.11: use format strings
  * pacify pylint 2.11: specify explicit encoding
  * fix minor things found by new pylint
  * update-crypto-policies: --check against regenerated
  * update-crypto-policies: fix --check's walking order
  * policygenerators/gnutls: revert disabling DTLS0.9...
  * policygenerators/java: add javasystem backend
  * LEGACY: bump 1023 key size to 1024
  * cryptopolicies: fix 'and' in deprecation warnings
  * *ssh: condition ecdh-sha2-nistp384 on SECP384R1
  * nss: hopefully the last fix for nss sigalgs check
  * cryptopolicies: Python 3.10 compatibility
  * nss: postponing check + testing at least something
  * Rename 'policy modules' to 'subpolicies'
  * validation.rules: fix a missing word in error
  * cryptopolicies: raise errors right after warnings
  * update-crypto-policies: capitalize warnings
  * cryptopolicies: syntax-precheck scope errors
  * .gitlab-ci.yml, Makefile: enable codespell
  * all: fix several typos
  * docs: don't leave zero TLS/DTLS protocols on
  * openssl: separate TLS/DTLS MinProtocol/MaxProtocol
  * alg_lists: order protocols new-to-old for consistency
  * alg_lists: max_{d,}tls_version
  * update-crypto-policies: fix pregenerated + local.d
  * openssh: allow validation with pre-8.5
  * .gitlab-ci.yml: run commit-range against upstream
  * openssh: Use the new name for PubkeyAcceptedKeyTypes
  * sha1_in_dnssec: deprecate
  * .gitlab-ci.yml: test commit ranges
  * FIPS:OSPP: sign = -*-SHA2-224
  * scoped policies: documentation update
  * scoped policies: use new features to the fullest...
  * scoped policies: rewrite + minimal policy changes
  * scoped policies: rewrite preparations
  * nss: postponing the version check again, to 3.64
- Remove patches fixed upstream: crypto-policies-typos.patch
- Rebase: crypto-policies-test_supported_modules_only.patch
- Merge crypto-policies-asciidoc.patch into
    crypto-policies-no-build-manpages.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1632484801">- Remove the scripts and documentation regarding
  fips-finish-install and test-fips-setup
  * Add crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683547200">- Update the update-crypto-policies(8) man pages and README.SUSE
  to mention the supported back-end policies. [bsc#1209998]</changelog>
  <changelog author="pmonreal@suse.com" date="1689595200">- FIPS: Enable to set the kernel FIPS mode with fips-mode-setup
  and fips-finish-install commands, add also the man pages.
  * Adapt the fips-mode-setup script for SLE [jsc#PED-5041]
  * Rebase crypto-policies-FIPS.patch
  * Simplify the man pages creation:
  - Rebase crypto-policies-no-build-manpages.patch
  - Add crypto-policies-asciidoc.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- FIPS: Adapt the fips-mode-setup script to use the pbl command
  from the perl-Bootloader package to replace grubby. Add a note
  for transactional systems. Ship the man 8 pages for
  fips-mode-setup and fips-finish-install [jsc#PED-5041].
  * Rebase crypto-policies-FIPS.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693483200">- Make the supported versions change in the update-crypto-policies(8)
  man page persistent [bsc#1209998].
  * Add patch crypto-policies-supported.patch
  * Rebase patches:
  - crypto-policies-asciidoc.patch
  - crypto-policies-no-build-manpages.patch</changelog>
</package>
<package pkgid="c5f51a22d565d3c1a4d9c406d6d582131367018dab9bf4ed34375495773b7722" name="cryptsetup" arch="aarch64">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="f51b20253fca797b1805f14874f025b8984516a17eecfba338bc94c759ac2787" name="cryptsetup" arch="s390x">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="9be50d0ebdd4474a9dd3eeba2bbd01d19d51c474bf2cfaac4dc9b68e4a486f19" name="cryptsetup" arch="src">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="cb32b7726017ff4e808a068ac80d4d25e0ffc77c0c2429220b80de320739059d" name="cryptsetup" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="f3c76c70c1fc36fab856e51e75424391a3eea0cc6b2cd6442ab016c22af2663c" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="f5eb3c9b5bd854918010ac04be2fadd97ef7e08f70cb677b5a8f754d8d96f073" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="3a547a754e29219f29a84072f4afb1507e9f4dd4789d411438b6218d80a5c955" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="00f4fe45f7eedf96a8e721124ada2f8dbcd28f39d6397a78bb92313a5e08c758" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="69ac06682a00fc337756db82098c42650398dbd95b9aaf7ddbad7799e630bfd1" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="d9ed50be9bc669fda86875b763ad24c8b74d24064aab9883691855165c317efc" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="32026d0981feab396d4a236db6027d4fc4c83b74197d2e3368a007b7e71218dc" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="485f14f7ebd052e1d9c59fc7c245b0c5e080a99e0ca74f5403bf0992054522a4" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="68d5fd6c2812972f8fffee22e8cbff0c9e711935943a9cd736fae54ad60673cf" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="2ba6f6eab833ac17f012a6b8596f03ceb222dc9967114c96c612d1cd7fe2a04a" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="2f2351e2c88043e0d16bb3e227dae76b82d48770dcc338f1784edc474b3f6200" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="67307e20b3f5af69f9446de0b9582233f35146d5b5cb4187a24fa5fb90fdc1a6" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="15b14dc9059560ea9fcae0755ddabd1ce0e0654e3540db3bfc1ea7cbf3aac4bf" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="f45e028fce4a36e624273bce17ceda24da00eabf90031e5808c18527a5ea706c" name="cups-config" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="9361bfbb6b5113f79d4ce2be7d0093f2f091d524f830734585484eb7dde793ea" name="cups-config" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="86571dc1c6b570a8b43b6f30becc03219231cd050c88440a1859c65199ba0c59" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="9e9cf3056d28ac5495f1cb882badcbefe3fabb63f2a5473b345b2a724544cfff" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="ce79e4f5d90cffa80512a461c85c389284797b6f97ea0ceda0a6e453a7d7f346" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="7898863fe05570841ec19ee3e1b3335e975fe6a312f6f1418e0d221b4a00af13" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="3a916d994cb241620c50f2c260fd977371ef8bb4467e0486d5f029debf705b2a" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="e61f0c750c4fe2ee96d3a7b1633583195649ed4931125bd6072a2df3c3380f60" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="9f7e2eddf4af6da355526291587f23ee18130a50617b53ed641e159c4ebfa6bd" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="f517b25bd293c33fc2a5f413f43b1feaac5cddbc5f91d581ed09c5b69e6804e4" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="da0e11e8264d0058535682028147c9cea2c6f62c4410050735a8eb89ae6ce7da" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="057a6f771781db25493e94fdb131b90e35e21c6218b2d6836ba46482635f9485" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.29.1"/>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
</package>
<package pkgid="551afa1831b3c82a0ed2b592dd5ab5578d0716c802354821d7045d1d9c504011" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.29.1"/>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
</package>
<package pkgid="a858921d10fb1bc1b945112ac2a671307cbdac9eb713e2bf3111704041032ca1" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.29.1"/>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
</package>
<package pkgid="f7b6838c5528d4e777efb7f99a45920e1dae282a8b6238070a095e628d9f0284" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.29.1"/>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
</package>
<package pkgid="c481adeab307e2c0b9174d35ca0aa97575f67424a81b05479a676f02c53d929e" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="fb5923d131be18a18658ef561323b8476442311472c64f171bc102c01bfbddfe" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="e3c3a5f408941dc3cf8e8126a55d4d979d455a28a842061f90cb044374be0d59" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="e92e64cb25e1dc17228d9301a46a87a955807c79c093a12fe795aa8d457dc125" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="917dd0c9a0bae75ddd3f2735fd549259b09dbe5b07a8f288cd43a28abad5007e" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="e2fc7a89a3bbff26173216b2295c4f30de0b8fb46029713bbb19e16906e785a6" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="bc0a076ffd7dc01dc1246cc8925e3047011ab167c82c0866007baac4f079a84b" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="736fd786fbe92b195a251f4211f2db9711bbd1e51fc8ec0c317243c24ca06fcc" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="28986a3a0f188d6b9925289f050a437d706aed4b266392644be6878353266134" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="ef6fd0e8777b6a946d24bab9a9ed28f50f920c60c5c9535386eb4a5af5700019" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="4895bbea9f7694b60076f17fd669b04fc81f1e417a57b35d8375646b6246df2c" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="aa1cb5e7ee2f550526908edc9e94d8b167ef15da42499143c72decc90794f40e" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="20a95b3d916692f6247e43a56da19e613cf3b510fb5c1a137624dc80b10d4113" name="curl" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="5f24ed062a1ec63b636d5872eaf5a7a6659a2cdc218753e8cbcf87bcfb21e6b9" name="curl" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="7971f0006d928061fc348abf1901e9725b9b8c4074598592b286f6f6f97ecaf1" name="curl" arch="src">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="d1605b3d71e0120d03dd9f9f9c041b5116df97ef8301ae0a1155c81341f624e8" name="curl" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="fd733e7ded3955d4f9fa0d9ca38c0a44893eccb41f0e43423e71dc82d5eeaf2a" name="db48-utils" arch="aarch64">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="ff584c6818c34a6d7b6e25059f4a09056bc58f63f5186e6661853ba79b116df5" name="db48-utils" arch="s390x">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="ac29c5974b27947a3719fdbf35be44d612a2c3b4a87df83b0a2c10e64f02ca86" name="db48-utils" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="ad1292f56a736615966fe3397c19614b0a7b63698dc5e011f5aad9d992494b2d" name="dbus-1" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="fe6e44a2a6d7a6047b9a04b586c6b2ea1fe9b714debdf40ff1e10eb0cb01f72c" name="dbus-1" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="0cb21701418d395d26dc6126959c4d5ec1398971bf516d3a372f115cd03b270f" name="dbus-1" arch="src">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="81eca7628d55103f672bdc6280fb3d4c2f8dd1e8e1897aa54fb5066bf4742eb3" name="dbus-1" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="65cc29b118ac2e881fdd6f2f0e21bf421691e782090f0a71eb4c6cb733323b8a" name="dbus-1-x11" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="84ef5bf577e2fb42a3ee0e4c848000265d015c1ce55a85cff864a16ed169e98f" name="dbus-1-x11" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="bf6d851c5b0896035a55bad81574220a9ec277c072b694c4fc445386528ea5fe" name="dbus-1-x11" arch="src">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="5e1da8f2dea5f0517bda6b62271b1a6e41e19a13ef544fd53d312c618b64fb23" name="dbus-1-x11" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1497355200">- swap to /usr/bin bsc#1029968
- Add the following fixes from SLE12
  * bsc#980928 increase listen() backlog of AF_UNIX sockets to
    SOMAXCONN fix-upstream-increase-backlog.patch
- The following bugs were already fixed but are missing changelog
  entries
  * bsc#867256 (No longer applicable)
  * bsc#916785 (No longer applicable)
  * bsc#1012564 (Not applicable)
  * fdo#90004 (Fixed Upstream)
- Rename the following patches as a tidy up
  * dbus-log-deny.patch to feature-suse-log-deny.patch
  * dbus-do-autolaunch.patch feature-suse-do-autolaunch.patch
  * 0001-Add-RefuseManualStartStop.patch to
    feature-suse-refuse-manual-start-stop.patch
  * 0001-Drop-Install-sections-from-user-services.patch to
    fix-upstream-drop-install-sections-from-user-services.patch</changelog>
  <changelog author="sflees@suse.de" date="1498824000">- Update to 1.10.20
  * Fixes:
    + Fix a reference leak when blocking on a pending call on a
    connection that has been disconnected (fdo#101481, Shin-ichi
    MORITA)
    + Don't put timestamps in the Doxygen-generated documentation,
    for closer-to-reproducible builds (fdo#100692, Simon
    McVittie)
    + Avoid an assertion failure when connecting to a
    semicolon-separated series of addresses, one of which fails
    (fdo#101257, Simon McVittie)
  * Documentation:
    + Update git URIs in HACKING document to sync up with
    cgit.freedesktop.org (fdo#100715, Simon McVittie)</changelog>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="908fea26d83a3cb560d20e73f59b98046bb65f76d69ec848058c17bb10ed3463" name="device-mapper" arch="aarch64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="590387d27a92d7b5870adcda5e941c5a238c273121d4eeaf6a71166b0eacfe0c" name="device-mapper" arch="s390x">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="1cd77736edfe6b23fc7f85fd7b39836cf193d6151b730ed2a3c47a1152d159a6" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="38d66b5a5f115fc3e48c82f14eabcce26d42e3e2c031b884aaaae3354f0883d4" name="device-mapper" arch="aarch64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="028622c01e30afb747d58e1c6734a9f2324aa0607329c4594f0359b6bc6c80e3" name="device-mapper" arch="s390x">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="5036f7ea5c7c124c39facf97fb04ae241e38d60528baebefb72f4679b5eec69c" name="device-mapper" arch="x86_64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="d3897b534d0f3141e6f4bdd186673a9270ce908d7bf1afbab48476e7e8f461ba" name="dmidecode" arch="aarch64">
  <version epoch="0" ver="3.4" rel="150400.16.8.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1663070400">- Update to upstream version 3.4:
  * This update implements jsc#SLE-24502 and jsc#PED-1466.
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Add bios-revision, firmware-revision and system-sku-number to -s option
    Use the most appropriate unit for cache size
    Decode system slot base bus width and peers
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
    dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
    dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
    dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
    dmidecode-add-system-slot-types-from-smbios-3.4.0.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-missing-commas.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch and
    dmidecode-skip-details-of-uninstalled-memory-modules.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1663070401">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1681473600">Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
  Clean up function dmi_table so that it does only one thing
  (bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
  - -dump-bin is used, write the whole dump file at once, instead of
  opening and closing the file separately for the table and then
  for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
  Make sure that the file passed to option --dump-bin does not
  already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
  check on the type of the mem device file we are asked to read
  from, if we are root (bsc#1210418).
  3 recommended fixes from upstream:
- dmioem-typo-fix-virutal-virtual.patch: Simple typo fix in a
  user-visible string.
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
  the SMBIOS entry point is long enough to include all the fields
  we need.
- dmioem-hpe-oem-record-237-firmware-change.patch: Properly decode
  the last field of HPE OEM record type 237.</changelog>
  <changelog author="jdelvare@suse.de" date="1681905600">- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes (bsc#1210418).</changelog>
</package>
<package pkgid="d776817064e0fdd8f7f67c380f4231fe380ad400064bfb1100d6f1821af27bce" name="dmidecode" arch="src">
  <version epoch="0" ver="3.4" rel="150400.16.8.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1663070400">- Update to upstream version 3.4:
  * This update implements jsc#SLE-24502 and jsc#PED-1466.
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Add bios-revision, firmware-revision and system-sku-number to -s option
    Use the most appropriate unit for cache size
    Decode system slot base bus width and peers
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
    dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
    dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
    dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
    dmidecode-add-system-slot-types-from-smbios-3.4.0.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-missing-commas.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch and
    dmidecode-skip-details-of-uninstalled-memory-modules.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1663070401">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1681473600">Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
  Clean up function dmi_table so that it does only one thing
  (bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
  - -dump-bin is used, write the whole dump file at once, instead of
  opening and closing the file separately for the table and then
  for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
  Make sure that the file passed to option --dump-bin does not
  already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
  check on the type of the mem device file we are asked to read
  from, if we are root (bsc#1210418).
  3 recommended fixes from upstream:
- dmioem-typo-fix-virutal-virtual.patch: Simple typo fix in a
  user-visible string.
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
  the SMBIOS entry point is long enough to include all the fields
  we need.
- dmioem-hpe-oem-record-237-firmware-change.patch: Properly decode
  the last field of HPE OEM record type 237.</changelog>
  <changelog author="jdelvare@suse.de" date="1681905600">- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes (bsc#1210418).</changelog>
</package>
<package pkgid="3c4e3228ca3109c8154f3d1002f9478f7d8e7cbd72ed356780ede6d81f249019" name="dmidecode" arch="x86_64">
  <version epoch="0" ver="3.4" rel="150400.16.8.1"/>
  <changelog author="jdelvare@suse.de" date="1413201600">- dmidecode-1.181-decode-CPUID-recent-AMD.patch: Decode the CPUID
  of recent AMD processors (DMI type 4).
- dmidecode-1.182-decode-ddr4-memory-type.patch: Add support for
  DDR4 memory type (DMI type 17) (bsc#955705).
  https://savannah.nongnu.org/bugs/?43370</changelog>
  <changelog author="mpluskal@suse.com" date="1424433600">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="meissner@suse.com" date="1424606400">- dmidecode.keyring was empty, reference the savannah keyring.
  but the tarball is signed by someone unknown without gpg signatures,
  so no keyring for now.</changelog>
  <changelog author="jdelvare@suse.de" date="1441281600">- Update to upstream version 3.0 (FATE#320746, FATE#320773):
  * Adds support for SMBIOS 3.0. This includes a new (64-bit) entry
    point format and new enumerated values for recent hardware.
  * Adds support for the new kernel interface (as of Linux v4.2) as
    an alternative to relying on /dev/mem to access the entry point
    and DMI table.
  * Adds decoding of Acer-specific DMI type 170 and HP-specific DMI
    types 212, 219 and 233.
  * Obsoletes dmidecode-1.173-drop-cast.patch,
    dmidecode-1.175-fix-SMBIOS-2.8.0.patch,
    dmidecode-1.176-SMBIOS-2.8-is-supported.patch,
    dmidecode-1.177-decode-pcie3-slot-id.patch,
    dmidecode-1.181-decode-CPUID-recent-AMD.patch, and
    dmidecode-1.182-decode-ddr4-memory-type.patch.
  * Various minor fixes and clean-ups.
  * Skip the SMBIOS version comparison in quiet mode (bsc#974862).</changelog>
  <changelog author="jdelvare@suse.de" date="1462276800">- dmidecode-01-add-no-sysfs-option-description-to-h-output.patch:
  Add "--no-sysfs" option description to -h output.
- dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch:
  Fix 'No SMBIOS nor DMI entry point found' on SMBIOS3.
- dmidecode-03-let-read_file-return-the-actual-data-size.patch:
  Let read_file return the actual data size.
- dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch:
  Use read_file() to read the DMI table from sysfs.
  https://savannah.nongnu.org/bugs/?46176
- dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch:
  Use DWORD for Structure table maximum size in SMBIOS3.
- dmidecode-06-hide-irrelevant-fixup-message.patch:
  Hide irrelevant fixup message.
  http://savannah.nongnu.org/support/?109024</changelog>
  <changelog author="jdelvare@suse.de" date="1484913600">- dmidecode-07-only-decode-one-dmi-table.patch: Only decode one
  DMI table.
  https://savannah.nongnu.org/bugs/?50022</changelog>
  <changelog author="jdelvare@suse.de" date="1495627200">- Update to upstream version 3.1:
  * Support for SMBIOS 3.1.0 and 3.1.1. This includes new chassis
    types, new processor family names, new processor family upgrade
    names, and new slot types, as well as support of larger BIOS
    ROM sizes and cache sizes, and a new structure type (43, TPM
    Device.)
  * A new command line option to query OEM strings.
  * All error messages are now printed on stderr (#47274, #48158.)
  * Fixes a crash with SIGBUS (#46066.)
  * Various minor fixes, improvements and cleanups.
  * Obsoletes dmidecode-01-add-no-sysfs-option-description-to-h-output.patch,
    dmidecode-02-fix-no-smbios-nor-dmi-entry-point-found-on-smbios3.patch,
    dmidecode-03-let-read_file-return-the-actual-data-size.patch,
    dmidecode-04-use-read_file-to-read-the-dmi-table-from-sysfs.patch,
    dmidecode-05-use-dword-for-structure-table-maximum-size-in-smbios3.patch,
    dmidecode-06-hide-irrelevant-fixup-message.patch, and
    dmidecode-07-only-decode-one-dmi-table.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1500292800">- Add missing bug numbers and FATE references in changes file
  (bsc#1041670).</changelog>
  <changelog author="jdelvare@suse.de" date="1523966400">- dmioem-reflect-hpe-new-company-name.patch: Reflect HPE's new
  company name.
- dmidecode-fix-tpm-device-firmware-version.patch: Fix firmware
  version of TPM device.
- dmioem-fix-hpe-type-219-uefi-flag.patch: Fix the reporting of
  HP/HPE UEFI feature.</changelog>
  <changelog author="jdelvare@suse.de" date="1537185600">- Update to upstream version 3.2 (FATE#326044):
  * [COMPATIBILITY] The UUID is now displayed using lowercase
    letters, per RFC 4122 (#53569). You must ensure that any code
    parsing it is case-insensitive.
  * Support for SMBIOS 3.2.0. This includes new processor names,
    new socket and port connector types, new system slot state and
    property, and support for non-volatile memory (NVDIMM).
  * Support for Redfish management controllers.
  * A new command line option to query a specific structure by its
    handle.
  * A new command line option to query the system family string.
  * Support for 3 ThinkPad-specific structures (patch #9642).
  * Support for HPE's new company name.
  * Support UEFI on FreeBSD.
  * Important bug fixes:
    Fix firmware version of TPM device
    Fix the HPE UEFI feature flag check
  * (biosdecode) A new command line option to fully decode PIR
    information (support request #109339).
  * Obsoletes dmioem-reflect-hpe-new-company-name.patch,
    dmidecode-fix-tpm-device-firmware-version.patch, and
    dmioem-fix-hpe-type-219-uefi-flag.patch.
  * CHANGELOG is gone, package more compact NEWS file instead.
- Reenable signature checking.
- Use %license for LICENSE file.</changelog>
  <changelog author="jdelvare@suse.de" date="1540209600">- dmidecode-fix-redfish-hostname-print-length.patch: Fix Redfish
  Hostname print length (bsc#1112755).</changelog>
  <changelog author="jdelvare@suse.de" date="1547467200">- Don't overwrite the path of license (boo#1121851).</changelog>
  <changelog author="jdelvare@suse.de" date="1547640000">- dmidecode-add-logical-non-volatile-device.patch: Add "Logical
  non-volatile device" to the memory device types (bsc#1120149).
- Use %doc directly on files instead of installing them explicitly.</changelog>
  <changelog author="jdelvare@suse.de" date="1576670400">Partial support for SMBIOS 3.3.0:
- dmidecode-add-enumerated-values-from-smbios-3.3.0.patch: Add
  enumerated values from SMBIOS 3.3.0 (bsc#1153533 bsc#1158833
  jsc#SLE-10875).
  3 recommended fixes from upstream:
- dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch: Only
  scan /dev/mem for entry point on x86 (fixes reboot on ARM64).
- dmidecode-fix-formatting-of-tpm-table-output.patch: Fix
  formatting of TPM table output (missing newlines).
- dmidecode-fix-system-slot-information-for-pcie-ssd.patch: Fix
  System Slot Information for PCIe SSD.</changelog>
  <changelog author="jdelvare@suse.de" date="1604059200">Partial support for SMBIOS 3.4.0:
- dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
  dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
  dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
  dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
  dmidecode-add-system-slot-types-from-smbios-3.4.0.patch: Add
  enumerated values from SMBIOS 3.4.0 (bsc#1174257).
  1 presentation fix from upstream:
- dmidecode-skip-details-of-uninstalled-memory-modules.patch:
  Skip details of uninstalled memory modules (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1607601600">1 recommended fix from upstream:
- dmidecode-missing-commas.patch: Two missing commas in data arrays
  cause off-by-one or mangling during index resolution
  (bsc#1174257).</changelog>
  <changelog author="jdelvare@suse.de" date="1663070400">- Update to upstream version 3.4:
  * This update implements jsc#SLE-24502 and jsc#PED-1466.
  * [COMPATIBILITY] Document how the UUID fields are interpreted.
  * [PORTABILITY] Don't use memcpy on /dev/mem on arm64.
  * Support for SMBIOS 3.4.0. This includes new memory device types, new
    processor upgrades, new slot types and characteristics, decoding of memory
    module extended speed, new system slot types, new processor characteristics
    and new format of Processor ID.
  * Support for SMBIOS 3.5.0. This includes new processor upgrades, BIOS
    characteristics, new slot characteristics, new on-board device types, new
    pointing device interface types, and a new record type (type 45 -
    Firmware Inventory Information).
  * Decode HPE OEM records 194, 199, 203, 236, 237, 238 ans 240.
  * Bug fixes:
    Fix OEM vendor name matching
  * Minor improvements:
    Add bios-revision, firmware-revision and system-sku-number to -s option
    Use the most appropriate unit for cache size
    Decode system slot base bus width and peers
    Skip details of uninstalled memory modules
    Don't display the raw CPU ID in quiet mode
    Improve the formatting of the manual pages
  * Obsoletes dmidecode-add-enumerated-values-from-smbios-3.3.0.patch,
    dmidecode-add-logical-non-volatile-device.patch,
    dmidecode-add-memory-device-types-from-smbios-3.4.0.patch,
    dmidecode-add-processor-characteristics-bits-from-smbios-3.4.0.patch,
    dmidecode-add-processor-upgrades-from-smbios-3.4.0.patch,
    dmidecode-add-slot-characteristics2-from-smbios-3.4.0.patch,
    dmidecode-add-system-slot-types-from-smbios-3.4.0.patch,
    dmidecode-fix-formatting-of-tpm-table-output.patch,
    dmidecode-fix-redfish-hostname-print-length.patch,
    dmidecode-fix-system-slot-information-for-pcie-ssd.patch,
    dmidecode-missing-commas.patch,
    dmidecode-only-scan-dev-mem-for-entry-point-on-x86.patch and
    dmidecode-skip-details-of-uninstalled-memory-modules.patch.</changelog>
  <changelog author="jdelvare@suse.de" date="1663070401">2 recommended fixes from upstream:
- news-fix-typo.patch: We ship the NEWS file so avoid including a
  typo in it.
- dmioem-fix-segmentation-fault-in-dmi_hp_240_attr.patch: Passing
  NULL to a %s printf conversion specifier is illegal, and can
  result in a segmentation fault. Current version of glibc doesn't
  mind, but alternative, past or future libc implementations could
  crash, so let's fix it.</changelog>
  <changelog author="jdelvare@suse.de" date="1681473600">Security fixes (CVE-2023-30630)
- dmidecode-split-table-fetching-from-decoding.patch: dmidecode:
  Clean up function dmi_table so that it does only one thing
  (bsc#1210418).
- dmidecode-write-the-whole-dump-file-at-once.patch: When option
  - -dump-bin is used, write the whole dump file at once, instead of
  opening and closing the file separately for the table and then
  for the entry point (bsc#1210418).
- dmidecode-do-not-let-dump-bin-overwrite-an-existing-file.patch:
  Make sure that the file passed to option --dump-bin does not
  already exist (bsc#1210418).
- ensure-dev-mem-is-a-character-device-file.patch: Add a safety
  check on the type of the mem device file we are asked to read
  from, if we are root (bsc#1210418).
  3 recommended fixes from upstream:
- dmioem-typo-fix-virutal-virtual.patch: Simple typo fix in a
  user-visible string.
- dmidecode-fortify-entry-point-length-checks.patch: Ensure that
  the SMBIOS entry point is long enough to include all the fields
  we need.
- dmioem-hpe-oem-record-237-firmware-change.patch: Properly decode
  the last field of HPE OEM record type 237.</changelog>
  <changelog author="jdelvare@suse.de" date="1681905600">- use-read_file-to-read-from-dump.patch: Fix an old harmless bug
  which would prevent root from using the --from-dump option since
  the latest security fixes (bsc#1210418).</changelog>
</package>
<package pkgid="f4c350424211a3f43714ff0c4157e6fb645e81a937bfc1a224858aa1ca15b5f6" name="docker" arch="aarch64">
  <version epoch="0" ver="20.10.23_ce" rel="150000.175.1"/>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
</package>
<package pkgid="7b55121370751c530f06a41ecf9b7f06a320b620691ae26a6eb15c90a47cf347" name="docker" arch="s390x">
  <version epoch="0" ver="20.10.23_ce" rel="150000.175.1"/>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
</package>
<package pkgid="ca05523d844fd47448e5c0b7c8fb3464e59ad2c1830cd1183202b480968dd6c6" name="docker" arch="src">
  <version epoch="0" ver="20.10.23_ce" rel="150000.175.1"/>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
</package>
<package pkgid="980f4a5c1b6e58a388199575d1041fa5953b9480cdc564e06bcf46f0e4bdbdcc" name="docker" arch="x86_64">
  <version epoch="0" ver="20.10.23_ce" rel="150000.175.1"/>
  <changelog author="asarai@suse.com" date="1612958400">- Fix incorrect cast in SUSE secrets patches causing warnings on SLES.
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1613304000">[NOTE: This update was only ever released in SLES and Leap.]
- It turns out the boo#1178801 libnetwork patch is also broken on Leap, so drop
  the patch entirely. bsc#1180401 bsc#1182168
  - boo1178801-0001-Add-docker-interfaces-to-firewalld-docker-zone.patch</changelog>
  <changelog author="asarai@suse.com" date="1614772800">- Update to Docker 20.10.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20105&gt;. bsc#1182947
- Update runc dependency to 1.0.0~rc93.
- Remove upstreamed patches:
  - cli-0001-Rename-bin-md2man-to-bin-go-md2man.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Switch version to use -ce suffix rather than _ce to avoid confusing other
  tools. boo#1182476</changelog>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
</package>
<package pkgid="a872e38b57c6ed58a12dd80b11c5eb18331ad0232b26dd2329eb19fb04203b4c" name="docker" arch="aarch64">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="0e3dc4c7c1786340c7f74a4e4edd41a2623d99625149491e798f4deb0c2fa97f" name="docker" arch="s390x">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="6b700c31aab8b33034f40a6488cb25cd0bd62fd6de5f7b146d80989904ec48db" name="docker" arch="src">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="bfb6e269ee91a7de2a1605afed45c73162b80e67a7a3e5f18640bf6581e0d53d" name="docker" arch="x86_64">
  <version epoch="0" ver="23.0.6_ce" rel="150000.178.1"/>
  <changelog author="asarai@suse.com" date="1618488000">- Update to Docker 20.10.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20106&gt;. bsc#1184768
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Backport upstream fix &lt;https://github.com/moby/moby/pull/42273&gt; for btrfs
  quotas being removed by Docker regularly. bsc#1183855 bsc#1175081
  + 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1620043200">- Add shell requires for the *-completion subpackages.</changelog>
  <changelog author="asarai@suse.com" date="1632139200">- Add patch to return ENOSYS for clone3 to avoid breaking glibc again.
  bsc#1190670
  + 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1633521600">- Update to Docker 20.10.9-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#20109&gt;. bsc#1191355
  CVE-2021-41089 bsc#1191015 CVE-2021-41091 bsc#1191434
  CVE-2021-41092 bsc#1191334 CVE-2021-41103 bsc#1191121
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch
- Switch to Go 1.16.x compiler, in line with upstream.</changelog>
  <changelog author="asarai@suse.com" date="1637236800">- Update to Docker 20.10.11-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201011&gt;. bsc#1192814
  bsc#1193273 CVE-2021-41190
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
- Remove upstreamed patches:
  - 0006-bsc1190670-seccomp-add-support-for-clone3-syscall-in.patch</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to Docker 20.10.12-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201012&gt;.
- Remove CHANGELOG.md. It hasn't been maintained since 2017, and all of the
  changelogs are currently only available online.</changelog>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
</package>
<package pkgid="a102cd22f02ead40d770d1a4cb62556e1d3df8d43af211692a7efdd158efc2ae" name="docker" arch="aarch64">
  <version epoch="0" ver="24.0.5_ce" rel="150000.185.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
</package>
<package pkgid="f4534db6d73c92b10bc3f935381ff5e776ad0d79a2326200a90ca52c023c7c82" name="docker" arch="s390x">
  <version epoch="0" ver="24.0.5_ce" rel="150000.185.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
</package>
<package pkgid="18c46ec4ffd7a58fc6af41caa4a5e3e79da5ad2a12a28d2a59a0c0fad2874750" name="docker" arch="src">
  <version epoch="0" ver="24.0.5_ce" rel="150000.185.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
</package>
<package pkgid="d12bb8ae6cab2188b76323b9a415c70dbd646ae03399e5c91db068e3073a9b5d" name="docker" arch="x86_64">
  <version epoch="0" ver="24.0.5_ce" rel="150000.185.1"/>
  <changelog author="asarai@suse.com" date="1649937600">- Update to Docker 20.10.14-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201014&gt;. bsc#1197517
  CVE-2022-24769</changelog>
  <changelog author="asarai@suse.com" date="1651233600">- Add patch to update golang.org/x/crypto for CVE-2021-43565 and CVE-2022-27191.
  bsc#1193930 bsc#1197284
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch</changelog>
  <changelog author="asarai@suse.com" date="1654603200">- Update to Docker 20.10.17-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201017&gt;. bsc#1200145
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch</changelog>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
</package>
<package pkgid="03386654027f3dd0abc7b587b565191caf902ef37c23421727b2290be07c93da" name="docker" arch="aarch64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="4402fd84a4211e8796c83c4606c52cfa876a0c3580935fb9b5941f8ed4a782ae" name="docker" arch="s390x">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="909b62eb0397f964cb517f9733c3f3657c44963e8e86a0f65d3306f2f4a2e2f2" name="docker" arch="src">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="260f33928825b4b7e666ba37c68cc3efb52dec6a2c8b0c2d68a06dece2e202a5" name="docker" arch="x86_64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.190.4"/>
  <changelog author="asarai@suse.com" date="1656504000">- Backport &lt;https://github.com/containerd/fifo/pull/32&gt; to fix a crash-on-start
  issue with dockerd. bsc#1200022
  + 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
</package>
<package pkgid="695f3d0bf51edec24b6a9ebc5e791f41b09d94a5fb4101b37dff44909bb7c7fc" name="docker" arch="aarch64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="bab1854e84b7b40c553d5676a94f6b7cc7b9b1d10a77d559b17be12439cca16f" name="docker" arch="s390x">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="3a283ce8e934edddf044c2f74518990393659dc14a19fbcb9ce488b1e385510c" name="docker" arch="src">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="3d295c0578c5f9a52a01a49d62717fcabdd60aad580bc223892e6944aaf6ef6c" name="docker" arch="x86_64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.193.1"/>
  <changelog author="gmbr3@opensuse.org" date="1658059200">- Change to using systemd-sysusers</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Allow to install container-selinux instead of apparmor-parser.</changelog>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
</package>
<package pkgid="53917691b18a731236cde8f036ed95813d40262df15505292acd542724f3f047" name="docker" arch="aarch64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.198.2"/>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
</package>
<package pkgid="fd389a253a77c5b8c852dac99b35a47bd7ceb329d5d5274b394581fd65ed637d" name="docker" arch="s390x">
  <version epoch="0" ver="24.0.7_ce" rel="150000.198.2"/>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
</package>
<package pkgid="6d92005a5a795f81a5ce2637e08d31fbc6eaffd43cf4d4703c5e9e453b565d61" name="docker" arch="src">
  <version epoch="0" ver="24.0.7_ce" rel="150000.198.2"/>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
</package>
<package pkgid="e1949ed68d88bdd5d195a5fafdaf6949f186b7dc22f6e101deb10a6f9ab63336" name="docker" arch="x86_64">
  <version epoch="0" ver="24.0.7_ce" rel="150000.198.2"/>
  <changelog author="fvogt@suse.com" date="1664452800">- Fix syntax of boolean dependency</changelog>
  <changelog author="asarai@suse.com" date="1664452801">- Add apparmor-parser as a Recommends to make sure that most users will end up
  with it installed even if they are primarily running SELinux.</changelog>
  <changelog author="dcermak@suse.com" date="1666612800">- Fix wrong After: in docker.service, fixes bsc#1188447</changelog>
  <changelog author="asarai@suse.com" date="1670328000">- Update to Docker 20.10.21-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/#201021&gt;. bsc#1206065
  bsc#1205375 CVE-2022-36109
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  * 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  * 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- The PRIVATE-REGISTRY patch will now output a warning if it is being used (in
  preparation for removing the feature). This feature was never meant to be
  used by users directly (and is only available in the -kubic/CaaSP version of
  the package anyway) and thus should not affect any users.</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- update to 20.10.23-ce.
  * see upstream changelog at https://docs.docker.com/engine/release-notes/#201023
- drop kubic flavor as kubic is EOL. this removes:
  kubelet.env docker-kubic-service.conf 0003-PRIVATE-REGISTRY-add-private-registry-mirror-support.patch</changelog>
  <changelog author="asarai@suse.com" date="1682510400">- Update to Docker 23.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2304&gt;. bsc#1208074
- Fixes:
  * bsc#1214107 - CVE-2023-28840
  * bsc#1214108 - CVE-2023-28841
  * bsc#1214109 - CVE-2023-28842
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Renumbered patches:
  - 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
- Remove upstreamed patches:
  - 0005-bsc1183855-btrfs-Do-not-disable-quota-on-cleanup.patch
  - 0006-bsc1193930-vendor-update-golang.org-x-crypto.patch
  - 0007-bsc1200022-fifo.Close-prevent-possible-panic-if-fifo.patch
- Backport &lt;https://github.com/docker/cli/pull/4228&gt; to allow man pages to be
  built without internet access in OBS.
  + cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to Docker 23.0.5-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2305&gt;.
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1684670400">- Update to Docker 23.0.6-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/23.0/#2306&gt;. bsc#1211578
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Re-unify packaging for SLE-12 and SLE-15.
- Add patch to fix build on SLE-12 by switching back to libbtrfs-devel headers
  (the uapi headers in SLE-12 are too old).
  + 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
- Re-numbered patches:
  - 0003-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  + 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch`</changelog>
  <changelog author="asarai@suse.com" date="1686744000">- Update to Docker 24.0.2-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2402&gt;. bsc#1212368
  * Includes the upstreamed fix for the mount table pollution issue.
    bsc#1210797
- Add Recommends for docker-buildx, and add /usr/lib/docker/cli-plugins as
  being provided by this package.
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1687262400">- Add docker-rootless-extras subpackage
  (https://docs.docker.com/engine/security/rootless)</changelog>
  <changelog author="danish.prakash@suse.com" date="1688040000">- Recommend docker-rootless-extras instead of Require(ing) it, given
  it's an additional functionality and not inherently required for
  docker to function.</changelog>
  <changelog author="asarai@suse.com" date="1688731200">- Update to Docker 24.0.3-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2403&gt;. bsc#1213120
- Rebase patches:
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="asarai@suse.com" date="1688731201">- Update to Docker 24.0.4-ce. See upstream changelog online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2404&gt;. bsc#1213500</changelog>
  <changelog author="dmueller@suse.com" date="1690286400">- Update to Docker 24.0.5-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2405&gt;. bsc#1213229</changelog>
  <changelog author="asarai@suse.com" date="1694692800">- Update to Docker 24.0.6-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2406&gt;. bsc#1215323
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch
- Switch from disabledrun to manualrun in _service.
- Add a docker.socket unit file, but with socket activation effectively
  disabled to ensure that Docker will always run even if you start the socket
  individually. Users should probably just ignore this unit file. bsc#1210141</changelog>
  <changelog author="asarai@suse.com" date="1697025600">- Add a patch to fix apparmor on SLE-12, reverting the upstream removal of
  version-specific templating for the default apparmor profile. bsc#1213500
  + 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch</changelog>
  <changelog author="asarai@suse.com" date="1698408000">- Update to Docker 24.0.7-ce. See upstream changelong online at
  &lt;https://docs.docker.com/engine/release-notes/24.0/#2407&gt;. bsc#1217513
  * Deny containers access to /sys/devices/virtual/powercap by default.
  - CVE-2020-8694 bsc#1170415
  - CVE-2020-8695 bsc#1170446
  - CVE-2020-12912 bsc#1178760
- Rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * cli-0001-docs-include-required-tools-in-source-tree.patch</changelog>
  <changelog author="dcermak@suse.com" date="1707912000">- Vendor latest buildkit v0.11:
  Add patch 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch that
  vendors in the latest v0.11 buildkit branch including bugfixes for the following:
  * bsc#1219438: CVE-2024-23653
  * bsc#1219268: CVE-2024-23652
  * bsc#1219267: CVE-2024-23651
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
- switch from %patchN to %patch -PN syntax
- remove unused rpmlint filters and add filters to silence pointless bash &amp; zsh
  completion warnings</changelog>
  <changelog author="kukuk@suse.com" date="1708603200">- Allow to disable apparmor support (ALP supports only SELinux)</changelog>
  <changelog author="dcermak@suse.com" date="1709899200">- Add patch to fix bsc#1220339
  * 0007-daemon-overlay2-remove-world-writable-permission-fro.patch
- rebase patches:
  * 0001-SECRETS-daemon-allow-directory-creation-in-run-secre.patch
  * 0002-SECRETS-SUSE-implement-SUSE-container-secrets.patch
  * 0003-BUILD-SLE12-revert-graphdriver-btrfs-use-kernel-UAPI.patch
  * 0004-bsc1073877-apparmor-clobber-docker-default-profile-o.patch
  * 0005-SLE12-revert-apparmor-remove-version-conditionals-fr.patch
  * 0006-Vendor-in-latest-buildkit-v0.11-branch-including-CVE.patch</changelog>
</package>
<package pkgid="e7c0a54912cc642903ee0254c4e6c733cb73009d0925acd1d6cee74d94171b6b" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="213adf10f7523687f3bb7539c7f402879a0a5b03325c190ce83e57bfd403c849" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="550756851767637f1b47e03dbf4b14ed29d4745f4d373501e7c033f841e7011c" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="c06dbfa8111ad2cf60417f1869d9f96b447860787f19e9b804bd7adf97fa7571" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="c67f73716d127e14d66892164278f5f407fc474abdb496371af6aa4ca8542ed4" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="d1d1f3e84b39ae66ab491db19be9b6c6de6b643fee935d36d4c6f0786eadfd3d" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="ee3172e671bb2af923790c63667a47953c2db7e1ea46b39067561987122979f0" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="25635beaae74f7ee41664c64b945c60a927eebcd0f369c763b3429c238c9e1bb" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="fea19094244149fdc2b8e2ee1a0b6a7ade13510251e05d5bef05764e447d9173" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="fc60816fca30734afd7c3a34292a68d6b1f5d0fcf68ab26d8731b69b617ddb29" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="c1936dab5ee0963ea0064f4f1ffbecf084470910a08b88272fa043491a2b9bc3" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="25f07006f397e8ce383d218b2e0c698c4595d5da4672bb4ca73abb35b4de45da" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="1af5959abf8bc1ec98129266fe0b2d983c4ff029721de24222681703ba5f0110" name="dracut" arch="aarch64">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="8443a20c15d1f3787067d15fd47bbcbf706e5a3514c97163f61d128f57ba5d25" name="dracut" arch="s390x">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="6886209554b1e6019271c5d5e2cb1e0778c9c9ff3d61311ef716a70733f95290" name="dracut" arch="src">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="cefb128acb7b87b8e5eaf282956bdec6f46b60a4ccf3944d04b4322fdb4fdce2" name="dracut" arch="x86_64">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="c32721b6c663ac841115606bc069c5fb9d24c5a726439700cd2747fb4e2ff444" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="2136761437ae039b4a6c019ee21ce158ff7cd2009490d0fbc5200a39fd9c048a" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="4c6828b9cc2adcda6b056bb70c5263e5b03e019c39dae7d3ceba6ede905710a4" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="932994fb78203a5675a527c1b17b2c5f332289e8eb560a40e9a20292fe7345cc" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="43a817329b4e991ae329abdf7bacde54bbdd12a283f06d9aebcb579ad26e2a73" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="1493cb832d97c362c323ea4685c7ed811727793b5e06675c4206a1245c51aea4" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="622087e3fbfc9b48ae6df31265f9fd58fbd47dbcb4f0c6c9d5a0bbafd1700e78" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="d9d10be2787bedbdee7ffe3e18ca6c047050916c21eb1fc35c595b6fbf8dc4f9" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="f486b539fff2de7f472b174c6732957339451f2a4ca0b22cafa9eef37767faf6" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="db948b91a39c6c7a4b72fc8ec6cdd2da5da03c688c1d63e8bff54617f843bc4d" name="dracut-fips" arch="aarch64">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="0805c39d6a1070ca05cf0819cde9054fa112a68826f71ba509ab2175d14b23f5" name="dracut-fips" arch="s390x">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="cfac29f739df2af0deb7307a35fd956a1f5ee8c5ab2dea4db01ae1e86504ea81" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="55540789fcd006369e53a20be1919de2ef353477cf3aa210eca462f4bc8ba3ca" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="e19bab69e84f5fb56a0446670359b4b6a9e385ba94213d97bcd213510e5e0057" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="da7bdc84ef4865493f978e46d3589d25c4ccef2f344ab26355da7fc3d62021e1" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="ce68b0d67b811e335e369cffda796fe030aad13bb4456ea2b83faec6a7525bc0" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="66f8c51551b33bb50b95e51bc19686fa8af84099079457397f6303d36b0e3510" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="1013b7f33fce5167b1e00164c2e51ce657faff2fc215f96eedbcd36c5a7264e1" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="00640ce9e572a5b26855c00d2407e55621c72c807b72b97170fe700cfc37767d" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="aaee246cf684ebc3b33412df3f6d58e705b01791e5f41bb883b9ab2caf726163" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="24d4ffa74ebcc64fd5cbcfbdbc8fd1a809f6bf2d80f5d8926f6dd4c5ac0e9476" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="381689ee668bb43c1511144703d4221852d587e7e36def5464a017d3ff2dcbe2" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="b10a43220aa1fb249ae2a2fadcedd6ba160ed3c771acd0f5cf3492872614fce8" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="fb8dfcb21d1c0705a17ce758550929431b0e46150ea18f261ebec466154b8ce8" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="c1419c07d2bd4bc6f2926ca1e10103f6f60d17694d924a4094a178d23ef6dabc" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="623c6c2c18cb6fd1e1a259ddda47808113150ce7f017514b244d771f1c2660fe" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="95916601b8cc18450ccfe9c4d7a9504f627deb2829986bce0d3c42e645b155a1" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="42013e3472aa832b67233e3d6b28260b8dfc3850528305d251d4ae977016bd72" name="dracut-kiwi-lib" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="ff14603cdb07fc2ed5a4ca4ad32ad30da4f3b63876f88565e5dce2d6e1cd79cf" name="dracut-kiwi-lib" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="d642bfc60d6fd8b755f50b1e4b7bc0cfaf825d01af1e374ce5cc1eb031edcb9b" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="cab37c3dc4f9bcb1b3f280c79860eb4717248cf51829d22f5685c46be3427171" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="939cab663f954cf334394191df543a4e1d1ff258d666afe353eb93258f15f2ef" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="84ed391b7e9001a0214e86f2827fdc11678ca27f129bf3f209119144294703c2" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="28b5238048b0c08d133566a9fbb7aec1e2c941b51f7729130f38225df8ba65db" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="d6f1b5b59d7875ef5a189570fb939dff12466d6e078db632f9bf060fe745a9db" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="0a8678c6ec501b7d540ad111c944046e1aea063dc1183c2a87aab6e191e519fa" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="c702a0eaa67082339d84e1d0c2b3471e37d8d0710e64522948ea2f65c8af953f" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="ddef90c7d5171e00981383f48bb1339b26c04ac22932eecab56c50e169b10941" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="7b703919efd67f97f4f4e607b829ce7421c508b4809f27ceba64c7e283cf2877" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="9520018872d831a84b50f567a14c40f3e998971e33c30845d6358e2e025c6052" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="6b47d70c834a08bb391531faa0e6cd2afefb4ccb6b0e387672f3a3e08fd47e91" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="bdc16bdd0bcaffd99935a88ddd9506ee30cb960751469ca3df286b75f8c3d324" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="cf8230ca507eb84cc5c1b6f57773e187aea9395dcbfeb6b9db1c3466698bc3fc" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="921a2ec9c008d54558d7e19728ea565c94b7f9641c7e483105e670074b81e233" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="17059c1eb73ae15c3c3ed937f33c091c77912ce417a710214067d67a6730ad90" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="31b69f245dc35bced387e209bbca8e3af4394d3b8adb0931e8fa97c3644c9bd7" name="dracut-kiwi-oem-dump" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="733e2adea7b23f894cf190bccc9b806dd2d5b98ee5d6fca03ab72f5a692921da" name="dracut-kiwi-oem-dump" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="6667b1cfce2c0c59f817b2f6a205ec19c0c0112ff1dd078df1a9164dba71f552" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="94753458fa7ab7a63005a9878093bc9642d340655b6794847531ae59f1c12e7b" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="0eaf1c2616595da04ccd44e52d59fd179fcf866555482787f412626e7cd02cc5" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="559dfa9db93ecccbbf808ae5b47877fc012af947e6e60efd9c741ed473cd4ad4" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="aa7740e01794215cddf495e99b217576c647dfcf394dbfe0577e49e3bc905db7" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="03993b88d69e8bf5a7ce04ee7787e886f7163bbb0ab2efa50de1981056001553" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="a443c1297f99be70a036cf7d64964ee6c9ffb773fe05032ef7328646eff70a5b" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="0b23060d74abfa7ed82d1514c9734500b524dab6a88e66b03f665b4471995712" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="3251dbc2b954fc4dc6951f33175e7575634d7cd9fb162f815b1848162a164b05" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="483987de08bdc3815763aec174133f2f7abb9bc528d4f9665cfdfab3f9a28bd0" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="a22d49754c0989f7a67308ea252eec34db5bc65cd0146decf58e775686e45164" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="6d4afc97fc8be378087810ea1163d7644bab33bab71ea2e7bf88a43caf33d7b2" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="df1f6565fc6cbe68c90747f208a5116e2a1aad16870fa5ed2fe5504e7eaabd06" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="09a1fea23f636221f8adf9923653c0c8bf28b09b6352545e9427dc91e711b956" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="9b1591adf9a313ef08a22be3dcda6f534f4655739d5513430adca6a9b16818cf" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="6992809b9650e7fda1a2318368de4e82e31ed305ca74591fe7cbe8c10cc2c657" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="57460c28870b1eba3e2235fef20fe292bbd81813f6a902524de81822e6cfe3e5" name="dracut-kiwi-oem-repart" arch="aarch64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="0d36eba7c5413d386a1875fb8c996cfa1203d2c54fa78697c3b9befcd203ebfe" name="dracut-kiwi-oem-repart" arch="s390x">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="7812284974fddc554f0435c3b54fbd34ad77a64be975cf53c04f1db7426e1295" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="fa6df62132477a969772c4f0a129d8d220ea096a5df12b25f47d0c5b9ddd5326" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="74390813347753a6edbc7b433a293b0af2a2451cc5e1bdc8f282ee8e8a382e46" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="457ead0efe0aef2471352b2f46e22365db11ffc3ac836ef1ee5ff537f0d83107" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.342.g2e6dce8e" rel="150400.3.22.1"/>
  <changelog author="thomas.blume@suse.com" date="1639137600">- Update to version 055+suse.183.g7d569585:
  * fix(dracut.spec): update usrmerged mkinitrd dir
  * fix(url-lib): improve ca-bundle detection (bsc#1175892)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
</package>
<package pkgid="d2ae948e9f060f3c1c7e462f5621dee516d08fb836ca2ca7ee8f5dda616dda79" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="d69370c2b35dc42681c7d0e4d51a03f76915783443bdcb761cad0bd3c6f4d89d" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="27e69b032a09001e27d57d1cd85687b1f9706ae503bbafcbdaecd42c2be3b687" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.344.g3d5cd8fb" rel="150400.3.25.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.191.g67eb4ea8:
  * fix(dracut-initramfs-restore.sh): add test for SUSE initrd name (bsc#1194570)
  * fix(dracut.spec): require util-linux-systemd (bsc#1194162)
  * fix(network-wicked): multiple path corrections
  * fix(drm): add privacy screen modules to the initrd (bsc#1193590)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1642420801">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
</package>
<package pkgid="bbe4a944f5215ad9bdf452ce6ce2b8520aa58b440d1afe3db5f4928750d0285e" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="1c3e68d85a037d6ae7da3d69b3279323a8bc4b9ca75197b3e49543f4a42a6b7b" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="308a7e4decd99e458e89b083b87358db3a8c3135aff0c1ca984fd392db639de5" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.347.gdcb9bdbf" rel="150400.3.28.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1642420800">- Update to version 055+suse.194.gdd41932a:
  * fix(network-legacy): add wicked as an alternative to arping (bsc#1193670)
  * fix(network): add wicked as an alternative to arping (bsc#1193670)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
</package>
<package pkgid="9073d1aa60b296d51b067c1ba451b1692cabfd2f039b356cb590850cb55e2cdb" name="dracut-mkinitrd-deprecated" arch="aarch64">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="0f4bedbc06b4b7aed372abed44926d72aa4a2f03e7e1eb71adfeb672686e90ec" name="dracut-mkinitrd-deprecated" arch="s390x">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="4e9da02ed3b792c6b5607abc3ef0bd7ac9969a551ea16e14aac245b53bba3e98" name="dracut-mkinitrd-deprecated" arch="x86_64">
  <version epoch="0" ver="055+suse.351.g30f0cda6" rel="150400.3.31.1"/>
  <changelog author="antonio.feijoo@suse.com" date="1643371200">- Update to version 055+suse.226.g44139dde:
  * fix(zfcp_rules): remove collect based udev rule creators
  * fix(dasd_rules): remove collect based udev rule creators
  * fix(kernel-modules-extra): handle zstd module extension
  * fix(ifcfg): add SUSE specific write-ifcfg file (bsc#1193518)
  * fix(dracut-functions): skip iSCSI sessions without initiatorname (bsc#1195011)
  * fix(dracut-functions.sh): ip route parsing (bsc#1195011)
  * fix(fips): missing sourcing of dracut-lib
  * fix(fips): wrong error message
  * fix(network-legacy): install only existing SUSE specific files (bsc#1194879)
  * fix(network-legacy): set dhclient as optional (bsc#1194879)
  * fix(40network): consistent use of "$gw" for gateway (bsc#1192685)
  * fix(multipathd-configure.service): drop unneeded dependencies
  * fix(multipath): check if mpathconf is available
  * fix(multipathd.service): drop dependencies on iscsi and iscsid
  * fix(multipathd.service): adapt to upstream multipath-tools unit file
  * fix(multipathd.service): remove dependency on systemd-udev-settle
  * fix(fips): avoid shellcheck warnings
  * fix(fips): get _vmname value only if it is needed
  * fix(fips.sh): respect rd.fips.skipkernel
  * fix(fips): alignment with the upstream format</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1644840000">- Update to version 055+suse.230.g3fdde49a:
  * fix(dasd_rules): correct udev dasd rules parsing (bsc#1195309)
  * revert(lvm): remove 69-dm-lvm-metad.rules (bsc#1195604)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645099200">- Update to version 055+suse.234.gbdaf66ff:
  * fix(tpm2-tss): install SUSE specific files (bsc#1195984)
  * fix(systemd-sysusers): override systemd-sysusers.service (bsc#1195983)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1645185600">- Update to version 055+suse.238.gacab0df5:
  * fix(cpio): correct dev_t -&gt; rmajor/rminor mapping (bsc#1195808)
  * ci(cpio): add test_archive_dev_maj_min (bsc#1195808)
  * ci(cpio): add TempWorkDir.create_tmp_mknod helper (bsc#1195808)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1646913600">- Update to version 055+suse.242.g76ae5ce4:
  * fix(multipath): align multipathd.service type with upstream (bsc#1196958)
  * fix(systemd-sysusers): use split systemd sysuser configs (bsc#1196223)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1647259200">- Update to version 055+suse.244.g2f624182:
  * fix(resume): only exclude this module when swap is netdev (bsc#1194915)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1649160000">- Update to version 055+suse.248.g92d06110:
  * fix(resume): correct call to block_is_netdevice function (bsc#1197737)
  * chore(suse): remove fipscheck requirement (bsc#1198065)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651147200">- Update to version 055+suse.252.g4988b0bf:
  * fix(resume): do not add this module if there is no suitable swap (bsc#1198095)
  * feat(resume): improve sanity check by verifying volatile swap (bsc#1198095)
  * feat(resume): sanity check (bsc#1197192)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1651665600">- Update to version 055+suse.271.g70f710e4:
  * fix(nfs): /var is not mounted during the transactional-update run (bsc#1184970)
  * fix(nfs): give /run/rpcbind ownership to rpc user (bsc#1177461)
  * fix(dracut-install): copy files preserving ownership attributes (bsc#1197967)
  * fix(crypt): remove quotes from cryptsetupopts (bsc#1197635)
  * fix(lvm): restore setting LVM_MD_PV_ACTIVATED (bsc#1195604)
  * fix(iscsi): remove unneeded iscsi NOP-disable code (bsc#1196267)
  * fix(dracut-systemd): do not require vconsole-setup.service (bsc#1195508)
  * fix(bluetooth): make hostonly configuration files optional (bsc#1195047)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1654862400">- Update to version 055+suse.279.g3b3c36b2:
  * fix(bluetooth): accept compressed firmwares in inst_multiple (bsc#1200236)
  * fix(network-legacy): support rd.net.timeout.dhcp (bsc#1200360)
  * fix(convertfs): ignore commented lines in fstab (bsc#1200251)
  * fix(integrity): do not display any error if there is no IMA certificate (bsc#1187654)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659441600">- Update to version 055+suse.283.ge98ece25:
  * fix(network-manager): check for nm-initrd-generator in both /usr/{libexec,lib} (bsc#1201975)
  * fix(network-legacy): add auto timeout to wicked DHCP test (bsc#1198709)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1659700800">- Update to version 055+suse.294.gc5bc4bb5:
  Missing network-manager module fixes (bsc#1201975):
  * fix(network-manager): avoid calling unavailable dracut-logger functions
  * fix(network-manager): skip non-directories in /sys/class/net
  * fix(network-manager): disable tty output if the console is not usable
  * fix(network-manager): show output on console only with rd.debug enabled
  * fix(network-manager): write DHCP filename option to dhcpopts file
  * fix(network-manager): ensure safe content of /tmp/dhclient."$ifname".dhcpopts
  * fix(network-manager): include nm-daemon-helper binary
  * fix(network-manager): don't pull in systemd-udev-settle
  * fix(network-manager): support teaming under NM+systemd
  * fix(network-manager): pull in network.target in nm-initrd.service</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1665403200">- Update to version 055+suse.302.gc7aee2dc:
  * fix(dmsquash-live): correct regression introduced with shellcheck changes (bsc#1203894)
  * fix(systemd): add missing modprobe@.service (bsc#1203749)
  * fix(i18n): do not fail if FONT in /etc/vconsole.conf has the file extension (bsc#1203267)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1666699200">- Update to version 055+suse.323.gca0e74f0:
  * fix(network-manager): always install the library plugins directory (bsc#1202014)
  * feat(dracut-init.sh): add inst_libdir_dir() helper (bsc#1202014)
  A series of fixes for NVMeoF boot (bsc#1203368):
  * fix(network-legacy): misleading duplicate address detection using wicked
  * fix(man): dracut.cmdline.7: clarify "rd.nvmf.discover=fc,auto"
  * fix(network): avoid double brackets around IPv6 address
  * feat(nvmf): set rd.neednet=1 if tcp records encountered
  * fix(man): dracut.cmdline(7): correct syntax for rd.nonvmf
  * fix(network): don't use same ifname multiple times
  * fix(nvmf): run cmdline hook before parse-ip-opts.sh
  * fix(nvmf): avoid calling "exit" in a cmdline hook
  * fix(nvmf): make sure "rd.nvmf.discover=fc,auto" takes precedence
  * fix(nvmf): don't use "finished" queue for autoconnect
  * fix(nvmf): don't create did-setup file
  * fix(nvmf): no need to load the nvme module
  * fix(nvmf): don't try to validate network connections in cmdline hook
  * fix(nvmf): nvme list-subsys prints the address using commas as separator
  * fix(nvmf): deprecate old nvmf cmdline options
  * fix(nvmf): set executable bit on nvmf-autoconnect.sh</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1670932800">- Update to version 055+suse.331.g05b9ccb7:
  * feat(kernel-modules): exclude USB drivers in strict hostonly mode (bsc#1186056)
  * fix(multipath): warn if included with no multipath devices and no user conf (bsc#1069169)
  * fix(dracut.sh): improve detection of installed kernel versions (bsc#1205175)
  * fix(nfs): chown using rpc default group (bsc#1204929)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1677758400">- Update to version 055+suse.335.gccf7fbc6:
  * feat(lvm): always include all drivers that LVM can use (bsc#1206195)
  * fix(dracut.spec): require libopenssl1_1-hmac for dracut-fips (bsc#1206439)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1682510400">- Update to version 055+suse.342.g2e6dce8e:
  fips=1 and separate /boot break s390x (bsc#1204478):
  * fix(fips): move fips-boot script to pre-pivot
  * fix(fips): only unmount /boot if it was mounted by the fips module
  * feat(fips): add progress messages
  * fix(fips): do not blindly remove /boot
  * fix(network-legacy): handle do_dhcp calls without arguments (bsc#1210640)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1687780800">- Update to version 055+suse.344.g3d5cd8fb:
  * fix(dracut-install): continue parsing if ldd prints "cannot execute binary file" (bsc#1212662)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1692360000">- Update to version 055+suse.347.gdcb9bdbf:
  * fix(dracut-install): protect against broken links pointing to themselves
  * fix(dracut.sh): exit if resolving executable dependencies fails (bsc#1214081)</changelog>
  <changelog author="antonio.feijoo@suse.com" date="1699876800">- Update to version 055+suse.351.g30f0cda6:
  * fix(dracut.sh): remove microcode check based on CONFIG_MICROCODE_[AMD|INTEL] (bsc#1217031)
  * fix(network): correct network device naming (bsc#1192986)</changelog>
</package>
<package pkgid="8038d2c0371e1cd7337a8d72a163ae587dc36c1110356df9007bc6cd3b1cfad6" name="dracut-transactional-update" arch="noarch">
  <version epoch="0" ver="4.1.6" rel="150400.3.3.2"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="5d48e1e39000df0798406cdda03b93ef761c1401f500bda066d15dab99f127d5" name="drbd-utils" arch="aarch64">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="f2a6b195da04a93d7f8414c4c266154d6c5efb9eb3e0ea5c8b9aa18692ec9e79" name="drbd-utils" arch="s390x">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="7457e40c79741cd3b44ab0012f32a980067dd08c1866e0281a0a6c967a702e1e" name="drbd-utils" arch="src">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="5afe4b1304685ac44186d785ba4ada09bc21b887da273f3438ee561c93e8cceb" name="drbd-utils" arch="x86_64">
  <version epoch="0" ver="9.19.0" rel="150400.3.17.1"/>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavors.</changelog>
  <changelog author="nwang@suse.com" date="1582632000">- Update to 9.12.0
  * drbd.ocf: new wrc_timeout param, fail on attach failure,
  remove_master_score_if_peer_primary param,
  fail_promote_early_if_peer_primary param, improved helper logging
  no error if wait-connect fails
  * drbdadm,v9: fix dumping meta-disk in corner case
  * crm-fence-peer.9.sh: fix Pacemaker 2 compat
  * drbdsetup,v9: fixes for various json output corner cases
  * drbdsetup,all: prepare for netlink changes (linux v5.2+)
  * drbdadm,v9: fix a check for setting up connections multiple times
  * init: setup file backed loop devices (mapping from LINSTOR)
  * rr-conflict: add retry-connect option (&gt;=drbd 9.0.20)
  * drbdmon: 256/16 colors; events2 handler improvements
  * drbdsetup,v9: new flag: force-resync (&gt;=drbd 9.0.21)
- Remove netlink-prepare-for-kernel-v5.2.patch
  Remove netlink-Add-NLA_F_NESTED-flag-to-nested-attribute.patch
  Remove cibadmin-return-code-convert.patch in 144c8cc1d</changelog>
  <changelog author="nwang@suse.com" date="1583841600">- bsc#1166200 ,fix crm-fence-peer regex issue with pacemaker 2.
- Add patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1589025600">- bsc#1171419, Update to 9.13.0
  * crm-fence-peer{,.9}.sh: detect Pacemaker 2 promotable clones
  * submodules: switch to https, which makes it easier to clone
  if you are behind some weird company firewalls.
  * drbd.service: start pacemaker before drbd-proxy
  * windrbd: various new commands including create-resource-from-url,
  set-syslog-ip, scan-partitions-for-minor, install-bus-device,
  remove-bus-device
- Remove patch crm-fence-peer-pacemaker2.patch</changelog>
  <changelog author="nwang@suse.com" date="1591617600">- bsc#1172641, fix the link error of setup_option.
  Add patch link-error-setup_option.patch</changelog>
  <changelog author="nwang@suse.com" date="1599220800">- bsc#1176065, fail to get master id from cib xml in fence handler
  Add patch crm-fence-peer-pacemaker2-issue2.patch</changelog>
  <changelog author="nwang@suse.com" date="1599825600">- bsc#1176436, update to 9.14.0
  * pacemaker: various fixes/improvements for PM &gt;=1.1.15
  including the 2 series; crm-fence-peer.9.sh
  * systemd dependency for drbd-proxy
  * containers: multi-arch support, especially for s390x
  * multipathd: blacklist drbd
  * drbdsetup: code refactoring and improvements,
  as well as tests for events2!
  add "may_promote", "promotion_score". See man page.
  * build: compile fixes for gcc-10; CI pipeline
  * handlers: add "disconnected"
- Remove patch crm-fence-peer-pacemaker2-issue2.patch (included)
  Remove patch link-error-setup_option.patch (included)</changelog>
  <changelog author="ohering@suse.de" date="1602504000">- Move block-drbd back to /etc/xen/scripts (bsc#1177531)
  The change in xen.spec was reverted, but the revert was not applied
  to this pkg</changelog>
  <changelog author="lnussel@suse.de" date="1605614400">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1619006400">- add pie-fix.patch: explicitly pass -pie linker flag when building drbdmon.
  The Makefile explicitly passes -fPIC, thereby breaking our gcc-PIE profile.
  In addition the Makefile also ignores CXXFLAGS and LDFLAGS passed via the
  environment. Therefore fix it with this patch. This makes drbdmon a PIE
  binary (bsc#1184122, bsc#1185132).</changelog>
  <changelog author="nwang@suse.com" date="1626868800">- Update to 9.18.0 (bsc#1189363)
  * build: remove rpm related targets
  * drbdsetup,v84: fix minor compile warnings
  * systemd: resource specific activation
  * systemd: drbd-reactor promoter templates
  * doc: fix maximum ping timeout
  * doc: add man pages for the systemd templates
  * drbdadm,v9: fix dstate for diskless volumes
  * build/release: use lbvers.py
  * drbd-attr: don't leak fd to drbdsetup
  * doc: various fixes and additions
  * drbdsetup,events2,v9: add backing_device
  * build,Debian: rm dh-systemd dependency
  * drbdsetup,events2,v9: fix --poll regression
  * drbdmeta: fix bug with ALs with small final extents
  * build,Debian: rm mail recommends
  * drbdsetup,events2,v9: allow --poll without --now
  * drbdsetup,invalidate: allow bitmap based resync after verify
  * drbdadm,sh-ll-dev: change output to "none" if diskless
  * drbd-attr/may_promote: fixes from 9.15.1
  * drbdadm,v9: allow set-gi in single node clusters
  * drbsetup,events2,v9: diff(erential) output
  * drbsetup,events2,v9: add --full output
  * v9: allow resource rename, also in drbdmon
  * drbdadm,v9: allow c-max-rate to be disabled
  * New drbd-attr Pacemaker RA
  * events2: handle mixed initial state and multicast events
  * events2: fix regression to always print resync done
- Add patch systemd-drbd-service-needs-network-online.patch</changelog>
  <changelog author="nwang@suse.com" date="1631880000">- bsc#1190591, fail to start due to lack of /usr/var/run/drbd</changelog>
  <changelog author="nwang@suse.com" date="1633953600">- Update to 9.19.0
  * v9,events2: show changes of peer-client
  * v9: rr-conflict strategy auto-discard for protocol A
  * windrbd: various fixes including setting the systemd root
  * containers: switch to UBI8
  * v9,wait-*: fix segfault
- bsc#1191058, active UsrMerge to install in /usr
  Add patch usrmerge_move_lib_to_prefix_lib.patch
- Remove patch fix-libdir-in-Makefile.patch
  Remove patch systemd-drbd-service-needs-network-online.patch (included)
- Add drbd-utils.rpmlintrc for Error missing-call-to-setgroups-before-setuid
- Add rpmlint-build-error.patch to fix rpmbuild build errors</changelog>
  <changelog author="zzhou@suse.com" date="1663329600">- restore drbd scripts back to /usr/lib/drbd from /lib/drbd (bsc#1203220)
  Update drbd-utils.spec
- fix drbd-bash-completion
  Update rpmlint-build-error.patch</changelog>
  <changelog author="zzhou@suse.com" date="1663761600">- drbd-utils.spec force _localstatedir to use /var/lib in runtime (bsc#1203220)</changelog>
  <changelog author="zzhou@suse.com" date="1665748800">- bsc#1204276 remove crm-fence-peer.sh for drbd8 to avoid confusion with v9</changelog>
  <changelog author="heming.zhao@suse.com" date="1672747200">- drbd.service fails to load - incorrect path to executable (bsc#1206754)
  * use %suse_version to replace %UsrMerge
  * modify drbd-utils.spec for create symbolic folder "/lib/drbd"</changelog>
  <changelog author="nicholas.yang@suse.com" date="1678449600">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to rename it in pretrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679572800">- bsc#1208922: fails to replace directory /lib/drbd with symlink
  * modify drbd-utils.spec to manipulate the symlink in %postun and %posttrans script</changelog>
  <changelog author="nicholas.yang@suse.com" date="1679918400">- crm-fence-peer incompatible with Pacemaker 2.1 and needs backports (bsc#1209783)
  * 0001-crm-fence-peer-fix-timeout-with-Pacemaker-2.1-milli-.patch
  * 0002-crm-fence-peer-fix-timeout-with-Pacemaker-2.0.5-mill.patch</changelog>
</package>
<package pkgid="e9eb2ed08be8b178ef7e8f20ca3933f216246efd41d2e2e9620a00e623f29b6e" name="e2fsprogs" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="b46c9a73c19e815a44806a4f0e8707af8c28d4eea366466088cdb19a22d9b03c" name="e2fsprogs" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="b05f17f9b31998378e8f1c856364538adc4299d1a19788a05785c939803a2a0a" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="84f046176e218bb7b8fc8e1119cc60741ca7b7727159bfd51c090ca72363972f" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="c836a55d2f67fa6618dd7f1680f08d14f94d83f23eb0f4eca5530a6ca6083bee" name="efibootmgr" arch="aarch64">
  <version epoch="0" ver="17" rel="150400.3.2.2"/>
  <changelog author="glin@suse.com" date="1414584000">- Update version number to 0.11.0
- Rebase patches
  (efibootmgr-0.11.0-derhat.diff,
  efibootmgr-0.11.0-check-boot-order.diff)
- Drop efibootmgr-0.6.0-set_boot_order.diff since the data size of
  the variable is handled properly now
- Drop efibootmgr-0.6.0-fail-visibly.diff since err() and warn()
  are introduced to show more meaningful messages
- Drop upstreamed patch
  (efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1414756800">- efibootmgr-0.6.0-check-boot-order.diff, efibootmgr-0.6.0-derhat.diff:
  pass source validator check
- switch homepage to https://github.com/vathpela/efibootmgr</changelog>
  <changelog author="mpluskal@suse.com" date="1419249600">- Enable i586 build</changelog>
  <changelog author="rw@suse.com" date="1422619200">- Introduce partition UUID as selector for delete.  [bsc#870211]
  (efibootmgr-0.6.0-delete-by-uuid.diff)</changelog>
  <changelog author="rw@suse.com" date="1426075200">- Allow disk/partition as selector for delete as well.  [bsc#870211]
  (efibootmgr-delete-multiple.diff)
- Remove version number from patches.
  (add efibootmgr-derhat.diff, efibootmgr-fail-visibly.diff,
  efibootmgr-gcc-Wall.diff, efibootmgr-set_boot_order.diff,
  efibootmgr-write-unique-id-once.diff;
  drop efibootmgr-0.6.0-check-boot-order.diff,
  efibootmgr-0.6.0-delete-by-uuid.diff, efibootmgr-0.6.0-derhat.diff,
  efibootmgr-0.6.0-fail-visibly.diff, efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-set_boot_order.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)
  Note: this entry reflects obsoleted, SLE-only changes!</changelog>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="f37363189d4a42f87e6ecc41ea084359c38548778a369a5a08db282dcaf22725" name="efibootmgr" arch="src">
  <version epoch="0" ver="17" rel="150400.3.2.2"/>
  <changelog author="rw@suse.com" date="1364385600">- Print EFI status for failed '--create' as well.  [bnc#811767]
  (efibootmgr-0.5.4-fail-visibly.diff)</changelog>
  <changelog author="rw@suse.com" date="1387454400">- Update version number to 0.6.0,
- Integrate SLE11 patches.  [bnc#830784]
  (efibootmgr-0.6.0-fail-visibly.diff,
  efibootmgr-0.6.0-set_boot_order.diff)
- Fix gcc warnings.
  (efibootmgr-0.6.0-gcc-Wall.diff)
- Make default '--loader' build-time configurable.
  (efibootmgr-0.6.0-derhat.diff)
- Don't let '--write-signature' overwrite unique signatures.
  (efibootmgr-0.6.0-write-unique-id-once.diff)
- Drop obsolete patches
  (efibootmgr-0.5.4.diff,
  efibootmgr-0.5.4-catchup.diff,
  efibootmgr-0.5.4-sector-size.diff)</changelog>
  <changelog author="glin@suse.com" date="1404734400">- Add efibootmgr-0.6.0-check-boot-order.diff to delete BootOrder
  if there is no more boot option. [bnc#883545]</changelog>
  <changelog author="schwab@suse.de" date="1410264000">- Enable for aarch64 [fate#318444]</changelog>
  <changelog author="glin@suse.com" date="1414584000">- Update version number to 0.11.0
- Rebase patches
  (efibootmgr-0.11.0-derhat.diff,
  efibootmgr-0.11.0-check-boot-order.diff)
- Drop efibootmgr-0.6.0-set_boot_order.diff since the data size of
  the variable is handled properly now
- Drop efibootmgr-0.6.0-fail-visibly.diff since err() and warn()
  are introduced to show more meaningful messages
- Drop upstreamed patch
  (efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1414756800">- efibootmgr-0.6.0-check-boot-order.diff, efibootmgr-0.6.0-derhat.diff:
  pass source validator check
- switch homepage to https://github.com/vathpela/efibootmgr</changelog>
  <changelog author="mpluskal@suse.com" date="1419249600">- Enable i586 build</changelog>
  <changelog author="rw@suse.com" date="1422619200">- Introduce partition UUID as selector for delete.  [bsc#870211]
  (efibootmgr-0.6.0-delete-by-uuid.diff)</changelog>
  <changelog author="rw@suse.com" date="1426075200">- Allow disk/partition as selector for delete as well.  [bsc#870211]
  (efibootmgr-delete-multiple.diff)
- Remove version number from patches.
  (add efibootmgr-derhat.diff, efibootmgr-fail-visibly.diff,
  efibootmgr-gcc-Wall.diff, efibootmgr-set_boot_order.diff,
  efibootmgr-write-unique-id-once.diff;
  drop efibootmgr-0.6.0-check-boot-order.diff,
  efibootmgr-0.6.0-delete-by-uuid.diff, efibootmgr-0.6.0-derhat.diff,
  efibootmgr-0.6.0-fail-visibly.diff, efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-set_boot_order.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)
  Note: this entry reflects obsoleted, SLE-only changes!</changelog>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="51f73df6e9a9a658a7b884b206914891ab87a2c919cb13998af33e544db630a0" name="efibootmgr" arch="x86_64">
  <version epoch="0" ver="17" rel="150400.3.2.2"/>
  <changelog author="glin@suse.com" date="1414584000">- Update version number to 0.11.0
- Rebase patches
  (efibootmgr-0.11.0-derhat.diff,
  efibootmgr-0.11.0-check-boot-order.diff)
- Drop efibootmgr-0.6.0-set_boot_order.diff since the data size of
  the variable is handled properly now
- Drop efibootmgr-0.6.0-fail-visibly.diff since err() and warn()
  are introduced to show more meaningful messages
- Drop upstreamed patch
  (efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)</changelog>
  <changelog author="dmueller@suse.com" date="1414756800">- efibootmgr-0.6.0-check-boot-order.diff, efibootmgr-0.6.0-derhat.diff:
  pass source validator check
- switch homepage to https://github.com/vathpela/efibootmgr</changelog>
  <changelog author="mpluskal@suse.com" date="1419249600">- Enable i586 build</changelog>
  <changelog author="rw@suse.com" date="1422619200">- Introduce partition UUID as selector for delete.  [bsc#870211]
  (efibootmgr-0.6.0-delete-by-uuid.diff)</changelog>
  <changelog author="rw@suse.com" date="1426075200">- Allow disk/partition as selector for delete as well.  [bsc#870211]
  (efibootmgr-delete-multiple.diff)
- Remove version number from patches.
  (add efibootmgr-derhat.diff, efibootmgr-fail-visibly.diff,
  efibootmgr-gcc-Wall.diff, efibootmgr-set_boot_order.diff,
  efibootmgr-write-unique-id-once.diff;
  drop efibootmgr-0.6.0-check-boot-order.diff,
  efibootmgr-0.6.0-delete-by-uuid.diff, efibootmgr-0.6.0-derhat.diff,
  efibootmgr-0.6.0-fail-visibly.diff, efibootmgr-0.6.0-gcc-Wall.diff,
  efibootmgr-0.6.0-set_boot_order.diff,
  efibootmgr-0.6.0-write-unique-id-once.diff)
  Note: this entry reflects obsoleted, SLE-only changes!</changelog>
  <changelog author="mpluskal@suse.com" date="1434110400">- Update to 0.12
  * This release is mostly a maintenance release that uses
    libefivar's new library API for creating device paths and load
    options.
  * Also DHCPv4 network boot entries are now something you can
    create without knowing an awful lot about ACPI.
- Refresh patches
  efibootmgr-0.11.0-derhat.diff as efibootmgr-derhat.diff
  efibootmgr-0.11.0-check-boot-order.diff as
  efibootmgr-check-boot-order.diff
- Update project and download url</changelog>
  <changelog author="rw@suse.com" date="1437739200">- Refresh for SLE12.  [bsc#929677]
  (efibootmgr-gcc-Wall.diff, efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="rw@suse.com" date="1442318400">- Properly latch long to short option for delete.  [bsc#945705]
  (efibootmgr-delete-multiple.diff)</changelog>
  <changelog author="glin@suse.com" date="1468411200">- Add efibootmgr-fix-efivar-0.24.patch fix the compilation errors
  caused by the efivar update</changelog>
  <changelog author="rw@suse.com" date="1468497600">- Add support for Memory Address Range Mirroring.
  [fate#320999, bsc#987599]
  (add MARM-add-m-and-M-options.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-sanitize-set_mirror.diff)</changelog>
  <changelog author="arvidjaar@gmail.com" date="1471694400">- add efibootmgr-fix-usage-of-efi_loadopt_path-again.patch - fix
  efibootmgr -v with new efivar (boo#993458)</changelog>
  <changelog author="msuchanek@suse.com" date="1487246400">- Build on all archs. There is no reason not to. [boo#1025520]
- Depend on new enough efivar. Build fails otherwise.</changelog>
  <changelog author="rw@suse.com" date="1488542400">- Update to 14 plus upstream fixes.  [fate#322108]
  (0001-Don-t-use-fshort-wchar-when-building-63.patch,
  0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch,
  0003-Add-support-for-parsing-optional-data-as-ucs2.patch)
- Forward port and refresh SLE patches
  (efibootmgr-derhat.diff, MARM-sanitize-set_mirror.diff
  efibootmgr-delete-multiple.diff)
- Drop upstreamed patches
  (efibootmgr-check-boot-order.diff,
  efibootmgr-fix-efivar-0.24.patch,
  efibootmgr-fix-usage-of-efi_loadopt_path-again.patch,
  MARM-add-m-and-M-options.diff,
  MARM-extend-man-for-M-option.diff,
  MARM-fix-insufficient-validation-check-of-M-option.diff,
  MARM-introduce-man-for-m-and-M-option.diff)</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- forcefully enable PIE</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="info@paolostivanin.com" date="1627992000">- Update to v17:  [jsc#SLE-22542]
  * use efivar's logging facility more (more info in -v2 , -v3, etc)
  * Various bug fixes
  * Better -e parsing
  * fix pkg-config invocation for ldflags
  * Make efibootmgr use EFIDIR / efibootmgr.efidir like fwupdate does
  * make --loader default build-time configurable
  * sanitize set_mirror()/get_mirror()
  * Add support for parsing loader options as UCS2
  * GCC 7 fixes
  * Don't use -fshort-wchar since we don't run on EFI machines.
- Drop 0001-Don-t-use-fshort-wchar-when-building-63.patch (upstreamed)
- Drop 0002-Remove-extra-const-keywords-gcc-7-gripes-about.patch
  (upstreamed)
- Drop 0003-Add-support-for-parsing-optional-data-as-ucs2.patch
  (upstreamed)
- Drop MARM-sanitize-set_mirror.diff (upstreamed)
- Drop efibootmgr-derhat.diff (upstreamed)
- Rebase efibootmgr-delete-multiple.diff</changelog>
</package>
<package pkgid="0818c0efe11578fb26b103d4df76aab587b33d7569846a3576dbfb02b22c1861" name="expat" arch="src">
  <version epoch="0" ver="2.4.4" rel="150400.3.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Version update to 2.2.7 (CVE-2018-20843, bsc#1139937)
  * Security fixes:
  - CVE-2018-20843 - Fix extraction of namespace prefixes from
    XML names; XML names with multiple colons could end up in
    the wrong namespace, and take a high amount of RAM and CPU
    resources while processing, opening the door to use for
    denial-of-service attacks
  * Other changes:
  - Autotools/CMake: Utilize -fvisibility=hidden to stop
    exporting non-API symbols
  - Autotools: Add --without-examples and --without-tests
  - Autotools: Modernize configure.ac
  - Autotools: Fix check for -fvisibility=hidden for Clang
  - Autotools: Fix compilation for lack of docbook2x-man
  - CMake: Make libdir of pkgconfig expat.pc support multilib
  - CMake: Build man page in PROJECT_BINARY_DIR not _SOURCE_DIR
  - Remove fallback to bcopy, assume that memmove(3) exists
- Removed expat-2.2.6-fix-make-clean.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
</package>
<package pkgid="311f9517d616018cb8c8555783559242cac5848156b05db39ce5089d907405e3" name="fdo-client" arch="aarch64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150400.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="1dd77bd4cf1745430e69f946d16e1b388b96d7fd761ff58a5084e4c274085477" name="fdo-client" arch="s390x">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150400.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="dca1355d7e5858ddc203785e741428d83abdc5e5a26db91c4358153f7350f33e" name="fdo-client" arch="src">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150400.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="b92f7a1b1a52df83740bfa9bdcff2296ad4d8c440ec63ac060f8d7593b5843c3" name="fdo-client" arch="x86_64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150400.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="b41169718e21e7102951abbd8a48a79aa5c6801a6791fec5640eeb8c1f6478ad" name="fdo-client-devel" arch="aarch64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150400.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="7b1051a8c416aaf9ba8204f8c0e53fb5c9a50145f688b149c1a63243d30048cc" name="fdo-client-devel" arch="s390x">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150400.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="77a266e61d58b11b0db9eaef107344efec72e12bbc81ff00068f7c295259040d" name="fdo-client-devel" arch="x86_64">
  <version epoch="0" ver="1.0.0+git20210816.baa09b5" rel="150400.3.3.1"/>
  <changelog author="schubi@suse.de" date="1634299200">- This is the successor of sdo-client
  EPIC: SLE/SLE-22946</changelog>
  <changelog author="schubi@suse.com" date="1700136000">- Removed build key via utils/keys_gen.sh. (bsc#1216293)</changelog>
</package>
<package pkgid="c6db6d684ff010d8a1ec29efc7ce56b27f1f24ed8c036b9ccf5cda4fc150514d" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.12.1"/>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
</package>
<package pkgid="a7ea0fa984a14d15a95d125f8be239a71f26b43f66720befe243e5d69729095f" name="firewalld" arch="src">
  <version epoch="0" ver="0.9.3" rel="150400.8.12.1"/>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
</package>
<package pkgid="a56405f4e1af8de07e8e106547a84f251523fbef7462bea47e52ada977396564" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1570708800">- rebased the original patch from revision 19</changelog>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
</package>
<package pkgid="7999a38da2aae53f730059d9f77eda3dbc86ae87ee3ca928c494965e01882c85" name="firewalld" arch="src">
  <version epoch="0" ver="0.9.3" rel="150400.8.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1570708800">- rebased the original patch from revision 19</changelog>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
</package>
<package pkgid="a44ecf43a73f1ec22a5ecc983cf997513e1c386122bc4654ded832ab2f20f72c" name="freetype2" arch="src">
  <version epoch="0" ver="2.10.4" rel="150000.4.15.1"/>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1589025600">- Update to version 2.10.2
  * Support for WOFF2 fonts, add BR on pkgconfig(libbrotlidec)
  * Function `FT_Get_Var_Axis_Flags' returned random data for Type 1
    MM fonts.
  * Type 1 fonts with non-integer metrics are now supported by the new
    (CFF) engine introduced in FreeType 2.9.
  * Drop support for Python 2 in Freetype's API reference generator
  * Auto-hinter support for Hanifi Rohingya
  * Document the `FT2_KEEP_ALIVE' debugging environment variable.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Update to version 2.10.4
  * Fix a heap buffer overflow has been found  in the handling of
    embedded PNG bitmaps, introduced in FreeType version 2.6
    (CVE-2020-15999 bsc#1177914)
  * Minor improvements to the B/W rasterizer.
  * Auto-hinter support for Medefaidrin script.
  * Fix various  memory leaks (mainly  for CFF) and other  issues that
    might cause crashes in rare circumstances.</changelog>
  <changelog author="fstrba@suse.com" date="1661256000">- Added patches:
  * CVE-2022-27404.patch
    + fixes bsc#1198830, CVE-2022-27404: Buffer Overflow
  * CVE-2022-27405.patch
    + fixes bsc#1198832, CVE-2022-27405: Segmentation Fault
  * CVE-2022-27406.patch
    + fixes bsc#1198823, CVE-2022-27406: Segmentation violation</changelog>
  <changelog author="meissner@suse.com" date="1661947200">- disable brotli linkage / WOFF2 support for now to keep dependencies
  as before.</changelog>
  <changelog author="fstrba@suse.com" date="1692705600">- Added patch:
  * CVE-2023-2004.patch
    + fixes bsc#1210419, CVE-2023-2004: Integer overflow</changelog>
</package>
<package pkgid="559a99f397fdac921462058ab57534ee4613217581d49de50b157c9967d453de" name="fuse-overlayfs" arch="aarch64">
  <version epoch="0" ver="1.1.2" rel="150100.3.11.1"/>
  <changelog author="fcastelli@suse.com" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="sgrunert@suse.com" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="sgrunert@suse.com" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="sgrunert@suse.com" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="sgrunert@suse.com" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="sgrunert@suse.com" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="912a8a1f6a6dc77d0fd49248ae3301670f685446253c970dd1fd3576b5225f1c" name="fuse-overlayfs" arch="s390x">
  <version epoch="0" ver="1.1.2" rel="150100.3.11.1"/>
  <changelog author="fcastelli@suse.com" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="sgrunert@suse.com" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="sgrunert@suse.com" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="sgrunert@suse.com" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="sgrunert@suse.com" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="sgrunert@suse.com" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="bace92542de9c6b19a4da25472dad080fc1bef2684911202cce5db2884fc8613" name="fuse-overlayfs" arch="src">
  <version epoch="0" ver="1.1.2" rel="150100.3.11.1"/>
  <changelog author="fcastelli@suse.com" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="sgrunert@suse.com" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="sgrunert@suse.com" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="sgrunert@suse.com" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="sgrunert@suse.com" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="sgrunert@suse.com" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="7fd26744555a2bc1462dda9c25476e26322bf5deec99f15b553337f5d0caba66" name="fuse-overlayfs" arch="x86_64">
  <version epoch="0" ver="1.1.2" rel="150100.3.11.1"/>
  <changelog author="fcastelli@suse.com" date="1553774400">- Create initial package for version 0.3</changelog>
  <changelog author="sgrunert@suse.com" date="1560772800">- Update to v0.4.1 (bsc#1137860):
  - create_directory: do not redeclare variable buf
  - fuse-overlayfs: accept option "dev"
  - fuse-overlayfs: add check to readdir for the node parent
  - fuse-overlayfs: add cleanup for layers
  - fuse-overlayfs: drop usage of static arrays for paths
  - fuse-overlayfs: refactor some xattrs common code
  - fuse-overlayfs: start using GCC autocleanup
  - fuse-overlayfs: use cleanup function for initializing node
  - fuse-overlays: fix interaction of unlink(2) with readdir(2)
  - main: add missing debug messages
  - main: do the unlink only after we created the temporary file
  - main: fix a fd leak
  - main: ignore EINVAL when copying xattrs
  - setattr: use fd from fi-&gt;fh for ftruncate() whenever possible</changelog>
  <changelog author="sgrunert@suse.com" date="1566216000">- Update to v0.5.1
  - support fuse writeback cache and enable it by default
  - update to latest gnulib
  - add option to disable fsync
  - add option to disable xattrs
  - add option to skip ino number check in lower layers
  - fix fd validity check
  - fix memory leak
  - fix read after free
  - fix type for flistxattr return
  - fix warnings reported by lgtm.com
  - enable parallel dirops</changelog>
  <changelog author="sgrunert@suse.com" date="1576584000">- Update to v0.7.2
  - introduce inodes cache
  - correctly read inode for unix sockets
  - avoid hash map lookup when possible
  - use st_dev for the ino key
  - check whether writeback is supported
  - set_attrs: don't require write to S_IFREG
  - ioctl: do not reuse fi-&gt;fh for directories
  - fix skip whiteout deletion optimization
  - store the new mode after chmod</changelog>
  <changelog author="sgrunert@suse.com" date="1578571200">- Update to v0.7.3
  - fix build with -fno-common
  - fix possible segmentation fault in direct_fsync()
  - use the data store to create missing whiteouts
  - after a rename, force a directory reload</changelog>
  <changelog author="sgrunert@suse.com" date="1579262400">- Update to v0.7.4
  - fix fallocate for deleted files.
  - ignore O_DIRECT.  It causes issues with libfuse not using an
    aligned buffer, causing write(2) to fail with EINVAL.
  - on copyup, do not copy the opaque xattr.
  - fix a wrong lookup for whiteout files, that could happen on a
    double unlink.</changelog>
  <changelog author="sgrunert@suse.com" date="1579521600">- Update to v0.7.5
  - do not expose internal xattrs through listxattr and getxattr</changelog>
  <changelog author="sgrunert@suse.com" date="1580817600">- Update to v0.7.6 (bsc#1160460)
  - do not look in lower layers for the ino if there is no origin
    xattr set
  - attempt to use the file path if the operation on the fd fails
    with ENXIO</changelog>
  <changelog author="sgrunert@suse.com" date="1583323200">- Update to v0.7.7
  - make sure the destination is deleted before doing a rename(2).
    It prevents a left over directory to cause delete to fail with
    EEXIST.
  - honor --debug.</changelog>
  <changelog author="sgrunert@suse.com" date="1584446400">- Update to v0.7.8
  - report correctly the number of links for a directory also for
    subsequent stat calls
  - stop looking up the ino in the lower layers if the file could
    not be opened</changelog>
  <changelog author="sgrunert@suse.com" date="1587384000">- Update to v1.0.0
  - Fix portability issue to 32 bits architectures</changelog>
  <changelog author="rhafer@suse.com" date="1593000000">- Update to v1.1.0
  - use openat2(2) when available.
  - accept "ro" as mount option.
  - fix set mtime for a symlink.
  - fix some issues reported by static analysis.
  - fix potential infinite loop on a short read.
  - fix creating a directory if the destination already exists
    in the upper layer.</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- udpate to 1.1.2 (bsc#1175821)
  - fix build issues with libmusl.
  - fix memory leak when creating whiteout files.
  - fix lookup for overflow uid when it is different than the overflow gid.</changelog>
</package>
<package pkgid="25f2c45e8672c76a97543e2752f9731b7c466cbe784a190be1da414a38f7ae8d" name="gawk" arch="aarch64">
  <version epoch="0" ver="4.2.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1430654400">- GNU awk 4.1.2:
  * manual improved
  * The debugger's "restart" command now works again.
  * Redirected getline is now allowed inside BEGINFILE/ENDFILE.
  * A number of bugs have been fixed in the MPFR code.
  * Indirect function calls now work for both built-in and extension
    functions.
  * Built-in functions are now included in FUNCTAB.
  * In non-English locales, it was accidentally possible to use
    non-english letters for identifiers
  * The "where" command has been added to the debugger as an alias
    for "backtrace".
  * Gawk no longer explicitly checks the current directory after
    doing a path search of AWKPATH.
  * Infrastructure upgrades: Automake 1.15, Gettext 0.19.4,
    Libtool 2.4.6, Bison 3.0.4.
  * If a user-defined function has a parameter with the same name
    as another user-defined function, it is no longer possible to
    call the second function from inside the first.
  * POSIX requires that the names of function parameters not be the
    same as any of the special built-in variables and also not
    conflict with the names of any functions. Gawk has checked for
    the former since 3.1.7. With --posix, it now also checks for
    the latter.
  * The test suite should check for necessary locales and skip the
    tests where it matters if support isn't what it should be.
  * Gawk now expects to be compiled on a system with multibyte
    character support.
- drop gawk-4.1.1-build-baddest.patch, upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1431000000">- Correct info files scriplet handling section
- Update info and update-alternatives requirements</changelog>
  <changelog author="astieger@suse.com" date="1431000001">- skip frequently failing and timing dependent test strftime</changelog>
  <changelog author="astieger@suse.com" date="1432382400">- GNU awk 4.1.3:
  * Regexp parsing with extra brackets should now be working again.
  * Updated to latest config.guess and config.sub.
  * bug fixes</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462363200">- new gawk_ppc64le_ignore_transient_test_time_failure.patch</changelog>
  <changelog author="astieger@suse.com" date="1473076800">* GNU awk 4.1.4:
  * z/OS support updated
  * debugger improvements
  * return value of system() enhanced to convey more information
  * two-way pipe handling improved
  * The -d option now allows -d- to print to standard output.
  * The DJGPP port is now officially deprecated.</changelog>
  <changelog author="josef.moellers@suse.com" date="1491825600">- Added an explicit rpmlint rule to keep one file (gawkapi.h)
  from requiring a separate package.
  [+gawk.rpmlintrc]</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- also ignore transient test time failure on ppc64</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508414400">- Update to gawk 4.2.0
  * If not in POSIX mode, changes to ENVIRON are reflected into
    gawk's environment
  * The series of numbers returned by rand() should now be "more
    random" than previously
  * Multiple changes related to the pretty printer
  * The igawk script and igawk.1 man page are no longer installed
  * Gawk now processes a maximum of two hexadecimal digits in \x
    escape sequences inside strings
  * Setting PROCINFO["redirection", "NONFATAL"] to true makes I/O
    errors for "redirection" not fatal
  * Gawk now supports retryable I/O via PROCINFO[input-file, "RETRY"]
  * Revisions in the POSIX standard remove the special case for POSIX
    mode when FS = " " where newline was not a field separator
  * Gawk now supports strongly typed regexp constants
  * The new typeof() function can be used to indicate if a variable or
    array element is an array, regexp, string or number
  * Optimizations are now enabled by default
  * Passing negative operands to any of the bitwise functions now
    produces a fatal error
  * The mktime function now accepts an optional second argument
  * The FIELDWIDTHS parsing syntax has been enhanced to allow specifying
    how many characters to skip before a field starts
  * The PROCINFO["argv"] array records all of gawk's command line arguments
    as gawk received them
- gawk_ppc64le_ignore_transient_test_time_failure.patch: removed</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508587200">- fold-string.patch: Don't fold constant strings if either is translatable</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- GNU awk 4.2.1:
  * documentation updates
  * In MPFR mode, When ROUNDMODE changes, string values for
    numerically type values will be redone
  * various bug fixes
  * drop fold-string.patch, upstream
- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1691496000">- format-tree-positional-arg.patch: Validate index into argument list
  (CVE-2023-4156, bsc#1214025)</changelog>
</package>
<package pkgid="c14ea18b3ed46adc814a82d1a42b2b4418d304ef502896e15da9d4b8647d0be9" name="gawk" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1430654400">- GNU awk 4.1.2:
  * manual improved
  * The debugger's "restart" command now works again.
  * Redirected getline is now allowed inside BEGINFILE/ENDFILE.
  * A number of bugs have been fixed in the MPFR code.
  * Indirect function calls now work for both built-in and extension
    functions.
  * Built-in functions are now included in FUNCTAB.
  * In non-English locales, it was accidentally possible to use
    non-english letters for identifiers
  * The "where" command has been added to the debugger as an alias
    for "backtrace".
  * Gawk no longer explicitly checks the current directory after
    doing a path search of AWKPATH.
  * Infrastructure upgrades: Automake 1.15, Gettext 0.19.4,
    Libtool 2.4.6, Bison 3.0.4.
  * If a user-defined function has a parameter with the same name
    as another user-defined function, it is no longer possible to
    call the second function from inside the first.
  * POSIX requires that the names of function parameters not be the
    same as any of the special built-in variables and also not
    conflict with the names of any functions. Gawk has checked for
    the former since 3.1.7. With --posix, it now also checks for
    the latter.
  * The test suite should check for necessary locales and skip the
    tests where it matters if support isn't what it should be.
  * Gawk now expects to be compiled on a system with multibyte
    character support.
- drop gawk-4.1.1-build-baddest.patch, upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1431000000">- Correct info files scriplet handling section
- Update info and update-alternatives requirements</changelog>
  <changelog author="astieger@suse.com" date="1431000001">- skip frequently failing and timing dependent test strftime</changelog>
  <changelog author="astieger@suse.com" date="1432382400">- GNU awk 4.1.3:
  * Regexp parsing with extra brackets should now be working again.
  * Updated to latest config.guess and config.sub.
  * bug fixes</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462363200">- new gawk_ppc64le_ignore_transient_test_time_failure.patch</changelog>
  <changelog author="astieger@suse.com" date="1473076800">* GNU awk 4.1.4:
  * z/OS support updated
  * debugger improvements
  * return value of system() enhanced to convey more information
  * two-way pipe handling improved
  * The -d option now allows -d- to print to standard output.
  * The DJGPP port is now officially deprecated.</changelog>
  <changelog author="josef.moellers@suse.com" date="1491825600">- Added an explicit rpmlint rule to keep one file (gawkapi.h)
  from requiring a separate package.
  [+gawk.rpmlintrc]</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- also ignore transient test time failure on ppc64</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508414400">- Update to gawk 4.2.0
  * If not in POSIX mode, changes to ENVIRON are reflected into
    gawk's environment
  * The series of numbers returned by rand() should now be "more
    random" than previously
  * Multiple changes related to the pretty printer
  * The igawk script and igawk.1 man page are no longer installed
  * Gawk now processes a maximum of two hexadecimal digits in \x
    escape sequences inside strings
  * Setting PROCINFO["redirection", "NONFATAL"] to true makes I/O
    errors for "redirection" not fatal
  * Gawk now supports retryable I/O via PROCINFO[input-file, "RETRY"]
  * Revisions in the POSIX standard remove the special case for POSIX
    mode when FS = " " where newline was not a field separator
  * Gawk now supports strongly typed regexp constants
  * The new typeof() function can be used to indicate if a variable or
    array element is an array, regexp, string or number
  * Optimizations are now enabled by default
  * Passing negative operands to any of the bitwise functions now
    produces a fatal error
  * The mktime function now accepts an optional second argument
  * The FIELDWIDTHS parsing syntax has been enhanced to allow specifying
    how many characters to skip before a field starts
  * The PROCINFO["argv"] array records all of gawk's command line arguments
    as gawk received them
- gawk_ppc64le_ignore_transient_test_time_failure.patch: removed</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508587200">- fold-string.patch: Don't fold constant strings if either is translatable</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- GNU awk 4.2.1:
  * documentation updates
  * In MPFR mode, When ROUNDMODE changes, string values for
    numerically type values will be redone
  * various bug fixes
  * drop fold-string.patch, upstream
- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1691496000">- format-tree-positional-arg.patch: Validate index into argument list
  (CVE-2023-4156, bsc#1214025)</changelog>
</package>
<package pkgid="3307d2169ae36db16c45c03cc358a679a3bb87389b0bbe903948cdf58416765a" name="gawk" arch="src">
  <version epoch="0" ver="4.2.1" rel="150000.3.3.1"/>
  <changelog author="tabraham@novell.com" date="1333540800">- Update to version 4.0.1
  * completed the implementation of Rational Range Interpretation
  * failure to get the group set is no longer a fatal error
  * lots of minor bugs fixed and portability clean-ups
- refreshed gawk-3.1.8.diff
- removed gawk-revert-gsub-gawk3.patch deprecated by this release</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add explicit buildrequire makeinfo</changelog>
  <changelog author="jengelh@inai.de" date="1355400000">- Remove unneded %clean section</changelog>
  <changelog author="mmeister@suse.com" date="1364299200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="idonmez@suse.com" date="1368446400">- Update to version 4.1.0
  * The three executables gawk, pgawk, and dgawk, have been merged into
    one, named just gawk.
  * The new -i option (from xgawk) is used for loading awk library files.
  * The new -l option (from xgawk) is used for loading dynamic extensions.
  * The dynamic extension interface has been completely redone.  There is
    now a defined API for C extensions to use.  A C extension acts like
    a function written in awk, except that it cannot do everything that awk
    code can. However, this allows interfacing to any facility that is
    available from C.
  * The "inplace" extension, built using the new facility, can be used to
    simulate the GNU "sed -i" feature.
  * The and(), or() and xor() functions now take any number of arguments,
    with a minimum of two.
  * New arrays: SYMTAB, FUNCTAB, and PROCINFO["identifiers"]. SYMTAB allows
    indirect access to any defined variable or array; it is possible to
    "walk" the symbol table, if that should be necessary.
- Refreshed gawk-3.1.8.diff
- Add older-automake.diff to support automake 1.12</changelog>
  <changelog author="gber@opensuse.org" date="1391860800">- adjust update-alternative usage to packaging policy
  (see http://lists.opensuse.org/opensuse-packaging/2014-02/msg00024.html)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1398772800">- GNU awk 4.1.1:
  * The "stat" extension now includes a "devbsize" element which
    indicates the units for the "nblocks" element.
  * A number of bugs in the pretty-printing / profiling code have
    been fixed.
  * The -O option now works again.
  * The --include option, documented since 4.0, now actually works.
  * Infrastructure updated to automake 1.13.4, bison 3.0.2, and
    libtool 2.4.2.418.
  * The configure script now accepts a --disable-extensions option,
    which disables checking for and building the extensions.
  * The API now provides functions pointers for malloc(), calloc(),
    realloc() and free(), to insure that the same memory allocation
    functions are always used. This bumps the minor version by one.
  * The printf quote flag now works correctly in locales with
    a different decimal point character but without a thousands
    separator character. If the thousands separator is a string,
    it will be correctly added to decimal numbers.
  * The readfile extension now has an input parser that will read
    whole files as a single record.
- packaging changes:
  * remove added German po file and scanning of translations
  * remove profiling, fixing warning make-check-outside-check-section
  * remove autoreconf call
  * drop gawk-3.1.8.diff
  * drop older-automake.diff, not required for factory
  * build with libsigsegv
  * no not regenerate info pages
  * add gawk-4.1.1-build-baddest.patch required for install
  * switch to xz tarball
  * verify source signature</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1399118400">- remove optional libsigsegv dependency</changelog>
  <changelog author="astieger@suse.com" date="1430654400">- GNU awk 4.1.2:
  * manual improved
  * The debugger's "restart" command now works again.
  * Redirected getline is now allowed inside BEGINFILE/ENDFILE.
  * A number of bugs have been fixed in the MPFR code.
  * Indirect function calls now work for both built-in and extension
    functions.
  * Built-in functions are now included in FUNCTAB.
  * In non-English locales, it was accidentally possible to use
    non-english letters for identifiers
  * The "where" command has been added to the debugger as an alias
    for "backtrace".
  * Gawk no longer explicitly checks the current directory after
    doing a path search of AWKPATH.
  * Infrastructure upgrades: Automake 1.15, Gettext 0.19.4,
    Libtool 2.4.6, Bison 3.0.4.
  * If a user-defined function has a parameter with the same name
    as another user-defined function, it is no longer possible to
    call the second function from inside the first.
  * POSIX requires that the names of function parameters not be the
    same as any of the special built-in variables and also not
    conflict with the names of any functions. Gawk has checked for
    the former since 3.1.7. With --posix, it now also checks for
    the latter.
  * The test suite should check for necessary locales and skip the
    tests where it matters if support isn't what it should be.
  * Gawk now expects to be compiled on a system with multibyte
    character support.
- drop gawk-4.1.1-build-baddest.patch, upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1431000000">- Correct info files scriplet handling section
- Update info and update-alternatives requirements</changelog>
  <changelog author="astieger@suse.com" date="1431000001">- skip frequently failing and timing dependent test strftime</changelog>
  <changelog author="astieger@suse.com" date="1432382400">- GNU awk 4.1.3:
  * Regexp parsing with extra brackets should now be working again.
  * Updated to latest config.guess and config.sub.
  * bug fixes</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462363200">- new gawk_ppc64le_ignore_transient_test_time_failure.patch</changelog>
  <changelog author="astieger@suse.com" date="1473076800">* GNU awk 4.1.4:
  * z/OS support updated
  * debugger improvements
  * return value of system() enhanced to convey more information
  * two-way pipe handling improved
  * The -d option now allows -d- to print to standard output.
  * The DJGPP port is now officially deprecated.</changelog>
  <changelog author="josef.moellers@suse.com" date="1491825600">- Added an explicit rpmlint rule to keep one file (gawkapi.h)
  from requiring a separate package.
  [+gawk.rpmlintrc]</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- also ignore transient test time failure on ppc64</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508414400">- Update to gawk 4.2.0
  * If not in POSIX mode, changes to ENVIRON are reflected into
    gawk's environment
  * The series of numbers returned by rand() should now be "more
    random" than previously
  * Multiple changes related to the pretty printer
  * The igawk script and igawk.1 man page are no longer installed
  * Gawk now processes a maximum of two hexadecimal digits in \x
    escape sequences inside strings
  * Setting PROCINFO["redirection", "NONFATAL"] to true makes I/O
    errors for "redirection" not fatal
  * Gawk now supports retryable I/O via PROCINFO[input-file, "RETRY"]
  * Revisions in the POSIX standard remove the special case for POSIX
    mode when FS = " " where newline was not a field separator
  * Gawk now supports strongly typed regexp constants
  * The new typeof() function can be used to indicate if a variable or
    array element is an array, regexp, string or number
  * Optimizations are now enabled by default
  * Passing negative operands to any of the bitwise functions now
    produces a fatal error
  * The mktime function now accepts an optional second argument
  * The FIELDWIDTHS parsing syntax has been enhanced to allow specifying
    how many characters to skip before a field starts
  * The PROCINFO["argv"] array records all of gawk's command line arguments
    as gawk received them
- gawk_ppc64le_ignore_transient_test_time_failure.patch: removed</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508587200">- fold-string.patch: Don't fold constant strings if either is translatable</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- GNU awk 4.2.1:
  * documentation updates
  * In MPFR mode, When ROUNDMODE changes, string values for
    numerically type values will be redone
  * various bug fixes
  * drop fold-string.patch, upstream
- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1691496000">- format-tree-positional-arg.patch: Validate index into argument list
  (CVE-2023-4156, bsc#1214025)</changelog>
</package>
<package pkgid="0b8a75aef95cdcc516a056f1c8ea1c6502602e734f6d06b207469c4873379ce2" name="gawk" arch="x86_64">
  <version epoch="0" ver="4.2.1" rel="150000.3.3.1"/>
  <changelog author="astieger@suse.com" date="1430654400">- GNU awk 4.1.2:
  * manual improved
  * The debugger's "restart" command now works again.
  * Redirected getline is now allowed inside BEGINFILE/ENDFILE.
  * A number of bugs have been fixed in the MPFR code.
  * Indirect function calls now work for both built-in and extension
    functions.
  * Built-in functions are now included in FUNCTAB.
  * In non-English locales, it was accidentally possible to use
    non-english letters for identifiers
  * The "where" command has been added to the debugger as an alias
    for "backtrace".
  * Gawk no longer explicitly checks the current directory after
    doing a path search of AWKPATH.
  * Infrastructure upgrades: Automake 1.15, Gettext 0.19.4,
    Libtool 2.4.6, Bison 3.0.4.
  * If a user-defined function has a parameter with the same name
    as another user-defined function, it is no longer possible to
    call the second function from inside the first.
  * POSIX requires that the names of function parameters not be the
    same as any of the special built-in variables and also not
    conflict with the names of any functions. Gawk has checked for
    the former since 3.1.7. With --posix, it now also checks for
    the latter.
  * The test suite should check for necessary locales and skip the
    tests where it matters if support isn't what it should be.
  * Gawk now expects to be compiled on a system with multibyte
    character support.
- drop gawk-4.1.1-build-baddest.patch, upstream</changelog>
  <changelog author="mpluskal@suse.com" date="1431000000">- Correct info files scriplet handling section
- Update info and update-alternatives requirements</changelog>
  <changelog author="astieger@suse.com" date="1431000001">- skip frequently failing and timing dependent test strftime</changelog>
  <changelog author="astieger@suse.com" date="1432382400">- GNU awk 4.1.3:
  * Regexp parsing with extra brackets should now be working again.
  * Updated to latest config.guess and config.sub.
  * bug fixes</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1462363200">- new gawk_ppc64le_ignore_transient_test_time_failure.patch</changelog>
  <changelog author="astieger@suse.com" date="1473076800">* GNU awk 4.1.4:
  * z/OS support updated
  * debugger improvements
  * return value of system() enhanced to convey more information
  * two-way pipe handling improved
  * The -d option now allows -d- to print to standard output.
  * The DJGPP port is now officially deprecated.</changelog>
  <changelog author="josef.moellers@suse.com" date="1491825600">- Added an explicit rpmlint rule to keep one file (gawkapi.h)
  from requiring a separate package.
  [+gawk.rpmlintrc]</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- also ignore transient test time failure on ppc64</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508414400">- Update to gawk 4.2.0
  * If not in POSIX mode, changes to ENVIRON are reflected into
    gawk's environment
  * The series of numbers returned by rand() should now be "more
    random" than previously
  * Multiple changes related to the pretty printer
  * The igawk script and igawk.1 man page are no longer installed
  * Gawk now processes a maximum of two hexadecimal digits in \x
    escape sequences inside strings
  * Setting PROCINFO["redirection", "NONFATAL"] to true makes I/O
    errors for "redirection" not fatal
  * Gawk now supports retryable I/O via PROCINFO[input-file, "RETRY"]
  * Revisions in the POSIX standard remove the special case for POSIX
    mode when FS = " " where newline was not a field separator
  * Gawk now supports strongly typed regexp constants
  * The new typeof() function can be used to indicate if a variable or
    array element is an array, regexp, string or number
  * Optimizations are now enabled by default
  * Passing negative operands to any of the bitwise functions now
    produces a fatal error
  * The mktime function now accepts an optional second argument
  * The FIELDWIDTHS parsing syntax has been enhanced to allow specifying
    how many characters to skip before a field starts
  * The PROCINFO["argv"] array records all of gawk's command line arguments
    as gawk received them
- gawk_ppc64le_ignore_transient_test_time_failure.patch: removed</changelog>
  <changelog author="schwab@linux-m68k.org" date="1508587200">- fold-string.patch: Don't fold constant strings if either is translatable</changelog>
  <changelog author="astieger@suse.com" date="1519646400">- GNU awk 4.2.1:
  * documentation updates
  * In MPFR mode, When ROUNDMODE changes, string values for
    numerically type values will be redone
  * various bug fixes
  * drop fold-string.patch, upstream
- Use %license (boo#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1691496000">- format-tree-positional-arg.patch: Validate index into argument list
  (CVE-2023-4156, bsc#1214025)</changelog>
</package>
<package pkgid="b23714ec1b45c056eaf48c43bb2e29a10f1bdfc95ffa301bbf635e3ca061a232" name="gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="b0d7ec67682f5da4eaf2683c9e14078544ad88e5cf99b30cb769aa950ff6ede9" name="gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.16.1"/>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
  <changelog author="rguenther@suse.com" date="1692273600">- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
  with variable length stack allocations on aarch64.
  Fixes CVE-2023-4039.  [bsc#1214052]</changelog>
</package>
<package pkgid="59dfe3d861213f02a09a982b9bff798bcad8068fc012c138ad45df5f878e3d49" name="gcc12" arch="src">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.18.1"/>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
  <changelog author="rguenther@suse.com" date="1692273600">- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
  with variable length stack allocations on aarch64.
  Fixes CVE-2023-4039.  [bsc#1214052]</changelog>
</package>
<package pkgid="d01e771eead0ca67f082a3438cb442116903fc7f0baa044c4d63a3caf3d08b36" name="gcc13" arch="src">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="c0c100358474c8820b6ca95007cd5d85b0acb9d79ab79bf7c96a576bc505dce6" name="gcc13" arch="src">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="3ff97b6b6ba85a7a62f4672f19c65bd15688685a7002ee8a27ea82155ed87665" name="gcc13" arch="src">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="04f4b2156f9e7c7151e0bf3ef0cde7bc7268f7dfa660ae5e8c4696318e1a12d5" name="gdk-pixbuf-loader-rsvg" arch="aarch64">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="774b0d5b63733dda8c7050a03753c410e6634fff39acf326554f061983dbaa13" name="gdk-pixbuf-loader-rsvg" arch="s390x">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="1fa672a22dda335d520c4181185ca070e1942e9904d0373050c54746bf99aae1" name="gdk-pixbuf-loader-rsvg" arch="x86_64">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="75604a91569f9e6fd6762327be1c65b98265e06797e3cbfa345f49a918205691" name="glib2" arch="src">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="0601fe75f4686f638245dd853b8d18a4f427b61b5c340024b17be880106a49a6" name="glib2" arch="src">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="19451fe12b413ac9c9b35229638e40166b46d33d6518b6e62f13ad4f4e56765b" name="glib2-tools" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="836bb73480f355d809983df2d7d657cf811c52dd2913f86b4da0c9eb5d811a73" name="glib2-tools" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="1f5da135177d9183e39041cc66bf09a1a1adef57aa1c10920a093538bff57efe" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="ce41fa747dffc2cc373157e71d0d2b95fe683b69e1539793e0f48fbd7f9eb13c" name="glib2-tools" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="01d484599bf0d583d66c62444d2646cdf314523872a4b6d6dc6e11effa570f5d" name="glib2-tools" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="8515cf588716028b5561f1393eeaee886ad81a54a1e8cc05633d0f5ec8a1d4ac" name="glib2-tools" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="8577cf3fa54174e4f3ba2f4f94da700e5b866064cd04d9c61859e9ef47c48350" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="cfab62a8f57c09412b041d52aa52e9cec11083726b07f12143dcfe9bc7b9380d" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="67b798e152348dad385363a770629cc5df42ee59228e27a4afbd9a3d9c4ae005" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="0e29544946060c95fbce1245183f8a07c5101fb3f958d31c6286f505ba747920" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="c7aa4fec8239a5d2f004fd1ef93407d7a2c955422b576cf93d3f06da37e4aaf7" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="8ca4bb44c65b8a9dbf5388a29bd6664a4799512489c2370fb6dab7b969160237" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="3167c004b8de80a8521f748ebf7284b402fa3fe41c9187f6ac3f9812549f8fee" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="5e3f0e6f15c7abfcbfed7042576671106885a7058c48a430ec50f5a2e581311d" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="264bcf28f74b8603a908e41520e8a14674f3e2eebe24f16a1855e8e9296bc799" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="8146c88633f90547e4c1c0e6ace60cd460eaa771d8cef8d02f30f10fdeef1936" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="2c9280ac3fb31649aee24ac9ef3ccb8de9fed3adbec6883a7875be9d580fd957" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="dd2742c222bad7170f55989d2d42ecd82f03770c8de6054b0281263dcf1445b4" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="30acda6fd66c3c1bf2663eecf0cf55830b83f9291e52fcd711c84392e9775154" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="ad649d262dbd3b40a327662abe0be17d6445167921e6a8b09d23dee2d88514f7" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="d0ea80a2074b614361e6b3cca38eadae45a623f187334324f4181298d98cddcd" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="4605e7cd661b0e322fafa1aca67b1963e316f23af0637db0966f5643e1834460" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="39f6c156f2e0b5956f36fdc97d30d4df9f4e28b9a013c6470001817c3ebcfefd" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="48bc52daeaca240a3f82f2a488b21ed85c25214d5b39b997863dcbf45b9f5be1" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="0c2c3101335ef5b1729b212305178f380debd45050fa8563073936f4cbd65e37" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="96ad310b634b8d73f96070e5de5757bcb0e8a8db4e5384c028c77aaad68b2951" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="5600c5eeca846f4e33a6f8c931eda1a4fcc154173dad5f80908db09bb72612e3" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="a36d64f6915fe134224893e8f06b0b1a152547cdc375ef1a13bb60a5e77bab20" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="99628f1dcf8872948d9fcc70249be90ff573cfa18800cba567b8bccf73aebe2c" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="a7599d34bf983b693663d9eae53a64ed56272bd4a4574abf7bf766ea93a56450" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="d6953f8774223f3b52413ee127a3a2f6f8fcabb4a25d71c67843ca9252643941" name="glibc" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="c89f10a77ba9d57795370ed19abb91634399abc143c6045723059e7d2ba8e9c2" name="glibc" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="650b6d722189e1da9d7da5480c16f9eaff3fd02f4fa8de20884a43d1d23fb594" name="glibc" arch="src">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="511cc6848824c215f8fec77bc5d90aad153a6a6c3b72218a549e431088cfd67d" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="a84f2663c479538c5b887fdd65b2fedba7d78a0759690c36be88d0c4ea728fa9" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="3156f42a1a59ca7461e4e8fa22d0ab7754e60ef7ba69d6516fbca322acb501be" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="cc29c3ad73c784470e61900be04074a7f024ea5e54faf8bb02dda0f5bb8802a6" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="d3cd15c37dbddfc747c0f2a4f7b53103b12d46755e58b80437870b9219c0dedc" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="d888ca2508bd29c516842042d85d303bedab75bb36e6af364df88df4324dc8d5" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="97338ebff0514ca4c02f8b464f056735434288f659154d890920f662339cf890" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="dd2fc9fd4747252e8eecc9fcb61b0ac9aa14122e1aaee491c565c28a3b43222d" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="df8ce304bc3f4eb08a4101c4cfbccdc8a0da81b3002e465bade63d5741c86aad" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="31d60a1bb0877ca4798354e919e0c657f3cbcb2751ba9eff76f3ac86a3e85876" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="5e1c1af73a4417eebf1eb9984276c9cd3098e05945f69c583aec6c1bb9b59f09" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="1e42cd387f0f246aad86b0288b503c8c7a72d0d5146dc11a448239da6460302f" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="3c938332f6d797bf39bc4940e1d029d511dfcd9c6afaae27d52112374b66495a" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="95c3e071e3af44fdc5c4e378faf4074b14a087e1c278bd9cbb68a7e42c4f7fe9" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="a5f71e57029d329d999474afa4e769f655e7074ac790712964581b93ce90122f" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="df4ae910035d4bd40a7f41654863c5b1c71b8ce27c62422d69429ea3d5d49090" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="0aa1aecd135aafaab78a93c2a4b815e1ba18009e326bd5c87d0c5354256d2b7d" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="2dca64523a404a3f78ba9a57842193f8d18726d96853315acdc80db6acc2d3e1" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="631a6ba0980934f48867d1b0a9e05a069c07cb5a40c28e837a1205f49aea99b5" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="c087ba174845bcd58cc911c27739fb4950818d737d7a964fba9927357e002da4" name="glibc-devel" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="4197da2f6a3683008628483a39b4d5c8be09cac96e788901b53cd1d0b25caf46" name="glibc-devel" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="fc4173cb9c39e749fb1f15e497553f00ae58aebeab35d28a98b3183f77465f80" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="87fb815b60fa266a1ad0cad64d75e0c17ca75fd80e491ac6adbfe0cf8196347f" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="a04b03e748a52f014a4e81d0eeac5bc3b9aae985f1de92ea012c32c5ab0f1a01" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="33c6116c151d051bb6628b33a75aec760e9bd2dcf91ad0f20518694c6e1fd3ff" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="1e2b507131b13caee785ee38edfd5c412c597ce247348d8acd88d941782296d3" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="7f49648599b77be9b65a153fa3314b92c8f2c6c8aefa3b6c2b678a287d9c6c76" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="bfb9d4b8f540f337eb25334fe7135c5e7833ecc41f6df3f51bebbc505baeaf34" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="60d01b4a00f0fad6eb9a02a9808b42eac5ded9dbad6c6b8bc5b89409caf21726" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="68160676db19c6502cbc218a72a739a9ed91c25e0704aa82ab0c24e88f72efd6" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="0c973bc9b3765a06b52945b3ecc8a225824491b9b34dcbace4c43fe5b052bd1d" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="9f01671f44dbf858a609d85be7f61922fade4a66bc6dcf238407d41389648f93" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="8c341d756d66e6f088c4b7a31f084720e29c59e836edbc73b5e5ab8d173e5583" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="4dd56c5df933804b6c5191b47758d8cff23999edf9869a0a0e5023d3142472bb" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="0c2802cd126837e067e34ee5ccc683aef69f60027ab96f52011c5efb897ac531" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="42ecb0cb91c3b10ce68bc17f482dedce30b9fb61868a0b65903fd999ddd5e1de" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="97ddbe2fc10a79bb1bcc2895974aca01eed02a5be045d89bbefbbf39e332c36a" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="c5c4231ffdaf5787c8fd997653ad23dd556a1d91cef36404c85e2f43b512c8f8" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="d6c75d52cce16a2e6e20028c7f36938caaf6b1bf5b26a2e51fdeeed77dacc72c" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="5338cf05d99166a6557bcb226d5a64efdc964bea69831504d3969931398f1aeb" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="7e41b2c9bf96f95af1e6c09d7875d6c280ea5c7f19fb9d1aed30ad22a9e4289a" name="glibc-locale" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="667c43f948a17e754791bb024ef72a1236c18f3982a6c4f77da1b1bdd7d9ac7b" name="glibc-locale" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="680be3783d533c603f3159d2ef103f8aa84c8ed48d4fa9a3059cb8a65421ccfb" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="d3865c7fcd2631ee281a381adab131b66999ba48f182f7c648ad90287809d891" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="6977182227f38d64d9e5998a90d5bac038b9d4236b4c040060ec4805757c6ab2" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="75d867507aef5f1d83106cd8df639737c136a46b185d176f18019fc29891d6cf" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.46.1"/>
  <changelog author="schwab@suse.de" date="1617019200">- s390-memmove-ifunc-selector-arch13.patch: S390: Also check vector
  support in memmove ifunc-selector (bsc#1184035, BZ #27511)</changelog>
  <changelog author="schwab@suse.de" date="1625140800">- wordexp-param-overflow.patch: wordexp: handle overflow in positional
  parameter number (CVE-2021-35942, bsc#1187911, BZ #28011)</changelog>
  <changelog author="schwab@suse.de" date="1630584000">- mq-notify-use-after-free.patch: Use __pthread_attr_copy in mq_notify
  (CVE-2021-33574, bsc#1186489, BZ #27896)</changelog>
  <changelog author="schwab@suse.de" date="1636027200">- 0001-s390x-Align-child-stack-while-clone.-BZ-27968.patch,
  0002-S390-Optimize-__memcpy_z196.patch,
  0003-S390-Optimize-__memset_z196.patch,
  0004-S390-Sync-HWCAP-names-with-kernel-by-adding-aliases-.patch,
  0005-S390-Add-new-hwcap-values.patch,
  0006-S390-Add-PCI_MIO-and-SIE-HWCAPs.patch: [15sp4 FEAT] GNU2007 -
  GLIBC: Support for new IBM Z Hardware (bsc#1191592, jsc#IBM-869)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
</package>
<package pkgid="fefa3a7eea55faace328e9de1c38d3e5c49fe1dab422056cf34dea50d352741c" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="923db9afc53eaefccd0da4fcde73eb64bcc01a7809c2f01e39c76c33cf0e41ed" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="4c9ace30652c2dba6d8fd3a183a77a399e49310ced14f3cce5038495e0a019c5" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.52.2"/>
  <changelog author="giuliano.belinassi@suse.com" date="1640174400">- Add support for livepatches (jsc#SLE-20049).
- Enable livepatching on x86_64.
- Generate ipa-clones tarball artifact when livepatching is enabled.</changelog>
  <changelog author="schwab@suse.de" date="1642420800">- clnt-create-unix-overflow.patch: Buffer overflow in sunrpc clnt_create
  for "unix" (CVE-2022-23219, bsc#1194768, BZ #22542)
- svcunix-create-overflow.patch: Buffer overflow in sunrpc svcunix_create
  (CVE-2022-23218, bsc#1194770, BZ #28768)</changelog>
  <changelog author="schwab@suse.de" date="1642593600">- 0001-powerpc-Optimized-strcpy-for-POWER9.patch,
  0002-powerpc-Optimized-stpcpy-for-POWER9.patch,
  0003-powerpc-Optimized-rawmemchr-for-POWER9.patch,
  0004-powerpc64le-add-optimized-strlen-for-P9.patch,
  0005-powerpc-fix-ifunc-implementation-list-for-POWER9-str.patch,
  0006-powerpc-Add-optimized-strncpy-for-POWER9.patch,
  0007-powerpc-Add-optimized-stpncpy-for-POWER9.patch,
  0008-powerpc-Add-optimized-ilogb-for-POWER9.patch,
  0009-powerpc-Add-optimized-llogb-for-POWER9.patch,
  0010-powerpc-Add-optimized-strlen-for-POWER10.patch,
  0011-powerpc64le-Optimized-memmove-for-POWER10.patch,
  0012-powerpc64le-Optimize-memcpy-for-POWER10.patch,
  0013-powerpc64le-Optimize-memset-for-POWER10.patch,
  0014-powerpc64le-Fix-ifunc-selection-for-memset-memmove-b.patch,
  0015-powerpc-Add-optimized-rawmemchr-for-POWER10.patch: ppc64le ifunc
  improvements (bsc#1194785, jsc#SLE-18195)</changelog>
  <changelog author="schwab@suse.de" date="1643025600">- getcwd-erange.patch: getcwd: Set errno to ERANGE for size == 1
  (CVE-2021-3999, bsc#1194640, BZ #28769)</changelog>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
</package>
<package pkgid="7c5e37c776dceb201b06d196ba691951d15c7d525dce4f537e91afe0f5b61f78" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="7aa9379de3b3500687a2ed4bc14e3ca57b403a14b441205955bda74fc7bc7b80" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="4e9b3d24e3c1faaaf710e25231caf31a90f90a7af0719c39bc8e33aadd9684f8" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.58.1"/>
  <changelog author="matz@suse.com" date="1650888000">- Add s390-add-z16-name.diff for bsc#1198751.</changelog>
  <changelog author="schwab@suse.de" date="1652702400">- selinux-deprecated.patch: Disable warnings due to deprecated libselinux
  symbols used by nss and nscd (bsc#1197718)
- systemtap-altmacro.patch: i386: Remove broken CAN_USE_REGISTER_ASM_EBP
  (bsc#1197718, BZ #28771)</changelog>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
</package>
<package pkgid="8587611444fe60667d2110a9284c55e29090f2d16c21f210c8333a68b45a47e2" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="ba2dea237ae8f2976c1d96a46e27cfa63561d5974ddcd9704626be32512078c3" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="66d9e0aee5e99a6c79ef53246e613f036f757c5548205bc0f9937a0ff3428e00" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.63.1"/>
  <changelog author="schwab@suse.de" date="1654776000">- strncpy-power9-vsx.patch: powerpc: Fix VSX register number on
  __strncpy_power9 (bsc#1200334, BZ #29197)</changelog>
  <changelog author="schwab@suse.de" date="1656417600">- static-tls-surplus.patch: rtld: Avoid using up static TLS surplus for
  optimizations (bsc#1200855, BZ #25051)</changelog>
  <changelog author="schwab@suse.de" date="1658232000">- static-tls-surplus.patch: Remove tunables (bsc#1201560)</changelog>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
</package>
<package pkgid="6754b14d5263d94b5231abf94f6ee0f1762172101f215994479781a4474a0879" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="0dfc26d9fd7287555cc74b9b9b2f64e22748f12421ec89b003972a16db8af42e" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="f6f64fdaccae3e939a3ae7cf9f949f92a96d2d5e693de1603f10dfa5ede64cd2" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.68.1"/>
  <changelog author="schwab@suse.de" date="1658318400">- disable-check-consistency.patch: i386: Disable check_consistency for GCC
  5 and above (bsc#1201640, BZ #25788)</changelog>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
</package>
<package pkgid="68d74bc1bf89cf54af8720b5f0fe8b1d5ba4f36ed2bedcd1821a1d5f0ec4e8fb" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="3a1cc523d4cf74189364e7494bc1981eb21b2d5c84dc5f17eb4d5c3374e29945" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="678eeb6ad805314c17ca41b7c4d1f9d049211ca5c99c77204c7ea808f8bd1b94" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.71.1"/>
  <changelog author="schwab@suse.de" date="1658836800">- memcmp-power10.patch: powerpc: Optimized memcmp for power10
  (jsc#PED-987)</changelog>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
</package>
<package pkgid="e3cdeb9826c56d6a07ce7d234edac1c69abb685ee46e68fa0c7276f3d325e46e" name="glibc-locale-base" arch="aarch64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="1d5f107332e96134ecdf44120ef52848620140413472a16abcc3048775f32cbd" name="glibc-locale-base" arch="s390x">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="ea995fbf4892de53c86697ea63d068036f848568b2fb4e61f60b1ac860e8784b" name="glibc-locale-base" arch="x86_64">
  <version epoch="0" ver="2.31" rel="150300.74.1"/>
  <changelog author="schwab@suse.de" date="1661169600">- x86-shared-non-temporal-threshold.patch: Reversing calculation of
  __x86_shared_non_temporal_threshold (bsc#1201942)</changelog>
  <changelog author="schwab@suse.de" date="1675684800">- dlopen-filter-object.patch: elf: Allow dlopen of filter object to work
  (bsc#1207571, BZ #16272)
- powerpc-tst-ucontext.patch: powerpc: Fix unrecognized instruction errors
  with recent GCC</changelog>
  <changelog author="schwab@suse.de" date="1677153600">- strncmp-avx2-boundary.patch: Fix avx2 strncmp offset compare condition
  check (bsc#1208358, BZ #25933)</changelog>
  <changelog author="schwab@suse.de" date="1677585600">- gmon-hash-table-size.patch: gmon: Fix allocated buffer overflow
  (CVE-2023-0687, bsc#1207975, BZ #29444)</changelog>
  <changelog author="schwab@suse.de" date="1678104000">- amd-cacheinfo.patch: x86: Cache computation for AMD architecture
  (bsc#1207957)</changelog>
  <changelog author="schwab@suse.de" date="1678968000">- Exclude static archives from preparation for live patching (bnc#1208721)</changelog>
  <changelog author="schwab@suse.de" date="1680177600">- getlogin-no-loginuid.patch: getlogin_r: fix missing fallback if loginuid
  is unset (bsc#1209229, BZ #30235)</changelog>
  <changelog author="giuliano.belinassi@suse.com" date="1685361600">- ulp-prologue-into-asm-functions.patch: Add support for livepatches
  in ASM written functions (bsc#1211726)</changelog>
  <changelog author="schwab@suse.de" date="1686139200">- resolv-conf-lock.patch: resolv_conf: release lock on allocation failure
  (bsc#1211828, BZ #30527)</changelog>
  <changelog author="schwab@suse.de" date="1688472000">- remove-excessive-p-align-check.patch: elf: Remove excessive p_align
  check on PT_LOAD segments (bsc#1211829, BZ #28688)
- segment-align.patch: elf: Properly align PT_LOAD segments (bsc#1211829,
  BZ #28676)
- ld-so-always-use-map-copy.patch: ld.so: Always use MAP_COPY to map the
  first segment (BZ #30452)</changelog>
  <changelog author="schwab@suse.de" date="1689854400">- nss-files-hosts-v4mapped.patch: Restore lookup of IPv4 mapped addresses
  in files database (bsc#1212819, BZ #25457)</changelog>
  <changelog author="schwab@suse.de" date="1690200000">- nscd-netlink-cache-invalidation.patch: nscd: Fix netlink cache
  invalidation if epoll is used (bsc#1212910, BZ #29415)</changelog>
  <changelog author="schwab@suse.de" date="1693483200">- gb18030-2022.patch: add GB18030-2022 charmap (jsc#PED-4908, BZ #30243)</changelog>
  <changelog author="schwab@suse.de" date="1695038400">- gai-merge-continue-actions.patch: Simplify allocations and fix merge and
  continue actions (CVE-2023-4813, bsc#1215286, BZ #28931)</changelog>
  <changelog author="schwab@suse.de" date="1696420800">- dl-map-segment-align-munmap.patch: elf: Align argument of __munmap to
  page size (bsc#1215891, BZ #28676)</changelog>
  <changelog author="schwab@suse.de" date="1701864000">- aarch64-rawmemchr-unwind.patch: aarch64: correct CFI in rawmemchr
  (bsc#1217445, BZ #31113)</changelog>
  <changelog author="schwab@suse.de" date="1702468800">- getaddrinfo-eai-memory.patch: getaddrinfo: translate ENOMEM to
  EAI_MEMORY (bsc#1217589, BZ #31163)</changelog>
  <changelog author="schwab@suse.de" date="1706011200">- qsort-invalid-cmp.patch: qsort: handle degenerated compare function
  (bsc#1218866)</changelog>
  <changelog author="schwab@suse.de" date="1710158400">- duplocale-global-locale.patch: duplocale: protect use of global locale
  (bsc#1220441, BZ #23970)</changelog>
  <changelog author="schwab@suse.de" date="1713441600">- iconv-iso-2022-cn-ext.patch: iconv: ISO-2022-CN-EXT: fix out-of-bound
  writes when writing escape sequence (CVE-2024-2961, bsc#1222992)</changelog>
</package>
<package pkgid="119e97e62f438180355036f9a3c353a48a74f2d3b43c1f43f0adb2bc6ff103ac" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="39a6b32dd1367b72000f96cb523a88007e14a854ff5bbf301a9629e6bd6222b7" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="59b28ee6089476cfb83a5bc9599e5f2fd268ce30491582a9210368b7e9c76fbd" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="098944d8e3abbf6b42cd57b6fd75542f8b11bdcf9186bad4864a77a9b68b4a57" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="6bf60d010e937b97c96b17ad96b2283867e210dc286018e20d6d2db20918e198" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="708bc3185d1be493a4a40ffacdc0cab74252275ba58f56ec350e5c18fb9341bc" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="92d1c5187baa2047f07d6a3ca95899b0fd79b215a0088705e5248f0639538f83" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="618bb64ce420906d0099308edf6513aaa60fa9bd2ce280e222f503d5a410a289" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="1da26ca59648118e86e87321bddbb97035be6685796c80a82b79fa37f757f080" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="8f1f10fd34541f9b5fa7d660bab40fdd517727120b4b5a3007c8ec729340e03a" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="1100ef7707542ea98d37893c3f59694127c703b1b97c25a87f5d0a3d8983d063" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="6ae1955ea03dbd3f320a74e91b5ff05bbe4cb2c1bf82702d237c9a93bbf5039d" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="052e7a61bd1aa0f3b311295b2442586e05cfb9c3610bd0cf5ce907584421bea4" name="gnutls" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="b881ede558ea55da979ead2dac5acf9005c700ddfbe787fb04325f0428eb5ded" name="gnutls" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="8b34e7763096f7d1811b37e2076f2ba7d1d9a9871de1cc780358430294354c7f" name="gnutls" arch="src">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="8b3ef039644131a502883db576b95d74c984f03a1cc52e0568166f024b34ed69" name="gnutls" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="0b0038c39e192fb8210733f25d3a9fa98aeb101328cb160a6ad3d22a5dfd37f4" name="gpg2" arch="aarch64">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="5623c4da70e202323f869688139d4dc6c9c6f6d2b1fb65fecf60b4ac94410f0e" name="gpg2" arch="s390x">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="1ed24e5b0813cd7dd16d072dd035171cd30f4e7ff015348f7ee360407b0eec9c" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="4b6099a7710c559a83df70595e11054230d122c4b6be604b7bfba48e76f5e97f" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.27" rel="150300.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1575720000">- update to 2.2.19:
  * gpg: Fix double free when decrypting for hidden recipients
  * gpg: Use auto-key-locate for encryption even for mail addressed
    given with angle brackets
  * gpgsm: Add special case for certain expired intermediate
    certificates</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578571200">- Security fix: [bsc#1157900, CVE-2019-14855, jsc#SLE-16534]
  * Web of Trust forgeries using collisions in SHA-1 signatures
  * Ignore all SHA-1 signatures in 3rd party key signatures.
  * Forbid the creation of SHA-1 third-party key signatures.
  * Add option --allow-weak-key-signatures
- Add gnupg-CVE-2019-14855.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1578657600">- Accept key updates even without UIDs [bsc#1143158]
- Add patches:
  * gnupg-allow-import-of-previously-known-keys-even-without-UIDs.patch
  * gnupg-accept_subkeys_with_a_good_revocation_but_no_self-sig_during_import.patch
  * gnupg-add-test-cases-for-import-without-uid.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1582113600">- Fix build with GCC-10: [bsc#1160394]
  * Always use EXTERN_UNLESS_MAIN_MODULE pattern
  * In GCC-10, the default option -fcommon will change to -fno-common
- Add gpg2-gcc10-build-fno-common.patch</changelog>
  <changelog author="fvogt@suse.com" date="1584100800">- Split dirmngr into a subpackage to avoid a hard dependency of
  gpg2 on libgnutls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1584705600">- GnuPG 2.2.20:
  * Protect the error counter against overflow to guarantee that the
    tools can't be tricked into returning success after an error
  * gpg: Make really sure that --verify-files always returns an error
  * gpg: Fix key listing --with-secret if a pattern is given
  * gpg: Fix detection of certain keys used as default-key
  * gpg: Fix default-key selection when a card is available
  * gpg: Fix key expiration and key usage for keys created with a
    creation date of zero
  * gpgsm: Fix import of some CR,LF terminated certificates
  * gpg: New options --include-key-block and --auto-key-import to
    allow encrypted replies after an initial signed message
  * gpg: Allow the use of a fingerprint with --trusted-key
  * gpg: New property "fpr" for use by --export-filter
  * scdaemon: Disable the pinpad if a KDF DO is used
  * dirmngr: Improve finding OCSP certificates
- drop gpg2-gcc10-build-fno-common.patch, upstream</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1588248000">- Fix gpgme and gpgme-qt builds on gpg2 2.2.20 update [bsc#1170811]
- Refresh patches:
  * gnupg-2.2.8-files-are-digests.patch
  * gnupg-add_legacy_FIPS_mode_option.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1590062400">- Fix warning: agent returned different signature type ssh-rsa
  * The gpg-agent's ssh-agent does not handle flags in signing
    requests properly [bsc#1161268, bsc#1172308]
  * Add gnupg-gpg-agent-ssh-agent.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1594296000">- GnuPG 2.2.21:
  * gpg: Improve symmetric decryption speed by about 25%
  * gpg: Support decryption of AEAD encrypted data packets
  * gpg: Add option --no-include-key-block
  * gpg: Allow for extra padding in ECDH
  * gpg: Only a single pinentry is shown for symmetric encryption if
    the pinentry supports this
  * gpg: Print a note if no keys are given to --delete-key
  * gpg,gpgsm: The ridiculous passphrase quality bar is not anymore
    shown
  * gpgsm: Certificates without a CRL distribution point are now
    considered valid without looking up a CRL. The new option
  - -enable-issuer-based-crl-check can be used to revert to the
    former behaviour
  * gpgsm: Support rsaPSS signature verification
  * gpgsm: Unless CRL checking is disabled lookup a missing issuer
    certificate using the certificate's authorityInfoAccess
  * gpgsm: Print the certificate's serial number also in decimal
    notation
  * gpgsm: Fix possible NULL-deref in messages of --gen-key
  * scd: Support the CardOS 5 based D-Trust Card 3.1
  * dirmngr: Allow http URLs with "LOOKUP --url"
  * wkd: Take name of sendmail from configure. Fixes an OpenBSD
    specific bug</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1594728000">- Fix regression in latest gpg2 that makes gpgme fail to build [bsc#1174007]
- Add gnupg-gpgme-t-encrypt-sym.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1598961600">- GnuPG 2.2.22:
  * gpg: Change the default key algorithm to rsa3072
  * gpg: Add regular expression support for Trust Signatures on
    all platforms
  * gpg: Ignore --personal-digest-prefs for ECDSA keys
  * gpgsm: Make rsaPSS a de-vs compliant scheme
  * gpgsm: Show also the SHA256 fingerprint in key listings
  * gpgsm: Do not require a default keyring for --gpgconf-list
  * gpg-agent: Default to extended key format and record the
    creation time of keys
    Add new option --disable-extended-key-format
  * gpg-agent: Support the WAYLAND_DISPLAY envvar
  * gpg-agent: Allow using --gpgconf-list even if HOME does not
    exist
  * gpg-agent: Make the Pinentry work even if the envvar TERM is
    set to the empty string
  * scdaemon: Add a workaround for Gnuk tokens &lt;= 2.15 which
    wrongly incremented the error counter when using the
    "verify" command of "gpg --edit-key" with only the signature
    key being present
  * dirmngr: Better handle systems with disabled IPv6
  * gpgpslit: Install tool.  It was not installed in the past to
    avoid conflicts with the version installed by GnuPG 1.4
  * gpgtar: Make --files-from and --null work as documented
- drop gnupg-gpgme-t-encrypt-sym.patch, upstream</changelog>
  <changelog author="pmonreal@suse.com" date="1599048000">- Fix segv importing certain keys (e.g. ed25519). [bsc#1176034]
- Add gnupg-2.2.22-fix-segv-import-keys.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1599134400">- GnuPG 2.2.23:
  * gpg: fix AHEAD preference list overflow boo#1176034 /  CVE-2020-25125
  * gpg: fix possible segv in the key cleaning code
  * gpgsm: fix a minor RFC2253 parser gub
  * scdaemon: Fix a PIN verify failure on certain OpenPGP card
    implementations</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1605614400">- GnuPG 2.2.24:
  * gpg: New command --quick-revoke-sig
  * gpg: Do not use weak digest algos if selected by recipient
    preference during sign+encrypt
  * gpg: Switch to AES256 for symmetric encryption in de-vs mode
  * gpg: Silence weak digest warnings with --quiet
  * gpg: Print new status line CANCELED_BY_USER for a cancel during
    symmetric encryption
  * gpg: Fix the encrypt+sign hash algo preference selection for
    ECDSA.  This is in particular needed for keys created from
    existing smartcard based keys
  * agent: Fix secret key import of GnuPG 2.3 generated Ed25519
    keys
  * agent: Keep some permissions of private-keys-v1.d
  * dirmngr: Align sks-keyservers.netCA.pem use between ntbtls and
    gnutls builds
  * dirmngr: Fix the pool keyserver case for a single host in the
    pool
  * scd: Fix the use case of verify_chv2 by CHECKPIN
  * scd: Various improvements to the ccid-driver
  * scd: Minor fixes for Yubikey
  * gpgconf: New option --show-versions
  * i18n: Complete overhaul and completion of the Italian
    translation</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606132800">- GnuPG 2.2.25:
  * scd: Fix regression in 2.2.24 requiring gpg --card-status
    before signing or decrypting
  * gpgsm: Using Libksba 1.5.0 signatures with a rarely used
    combination of attributes can now be verified</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1610452800">- GnuPG 2.2.27:
  * gpgconf: Fix case with neither local nor global gpg.conf
  * gpgconf: Fix description of two new options
- includes changes from 2.2.26:
  * gpg: New AKL method "ntds"
  * gpg: Fix --trusted-key with fingerprint arg
  * scd: Fix writing of ECC keys to an OpenPGP card
  * scd: Make an USB error fix specific to SPR532 readers
  * dirmngr: With new LDAP keyservers store the new attributes.
    Never store the useless pgpSignerID. Fix a long standing
    bug storing some keys on an ldap server.
  * dirmngr: Support the new Active Direcory LDAP schema for
    keyservers
  * dirmngr: Allow LDAP OpenPGP searches via fingerprint
  * dirmngr: Do not block other threads during keyserver LDAP calls
  * Support global configuration files
  * Fix the iconv fallback handling to UTF-8</changelog>
  <changelog author="pmonreal@suse.com" date="1613995200">- Update gpg2 for SLE15-SP3 [jsc#SLE-17559, bsc#1182572]
- Remove patches fixed upstream:
  * gnupg-gpg-agent-ssh-agent.patch
  * gnupg-2.2.22-fix-segv-import-keys.patch
  * gnupg-Allow-redirection-from-https-to-http-for-CRLs.patch
  * gnupg-CRL-fetching-via-https.patch
  * gnupg-CVE-2018-1000858.patch
  * gnupg-CVE-2018-12020.patch
  * gnupg-CVE-2019-13050_0_of_5.patch
  * gnupg-CVE-2019-13050_1_of_5.patch
  * gnupg-CVE-2019-13050_2_of_5.patch
  * gnupg-CVE-2019-13050_3_of_5.patch
  * gnupg-CVE-2019-13050_4_of_5.patch
  * gnupg-CVE-2019-13050_5_of_5.patch
  * gnupg-CVE-2019-14855.patch
- Update gpg2.keyring</changelog>
  <changelog author="meissner@suse.com" date="1654689600">- gnupg-detect_FIPS_mode.patch: use AES as default cipher instead
  of 3DES if we are in FIPS mode. (bsc#1196125)</changelog>
  <changelog author="david.anes@suse.com" date="1658145600">- Security fix [CVE-2022-34903, bsc#1201225]
  - Vulnerable to status injection
  - Added patch gnupg-CVE-2022-34903.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1700654400">- Suppress error message on trial reading as PEM format when using
  dirmngr to validate broken DER encoded files (bsc#1217212)
  * Add patches:
  - gnupg-dirmngr-Suppress-error-message-on-trial-reading-as-PEM.patch
  - gnupg-dirmngr-Clear-the-error-count-to-try-certificate-as-binary.patch</changelog>
</package>
<package pkgid="256e2973e46f2d04a120c3643cf363502341dc84ee2c8fd1a3b19d584eb7fc06" name="groff" arch="src">
  <version epoch="0" ver="1.22.4" rel="150400.5.2.1"/>
  <changelog author="mvyskocil@suse.com" date="1370433600">- modify groff_1.22.2-2.debian.diff - remove the part related to
  src/preproc/html/pre-html.cpp, fixes bnc#755533</changelog>
  <changelog author="werner@suse.de" date="1371470400">- Move important non-graphical macros from groff-full back to groff
  as otherwise many packages do not build anymore</changelog>
  <changelog author="werner@suse.de" date="1371470401">- Take care of mmroff.1.gz as well as of mmroff perl script</changelog>
  <changelog author="mvyskocil@suse.com" date="1372161600">- move man.local and mdoc.local from groff-full to groff
  * fixes libssh2.org testsuite</changelog>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.com" date="1540900800">- add groff-reproducible-mdate.patch and groff-use-SDE.patch to allow
  to override build time to make package build reproducible (boo#1047218)</changelog>
  <changelog author="tchvatal@suse.com" date="1546516800">- Switch to multibuild in order to avoid having to manage 2
  differentiating spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1546603200">- Version update to 1.22.4:
  * Many fixes for hyphenation helping
  * Various build tweaks
  * See the NEWS file for details
- New signature -&gt; update keyring file
- Remove upstream merged patches:
  * groff-multi-thread.patch
  * groff-reproducible-mdate.patch
  * groff-use-SDE.patch
- Remove groff-1.21-groffer-libexecdir.patch as upstream redid
  the autotools rules and uses configure option now
- Rebase patch groff-1.20.1-deunicode.patch
- Rebase patch groff-1.21-CVE-2009-5081.patch
- Drop patch groff-1.21-CVE-2009-5080.patch as it seems the shell
  script now properly safeguards against this
- Rebase patch 0002-documentation-for-the-locale-keyword.patch
- Recreate groff-force-locale-usage.patch for autotools buildsystem
- Add patch 0004-don-t-use-usr-bin-env-in-shebang.patch
- Remove groff_1.22.3-1.debian.diff and replace it with split
  debian patches:
  * bash-scripts.patch
  * sort-perl-hash-keys.patch</changelog>
  <changelog author="jengelh@inai.de" date="1547294400">- Trim tm signs</changelog>
  <changelog author="i@marguerite.su" date="1550491200">- install essential build files needed by ghostscript-fonts-grops</changelog>
  <changelog author="mcepl@suse.com" date="1576497600">- Add man page roff(7) to alternatives to avoid conflict with
  mandoc.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- don't recommend groff-full as that would pull in X etc by default.
  Instead use packageand on groff and ghostscript-library to only install
  groff-full when other deps are already there.</changelog>
  <changelog author="dimstar@opensuse.org" date="1602331200">- Don't create recursive link 'current' inside
  /usr/share/groff/%{version}.</changelog>
  <changelog author="sbrabec@suse.com" date="1638273600">- Remove /usr/share/groff/current from groff-full. It creates file
  conflicts during version upgrade (bsc#1192195#c8).</changelog>
  <changelog author="sbrabec@suse.com" date="1644235200">- Do not fail with rpm --excludedocs (bsc#1192195).</changelog>
</package>
<package pkgid="d3b7e3102f24be3b2c41420cb7b1bebc640b51f68efa1012de36b8474547d344" name="groff" arch="x86_64">
  <version epoch="0" ver="1.22.4" rel="150400.5.2.1"/>
  <changelog author="meissner@suse.com" date="1419076800">- build with PIE</changelog>
  <changelog author="tchvatal@suse.com" date="1423051200">- Version bump to latest release 1.22.3:
  * X11 resources for `gxditview', which were previously installed in
    /usr/X11/lib/X11/app-defaults no matter which `prefix' was set, are
    now installed in appresdir=$prefix/lib/X11/app-defaults.  If
    `appresdir' is not a standard X11 resource directory, the environment
    variable XFILESEARCHPATH should be set to this path.  The standard
    default directories depends on the system `libXt'.
  * This new preprocessor (contributed by Bernd Warken) allows embedding of
    code for GNU LilyPond (http://www.lilypond.org), a music typesetter.  The
    data gets automatically processed and embedded as EPS images.
  * Bernd Warken contributed a new preprocessor to handle Perl code that can
    be evaluated and then processed by groff.
  * Another preprocessor from Bernd Warken to pretty-print Pinyin syllables
    like `guo2wang2' as `guówáng'.
  * The pdfroff utility script now activates its `--no-toc-relocation' option
    by default, unless a request similar to:
    .if !\n[PHASE] .tm pdfroff-option:set toc_relocation=enabled
    is invoked during input file processing; (`.if !\n[PHASE] ...' ensures
    that the effect of the `.tm' request is restricted to the document setup
    phase of processing, as pdfroff sets it to 1 or 2 in the output phase,
    but leaves it unset in the setup phase).
    The bundled `spdf.tmac' macro package, which implicitly activates
    `-mpdfmark' for `ms' macro users, ensures that TOC relocation is
    appropriately enabled, when the `.TC' macro is invoked.
  * The -mom macro package now has full support for eqn, pic, and tbl, as well
    as captioning and labelling of pdf images and preprocessor output.  Lists
    of Figures, Equations, and Tables can now be autogenerated.  PDF_IMAGE has
    a new FRAME option.
  * A French introduction to the -me macro package has been added (file
    `meintro_fr.me').
  * In -mdoc, command %C is now available, providing a city or place
    reference.
- Refreshed patches:
  * groff-1.21-CVE-2009-5081.patch
  * groff-1.21-groffer-libexecdir.patch
  * groff-force-locale-usage.patch
- Replaced patches:
  * deleted groff_1.22.2-2.debian.diff
  * added groff_1.22.3-1.debian.diff
- New patches:
  * groff-multi-thread.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1469102400">- Add patch for bnc#989903 and move all scripts from libdir to
  libexecdir</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1513252800">- Replace xorg-x11-devel buildrequires by the needed individual
  libraries</changelog>
  <changelog author="tchvatal@suse.com" date="1513598400">- Set the license to GPL-3.0+ as per COPYING</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.com" date="1540900800">- add groff-reproducible-mdate.patch and groff-use-SDE.patch to allow
  to override build time to make package build reproducible (boo#1047218)</changelog>
  <changelog author="tchvatal@suse.com" date="1546516800">- Switch to multibuild in order to avoid having to manage 2
  differentiating spec files</changelog>
  <changelog author="tchvatal@suse.com" date="1546603200">- Version update to 1.22.4:
  * Many fixes for hyphenation helping
  * Various build tweaks
  * See the NEWS file for details
- New signature -&gt; update keyring file
- Remove upstream merged patches:
  * groff-multi-thread.patch
  * groff-reproducible-mdate.patch
  * groff-use-SDE.patch
- Remove groff-1.21-groffer-libexecdir.patch as upstream redid
  the autotools rules and uses configure option now
- Rebase patch groff-1.20.1-deunicode.patch
- Rebase patch groff-1.21-CVE-2009-5081.patch
- Drop patch groff-1.21-CVE-2009-5080.patch as it seems the shell
  script now properly safeguards against this
- Rebase patch 0002-documentation-for-the-locale-keyword.patch
- Recreate groff-force-locale-usage.patch for autotools buildsystem
- Add patch 0004-don-t-use-usr-bin-env-in-shebang.patch
- Remove groff_1.22.3-1.debian.diff and replace it with split
  debian patches:
  * bash-scripts.patch
  * sort-perl-hash-keys.patch</changelog>
  <changelog author="jengelh@inai.de" date="1547294400">- Trim tm signs</changelog>
  <changelog author="i@marguerite.su" date="1550491200">- install essential build files needed by ghostscript-fonts-grops</changelog>
  <changelog author="mcepl@suse.com" date="1576497600">- Add man page roff(7) to alternatives to avoid conflict with
  mandoc.</changelog>
  <changelog author="lnussel@suse.de" date="1578571200">- don't recommend groff-full as that would pull in X etc by default.
  Instead use packageand on groff and ghostscript-library to only install
  groff-full when other deps are already there.</changelog>
  <changelog author="dimstar@opensuse.org" date="1602331200">- Don't create recursive link 'current' inside
  /usr/share/groff/%{version}.</changelog>
  <changelog author="sbrabec@suse.com" date="1638273600">- Remove /usr/share/groff/current from groff-full. It creates file
  conflicts during version upgrade (bsc#1192195#c8).</changelog>
  <changelog author="sbrabec@suse.com" date="1644235200">- Do not fail with rpm --excludedocs (bsc#1192195).</changelog>
</package>
<package pkgid="e2050940c3949cef68922c064444a31b7760b63480ab6a44a5ba7361c9cfe76a" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="faee0c717b051ae09188ee7de357588d0e283619b185114b6f1e8f610680f802" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="2f6b684a49de17ee397539b4d369fbaae96a4405fecd7768936c6b5f47ac3c4b" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="2229d0a41b2c34bf4ceb910c96b6ecd22e68209c5d747399739a754e72a1de02" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="c405c1b4e7e36d9a5227076a8a6a4fe675c42a4c87a56016d51cde21db425673" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="1b2bd2f5ec8f60890ef000da668ab2164ff3ae3b52ed49b2566afafc4140f010" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="e499f49c6c641969b367f8419ef1e8f3d73a69b2cbac5a29a9d65f81fc3f576e" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="ae60b1d88ababf517a17ad183190f4fbaeabd21aaec4f6830c283d1b9835f71c" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="7c03fc7f4d71afdf679a33c070e7d0f041ca56656d763d370e87c0ef2f4a8966" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="290ee08560d483e8a708b76f6ea92e82a851a2daccf859c984f88897d949d8c8" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="9b3156ff5384ce96116c52e1993145964a3354e03225bd1d7ffdf940be86c9f1" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="7ce6dbfe48ee6491d207934bf8da40075dd6ca8066d853eb682227664fca8011" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="b10ffc050181633fd571d91595929233da923a4e3dacb74764f4f51940a840e6" name="grub2" arch="aarch64">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="bd8dbac070e0d47fd8cb0f3aa03c661dad45fa2a02df4989e0afe41fe2f6f637" name="grub2" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="9049ff25a0211aab9138cd13cb4fb65fcf37e2f9420b7ef9bf941876b80ad645" name="grub2" arch="src">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="14190abfaa6c236a77e7a40888c624e04a8abdb23435216531af581d7e5f7c94" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="917af0fc80c6281faba270b390d6a4a2e1af73ac8ee8d065de93d55c929c638e" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="89331177af5282c33ee147a96337db359f71dba0e0e022306c74bad011676fe1" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="6368756444fd73eccfe3dc13f0a716ac6b5b70ca0794adce3a6de1971bf30995" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="95655148902c547cc443d23830155e81a6de366aa6ba5a8248360732188bd6b1" name="grub2-arm64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="ffe0be0affa87e019a2bdf96aa5d1673735757d7f0fbd41f2ce8ecfed84a8ae0" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="770ce9f193523491fecef11634d443965c44872ac7ae84ce61d1f7b716d23f55" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="480d4769a27de5b25da33aaddb86f0cc22d8349c9e5e36a556b372bf51502aa4" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="723a7e7414e7a648699dae25e260bd2b7e1dbfba40d283928f6a145d324b9d0d" name="grub2-i386-pc" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="405548aab9b80163c80c9ccf8ef76475f6840182d87929fc17f878543126599b" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="6ab0edbb54db8caf64cf98cacb6105a8505677cdc8454186ff847c33b3e05234" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="5a8512a13c245fd1d34c92b7da10a3a936a3fe79f397a49b54991212f4a14cb2" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="f1dd3cbad13ab4281d9eb70843325d282e43640d3a81715b6cc51d2b0a95a7b2" name="grub2-s390x-emu" arch="s390x">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="a29dfc0bbee1a4e81f9b993d143a1f8c957ee71a9c794c7aff0607d6dfddff7c" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="85d2c2625f2514a91e0f2f21a5a99f60c5700a5d2f52452f054d7d123ed71819" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="55c92808d84c0de855ac9caacb55484562a852f875a067b558aac06c76a13a0c" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="6ac4612241f052c5498981c1bf9292f75caa7cb95ed0482d0f2f73e089599da3" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="61b51147a79e0c90b843fef3c629716a15ccb234cb87bbca7bf88026d16092a1" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="7de3a94dfea22d353dbb891b47bedf37933322f5071a19ff2145394d60b29ddf" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="8cdd1f24f39c83f2f4317678b4c89129d7f5071811841b2998359279b5dc7fa7" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="e156a7d5ee026c6f27281c6d8c260d9fb3fb01702199fc57653ba4ac0381eed2" name="grub2-x86_64-efi" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="57e9b0f3578fa6d1edf41f8014d15f7b80109817093c0ee00e09447c4d021ad2" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.33.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1644494400">- Set grub2-check-default shebang to "#!/bin/bash", as the the code
  uses many instructions which are undefined for a POSIX sh.
  (boo#1195794).</changelog>
  <changelog author="msuchanek@suse.com" date="1646136000">- Remove obsolete openSUSE 12.2 conditionals in spec file
- Clean up powerpc certificate handling.</changelog>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
</package>
<package pkgid="836a077f10f019c53d752c77531d3c92efc9e3c2fe85783583cd20a052272df6" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.38.1"/>
  <changelog author="mchang@suse.com" date="1646395200">- Support saving grub environment for POWER signed grub images (jsc#SLE-23854)
  * 0001-Add-grub_envblk_buf-helper-function.patch
  * 0002-Add-grub_disk_write_tail-helper-function.patch
  * 0003-grub-install-support-prep-environment-block.patch
  * 0004-Introduce-prep_load_env-command.patch
  * 0005-export-environment-at-start-up.patch
- Use enviroment variable in early boot config to looking up root device
  * grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1646913600">- Fix error in grub-install when linux root device is on lvm thin volume
  (bsc#1192622) (bsc#1191974)
  * 0001-grub-install-bailout-root-device-probing.patch</changelog>
  <changelog author="mchang@suse.com" date="1646913601">- Fix riscv64 build error
  * 0001-RISC-V-Adjust-march-flags-for-binutils-2.38.patch</changelog>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
</package>
<package pkgid="4ddd5cd0b1032fd64daefc93722a5b83908290e6b6ab93b17d17699933d84285" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.41.1"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="b24e28692838eb8d0d87f0f6ce0c23ac1cdc57d4651db4b7b966d58b004fa50e" name="grub2-x86_64-xen" arch="noarch">
  <version epoch="0" ver="2.06" rel="150400.11.43.2"/>
  <changelog author="mchang@suse.com" date="1647000000">- Fix grub-install error when efi system partition is created as mdadm software
  raid1 device (bsc#1179981) (bsc#1195204)
  * 0001-install-fix-software-raid1-on-esp.patch</changelog>
  <changelog author="mchang@suse.com" date="1650542400">- Fix Power10 LPAR error "The partition fails to activate as partition went
  into invalid state" (bsc#1198714)
  * 0001-powerpc-do-CAS-in-a-more-compatible-way.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998400">- Use boot disks in OpenFirmware, fixing regression caused by
  0001-ieee1275-implement-FCP-methods-for-WWPN-and-LUNs.patch, when
  the root LV is completely in the boot LUN (bsc#1197948)
  * 0001-ofdisk-improve-boot-time-by-lookup-boot-disk-first.patch</changelog>
  <changelog author="mchang@suse.com" date="1653998401">- Security fixes and hardenings for boothole 3 / boothole 2022 (bsc#1198581)
  * 0001-video-Remove-trailing-whitespaces.patch
  * 0002-loader-efi-chainloader-Simplify-the-loader-state.patch
  * 0003-commands-boot-Add-API-to-pass-context-to-loader.patch
- Fix CVE-2022-28736 (bsc#1198496)
  * 0004-loader-efi-chainloader-Use-grub_loader_set_ex.patch
- Fix CVE-2022-28735 (bsc#1198495)
  * 0005-kern-efi-sb-Reject-non-kernel-files-in-the-shim_lock.patch
  * 0006-kern-file-Do-not-leak-device_name-on-error-in-grub_f.patch
  * 0007-video-readers-png-Abort-sooner-if-a-read-operation-f.patch
  * 0008-video-readers-png-Refuse-to-handle-multiple-image-he.patch
- Fix CVE-2021-3695 (bsc#1191184)
  * 0009-video-readers-png-Drop-greyscale-support-to-fix-heap.patch
- Fix CVE-2021-3696 (bsc#1191185)
  * 0010-video-readers-png-Avoid-heap-OOB-R-W-inserting-huff-.patch
  * 0011-video-readers-png-Sanity-check-some-huffman-codes.patch
  * 0012-video-readers-jpeg-Abort-sooner-if-a-read-operation-.patch
  * 0013-video-readers-jpeg-Do-not-reallocate-a-given-huff-ta.patch
  * 0014-video-readers-jpeg-Refuse-to-handle-multiple-start-o.patch
- Fix CVE-2021-3697 (bsc#1191186)
  * 0015-video-readers-jpeg-Block-int-underflow-wild-pointer-.patch
  * 0016-normal-charset-Fix-array-out-of-bounds-formatting-un.patch
- Fix CVE-2022-28733 (bsc#1198460)
  * 0017-net-ip-Do-IP-fragment-maths-safely.patch
  * 0018-net-netbuff-Block-overly-large-netbuff-allocs.patch
  * 0019-net-dns-Fix-double-free-addresses-on-corrupt-DNS-res.patch
  * 0020-net-dns-Don-t-read-past-the-end-of-the-string-we-re-.patch
  * 0021-net-tftp-Prevent-a-UAF-and-double-free-from-a-failed.patch
  * 0022-net-tftp-Avoid-a-trivial-UAF.patch
  * 0023-net-http-Do-not-tear-down-socket-if-it-s-already-bee.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0024-net-http-Fix-OOB-write-for-split-http-headers.patch
- Fix CVE-2022-28734 (bsc#1198493)
  * 0025-net-http-Error-out-on-headers-with-LF-without-CR.patch
  * 0026-fs-f2fs-Do-not-read-past-the-end-of-nat-journal-entr.patch
  * 0027-fs-f2fs-Do-not-read-past-the-end-of-nat-bitmap.patch
  * 0028-fs-f2fs-Do-not-copy-file-names-that-are-too-long.patch
  * 0029-fs-btrfs-Fix-several-fuzz-issues-with-invalid-dir-it.patch
  * 0030-fs-btrfs-Fix-more-ASAN-and-SEGV-issues-found-with-fu.patch
  * 0031-fs-btrfs-Fix-more-fuzz-issues-related-to-chunks.patch
  * 0032-Use-grub_loader_set_ex-for-secureboot-chainloader.patch
- Update SBAT security contact (boo#1193282)
- Bump grub's SBAT generation to 2</changelog>
  <changelog author="mchang@suse.com" date="1663329600">- Fix installation failure due to unavailable nvram device on
  ppc64le (bsc#1201361)
  * 0001-grub-install-set-point-of-no-return-for-powerpc-ieee1275.patch</changelog>
  <changelog author="mchang@suse.com" date="1664884800">- Add patches for automatic TPM disk unlock (jsc#SLE-24018) (bsc#1196668) (jsc#PED-1276)
  * 0001-luks2-Add-debug-message-to-align-with-luks-and-geli-.patch
  * 0002-cryptodisk-Refactor-to-discard-have_it-global.patch
  * 0003-cryptodisk-Return-failure-in-cryptomount-when-no-cry.patch
  * 0004-cryptodisk-Improve-error-messaging-in-cryptomount-in.patch
  * 0005-cryptodisk-Improve-cryptomount-u-error-message.patch
  * 0006-cryptodisk-Add-infrastructure-to-pass-data-from-cryp.patch
  * 0007-cryptodisk-Refactor-password-input-out-of-crypto-dev.patch
  * 0008-cryptodisk-Move-global-variables-into-grub_cryptomou.patch
  * 0009-cryptodisk-Improve-handling-of-partition-name-in-cry.patch
  * 0010-protectors-Add-key-protectors-framework.patch
  * 0011-tpm2-Add-TPM-Software-Stack-TSS.patch
  * 0012-protectors-Add-TPM2-Key-Protector.patch
  * 0013-cryptodisk-Support-key-protectors.patch
  * 0014-util-grub-protect-Add-new-tool.patch
- Fix no disk unlocking happen (bsc#1196668)
  * 0001-crytodisk-fix-cryptodisk-module-looking-up.patch
- Fix build error
  * fix-tpm2-build.patch</changelog>
  <changelog author="mchang@suse.com" date="1666612800">- Include loopback into signed grub2 image (jsc#PED-2150)</changelog>
  <changelog author="mchang@suse.com" date="1667563200">- Security fixes and hardenings
  * 0001-font-Reject-glyphs-exceeds-font-max_glyph_width-or-f.patch
  * 0002-font-Fix-size-overflow-in-grub_font_get_glyph_intern.patch
- Fix CVE-2022-2601 (bsc#1205178)
  * 0003-font-Fix-several-integer-overflows-in-grub_font_cons.patch
  * 0004-font-Remove-grub_font_dup_glyph.patch
  * 0005-font-Fix-integer-overflow-in-ensure_comb_space.patch
  * 0006-font-Fix-integer-overflow-in-BMP-index.patch
  * 0007-font-Fix-integer-underflow-in-binary-search-of-char-.patch
  * 0008-fbutil-Fix-integer-overflow.patch
- Fix CVE-2022-3775 (bsc#1205182)
  * 0009-font-Fix-an-integer-underflow-in-blit_comb.patch
  * 0010-font-Harden-grub_font_blit_glyph-and-grub_font_blit_.patch
  * 0011-font-Assign-null_font-to-glyphs-in-ascii_font_glyph.patch
  * 0012-normal-charset-Fix-an-integer-overflow-in-grub_unico.patch
- Bump upstream SBAT generation to 3</changelog>
  <changelog author="glin@suse.com" date="1670587200">- Move unsupported zfs modules into 'extras' packages
  (bsc#1205554) (PED-2947)</changelog>
  <changelog author="mchang@suse.com" date="1671796800">- Make grub.cfg invariant to efi and legacy platforms (bsc#1205200)
- Removed patch linuxefi
  * grub2-secureboot-provide-linuxefi-config.patch
  * grub2-secureboot-use-linuxefi-on-uefi-in-os-prober.patch
  * grub2-secureboot-use-linuxefi-on-uefi.patch
- Rediff
  * grub2-btrfs-05-grub2-mkconfig.patch
  * grub2-efi-xen-cmdline.patch
  * grub2-s390x-05-grub2-mkconfig.patch
  * grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1677844800">- Make grub more robust against storage race condition causing system boot
  failures (bsc#1189036)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1679572800">- Fix aarch64 kiwi image's file not found due to '/@' prepended to path in
  btrfs filesystem. (bsc#1209165)
  * grub2-btrfs-05-grub2-mkconfig.patch</changelog>
  <changelog author="mchang@suse.com" date="1680782400">- Fix unknown filesystem error on disks with 4096 sector size (bsc#1207064)
  (bsc#1209234)
  * 0001-grub-core-modify-sector-by-sysfs-as-disk-sector.patch
- Fix installation over serial console ends up in infinite boot loop
  (bsc#1187810) (bsc#1209667) (bsc#1209372)
  * 0001-Fix-infinite-boot-loop-on-headless-system-in-qemu.patch</changelog>
  <changelog author="mchang@suse.com" date="1682078400">- Fix PowerVS deployment fails to boot with 90 cores (bsc#1208581)
  * 0001-ieee1275-implement-vec5-for-cas-negotiation.patch
  * 0002-kern-ieee1275-init-Convert-plain-numbers-to-constant.patch
  * 0003-kern-ieee1275-init-Extended-support-in-Vec5.patch</changelog>
  <changelog author="mchang@suse.com" date="1683201600">- grub2-once: Fix 'sh: terminal_output: command not found' error (bsc#1204563)</changelog>
  <changelog author="mchang@suse.com" date="1695211200">- Fix a boot delay regression in PowerPC PXE boot (bsc#1201300)
  * 0001-ieee1275-ofdisk-retry-on-open-and-read-failure.patch</changelog>
  <changelog author="mchang@suse.com" date="1696593600">- Fix CVE-2023-4692 (bsc#1215935)
- Fix CVE-2023-4693 (bsc#1215936)
  * 0001-fs-ntfs-Fix-an-OOB-write-when-parsing-the-ATTRIBUTE_.patch
  * 0002-fs-ntfs-Fix-an-OOB-read-when-reading-data-from-the-r.patch
  * 0003-fs-ntfs-Fix-an-OOB-read-when-parsing-directory-entri.patch
  * 0004-fs-ntfs-Fix-an-OOB-read-when-parsing-bitmaps-for-ind.patch
  * 0005-fs-ntfs-Fix-an-OOB-read-when-parsing-a-volume-label.patch
  * 0006-fs-ntfs-Make-code-more-readable.patch
- Bump upstream SBAT generation to 4</changelog>
  <changelog author="mchang@suse.com" date="1697457600">- Fix detection of encrypted disk's uuid in powerpc to cope with logical disks
  when signed image installation is specified (bsc#1216075)
  * 0003-grub-install-support-prep-environment-block.patch
- grub2.spec: Add support to unlocking multiple encrypted disks in signed
  grub.elf image for logical disks</changelog>
  <changelog author="mchang@suse.com" date="1698667200">- Fix fadump not working with 1GB/2GB/4GB LMB[P10] (bsc#1216253)
  * 0001-kern-ieee1275-init-ppc64-Restrict-high-memory-in-pre.patch</changelog>
  <changelog author="mchang@suse.com" date="1698753600">- Fix failure to identify recent ext4 filesystem (bsc#1216010)
  * 0001-fs-ext2-Ignore-checksum-seed-incompat-feature.patch
  * 0001-fs-ext2-Ignore-the-large_dir-incompat-feature.patch
- Add patch to fix reading files from btrfs with "implicit" holes
  * 0001-fs-btrfs-Zero-file-data-not-backed-by-extents.patch</changelog>
</package>
<package pkgid="0396f18c23861d41edf2c3eeb847b73b0814065c5be27ec3010062d22f692f8f" name="gstreamer-plugins-base" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="426d3a2d20d9cc105b6b5f54ed554d93aa7e82474015ac28b4f250ac3268ddb8" name="gstreamer-plugins-base" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="21576ccad0929ad4e225b0eec754e381eddd9fa3b19ed19cc2abce498c559b4b" name="gstreamer-plugins-base" arch="src">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="6ee39fa650b12679ccb8d7c0c49a79ab48da276cf368eb928b25d2432f6b5076" name="gstreamer-plugins-base" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="a92cb145432a0c1051c3f1aa42a10bbd302d96cca74d6cee36bb4b5733fb6c69" name="gtk3" arch="src">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="14ac0e5d7874bad76c021e0c6126f0b411ea070672e4a54bc509dec771a75dc2" name="gtk3-data" arch="noarch">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="6acbec59c942fab0cf81511c07b1aa36d7a4949f560d0981e26a7ed95c0f4ee3" name="gtk3-schema" arch="noarch">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="209aa3b82e7370a568664afda41bb820a53c172703b1903d1122397a938abd06" name="gtk3-tools" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="348b5cea1350fbb48b9f7babb2a3e63e2a46b2233213e2e100252f634285d056" name="gtk3-tools" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="89eca82574f87d42f67c6aa032b46be8c6a60df183fb1bcf0779a2e0b776a821" name="gtk3-tools" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="fc2c01792e7cbf21582b09bca382677f63be99dc637183afddaccd0e4cf0cacf" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.13.1"/>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Add lua54.patch to fix building with lua 5.4</changelog>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
</package>
<package pkgid="1ef4a4d291fc1f5c90df3dd4d09a93ddf6ce0805b8b23f7ccc8f438a1ceee220" name="haproxy" arch="s390x">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.13.1"/>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Add lua54.patch to fix building with lua 5.4</changelog>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
</package>
<package pkgid="aec65c76e1024ca703d4ca24756ea12ea197663dbd9decfd4987f04d370ab6ab" name="haproxy" arch="src">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.13.1"/>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Add lua54.patch to fix building with lua 5.4</changelog>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
</package>
<package pkgid="5a79163d91c6c6822f3f67301a9208901151db126bbe71abfd89f20b0e870aee" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.13.1"/>
  <changelog author="gmbr3@opensuse.org" date="1611748800">- Add lua54.patch to fix building with lua 5.4</changelog>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
</package>
<package pkgid="f10553d57b768655fd5dc7aa4f8bec438edda9be51f5fa64b7ca7a4632191a9d" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.16.1"/>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
</package>
<package pkgid="4195307a63cb405afa4af1019a533f8423f3f24c55dec86cf3a1d23cca1e03ac" name="haproxy" arch="s390x">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.16.1"/>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
</package>
<package pkgid="a47827bbae261236983b24a15e1aa589427ed9f45bc35c1215e44071d3f9b477" name="haproxy" arch="src">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.16.1"/>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
</package>
<package pkgid="21f20f5772d0396c81fdec15c42648bf4e9bd93f201046703eadd723f3adbe32" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.16.1"/>
  <changelog author="mrueckert@suse.de" date="1612612800">- Update to version 2.3.5+git0.5902ad99b:
  * [RELEASE] Released version 2.3.5
  * MINOR: config: Deprecate and ignore tune.chksize global option
  * BUG/MINOR: sock: Unclosed fd in case of connection allocation failure
  * BUG/MEDIUM: mux-h2: do not quit the demux loop before setting END_REACHED
  * BUG/MEDIUM: mux-h2: handle remaining read0 cases
  * BUILD: Makefile: move REGTESTST_TYPE default setting
  * MINOR: cli/show_fd: report local and report ports when known
  * BUILD: ssl: fix build breakage with last commit
  * BUG/MINOR: ssl: do not try to use early data if not configured
  * BUG/MINOR: xxhash: make sure armv6 uses memcpy()
  * BUG/MINOR: mux_h2: fix incorrect stat titles
  * BUG/MEDIUM: ssl: check a connection's status before computing a handshake
  * BUG/MEDIUM: ssl/cli: abort ssl cert is freeing the old store
  * BUG/MINOR: stick-table: Always call smp_fetch_src() with a valid arg list
  * DOC: management: fix "show resolvers" alphabetical ordering
  * MINOR: h1: Raise the chunk size limit up to (2^52 - 1)
  * MINOR: mux-h1/show_fd: report as suspicious an entry with too many calls
  * MINOR: mux-h2/show_fd: report as suspicious an entry with too many calls
  * MINOR: ssl/show_fd: report some FDs as suspicious when possible
  * MINOR: cli/show_fd: report some easily detectable suspicious states
  * MINOR: cli: give the show_fd helpers the ability to report a suspicious entry
  * MINOR: mux-fcgi: make the "show fd" helper also decode the fstrm subscriber when known
  * MINOR: mux-h1: make the "show fd" helper also decode the h1s subscriber when known
  * MINOR: mux-h2: make the "show fd" helper also decode the h2s subscriber when known
  * MINOR: xprt/mux: export all *_io_cb functions so that "show fd" resolves them
  * MINOR: ssl: provide a "show fd" helper to report important SSL information
  * MINOR: xprt: add a new show_fd() helper to complete some "show fd" dumps.
  * MINOR: cli: make "show fd" also report the xprt and xprt_ctx
  * CLEANUP: cli: make "show fd" use a const connection to access other fields
  * CLEANUP: tools: make resolve_sym_name() take a const pointer
  * MINOR: contrib: Make the wireshark peers dissector compile for more distribs.
  * BUG/MINOR: backend: check available list allocation for reuse
  * BUG/MEDIUM: backend: never reuse a connection for tcp mode
  * REORG: backend: simplify conn_backend_get
  * BUG/MEDIUM: session: only retrieve ready idle conn from session
  * BUG/MINOR: ssl: init tmp chunk correctly in ssl_sock_load_sctl_from_file()
  * BUG/MINOR: config: fix leak on proxy.conn_src.bind_hdr_name
  * BUG/MEDIUM: filters/htx: Fix data forwarding when payload length is unknown
  * DOC: Improve documentation of the various hdr() fetches
  * BUILD/MINOR: lua: define _GNU_SOURCE for LLONG_MAX
  * BUG/MEDIUM: mux-h2: fix read0 handling on partial frames
  * BUG/MEDIUM: tcpcheck: Don't destroy connection in the wake callback context
  * BUG/MINOR: mworker: define _GNU_SOURCE for strsignal()
  * BUG/MINOR: mux_h2: missing space between "st" and ".flg" in the "show fd" helper
  * BUG/MINOR: peers: Wrong "new_conn" value for "show peers" CLI command.
  * MINOR: build: discard echoing in help target
  * BUG/MINOR: peers: Possible appctx pointer dereference.
  * BUG/MEDIUM: stats: add missing INF_BUILD_INFO definition
  * BUILD: peers: fix build warning about unused variable
  * BUG/MINOR: dns: SRV records ignores duplicated AR records (v2)
  * MINOR: peers: Add traces for peer control messages.
  * BUG/MINOR: threads: Fixes the number of possible cpus report for Mac.
  * MINOR: server: Forbid server definitions in frontend sections
  * MINOR: config: Add failifnotcap() to emit an alert on proxy capabilities
  * BUG/MINOR: init: Use a dynamic buffer to set HAPROXY_CFGFILES env variable</changelog>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
</package>
<package pkgid="4ee206e40fbbc02041fa16382195fb24737a4d182254ade432d2a9c88beb7c54" name="haproxy" arch="aarch64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="70a46549d0ba581bd6318d12f1a04a0405626e45e8e7dd280df45ec3a2b06d41" name="haproxy" arch="s390x">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="523aab737741d16772293d52fa70904f07b0233954757990bfd962c11e2a758d" name="haproxy" arch="src">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="7c0630c171ef55ed6aa8ce2687db001f8a4b7247868b5097fcda32e4358b1a06" name="haproxy" arch="x86_64">
  <version epoch="0" ver="2.4.22+git0.f8e3218e2" rel="150400.3.19.1"/>
  <changelog author="mrueckert@suse.de" date="1614772800">- Update to version 2.3.6+git0.7851701ed:
  * [RELEASE] Released version 2.3.6
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on read error/timeout
  * BUG/MINOR: mux-h2: Fix typo in scheme adjustment
  * DOC: spoe: Add a note about fragmentation support in HAProxy
  * BUG/MEDIUM: spoe: Kill applets if there are pending connections and nbthread &gt; 1
  * BUG/MINOR: connection: Use the client's dst family for adressless servers
  * BUG/MINOR: tcp-act: Don't forget to set the original port for IPv4 set-dst rule
  * BUG/MINOR: http-ana: Only consider dst address to process originalto option
  * BUG/MINOR: mux-h1: Immediately report H1C errors from h1_snd_buf()
  * BUG/MINOR: stats: fix compare of no-maint url suffix
  * CLEANUP: muxes: Remove useless if condition in show_fd function
  * BUG/MINOR: ssl: potential null pointer dereference in ckchs_dup()
  * BUG/MEDIUM: resolvers: Reset address for unresolved servers
  * BUG/MEDIUM: resolvers: Reset server address and port for obselete SRV records
  * BUG/MINOR: resolvers: new callback to properly handle SRV record errors
  * BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record
  * BUG/MINOR: resolvers: Fix condition to release received ARs if not assigned
  * BUG/MINOR: fd: properly wait for !running_mask in fd_set_running_excl()
  * BUG/MINOR: proxy: wake up all threads when sending the hard-stop signal
  * BUG/MEDIUM: cli/shutdown sessions: make it thread-safe
  * BUG/MEDIUM: proxy: use thread-safe stream killing on hard-stop
  * BUG/MEDIUM: vars: make functions vars_get_by_{name,desc} thread-safe
  * BUG/MINOR: sample: secure convs that accept base64 string and var name as args
  * MINOR: Configure the `cpp` userdiff driver for *.[ch] in .gitattributes
  * BUG/MINOR: ssl/cli: potential null pointer dereference in "set ssl cert"
  * BUG/MEDIUM: mux-h1: Fix handling of responses to CONNECT other than 200-ok
  * BUG/MINOR: server: Be sure to cut the last parsed field of a server-state line
  * BUG/MINOR: server: Init params before parsing a new server-state line
  * BUG/MINOR: http-rules: Always replace the response status on a return action
  * BUG/MEDIUM: spoe: Resolve the sink if a SPOE logs in a ring buffer
  * BUG/MEDIUM: lists: Avoid an infinite loop in MT_LIST_TRY_ADDQ().
  * DOC: explain the relation between pool-low-conn and tune.idle-pool.shared
  * BUILD: ssl: introduce fine guard for OpenSSL specific SCTL functions
  * BUG/MINOR: sample: Always consider zero size string samples as unsafe
  * BUG/MEDIUM: checks: don't needlessly take the server lock in health_adjust()
  * BUG/MINOR: checks: properly handle wrapping time in __health_adjust()
  * BUG/MINOR: session: atomically increment the tracked sessions counter
  * BUG/MINOR: server: Remove RMAINT from admin state when loading server state
  * CLEANUP: channel: fix comment in ci_putblk.
  * DOC: tune: explain the origin of block size for ssl.cachesize
  * BUG/MINOR: server: Don't call fopen() with server-state filepath set to NULL
  * BUG/MINOR: cfgparse: do not mention "addr:port" as supported on proxy lines
  * BUG/MINOR: stats: revert the change on ST_CONVDONE
  * BUG/MEDIUM: config: don't pick unset values from last defaults section
  * CLEANUP: deinit: release global and per-proxy server-state variables on deinit
  * BUG/MINOR: server: Fix server-state-file-name directive
  * BUG/MINOR: backend: hold correctly lock when killing idle conn
  * BUG/MINOR: tools: Fix a memory leak on error path in parse_dotted_uints()
  * BUG/MINOR: server: re-align state file fields number
  * BUG/MEDIUM: mux-h1: Always set CS_FL_EOI for response in MSG_DONE state
  * BUG/MINOR: http-ana: Don't increment HTTP error counter on internal errors
  * BUG/MINOR: intops: fix mul32hi()'s off-by-one
  * BUILD: ssl: guard SSL_CTX_set_msg_callback with SSL_CTRL_SET_MSG_CALLBACK macro
  * BUILD: ssl: guard SSL_CTX_add_server_custom_ext with special macro
  * BUILD: ssl: fix typo in HAVE_SSL_CTX_ADD_SERVER_CUSTOM_EXT macro
  * MINOR: check: do not ignore a connection header for http-check send</changelog>
  <changelog author="mrueckert@suse.de" date="1615896000">- Update to version 2.3.7+git0.2d39ce334:
  * [RELEASE] Released version 2.3.7
  * BUG/MINOR: resolvers: Add missing case-insensitive comparisons of DNS hostnames
  * MINOR: resolvers: Don't try to match immediatly renewed ADD items
  * MINOR: resolvers: Use milliseconds for cached items in resolver responses
  * BUG/MEDIUM: resolvers: Skip DNS resolution at startup if SRV resolution is set
  * BUG/MEDIUM: resolvers: Don't release resolution from a requester callbacks
  * MINOR: resolvers: Directly call srvrq_update_srv_state() when possible
  * MINOR: resolvers: Add function to change the srv status based on SRV resolution
  * MINOR: resolvers: Purge answer items when a SRV resolution triggers an error
  * MINOR: resolvers: Use a function to remove answers attached to a resolution
  * BUG/MEDIUM: resolvers: Trigger a DNS resolution if an ADD item is obsolete
  * BUG/MINOR; resolvers: Ignore DNS resolution for expired SRV item
  * MINOR: resolvers: new function find_srvrq_answer_record()
  * BUG/MEDIUM: resolvers: Fix the loop looking for an existing ADD item
  * BUG/MEDIUM: resolvers: Don't set an address-less server as UP
  * BUG/MINOR: resolvers: Unlink DNS resolution to set RMAINT on SRV resolution
  * BUG/MINOR: resolvers: Reset server address on DNS error only on status change
  * BUG/MINOR: resolvers: Consider server to have no IP on DNS resolution error
  * Revert "BUG/MINOR: resolvers: Only renew TTL for SRV records with an additional record"
  * CLEANUP: tcp-rules: add missing actions in the tcp-request error message
  * BUG/MINOR: tcpcheck: Fix double free on error path when parsing tcp/http-check
  * BUG/MINOR: session: Add some forgotten tests on session's listener
  * BUG/MINOR: proxy/session: Be sure to have a listener to increment its counters
  * BUG/MINOR: tcpcheck: Update .health threshold of agent inside an agent-check
  * BUG/MEDIUM: filters: Set CF_FL_ANALYZE on channels when filters are attached
  * BUILD: atomic/arm64: force the register pairs to use in __ha_cas_dw()
  * BUG/MEDIUM: stick-tables: fix ref counter in table entry using multiple http tracksc.
  * OPTIM: task: automatically adjust the default runqueue-depth to the threads
  * MINOR: task: give the scheduler a bit more flexibility in the runqueue size
  * MEDIUM: task: remove the tasks_run_queue counter and have one per thread
  * MEDIUM: ssl: implement xprt_set_used and xprt_set_idle to relax context checks
  * MINOR: xprt: add new xprt_set_idle and xprt_set_used methods
  * MEDIUM: muxes: mark idle conns tasklets with TASK_F_USR1
  * MINOR: task: add an application specific flag to the state: TASK_F_USR1
  * BUG/MEDIUM: ssl: properly remove the TASK_HEAVY flag at end of handshake
  * MINOR: ssl: mark the SSL handshake tasklet as heavy
  * MINOR: task: limit the number of subsequent heavy tasks with flag TASK_HEAVY
  * MEDIUM: backend: use a trylock when trying to grab an idle connection
  * MINOR: pools: double the local pool cache size to 1 MB
  * MEDIUM: pools: add CONFIG_HAP_NO_GLOBAL_POOLS and CONFIG_HAP_GLOBAL_POOLS
  * MEDIUM: streams: do not use the streams lock anymore
  * MINOR: streams: use one list per stream instead of a global one
  * MINOR: cli/streams: make "show sess" dump all streams till the new epoch
  * MINOR: stream: add an "epoch" to figure which streams appeared when
  * MINOR: dynbuf: pass offer_buffers() the number of buffers instead of a threshold
  * MINOR: dynbuf: use regular lists instead of mt_lists for buffer_wait
  * MINOR: dynbuf: make the buffer wait queue per thread
  * OPTIM: lb-leastconn: do not unlink the server if it did not change
  * OPTIM: lb-leastconn: do not take the server lock on take_conn/drop_conn
  * OPTIM: lb-first: do not take the server lock on take_conn/drop_conn
  * MINOR: lb/api: let callers of take_conn/drop_conn tell if they have the lock
  * MINOR: server: move actconns to the per-thread structure
  * OPTIM: server: switch the actconn list to an mt-list
  * MINOR: listener: refine the default MAX_ACCEPT from 64 to 4
  * MINOR: tasks: refine the default run queue depth
  * BUG/MEDIUM: session: NULL dereference possible when accessing the listener
  * MINOR: atomic: implement a more efficient arm64 __ha_cas_dw() using pairs
  * MINOR: atomic: add armv8.1-a atomics variant for cas-dw
  * BUG/MINOR: mt-list: always perform a cpu_relax call on failure
  * REORG: atomic: reimplement pl_cpu_relax() from atomic-ops.h
  * BUG/MINOR: ssl: don't truncate the file descriptor to 16 bits in debug mode
  * BUG/MINOR: hlua: Don't strip last non-LWS char in hlua_pushstrippedstring()
  * BUG/MINOR: backend: fix condition for reuse on mode HTTP</changelog>
  <changelog author="mrueckert@suse.de" date="1616673600">- Update to version 2.3.8+git0.e572195c7:
  * [RELEASE] Released version 2.3.8
  * BUG/MINOR: http_fetch: make hdr_ip() reject trailing characters
  * MINOR: tools: make url2ipv4 return the exact number of bytes parsed
  * BUG/MEDIUM: thread: Fix a deadlock if an isolated thread is marked as harmless
  * BUG/MEDIUM: fd: Take the fd_mig_lock when closing if no DWCAS is available.
  * CLEANUP: fd: remove unused fd_set_running_excl()
  * BUG/MEDIUM: fd: do not wait on FD removal in fd_delete()
  * MINOR: fd: remove the unneeded running bit from fd_insert()
  * MINOR: fd: make fd_clr_running() return the remaining running mask
  * BUG/MEDIUM: lua: Always init the lua stack before referencing the context
  * BUG/MEDIUM: debug/lua: Use internal hlua function to dump the lua traceback
  * MINOR: lua: Slightly improve function dumping the lua traceback
  * BUILD: ssl: guard ecdh functions with SSL_CTX_set_tmp_ecdh macro
  * BUG/MINOR: ssl: Prevent disk access when using "add ssl crt-list"
  * BUG/MEDIUM: debug/lua: Don't dump the lua stack if not dumpable
  * MEDIUM: lua: Use a per-thread counter to track some non-reentrant parts of lua
  * MINOR/BUG: mworker/cli: do not use the unix_bind prefix for the master CLI socket
  * BUG/MINOR: protocol: add missing support of dgram unix socket.
  * BUG/MEDIUM: freq_ctr/threads: use the global_now_ms variable
  * MINOR: time: also provide a global, monotonic global_now_ms timer
  * BUG/MEDIUM: mux-fcgi: Fix locking of idle_conns lock in the FCGI I/O callback
  * BUG/MINOR: freq_ctr/threads: make use of the last updated global time
  * MINOR: time: export the global_now variable</changelog>
  <changelog author="mrueckert@suse.de" date="1617105600">- Update to version 2.3.9+git1.afb63bc04:
  * BUILD: backend: fix build breakage in idle conn locking fix
  * [RELEASE] Released version 2.3.9
  * BUG/MEDIUM: time: make sure to always initialize the global tick
  * BUG/MINOR: stats: Apply proper styles in HTML status page.
  * BUG/MINOR: payload: Wait for more data if buffer is empty in payload/payload_lv
  * MEDIUM: backend: use a trylock to grab a connection on high FD counts as well
  * BUG/MEDIUM: mux-h1: make h1_shutw_conn() idempotent</changelog>
  <changelog author="mrueckert@suse.de" date="1619179200">- Update to version 2.3.10+git0.4764f0e4e:
  * [RELEASE] Released version 2.3.10
  * BUG/MEDIUM: peers: re-work refcnt on table to protect against flush
  * BUG/MEDIUM: peers: re-work connection to new process during reload.
  * BUG/MINOR: peers: remove useless table check if initial resync is finished
  * BUG/MEDIUM: mux-h2: Properly handle shutdowns when received with data
  * BUG/MINOR: mworker: don't use oldpids[] anymore for reload
  * BUG/MINOR: mworker/init: don't reset nb_oldpids in non-mworker cases
  * BUG/MEDIUM: config: fix cpu-map notation with both process and threads
  * BUG/MEDIUM: mux-h2: Fix dfl calculation when merging CONTINUATION frames
  * BUG/MAJOR: mux-h2: Properly detect too large frames when decoding headers
  * BUG/MINOR: server: free srv.lb_nodes in free_server
  * BUG/MINOR: mux-h1: Release idle server H1 connection if data are received
  * BUG/MINOR: logs: Report the true number of retries if there was no connection
  * BUG/MINOR: http_htx: Remove BUG_ON() from http_get_stline() function
  * BUG/MINOR: http-fetch: Make method smp safe if headers were already forwarded
  * BUG/MINOR: ssl-samples: Fix ssl_bc_* samples when called from a health-check
  * MINOR: connection: Make bc_http_major compatible with tcp-checks
  * BUG/MINOR: connection: Fix fc_http_major and bc_http_major for TCP connections
  * MINOR: logs: Add support of checks as session origin to format lf strings
  * BUG/MINOR: checks: Set missing id to the dummy checks frontend
  * BUG/MEDIUM: threads: Ignore current thread to end its harmless period
  * DOC: ssl: Certificate hot update only works on fronted certificates
  * BUG/MEDIUM: sample: Fix adjusting size in field converter
  * MINOR: No longer rely on deprecated sample fetches for predefined ACLs
  * DOC: clarify that compression works for HTTP/2
  * BUG/MINOR: tools: fix parsing "us" unit for timers
  * CONTRIB: halog: fix issue with array of type char
  * REGTESTS: ssl: mark set_ssl_cert_bundle.vtc as broken
  * DOC: Explicitly state only IPv4 are supported by forwardfor/originalto options
  * REGTESTS: ssl: "set ssl cert" and multi-certificates bundle
  * BUG/MINOR: ssl: Add missing free on SSL_CTX in ckch_inst_free
  * BUG/MINOR: http_fetch: make hdr_ip() resistant to empty fields
  * BUG/MINOR: ssl: Prevent removal of crt-list line if the instance is a default one
  * BUG/MINOR: ssl: Fix update of default certificate
  * BUILD: tcp: use IPPROTO_IPV6 instead of SOL_IPV6 on FreeBSD/MacOS
  * BUG/MINOR: tcp: fix silent-drop workaround for IPv6</changelog>
  <changelog author="mrueckert@suse.de" date="1620993600">- Update to version 2.4.0+git0.6cbbecf09:
  https://www.haproxy.com/blog/announcing-haproxy-2-4/
  for all the details see /usr/share/doc/packages/haproxy/CHANGELOG
- refreshed patches to apply cleanly again
  haproxy-1.6.0-makefile_lib.patch
  haproxy-1.6.0-sec-options.patch
  lua54.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1623931200">- Update to version 2.4.1+git0.1ce7d4925:
  * [RELEASE] Released version 2.4.1
  * BUG/MINOR: mux-h2/traces: bring back the lost "sent H2 REQ/RES" traces
  * BUG/MINOR: mux-h2/traces: bring back the lost "rcvd H2 REQ" trace
  * MINOR: mux-h2: obey http-ignore-probes during the preface
  * BUG/MINOR: stats: make "show stat typed desc" work again
  * CLEANUP: mux-h2/traces: better align user messages
  * MINOR: mux-h2/trace: report a few connection-level info during h2_init()
  * MINOR: connection: add helper conn_append_debug_info()
  * BUG/MINOR: server: explicitly set "none" init-addr for dynamic servers
  * BUG/MINOR: mux-h1: do not skip the error response on bad requests
  * MINOR: backend: only skip LB when there are actual connections
  * BUG/MAJOR: queue: set SF_ASSIGNED when setting strm-&gt;target on dequeue
  * CLEANUP: global: remove unused definition of stopping_task[]
  * BUG/MINOR: mworker: fix typo in chroot error message
  * BUG/MINOR: ssl: use atomic ops to update global shctx stats
  * BUG/MEDIUM: shctx: use at least thread-based locking on USE_PRIVATE_CACHE
  * BUG/MEDIUM: server: do not auto insert a dynamic server in px addr_node
  * BUG/MINOR: server: do not keep an invalid dynamic server in px ids tree
  * BUG/MEDIUM: server: do not forget to generate the dynamic servers ids
  * BUG/MEDIUM: server: clear dynamic srv on delete from proxy id/name trees
  * BUG/MEDIUM: server: extend thread-isolate over much of CLI 'add server'
  * BUG/MINOR: stick-table: insert srv in used_name tree even with fixed id
  * DOC: lua: Add a warning about buffers modification in HTTP
  * BUG/MAJOR: resolvers: segfault using server template without SRV RECORDs
  * MEDIUM: resolvers: add a ref between servers and srv request or used SRV record
  * MEDIUM: resolvers: add a ref on server to the used A/AAAA answer item
  * BUG/MINOR: resolvers: answser item list was randomly purged or errors
  * CLEANUP: l7-retries: do not test the buffer before calling b_alloc()
  * BUG/MINOR: mux-fcgi: Expose SERVER_SOFTWARE parameter by default
  * BUG/MAJOR: htx: Fix htx_defrag() when an HTX block is expanded
  * CLEANUP: pools: remove now unused seq and pool_free_list
  * BUG/MAJOR: pools: fix possible race with free() in the lockless variant
  * MEDIUM: pools: use a single pool_gc() function for locked and lockless
  * MINOR: pools: call malloc_trim() under thread isolation
  * MINOR: pools: do not maintain the lock during pool_flush()
  * BUG/MINOR: pools: make DEBUG_UAF always write to the to-be-freed location
  * BUG/MINOR: pools: fix a possible memory leak in the lockless pool_flush()
  * BUG/MEDIUM: compression: Add a flag to know the filter is still processing data
  * BUG/MEDIUM: compression: Properly get the next block to iterate on payload
  * BUG/MEDIUM: compression: Fix loop skipping unused blocks to get the next block
  * BUG/MEDIUM: opentracing: initialization before establishing daemon and/or chroot mode
  * Revert "BUG/MINOR: opentracing: initialization after establishing daemon mode"
  * BUG/MINOR: ssl: OCSP stapling does not work if expire too far in the future
  * BUILD: make tune.ssl.keylog available again
  * DOC: use the req.ssl_sni in examples
  * MINOR: errors: allow empty va_args for diag variadic macro
  * BUG/MAJOR: stream-int: Release SI endpoint on server side ASAP on retry
  * DOC/MINOR: move uuid in the configuration to the right alphabetical order
  * BUG/MINOR: vars: Be sure to have a session to get checks variables
  * CLEANUP: http-ana: Remove useless if statement about L7 retries
  * BUG/MINOR: proxy: Missing calloc return value check in chash_init_server_tree
  * BUG/MINOR: http: Missing calloc return value check in make_arg_list
  * BUG/MINOR: http: Missing calloc return value check while parsing redirect rule
  * BUG/MINOR: worker: Missing calloc return value check in mworker_env_to_proc_list
  * BUG/MINOR: compression: Missing calloc return value check in comp_append_type/algo
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request rule
  * BUG/MINOR: http: Missing calloc return value check while parsing tcp-request/tcp-response
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_defproxy_cpy
  * BUG/MINOR: proxy: Missing calloc return value check in proxy_parse_declare
  * BUG/MINOR: http: Missing calloc return value check in parse_http_req_capture
  * BUG/MINOR: ssl: Missing calloc return value check in ssl_init_single_engine
  * BUG/MINOR: peers: Missing calloc return value check in peers_register_table
  * BUG/MINOR: server: Missing calloc return value check in srv_parse_source
  * DOC: intro: Fix typo in starter guide
  * MINOR: cfgparse: Fail when encountering extra arguments in macro
  * MINOR: http-ana: Perform L7 retries because of status codes in response analyser
  * BUG/MINOR: http-ana: Handle L7 retries on refused early data before K/A aborts
  * BUG/MINOR: http-ana: Send the right error if max retries is reached on L7 retry
  * Revert "MEDIUM: http-ana: Deal with L7 retries in HTTP analysers"
  * BUG/MINOR: http-comp: Preserve HTTP_MSGF_COMPRESSIONG flag on the response
  * BUG/MEDIUM: filters: Exec pre/post analysers only one time per filter
  * BUILD/MINOR: opentracing: fixed build when using clang
  * BUG/MAJOR: server: prevent deadlock when using 'set maxconn server'
  * BUG/MEDIUM: ebtree: Invalid read when looking for dup entry</changelog>
  <changelog author="mrueckert@suse.de" date="1625659200">- Update to version 2.4.2+git0.553dee326:
  * [RELEASE] Released version 2.4.2
  * REGTESTS: add http scheme-based normalization test
  * MEDIUM: h2: apply scheme-based normalization on h2 requests
  * MEDIUM: h1-htx: apply scheme-based normalization on h1 requests
  * MEDIUM: http: implement scheme-based normalization
  * MINOR: http: implement http_get_scheme
  * Revert "MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules"
  * BUG/MINOR: cli: fix server name output in "show fd"
  * BUG/MEDIUM: sock: make sure to never miss early connection failures
  * DOC: stick-table: add missing documentation about gpt0 stored type
  * BUG/MINOR: peers: fix data_type bit computation more than 32 data_types
  * BUG/MINOR: stick-table: fix several printf sign errors dumping tables
  * DOC: config: use CREATE USER for mysql-check
  * BUG/MEDIUM: resolvers: Make 1st server of a template take part to SRV resolution
  * BUG/MINOR: mqtt: Support empty client ID in CONNECT message
  * BUG/MINOR: mqtt: Fix parser for string with more than 127 characters
  * BUG/MINOR: tcpcheck: Fix numbering of implicit HTTP send/expect rules
  * BUILD: Makefile: fix linkage for Haiku.
  * BUG/MINOR: checks: return correct error code for srv_parse_agent_check
  * MINOR: resolvers: Reset server IP on error in resolv_get_ip_from_response()
  * BUG/MINOR: resolvers: Reset server IP when no ip is found in the response
  * BUG/MINOR: resolvers: Always attach server on matching record on resolution
  * CLEANUP: dns: Remove a forgotten debug message
  * DOC: config: Add missing actions in "tcp-request session" documentation
  * MINOR: tcp-act: Add set-src/set-src-port for "tcp-request content" rules
  * REGTESTS: fix maxconn update with agent-check
  * BUG/MAJOR: server: fix deadlock when changing maxconn via agent-check
  * BUG/MINOR: cache: Correctly handle existing-but-empty 'accept-encoding' header
  * BUG/MINOR: server/cli: Fix locking in function processing "set server" command
  * BUG/MINOR: resolvers: Use resolver's lock in resolv_srvrq_expire_task()
  * BUG/MEDIUM: resolvers: Add a task on servers to check SRV resolution status
  * MINOR: resolvers: Remove server from named_servers tree when removing a SRV item
  * MINOR: resolvers: Clean server in a dedicated function when removing a SRV item
  * BUG/MEDIUM: server/cli: Fix ABBA deadlock when fqdn is set from the CLI
  * BUG/MINOR: server: Forbid to set fqdn on the CLI if SRV resolution is enabled
  * BUG/MINOR: server-state: load SRV resolution only if params match the config</changelog>
  <changelog author="mrueckert@suse.de" date="1629201600">- Update to version 2.4.3+git0.4dd5a5a6c:
    CVE-2021-39240 CVE-2021-39241 CVE-2021-39242
    (boo#1189366 boo#1189548 boo#1189549)
  * [RELEASE] Released version 2.4.3
  * REGTESTS: add a test to prevent h2 desync attacks
  * BUG/MEDIUM: h2: give :authority precedence over Host
  * BUG/MAJOR: h2: enforce stricter syntax checks on the :method pseudo-header
  * BUG/MAJOR: h2: verify that :path starts with a '/' before concatenating it
  * BUG/MAJOR: h2: verify early that non-http/https schemes match the valid syntax
  * MINOR: http: add a new function http_validate_scheme() to validate a scheme
  * DOC/MINOR: fix typo in management document
  * CLEANUP: assorted typo fixes in the code and comments
  * BUG/MEDIUM: cfgcheck: verify existing log-forward listeners during config check
  * BUG/MEDIUM: spoe: Fix policy to close applets when SPOE connections are queued
  * DOC: config: Fix 'http-response send-spoe-group' documentation
  * DOC: Improve the lua documentation
  * BUG/MINOR: tcpcheck: Properly detect pending HTTP data in output buffer
  * BUG/MINOR: buffer: fix buffer_dump() formatting
  * BUG/MEDIUM: spoe: Create a SPOE applet if necessary when the last one is released
  * MINOR: spoe: Add a pointer on the filter config in the spoe_agent structure
  * ADMIN: dyncookie: implement a simple dynamic cookie calculator
  * MINOR: server: unmark deprecated on enable health/agent cli
  * BUG/MINOR: server: update last_change on maint-&gt;ready transitions too
  * BUG/MINOR: server: remove srv from px list on CLI 'add server' error
  * BUILD: opentracing: fixed build when using pkg-config utility
  * DOC: internals: document the FD takeover process
  * BUG/MINOR: fd: protect fd state harder against a concurrent takeover
  * BUG/MINOR: pollers: always program an update for migrated FDs
  * BUG/MINOR: poll: fix abnormally high skip_fd counter
  * BUG/MINOR: select: fix excess number of dead/skip reported
  * BUG/MEDIUM: pollers: clear the sleeping bit after waking up, not before
  * BUG/MEDIUM: connection: close a rare race between idle conn close and takeover
  * BUG/MINOR: connection: Add missing error labels to conn_err_code_str
  * BUG/MEDIUM: mux-h2: Handle remaining read0 cases on partial frames
  * BUG/MINOR: mux-h1: Be sure to swap H1C to splice mode when rcv_pipe() is called
  * BUG/MINOR: mux-h2: Obey dontlognull option during the preface
  * BUG/MINOR: mux-h1: Obey dontlognull option for empty requests
  * BUG/MINOR: systemd: must check the configuration using -Ws
  * BUG/MINOR: resolvers: Use a null-terminated string to lookup in servers tree
  * BUG/MINOR: check: fix the condition to validate a port-less server
  * BUG/MINOR: stats: Add missing agent stats on servers
  * BUG/MEDIUM: ssl_sample: fix segfault for srv samples on invalid request
  * BUILD/MINOR: memprof fix macOs build.
  * BUG/MINOR: mworker: do not export HAPROXY_MWORKER_REEXEC across programs
  * BUG/MEDIUM: mworker: do not register an exit handler if exit is expected
  * BUILD: lua: silence a build warning with TCC
  * BUILD: add detection of missing important CFLAGS
  * BUG/MINOR: ssl: Default-server configuration ignored by server
  * MINOR: mux_h2: define config to disable h2 websocket support
  * BUILD: http_htx: fix ci compilation error with isdigit for Windows</changelog>
  <changelog author="mrueckert@suse.de" date="1631016000">- Update to version 2.4.4+git0.acb1d0bea: CVE-2021-40346 (boo#1189877)
  * [RELEASE] Released version 2.4.4
  * Revert "BUG/MINOR: stream-int: Don't block reads in si_update_rx() if chn may receive"
  * BUG/MAJOR: htx: fix missing header name length check in htx_add_header/trailer
  * CLEANUP: htx: remove comments about "must be &lt; 256 MB"
  * BUG/MINOR: config: reject configs using HTTP with bufsize &gt;= 256 MB
  * DOC: configuration: remove wrong tcp-request examples in tcp-response
  * BUG/MINOR: vars: fix set-var/unset-var exclusivity in the keyword parser
  * CLEANUP: Add missing include guard to signal.h
  * BUG/MINOR: tools: Fix loop condition in dump_text()
  * BUG/MINOR threads: Use get_(local|gm)time instead of (local|gm)time
  * BUG/MINOR: ebtree: remove dependency on incorrect macro for bits per long
  * MINOR: time: add report_idle() to report process-wide idle time
  * BUG/MINOR: time: fix idle time computation for long sleeps
  * BUG/MINOR: lua: use strlcpy2() not strncpy() to copy sample keywords
  * MINOR: compiler: implement an ONLY_ONCE() macro
  * BUG/MINOR: base64: base64urldec() ignores padding in output size check
  * BUG/MEDIUM: base64: check output boundaries within base64{dec,urldec}
  * BUG/MINOR: stick-table: fix the sc-set-gpt* parser when using expressions
  * MINOR: hlua: take the global Lua lock inside a global function
  * REGTESTS: abortonclose: after retries, 503 is expected, not close
  * REGTESTS: http_upgrade: fix incorrect expectation on TCP-&gt;H1-&gt;H2
  * BUG/MEDIUM: h2: match absolute-path not path-absolute for :path</changelog>
  <changelog author="mrueckert@suse.de" date="1633089600">- Update to version 2.4.5+git0.e74a1b34b:
  * [RELEASE] Released version 2.4.5
  * MINOR: tasks: catch TICK_ETERNITY with BUG_ON() in __task_queue()
  * BUG/MINOR: tcp-rules: Stop content rules eval on read error and end-of-input
  * BUG/MINOR: tcpcheck: Don't use arg list for default proxies during parsing
  * MINOR: arg: Be able to forbid unresolved args when building an argument list
  * BUG/MAJOR: lua: use task_wakeup() to properly run a task once
  * BUG/MEDIUM: lua: fix wakeup condition from sleep()
  * MINOR: Makefile: add MEMORY_POOLS to the list of DEBUG_xxx options
  * DOC: peers: fix doc "enable" statement on "peers" sections
  * BUG/MINOR: mux-h1/mux-fcgi: Sanitize TE header to only send "trailers"
  * MINOR: stream-int: Notify mux when the buffer is not stuck when calling rcv_buf
  * BUG/MEDIUM: stream-int: Defrag HTX message in si_cs_recv() if necessary
  * MINOR: htx: Add a function to know if the free space wraps
  * MINOR: htx: Add an HTX flag to know when a message is fragmented
  * MINOR: stream-int: Set CO_RFL transient/persistent flags apart in si_cs_rcv()
  * BUG/MEDIUM: stream: Stop waiting for more data if SI is blocked on RXBLK_ROOM
  * BUG/MEDIUM: stream-int: Notify stream that the mux wants more room to xfer data
  * BUG/MEDIUM: mux-h1: Adjust conditions to ask more space in the channel buffer
  * BUG/MINOR: stats: use refcount to protect dynamic server on dump
  * MINOR: server: return the next srv instance on free_server
  * BUG/MINOR: server: do not use refcount in free_server in stopping mode
  * MINOR: global: define MODE_STOPPING
  * MINOR: server: implement a refcount for dynamic servers
  * BUG/MINOR: http-ana: increment internal_errors counter on response error
  * BUG/MINOR: h1-htx: Fix a typo when request parser is reset
  * BUG/MEDIUM: leastconn: fix rare possibility of divide by zero
  * BUG/MINOR: server: allow 'enable health' only if check configured
  * BUILD: threads: fix -Wundef for _POSIX_PRIORITY_SCHEDULING on libmusl
  * BUILD: halog: fix a -Wundef warning on non-glibc systems
  * BUILD: compiler: fixed a missing test on  defined(__GNUC__)
  * BUILD: fix dragonfly build again on __read_mostly
  * BUG/MINOR: vars: do not talk about global section in CLI errors for set-var
  * BUG/MINOR: vars: truncate the variable name in error reports about scope.
  * BUG/MINOR: vars: properly set the argument parsing context in the expression
  * MINOR: sample: add missing ARGC_ entries
  * BUG/MINOR: vars: improve accuracy of the rules used to check expression validity
  * BUILD: tools: properly guard __GLIBC__ with defined()
  * BUILD: ssl: fix two remaining occurrences of #if USE_OPENSSL
  * BUILD: ssl: next round of build warnings on LIBRESSL_VERSION_NUMBER
  * BUILD/MINOR: regex: avoid a build warning on USE_PCRE2 with -Wundef
  * IMPORT: slz: silence a build warning with -Wundef
  * BUILD/MINOR: ssl: avoid a build warning on LIBRESSL_VERSION with -Wundef
  * BUILD/MINOR: defaults: eliminate warning on MAXHOSTNAMELEN with -Wundef
  * BUILD: activity: use #ifdef not #if on USE_MEMORY_PROFILING
  * MINOR: proc: setting the process to produce a core dump on FreeBSD.
  * MINOR: tools: add FreeBSD support to get_exec_path()
  * BUILD: tools: get the absolute path of the current binary on NetBSD.
  * BUG/MINOR: flt-trace: fix an infinite loop when random-parsing is set
  * BUG/MINOR: cli/payload: do not search for args inside payload
  * BUILD: ist: prevent gcc11 maybe-uninitialized warning on istalloc
  * BUG/MINOR: connection: prevent null deref on mux cleanup task allocation
  * DOC: management: certificate files must be sanitized before injection
  * BUG/MINOR: tcpcheck: Improve LDAP response parsing to fix LDAP check
  * BUG/MAJOR: mux-h1: Don't eval input data if an error was reported
  * MINOR: pools: use mallinfo2() when available instead of mallinfo()
  * MINOR: pools: automatically disable malloc_trim() with external allocators
  * CLEANUP: pools: factor all malloc_trim() calls into trim_all_pools()
  * BUG/MINOR: compat: make sure __WORDSIZE is always defined
  * BUG/MEDIUM: stream-int: Don't block SI on a channel policy if EOI is reached
  * CLEANUP: mux-h1: Remove condition rejecting upgrade requests with payload
  * MINOR: htx: Skip headers with no value when adding a header list to a message
  * BUG/MEDIUM: mux-h1: Remove "Upgrade:" header for requests with payload
  * BUG/MINOR: systemd: ExecStartPre must use -Ws
  * BUG/MINOR: filters: Set right FLT_END analyser depending on channel
  * BUG/MINOR: filters: Always set FLT_END analyser when CF_FLT_ANALYZE flag is set
  * BUG/MEDIUM: http-ana: Reset channels analysers when returning an error
  * BUG/MINOR: stream: Don't release a stream if FLT_END is still registered
  * BUG/MINOR: lua: Don't yield in channel.append() and channel.set()
  * BUG/MINOR: lua: Yield in channel functions only if lua context can yield
  * MINOR: lua: Add a flag on lua context to know the yield capability at run time</changelog>
  <changelog author="mrueckert@suse.de" date="1633348800">- Update to version 2.4.6+git0.d83fd76a1:
  * [RELEASE] Released version 2.4.6
  * BUG/MEDIUM: filters: Fix a typo when a filter is attached blocking the release</changelog>
  <changelog author="mrueckert@suse.de" date="1633348801">- Update to version 2.4.7+git0.b5e51a5e2:
  * [RELEASE] Released version 2.4.7
  * BUG/MEDIUM: http-ana: Clear request analyzers when applying redirect rule</changelog>
  <changelog author="mrueckert@suse.de" date="1635940800">- Update to version 2.4.8+git0.d1f8d41e0:
  * [RELEASE] Released version 2.4.8
  * SCRIPTS: git-show-backports: re-enable file-based filtering
  * DOC/peers: some grammar fixes for peers 2.1 spec
  * MINOR: stream: Improve dump of bogus streams
  * BUILD/MINOR: cpuset freebsd build fix
  * DOC: config: Fix alphabetical order of fc_* samples
  * BUG/MINOR: sample: fix backend direction flags consecutive to last fix
  * BUG/MEDIUM: sample: Cumulate frontend and backend sample validity flags
  * BUG/MEDIUM: stream-int: Block reads if channel cannot receive more data
  * BUG/MINOR: http: Authorization value can have multiple spaces after the scheme
  * BUG/MEDIUM: http-ana: Drain request data waiting the tarpit timeout expiration
  * MINOR: halog: Add support for extracting captures using -hdr
  * BUG/MINOR: halog: Add missing newlines in die() messages
  * CLEANUP: halog: Use consistent indentation in help()
  * MINOR: halog: Rename -qry to -query
  * DOC: halog: Move the `-qry` parameter into the correct section in help text
  * MINOR: halog: Add -qry parameter allowing to preserve the query string in -uX
  * BUG/MEDIUM: resolvers: Track api calls with a counter to free resolutions
  * BUG/MEDIUM: resolvers: Don't recursively perform requester unlink
  * MEDIUM: resolvers: remove the last occurrences of the "safe" argument
  * MEDIUM: resolvers: use a kill list to preserve the list consistency
  * CLEANUP: resolvers: replace all LIST_DELETE with LIST_DEL_INIT
  * CLEANUP: resolvers: simplify resolv_link_resolution() regarding requesters
  * CLEANUP: always initialize the answer_list
  * CLEANUP: resolvers: do not export resolv_purge_resolution_answer_records()
  * BUG/MEDIUM: mux-h1: Perform a connection shutdown when the h1c is released
  * BUG/MINOR: mux-h1: Save shutdown mode if the shutdown is delayed
  * BUILD: atomic: fix build on mac/arm64
  * BUG/MINOR: backend: fix improper insert in avail tree for always reuse
  * BUILD: fix compilation on NetBSD
  * MINOR: memprof: add one pointer size to the size of allocations
  * MINOR: memprof: report the delta between alloc and free on realloc()
  * BUG/MEDIUM: lua: fix memory leaks with realloc() on non-glibc systems
  * BUG/MINOR: mux-h2: do not prevent from sending a final GOAWAY frame
  * BUG/MINOR: task: do not set TASK_F_USR1 for no reason
  * BUG/MAJOR: buf: fix varint API post- vs pre- increment
  * BUG/MEDIUM: resolvers: always check a valid item in query_list
  * BUILD: resolvers: avoid a possible warning on null-deref
  * BUG/MAJOR: resolvers: add other missing references during resolution removal
  * MINOR: resolvers: merge address and target into a union "data"
  * BUG/MEDIUM: resolvers: use correct storage for the target address
  * BUG/MEDIUM: resolvers: fix truncated TLD consecutive to the API fix
  * MINOR: resolvers: fix the resolv_dn_label_to_str() API about trailing zero
  * BUG/MINOR: resolvers: do not reject host names of length 255 in SRV records
  * BUG/MEDIUM: resolver: make sure to always use the correct hostname length
  * MINOR: resolvers: fix the resolv_str_to_dn_label() API about trailing zero
  * BUG/MAJOR: dns: attempt to lock globaly for msg waiter list instead of use barrier
  * BUG/MAJOR: dns: tcp session can remain attached to a list after a free
  * BUG/MEDIUM: tcpcheck: Properly catch early HTTP parsing errors
  * Revert "CLEANUP: server: always include the storage for SSL settings"
  * BUG/MEDIUM: stream: Keep FLT_END analyzers if a stream detects a channel error
  * BUG/MEDIUM: cpuset: fix cpuset size for FreeBSD
  * BUG/MINOR: sample: Fix 'fix_tag_value' sample when waiting for more data
  * BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back
  * MINOR: initcall: Rename __GLOBL and __GLOBL1.
  * DOC: configuration: add clarification on escaping in keyword arguments
  * BUG/MEDIUM: mux_h2: Handle others remaining read0 cases on partial frames
  * BUG/MEDIUM: sample: properly verify that variables cast to sample
  * MINOR: sample: provide a generic var-to-sample conversion function
  * CLEANUP: sample: uninline sample_conv_var2smp_str()
  * CLEANUP: sample: rename sample_conv_var2smp() to *_sint
  * CLEANUP: server: always include the storage for SSL settings</changelog>
  <changelog author="varkoly@suse.com" date="1646740800">- (bsc#1196408) VUL-0: CVE-2022-0711: haproxy: Denial of service via set-cookie2 header
  o Apply upstream patch:
    0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch</changelog>
  <changelog author="varkoly@suse.com" date="1674043200">- VUL-0: CVE-2023-0056: haproxy: segfault DoS (bsc#1207181)
  o Apply upstream patch:
    0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch</changelog>
  <changelog author="varkoly@suse.com" date="1676030400">- VUL-0: serious vulnerability in the HTTP/1 parser (bsc#1208132)
  o Apply upstream patch:
    2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- The output buffer is not zero-initialized. If we don't clear reserved
  bytes, fcgi requests sent to backend will leak sensitive data.
  o Apply proposed patch:
    0001-output-buffer-is-not-zero-initialized.path</changelog>
  <changelog author="varkoly@suse.com" date="1681214400">- ECO: Maint: Update haproxy to latest maintenance release for all SLE15 (jsc#PED-3821)
- rebase and rename haproxy-1.6.0-sec-options.patch -&gt; haproxy-2.4.22-sec-options.patch
- remove patches covered by new release:
  lua54.patch
  0001-BUG-MAJOR-http-htx-prevent-unbounded-loop-in-http_ma.patch
  0001-BUG-MEDIUM-mux-h2-Refuse-interim-responses-with-end-.patch
  0001-output-buffer-is-not-zero-initialized.path
  2.0-2.5-BUG-CRITICAL-http-properly-reject-empty-http-header-.patch
- Update to version 2.4.22+git0.f8e3218e2:
  * [RELEASE] Released version 2.4.22
  * BUG/CRITICAL: http: properly reject empty http header field names
  * CI: github: don't warn on deprecated openssl functions on windows
  * BUG/MEDIUM: stconn: Schedule a shutw on shutr if data must be sent first
  * DOC: proxy-protocol: fix wrong byte in provided example
  * DOC: config: 'http-send-name-header' option may be used in default section
  * DOC: config: fix option spop-check proxy compatibility
  * BUG/MEDIUM: cache: use the correct time reference when comparing dates
  * BUG/MEDIUM: stick-table: do not leave entries in end of window during purge
  * BUG/MINOR: ssl/crt-list: warn when a line is malformated
  * BUG/MEDIUM: ssl: wrong eviction from the session cache tree
  * BUG/MINOR: fcgi-app: prevent 'use-fcgi-app' in default section
  * [RELEASE] Released version 2.4.21
  * BUG/MINOR: sink: free the forwarding task on exit
  * BUILD: hpack: include global.h for the trash that is needed in debug mode
  * BUG/MINOR: mux-h2: add missing traces on failed headers decoding
  * BUG/MINOR: listener: close tiny race between resume_listener() and stopping
  * DOC: config: fix "Address formats" chapter syntax
  * BUG/MINOR: mux-fcgi: Correctly set pathinfo
  * DOC: config: fix aliases for protocol prefixes "udp4@" and "udp6@"
  * DOC: config: fix wrong section number for "protocol prefixes"
  * BUG/MINOR: listeners: fix suspend/resume of inherited FDs
  * BUG/MINOR: http-ana: make set-status also update txn-&gt;status
  * BUG/MINOR: http-fetch: Don't block HTTP sample fetch eval in HTTP_MSG_ERROR state
  * BUG/MINOR: http-ana: Report SF_FINST_R flag on error waiting the request body
  * BUG/MINOR: promex: Don't forget to consume the request on error
  * BUG/MINOR: resolvers: Wait the resolution execution for a do_resolv action
  * BUG/MINOR: h1-htx: Remove flags about protocol upgrade on non-101 responses
  * CLEANUP: htx: fix a typo in an error message of http_str_to_htx
  * BUG/MINOR: http: Memory leak of http redirect rules' format string
  * REGTEST: fix the race conditions in hmac.vtc
  * REGTEST: fix the race conditions in digest.vtc
  * REGTEST: fix the race conditions in json_query.vtc
  * BUG/MAJOR: buf: Fix copy of wrapping output data when a buffer is realigned
  * BUG/MINOR: http-fetch: Only fill txn status during prefetch if not already set
  * BUILD: makefile: sort the features list
  * BUILD: makefile: build the features list dynamically
  * BUG/MINOR: pool/stats: Use ullong to report total pool usage in bytes in stats
  * BUG/MEDIUM: mux-h2: Refuse interim responses with end-stream flag set
  * BUG/MINOR: ssl: Fix memory leak of find_chain in ssl_sock_load_cert_chain
  * LICENSE: wurfl: clarify the dummy library license.
  * BUG/MEDIUM: resolvers: Use tick_first() to update the resolvers task timeout
  * REGTESTS: startup: check maxconn computation
  * REGTESTS: fix the race conditions in iff.vtc
  * BUG/MAJOR: fcgi: Fix uninitialized reserved bytes
  * DOC: promex: Add missing backend metrics
  * MINOR: promex: introduce haproxy_backend_agg_check_status
  * BUG/MINOR: promex: create haproxy_backend_agg_server_status
  * BUG/MEDIUM: mworker: fix segv in early failure of mworker mode with peers
  * BUG/MINOR: ssl: Fix potential overflow
  * BUG/MEDIUM: ssl: Verify error codes can exceed 63
  * BUG/MINOR: resolvers: Don't wait periodic resolution on healthcheck failure
  * BUILD: peers: peers-t.h depends on stick-table-t.h
  * CI: github: change "ubuntu-latest" to "ubuntu-20.04"
  * BUG/MEDIIM: stconn: Flush output data before forwarding close to write side
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * [RELEASE] Released version 2.4.20
  * Revert "CI: determine actual OpenSSL version dynamically"
  * Revert "CI: switch to the "latest" LibreSSL"
  * SCRIPTS: announce-release: add a link to the data plane API
  * DOC: config: clarify the -m dir and -m dom pattern matching methods
  * DOC: config: clarify the fact that "retries" is not just for connections
  * DOC: config: explain how default matching method for ACL works
  * DOC: config: mention that a single monitor-uri rule is supported
  * DOC: config: clarify the fact that SNI should not be used in HTTP scenarios
  * DOC: config: provide some configuration hints for "http-reuse"
  * Revert "BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action"
  * BUG/MINOR: mux-h1: Fix handling of 408-Request-Time-Out
  * BUILD: http-htx: Silent build error about a possible NULL start-line
  * BUG/MINOR: http-htx: Don't consider an URI as normalized after a set-uri action
  * BUG/MINOR: log: fix parse_log_message rfc5424 size check
  * BUG/MINOR: cfgparse-listen: fix ebpt_next_dup pointer dereference on proxy "from" inheritance
  * BUILD: listener: fix build warning on global_listener_rwlock without threads
  * BUG/MINOR: server/idle: at least use atomic stores when updating max_used_conns
  * BUILD: peers: Remove unused variables
  * BUG/MEDIUM: peers: messages about unkown tables not correctly ignored
  * BUG/MINOR: ssl: don't initialize the keylog callback when not required
  * BUG/MINOR: http_ana/txn: don't re-initialize txn and req var lists
  * BUG/MEDIUM: listener: Fix race condition when updating the global mngmt task
  * BUG/MINOR: pool/cli: use ullong to report total pool usage in bytes
  * BUG/MEDIUM: ring: fix creation of server in uninitialized ring
  * DOC: config: fix alphabetical ordering of global section
  * REG-TESTS: cache: Remove T-E header for 304-Not-Modified responses
  * BUG/MINOR: mux-h1: Do not send a last null chunk on body-less answers
  * BUG/MEDIUM: mux-fcgi: Avoid value length overflow when it doesn't fit at once
  * BUG/MINOR: mux-fcgi: Be sure to send empty STDING record in case of zero-copy
  * BUG/MINOR: resolvers: Set port before IP address when processing SRV records
  * BUG/MINOR: http-htx: Fix error handling during parsing http replies
  * BUG/MEDIUM: wdt/clock: properly handle early task hangs
  * CI: emit the compiler's version in the build reports
  * CI: switch to the "latest" LibreSSL
  * BUG/MINOR: ssl: ocsp structure not freed properly in case of error
  * BUG/MINOR: ssl: Memory leak of AUTHORITY_KEYID struct when loading issuer
  * CI: add monthly gcc cross compile jobs
  * BUG/MINOR: log: fixing bug in tcp syslog_io_handler Octet-Counting
  * BUG/MEDIUM: stick-table: fix a race condition when updating the expiration task
  * BUG/MAJOR: stick-table: don't process store-response rules for applets
  * DOC: management: add forgotten "show startup-logs"
  * BUG/MINOR: stick-table: Use server_id instead of std_t_sint in process_store_rules()
  * CI: SSL: temporarily stick to LibreSSL=3.5.3
  * CI: SSL: use proper version generating when "latest" semantic is used
  * BUG/MINOR: sink: Set default connect/server timeout for implicit ring buffers
  * BUG/MINOR: sink: Only use backend capability for the sink proxies
  * BUG/MEDIUM: compression: handle rewrite errors when updating response headers
  * BUG/MINOR: ring: Properly parse connect timeout
  * BUG/MINOR: log: Preserve message facility when the log target is a ring buffer
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in workflow definition
  * CI: Replace the deprecated `::set-output` command by writing to $GITHUB_OUTPUT in matrix.py
  * BUG/MINOR: server: make sure "show servers state" hides private bits
  * BUG/MAJOR: stick-tables: do not try to index a server name for applets
  * DOC: configuration: missing 'if' in tcp-request content example
  * BUG/MINOR: backend: only enforce turn-around state when not redispatching
  * BUG/MINOR: smtpchk: SMTP Service check should gracefully close SMTP transaction
  * MINOR: smtpchk: Update expect rule to fully match replies to EHLO commands
  * BUG/MINOR: mux-h1: Account consumed output data on synchronous connection error
  * BUILD: http_fetch: silence an uninitiialized warning with gcc-4/5/6 at -Os
  * BUG/MINOR: http-fetch: Update method after a prefetch in smp_fetch_meth()
  * BUILD: h1: silence an initiialized warning with gcc-4.7 and -Os
  * BUG/MEDIUM: lua: handle stick table implicit arguments right.
  * BUG/MEDIUM: lua: Don't crash in hlua_lua2arg_check on failure
  * DOC: config: Fix pgsql-check documentation to make user param mandatory
  * BUG/MINOR: checks: update pgsql regex on auth packet
  * [RELEASE] Released version 2.4.19
  * BUG/MEDIUM: resolvers: Remove aborted resolutions from query_ids tree
  * REGTESTS: 4be_1srv_smtpchk_httpchk_layer47errors: Return valid SMTP replies
  * BUG/MINOR: log: improper behavior when escaping log data
  * SCRIPTS: announce-release: update some URLs to https
  * BUILD: fd: fix a build warning on the DWCAS
  * BUG/MEDIUM: captures: free() an error capture out of the proxy lock
  * DOC: fix TOC in starter guide for subsection 3.3.8. Statistics
  * REGTESTS: ssl/log: test the log-forward with SSL
  * BUG/MEDIUM: sink: bad init sequence on tcp sink from a ring.
  * REGTESTS: log: test the log-forward feature
  * REGTESTS: healthcheckmail: Relax matching on the healthcheck log message
  * BUG/MINOR: stats: fixing stat shows disabled frontend status as 'OPEN'
  * MINOR: listener: small API change
  * BUG/MEDIUM: proxy: ensure pause_proxy() and resume_proxy() own PROXY_LOCK
  * CI: cirrus-ci: bump FreeBSD image to 13-1
  * BUG/MINOR: signals/poller: ensure wakeup from signals
  * BUG/MINOR: signals/poller: set the poller timeout to 0 when there are signals
  * BUG/MINOR: task: always reset a new tasklet's call date
  * BUG/MINOR: h1: Support headers case adjustment for TCP proxies
  * BUILD: makefile: enable crypt(3) for NetBSD
  * BUG/MINOR: regex: Properly handle PCRE2 lib compiled without JIT support
  * BUG/MINOR: mux-fcgi: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h1: fix the "show fd" dest buffer for the subscriber
  * BUG/MINOR: mux-h2: fix the "show fd" dest buffer for the subscriber
  * BUG/MEDIUM: mux-h1: always use RST to kill idle connections in pools
  * REGTESTS: http_request_buffer: Add a barrier to not mix up log messages
  * BUG/MEDIUM: mux-h1: do not refrain from signaling errors after end of input
  * BUG/MINOR: tcpcheck: Disable QUICKACK for default tcp-check (with no rule)
  * BUG/MINOR: hlua: Rely on CF_EOI to detect end of message in HTTP applets
  * BUG/MEDIUM: peers: Don't start resync on reload if local peer is not up-to-date
  * BUG/MEDIUM: peers: Don't use resync timer when local resync is in progress
  * BUG/MEDIUM: peers: Add connect and server timeut to peers proxy
  * BUG/MEDIUM: spoe: Properly update streams waiting for a ACK in async mode
  * DOC: configuration: do-resolve doesn't work with a port in the string
  * REGTESTS: Fix prometheus script to perform HTTP health-checks
  * BUG/MINOR: tcpcheck: Disable QUICKACK only if data should be sent after connect
  * BUG/MINOR: resolvers: return the correct value in resolvers_finalize_config()
  * BUG/MAJOR: mworker: fix infinite loop on master with no proxies.
  * BUG/MAJOR: log-forward: Fix log-forward proxies not fully initialized
  * BUG/MEDIUM: mux-h2: do not fiddle with -&gt;dsi to indicate demux is idle
  * BUG/MEDIUM: http-ana: fix crash or wrong header deletion by http-restrict-req-hdr-names
  * BUILD: http: silence an uninitialized warning affecting gcc-5
  * BUG/MEDIUM: ring: fix too lax 'size' parser
  * BUILD: debug: silence warning on gcc-5
  * BUG/MEDIUM: task: relax one thread consistency check in task_unlink_wq()
  * BUG/MEDIUM: poller: use fd_delete() to release the poller pipes
  * BUILD: cfgparse: always defined _GNU_SOURCE for sched.h and crypt.h
  * BUG/MINOR: sink: fix a race condition between the writer and the reader
  * BUG/MINOR: ring/cli: fix a race condition between the writer and the reader
  * BUG/MEDIUM: proxy: Perform a custom copy for default server settings
  * REORG: server: Export srv_settings_cpy() function
  * MINOR: server: Constify source server to copy its settings
  * BUG/MEDIUM: dns: Properly initialize new DNS session
  * BUG/MINOR: peers: Use right channel flag to consider the peer as connected
  * BUG/MEDIUM: peers: limit reconnect attempts of the old process on reload
  * MINOR: peers: Use a dedicated reconnect timeout when stopping the local peer
  * BUG/MEDIUM: pattern: only visit equivalent nodes when skipping versions
  * MINOR: ebtree: add ebmb_lookup_shorter() to pursue lookups
  * MINOR: http-htx: Use new HTTP functions for the scheme based normalization
  * BUG/MEDIUM: h1: Improve authority validation for CONNCET request
  * MINOR: http: Add function to detect default port
  * MINOR: http: Add function to get port part of a host
  * BUG/MEDIUM: mworker: use default maxconn in wait mode
  * [RELEASE] Released version 2.4.18
  * BUG/MINOR: sockpair: wrong return value for fd_send_uxst()
  * BUG/MINOR: backend: Fallback on RR algo if balance on source is impossible
  * BUILD: add detection for unsupported compiler models
  * BUG/MEDIUM: mworker: proc_self incorrectly set crashes upon reload
  * REGTESTS: Fix some scripts to be compatible with 2.4 and prior
  * BUG/MINOR: tools: fix statistical_prng_range()'s output range
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds (try 2)
  * BUILD: makefile: Fix install(1) handling for OpenBSD/NetBSD/Solaris/AIX
  * BUG/MEDIUM: tools: avoid calling dlsym() in static builds
  * MEDIUM: mworker: set the iocb of the socketpair without using fd_insert()
  * BUG/MEDIUM: mux-h1: Handle connection error after a synchronous send
  * BUG/MEDIUM: http-ana: Don't wait to have an empty buf to switch in TUNNEL state
  * BUG/MINOR: mux-h1: Be sure to commit htx changes in the demux buffer
  * REGTEESTS: filters: Fix CONNECT request in random-forwarding script
  * BUG/MEDIUM: http-fetch: Don't fetch the method if there is no stream
  * BUG/MINOR: http-htx: Fix scheme based normalization for URIs wih userinfo
  * BUG/MINOR: peers: fix possible NULL dereferences at config parsing
  * BUG/MINOR: http-act: Properly generate 103 responses when several rules are used
  * BUG/MINOR: http-check: Preserve headers if not redefined by an implicit rule
  * BUG/MINOR: peers/config: always fill the bind_conf's argument
  * MINOR: fd: Add BUG_ON checks on fd_insert()
  * CI: re-enable gcc asan builds
  * BUILD: Makefile: Add Lua 5.4 autodetect
  * BUG/MEDIUM: ssl/fd: unexpected fd close using async engine
  * MINOR: fd: add a new FD_DISOWN flag to prevent from closing a deleted FD
  * BUG/MINOR: http-fetch: Use integer value when possible in "method" sample fetch
  * BUG/MINOR: http-ana: Set method to HTTP_METH_OTHER when an HTTP txn is created
  * BUG/MINOR: ssl: Do not look for key in extra files if already in pem
  * MEDIUM: mux-h2: try to coalesce outgoing WINDOW_UPDATE frames
  * BUG/MEDIUM: ssl/cli: crash when crt inserted into a crt-list
  * BUG/MINOR: tcp-rules: Make action call final on read error and delay expiration
  * BUG/MINOR: cli/stats: add missing trailing LF after "show info json"
  * BUG/MINOR: server: do not enable DNS resolution on disabled proxies
  * BUG/MINOR: cli/stats: add missing trailing LF after JSON outputs
  * REGTESTS: healthcheckmail: Relax health-check failure condition
  * REGTESTS: healthcheckmail: Update the test to be functionnal again
  * BUG/MINOR: checks: Properly handle email alerts in trace messages
  * BUG/MINOR: trace: Test server existence for health-checks to get proxy
  * BUG/MEDIUM: mailers: Set the object type for check attached to an email alert
  * BUILD: compiler: implement unreachable for older compilers too
  * REGTESTS: restrict_req_hdr_names: Extend supported versions
  * REGTESTS: http_abortonclose: Extend supported versions
  * BUG/MINOR: ssl_ckch: Fix possible uninitialized value in show_cert I/O handler
  * BUG/MINOR: ssl_ckch: Dump cert transaction only once if show command yield
  * REGTESTS: http_request_buffer: Increase client timeout to wait "slow" clients
  * REGTESTS: abortonclose: Add a barrier to not mix up log messages
  * MEDIUM: http-ana: Always report rewrite failures as PRXCOND in logs
  * BUG/MEDIUM: ssl/crt-list: Rework 'add ssl crt-list' to handle full buffer cases
  * BUG/MEDIUM: ssl_ckch: Rework 'commit ssl cert' to handle full buffer cases
  * BUG/MINOR: ssl_ckch: Don't duplicate path when replacing a cert entry
  * BUG/MEDIUM: ssl_ckch: Don't delete a cert entry if it is being modified
  * BUG/MINOR: ssl_ckch: Free error msg if commit changes on a cert entry fails
  * DOC: intro: adjust the numbering of paragrams to keep the output ordered
  * DOC: peers: fix port number and addresses on new peers section format
  * DOC: peers: clarify when entry expiration date is renewed.
  * DOC: peers: indicate that some server settings are not usable
  * SCRIPTS: make publish-release try to launch make-releases-json
  * SCRIPTS: add make-releases-json to recreate a releases.json file in download dirs
  * REGTESTS: Do not use REQUIRE_VERSION for HAProxy 2.5+ (2)
  * BUG/MEDIUM: sample: Fix adjusting size in word converter
  * BUG/MEDIUM: peers: prevent unitialized multiple listeners on peers section
  * BUG/MEDIUM: peers: fix segfault using multiple bind on peers sections
  * BUG/MEDIUM: resolvers: Don't defer resolutions release in deinit function
  * BUG/MEDIUM: http: Properly reject non-HTTP/1.x protocols
  * BUG/MEDIUM: tools: Fix `inet_ntop` usage in sa2str
  * CI: determine actual OpenSSL version dynamically
  * BUILD/MINOR: cpuset fix build for FreeBSD 13.1
  * BUG/MINOR: peers: fix error reporting of "bind" lines
  * BUG/MINOR: cfgparse: abort earlier in case of allocation error
  * BUG/MINOR: check: Reinit the buffer wait list at the end of a check
  * BUG/MEDIUM: config: Reset outline buffer size on realloc error in readcfgfile()
  * REGTESTS: abortonclose: Fix some race conditions
  * BUG/MINOR: ssl: Fix crash when no private key is found in pem
  * MINOR: tools: add get_exec_path implementation for solaris based systems.
  * BUILD: fix build warning on solaris based systems with __maybe_unused.
  * MEDIUM: http-ana: Add a proxy option to restrict chars in request header names
  * CI: determine actual LibreSSL version dynamically
  * [RELEASE] Released version 2.4.17
  * CLEANUP: mux-h1: Fix comments and error messages for global options
  * BUG/MEDIUM: wdt: don't trigger the watchdog when p is unitialized
  * BUG/MINOR: conn_stream: do not confirm a connection from the frontend path
  * BUG/MINOR: server: Make SRV_STATE_LINE_MAXLEN value from 512 to 2kB (2000 bytes).
  * DOC: install: update gcc version requirements
  * BUG/MEDIUM: ssl: fix the gcc-12 broken fix :-(
  * BUILD: listener: shut report of possible null-deref in listener_accept()
  * BUILD: debug: work around gcc-12 excessive -Warray-bounds warnings
  * BUILD: ssl: work around bogus warning in gcc 12's -Wformat-truncation
  * CI: dynamically determine actual version of h2spec
  * DOC: fix typo "ant" for "and" in INSTALL
  * BUG/MINOR: map/cli: make sure patterns don't vanish under "show map"'s init
  * BUG/MINOR: map/cli: protect the backref list during "show map" errors
  * BUG/MEDIUM: cli: make "show cli sockets" really yield
  * BUG/MEDIUM: resolvers: make "show resolvers" properly yield
  * BUG/MINOR: tcp/http: release the expr of set-{src,dst}[-port]
  * DOC: config: Update doc for PR/PH session states to warn about rewrite failures
  * MINOR: mux-h2: report a trace event when failing to create a new stream
  * BUG/MINOR: mux-h2: mark the stream as open before processing it not after
  * BUG/MAJOR: dns: multi-thread concurrency issue on UDP socket
  * BUG/MEDIUM: mux-h1: Be able to handle trailers when C-L header was specified
  * BUG/MEDIUM: mux-fcgi: Be sure to never set EOM flag on an empty HTX message
  * SCRIPTS: announce-release: add URL of dev packages
  * CI: github actions: update LibreSSL to 3.5.2
  * [RELEASE] Released version 2.4.16
  * BUILD: opentracing: Fix OT build due to misuse of var_clear()
  * BUILD: proto_uxst: do not set unused flag
  * BUILD: sockpair: do not set unused flag
  * BUILD: fd: remove unused variable totlen in fd_write_frag_line()
  * CLEANUP: acl: Remove unused variable when releasing an acl expression
  * BUG/MINOR: pools: make sure to also destroy shared pools in pool_destroy_all()
  * BUG/MINOR: resolvers: Fix memory leak in resolvers_deinit()
  * BUILD: compiler: properly distinguish weak and global symbols
  * REGTESTS: fix the race conditions in be2dec.vtc ad field.vtc
  * MEDIUM: queue: use tasklet_instant_wakeup() to wake tasks
  * MINOR: task: add a new task_instant_wakeup() function
  * BUG/MINOR: rules: Fix check_capture() function to use the right rule arguments
  * DOC: remove my name from the config doc
  * BUG/MAJOR: connection: Never remove connection from idle lists outside the lock
  * BUG/MINOR: cache: Disable cache if applet creation fails
  * SCRIPTS: announce-release: add shortened links to pending issues
  * DOC: lua: update a few doc URLs
  * SCRIPTS: announce-release: update the doc's URL
  * BUG/MEDIUM: compression: Don't forget to update htx_sl and http_msg flags
  * BUG/MEDIUM: fcgi-app: Use http_msg flags to know if C-L header can be added
  * BUG/MEDIUM: stream: do not abort connection setup too early
  * BUILD: compiler: use a more portable set of asm(".weak") statements
  * BUILD: sched: workaround crazy and dangerous warning in Clang 14
  * BUG/MEDIUM: mux-h1: Don't request more room on partial trailers
  * BUG/MINOR: mux-h2: use timeout http-request as a fallback for http-keep-alive
  * BUG/MINOR: mux-h2: do not use timeout http-keep-alive on backend side
  * BUILD: debug: mark the __start_mem_stats/__stop_mem_stats symbols as weak
  * BUG/MINOR: cache: do not display expired entries in "show cache"
  * BUG/MINOR: mux-h2: do not send GOAWAY if SETTINGS were not sent
  * CI: cirrus: switch to FreeBSD-13.0
  * CI: Update to actions/cache@v3
  * CI: Update to actions/checkout@v3
  * DEBUG: opentracing: show return values of all functions in the debug output
  * CLEANUP: opentracing: added variable to store variable length
  * CLEANUP: opentracing: added flt_ot_smp_init() function
  * CLEANUP: opentracing: removed unused function flt_ot_var_get()
  * CLEANUP: opentracing: removed unused function flt_ot_var_unset()
  * DOC: opentracing: corrected comments in function descriptions
  * EXAMPLES: opentracing: refined shell scripts for testing filter performance
  * BUG/MINOR: opentracing: setting the return value in function flt_ot_var_set()
  * BUG/MEDIUM: http-act: Don't replace URI if path is not found or invalid
  * BUG/MEDIUM: http-conv: Fix url_enc() to not crush const samples
  * BUG/MEDIUM: mux-h1: Set outgoing message to DONE when payload length is reached
  * BUG/MEDIUM: promex: Be sure to never set EOM flag on an empty HTX message
  * BUG/MEDIUM: hlua: Don't set EOM flag on an empty HTX message in HTTP applet
  * BUG/MEDIUM: stats: Be sure to never set EOM flag on an empty HTX message
  * BUG/MINOR: fcgi-app: Don't add C-L header on response to HEAD requests
  * CI: github actions: update OpenSSL to 3.0.2
  * BUG/MAJOR: mux_pt: always report the connection error to the conn_stream
  * BUG/MINOR: cli/stream: fix "shutdown session" to iterate over all threads
  * BUG/MINOR: samples: add missing context names for sample fetch functions
  * DOC: reflect H2 timeout changes
  * BUG/MEDIUM: mux-h2: make use of http-request and keep-alive timeouts
  * MEDIUM: mux-h2: slightly relax timeout management rules
  * BUG/MEDIUM: stream-int: do not rely on the connection error once established
  * BUG/MEDIUM: mux-h1: Properly detect full buffer cases during message parsing
  * BUG/MEDIUM: mux-fcgi: Properly handle return value of headers/trailers parsing
  * BUG/MINOR: tools: url2sa reads too far when no port nor path
  * DOC: config: Explictly add supported MQTT versions
  * MEDIUM: mqtt: support mqtt_is_valid and mqtt_field_value converters for MQTTv3.1
  * BUG/MEDIUM: trace: avoid race condition when retrieving session from conn-&gt;owner
  * BUG/MEDIUM: mux-h1: only turn CO_FL_ERROR to CS_FL_ERROR with empty ibuf
  * CI: github actions: switch to LibreSSL-3.5.1
  * BUG/MINOR: server/ssl: free the SNI sample expression
  * BUG/MINOR: tools: fix url2sa return value with IPv4
  * [RELEASE] Released version 2.4.15
  * BUILD: tree-wide: mark a few numeric constants as explicitly long long
  * DOC: Fix usage/examples of deprecated ACLs
  * BUG/MINOR: stream: make the call_rate only count the no-progress calls
  * BUG/MINOR: session: fix theoretical risk of memleak in session_accept_fd()
  * BUG/MAJOR: mux-pt: Always destroy the backend connection on detach
  * DEBUG: stream: Fix stream trace message to print response buffer state
  * DEBUG: stream: Add the missing descriptions for stream trace events
  * BUG/MEDIUM: mcli: Properly handle errors and timeouts during reponse processing
  * DEBUG: cache: Update underlying buffer when loading HTX message in cache applet
  * BUG/MINOR: promex: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cache: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: stats: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: hlua: Set conn-stream/channel EOI flags at the end of request
  * BUG/MINOR: cli: shows correct mode in "show sess"
  * BUG/MINOR: add missing modes in proxy_mode_str()
  * BUILD: pools: fix backport of no-memory-trimming on non-linux OS
  * MINOR: pools: add a new global option "no-memory-trimming"
  * BUG/MEDIUM: pools: fix ha_free() on area in the process of being freed
  * BUG/MINOR: pool: always align pool_heads to 64 bytes
  * REGTESTS: fix the race conditions in secure_memcmp.vtc
  * REGTESTS: fix the race conditions in normalize_uri.vtc
  * BUG/MEDIUM: htx: Fix a possible null derefs in htx_xfer_blks()
  * CI: github actions: use cache for SSL libs
  * CI: github actions: use cache for OpenTracing
  * CI: github actions: add OpenTracing builds
  * CI: github actions: add the output of $CC -dM -E-
  * [RELEASE] Released version 2.4.14
  * BUG/MEDIUM: stream: Abort processing if response buffer allocation fails
  * CI: github: enable pool debugging by default
  * REGTESTS: fix the race conditions in 40be_2srv_odd_health_checks
  * BUG/MINOR: proxy: preset the error message pointer to NULL in parse_new_proxy()
  * BUG/MAJOR: mux-h2: Be sure to always report HTX parsing error to the app layer
  * BUG/MEDIUM: mux-h1: Don't wake h1s if mux is blocked on lack of output buffer
  * BUG/MEDIUM: htx: Be sure to have a buffer to perform a raw copy of a message
  * BUG/MINOR: tools: url2sa reads ipv4 too far
  * BUG/MINOR: mailers: negotiate SMTP, not ESMTP
  * CI: github actions: update OpenSSL to 3.0.1
  * CI: github: switch to OpenSSL 3.0.0
  * CI: github actions: relax OpenSSL-3.0.0 version comparision
  * CI: github actions: -Wno-deprecated-declarations with OpenSSL 3.0.0
  * CI: github actions: add OpenSSL-3.0.0 builds
  * BUILD: adopt script/build-ssl.sh for OpenSSL-3.0.0beta2
  * BUILD: fix compilation for OpenSSL-3.0.0-alpha17
  * CI: ssl: keep the old method for ancient OpenSSL versions
  * CI: ssl: do not needlessly build the OpenSSL docs
  * CI: ssl: enable parallel builds for OpenSSL on Linux
  * BUG/MAJOR: compiler: relax alignment constraints on certain structures
  * BUG/MEDIUM: fd: always align fdtab[] to 64 bytes
  * BUG/MEDIUM: resolvers: Really ignore trailing dot in domain names
  * BUG/MINOR: sink: Use the right field in appctx context in release callback
  * BUG/MINOR: mworker: fix a FD leak of a sockpair upon a failed reload
  * BUG/MEDIUM: mworker: close unused transferred FDs on load failure
  * MINOR: sock: move the unused socket cleaning code into its own function
  * [RELEASE] Released version 2.4.13
  * BUG/MINOR: mux-h2: update the session's idle delay before creating the stream
  * BUG/MEDIUM: h2/hpack: fix emission of HPACK DTSU after settings change
  * REGTESTS: peers: leave a bit more time to peers to synchronize
  * BUG/MAJOR: spoe: properly detach all agents when releasing the applet
  * BUG/MAJOR: http/htx: prevent unbounded loop in http_manage_server_side_cookies
  * BUG/MEDIUM: listener: read-lock the listener during accept()
  * MINOR: listener: replace the listener's spinlock with an rwlock
  * BUG/MINOR: mworker: does not erase the pidfile upon reload
  * BUG/MAJOR: sched: prevent rare concurrent wakeup of multi-threaded tasks
  * DEBUG: pools: replace the link pointer with the caller's address on pool_free()
  * DEBUG: pools: let's add reverse mapping from cache heads to thread and pool
  * DEBUG: pools: add extra sanity checks when picking objects from a local cache
  * BUG/MINOR: pools: always flush pools about to be destroyed
  * BUG/MEDIUM: mworker: don't lose the stats socket on failed reload
  * DEBUG: pools: add new build option DEBUG_POOL_INTEGRITY
  * BUILD: debug/cli: condition test of O_ASYNC to its existence
  * DEBUG: cli: add a new "debug dev fd" expert command
  * MEDIUM: h2/hpack: emit a Dynamic Table Size Update after settings change
  * BUG/MEDIUM: mcli: always realign wrapping buffers before parsing them
  * BUG/MEDIUM: mcli: do not try to parse empty buffers
  * BUG/MEDIUM: cli: Never wait for more data on client shutdown
  * BUG/MINOR: cli: avoid O(bufsize) parsing cost on pipelined commands
  * MINOR: channel: add new function co_getdelim() to support multiple delimiters
  * MEDIUM: cli: yield between each pipelined command
  * BUG/MEDIUM: server: avoid changing healthcheck ctx with set server ssl
  * BUILD/MINOR: fix solaris build with clang.
  * BUG/MEDIUM: htx: Adjust length to add DATA block in an empty HTX buffer
  * BUG/MEDIUM: connection: properly leave stopping list on error
  * [RELEASE] Released version 2.4.12
  * BUG/MAJOR: mux-h1: Don't decrement .curr_len for unsent data
  * BUG/MEDIUM: mworker: don't use _getsocks in wait mode
  * [RELEASE] Released version 2.4.11
  * BUG/MEDIUM: http-ana: Preserve response's FLT_END analyser on L7 retry
  * BUG/MINOR: cli: fix _getsocks with musl libc
  * BUILD/MINOR: tools: solaris build fix on dladdr.
  * BUILD/MINOR: cpuset FreeBSD 14 build fix.
  * BUG/MEDIUM: ssl: free the ckch instance linked to a server
  * BUG/MINOR: ssl: free the fields in srv-&gt;ssl_ctx
  * MINOR: debug: add support for -dL to dump library names at boot
  * MINOR: debug: add ability to dump loaded shared libraries
  * MINOR: compat: detect support for dl_iterate_phdr()
  * BUG/MINOR: mux-h1: Fix splicing for messages with unknown length
  * BUG/MEDIUM: mux-h1: Fix splicing by properly detecting end of message
  * BUILD: makefile: add -Wno-atomic-alignment to work around clang abusive warning
  * MINOR: proxy: add option idle-close-on-response
  * REGTESTS: ssl: fix ssl_default_server.vtc
  * BUG/MEDIUM: ssl: initialize correctly ssl w/ default-server
  * DOC: fix misspelled keyword "resolve_retries" in resolvers
  * BUILD: ssl: unbreak the build with newer libressl
  * BUILD: cli: clear a maybe-unused  warning on some older compilers
  * BUG/MINOR: pools: don't mark ourselves as harmless in DEBUG_UAF mode
  * BUG/MEDIUM: backend: fix possible sockaddr leak on redispatch
  * [RELEASE] Released version 2.4.10
  * BUG/MINOR: backend: restore the SF_SRV_REUSED flag original purpose
  * BUG/MINOR: backend: do not set sni on connection reuse
  * MINOR: pools: work around possibly slow malloc_trim() during gc
  * BUG/MEDIUM: mworker/cli: crash when trying to access an old PID in prompt mode
  * DOC: config: retry-on list is space-delimited
  * DOC: config: Specify %Ta is only available in HTTP mode
  * DOC: spoe: Clarify use of the event directive in spoe-message section
  * BUG/MINOR: cli/server: Don't crash when a server is added with a custom id
  * IMPORT: slz: use the correct CRC32 instruction when running in 32-bit mode
  * BUILD: tree-wide: avoid warnings caused by redundant checks of obj_types
  * MINOR: cli: "show version" displays the current process version
  * CI: Github Actions: temporarily disable BoringSSL builds
  * BUILD: bug: Fix error when compiling with -DDEBUG_STRICT_NOCRASH
  * MINOR: mux-h1: Improve H1 traces by adding info about http parsers
  * BUG/MAJOR: segfault using multiple log forward sections.
  * BUG/MEDIUM: resolvers: Detach query item on response error
  * BUG/MINOR: server: Don't rely on last default-server to init server SSL context
  * BUG/MEDIUM: cli: Properly set stream analyzers to process one command at a time
  * BUILD/MINOR: server: fix compilation without SSL
  * [RELEASE] Released version 2.4.9
  * BUG/MINOR: cache: Fix loop on cache entries in "show cache"
  * MINOR: promex: backend aggregated server check status
  * MINOR: server: add ws keyword
  * MEDIUM: server/backend: implement websocket protocol selection
  * MINOR: connection: add alternative mux_ops param for conn_install_mux_be
  * MINOR: connection: implement function to update ALPN
  * MINOR: stream/mux: implement websocket stream flag
  * BUG/MINOR: ssl: make SSL counters atomic
  * MINOR: shctx: add a few BUG_ON() for consistency checks
  * BUG/MINOR: shctx: do not look for available blocks when the first one is enough
  * BUG/MEDIUM: shctx: leave the block allocator when enough blocks are found
  * BUG/MEDIUM: cache/cli: make "show cache" thread-safe
  * BUG/MEDIUM: mux-h2: always process a pending shut read
  * BUG/MEDIUM: ssl: abort with the correct SSL error when SNI not found
  * CLEANUP: ssl: fix wrong #else commentary
  * BUG/MINOR: ssl: free correctly the sni in the backend SSL cache
  * BUG/MEDIUM: ssl: backend TLS resumption with sni and TLSv1.3
  * BUILD: makefile: simplify detection of libatomic
  * BUG/MEDIUM: mux-h1: Handle delayed silent shut in h1_process() to release H1C
  * BUG/MINOR: stick-table/cli: Check for invalid ipv6 key
  * BUG/MEDIUM: connection: make cs_shutr/cs_shutw//cs_close() idempotent
  * BUG/MINOR: mux-h2: Fix H2_CF_DEM_SHORT_READ value
  * BUG/MINOR: mworker: doesn't launch the program postparser
  * BUG/MEDIUM: conn-stream: Don't reset CS flags on close
  * MINOR: mux-h1: Slightly Improve H1 traces
  * DOC: lua: Be explicit with the Reply object limits
  * Revert "BUG/MINOR: http-ana: Don't eval front after-response rules if stopped on back"
  * BUG/MINOR: http-ana: Apply stop to the current section for http-response rules
  * DOC: config: Fix typo in ssl_fc_unique_id description
  * BUG/MINOR: cache: properly ignore unparsable max-age in quotes
  * BUG/MINOR: resolvers: throw log message if trash not large enough for query
  * BUG/MINOR: resolvers: fix sent messages were counted twice
  * BUG/MEDIUM: mux-h2: reject upgrade if no RFC8441 support
  * MINOR: mux-h2: add trace on extended connect usage
  * MINOR: mux-h2: perform a full cycle shutdown+drain on close
  * MINOR: connection: add a new CO_FL_WANT_DRAIN flag to force drain on close</changelog>
  <changelog author="varkoly@suse.com" date="1692014400">- VUL-0: CVE-2023-40225: haproxy: reject any empty content-length header value
  (bsc#1214102) Apply upstream patch adapted for 2.4.22 (patch h2_parse_cont_len_header() instead of http_parse_cont_len_header())
  Add patch: 0001-BUG-MAJOR-http-reject-any-empty-content-length-heade.patch</changelog>
  <changelog author="varkoly@suse.com" date="1701345600">- VUL-0: CVE-2023-45539: haproxy: misinterpretation of a path_end rule with # as part of the URI component
  (bsc#1217653) Apply upstream patch.
  Add patch: 0001-BUG-MINOR-h1-do-not-accept-as-part-of-the-URI-compon.patch</changelog>
</package>
<package pkgid="aa68f2cb800a71059f5545dd42bceb3925c375d4a8546418ad9e7cfafccab5c4" name="harfbuzz" arch="src">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="9df42ff1d31cee4d9ea54904d4660fa36096dd0ae1e9d007f8d7c2c4e72d449a" name="hidapi" arch="src">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="87d5a7c28ee4310e0321642249f32a16e6d446365e725523a38aa7ce59746af5" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.371" rel="150000.3.62.1"/>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="45880e0ea71c5082405acc666cee66f095f49538621c9b96f2158aef04205ef1" name="hwdata" arch="src">
  <version epoch="0" ver="0.371" rel="150000.3.62.1"/>
  <changelog author="mpluskal@suse.com" date="1633521600">- Update to version 0.352 (bsc#1191375):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version 0.353 (bsc#1192587):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1638878400">- Update to version 0.354:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1641384000">- Update to version 0.355 (bsc#1194338):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1644321600">- Update to version 0.356:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="4f3c86749fd5df962052ebbd45d9e795bc9909544281d0a7d2d2159e20e126aa" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.378" rel="150000.3.65.1"/>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="8efda5ecfef763aded6707788644802a4ea7081d1aada3fa9a4f0343c686040d" name="hwdata" arch="src">
  <version epoch="0" ver="0.378" rel="150000.3.65.1"/>
  <changelog author="mpluskal@suse.com" date="1646740800">- Update to version 0.357 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1650369600">- Update to version 0.358 (bsc#1196332):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="c4dbcf303efd79f895ac1612f006e065cace801be615fc3e3e59a2ec74814595" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.380" rel="150000.3.68.1"/>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1708084800">- update to 0.379:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1709640000">- update to 0.380:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="80156c59d8e30797022fda5e9dce0e9779f2c4661a6eeb071990d5a65b25d58d" name="hwdata" arch="src">
  <version epoch="0" ver="0.380" rel="150000.3.68.1"/>
  <changelog author="mpluskal@suse.com" date="1652270400">- Update to version 0.359:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1654084800">- Update to version 0.360 (bsc#1200110):
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1657540800">- update to 0.361:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1663156800">- update to 0.362:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1665662400">- update to 0.363:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1668513600">- update to 0.364:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1670328000">- update to 0.365:
  + Updated pci, usb and vendor ids.</changelog>
  <changelog author="dmueller@suse.com" date="1672833600">- update to 0.366:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1675339200">- update to 0.367:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1678190400">- update to 0.368:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1680523200">- update to 0.369:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1684238400">- update to 0.370:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1686312000">- update to 0.371:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1689076800">- update to 0.372:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="andrea.manzini@suse.com" date="1692705600">- update to 0.373:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1700049600">- update to 0.376:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="dmueller@suse.com" date="1701691200">- update to 0.377:
  * Fixed trailing spaces in pnp.ids</changelog>
  <changelog author="mpluskal@suse.com" date="1704888000">- update to 0.378:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1708084800">- update to 0.379:
  * Update pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1709640000">- update to 0.380:
  * Update pci, usb and vendor ids</changelog>
</package>
<package pkgid="36882acbc176c735733de3a2bdbf0cdd4e987fa2937710a6db17dc417bc44793" name="hwinfo" arch="aarch64">
  <version epoch="0" ver="21.85" rel="150400.3.12.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1687867200">- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="f710c9554a0ce95968266d70972650111aa434ef60319cb304ca60dfd66d9954" name="hwinfo" arch="s390x">
  <version epoch="0" ver="21.85" rel="150400.3.12.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1687867200">- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="e25df06d55dc2086c918db995ea15810f094e9899e604bc5f99d60846dc815a9" name="hwinfo" arch="src">
  <version epoch="0" ver="21.85" rel="150400.3.12.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1687867200">- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="361121a3bad6d778da7ec946eb7c06ddafefa662622e04dbd8afcb6cb69f610d" name="hwinfo" arch="x86_64">
  <version epoch="0" ver="21.85" rel="150400.3.12.1"/>
  <changelog author="mliska@suse.cz" date="1564747200">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1579003200">- merge gh#openSUSE/hwinfo#84
- the /sbin/udevadm compat symlink is gone
- 21.68</changelog>
  <changelog author="dimstar@opensuse.org" date="1579780800">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="wfeldt@opensuse.org" date="1585051200">- merge gh#openSUSE/hwinfo#85
- fix xen detection (bsc#1167561)
- add link to cpuid doc
- 21.69</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587470400">- merge gh#openSUSE/hwinfo#86
- update pci and usb ids (bsc#1169682)
- fix compiler warnings
- 21.70</changelog>
  <changelog author="wfeldt@opensuse.org" date="1605873600">- merge gh#openSUSE/hwinfo#89
- rework network device detection on aarch64 (bsc#1177600,
  bsc#1177261)
- 21.71</changelog>
  <changelog author="wfeldt@opensuse.org" date="1611748800">- merge gh#openSUSE/hwinfo#92
- improve getting video mode info (bsc#1181101)
- try harder to break out of infinite I/O loops
- 21.72</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618315200">- merge gh#openSUSE/hwinfo#95
- don't rely on select() updating its timeout arg (bsc#1184339)
- 21.73</changelog>
  <changelog author="wfeldt@opensuse.org" date="1621339200">- merge gh#openSUSE/hwinfo#98
- update pci and usb ids
- 21.74</changelog>
  <changelog author="wfeldt@opensuse.org" date="1625227200">- merge gh#openSUSE/hwinfo#100
- recognize loongarch64 architecture
- 21.75</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627041600">- merge gh#openSUSE/hwinfo#104
- Fix timezone issue in SOURCE_DATE_EPOCH code
- 21.76</changelog>
  <changelog author="wfeldt@opensuse.org" date="1633089600">- merge gh#openSUSE/hwinfo#105
- Use license file from gnu.org
- Fix spelling
- Add missing final newline
- Trim excess whitespace
- Simple maintenance improvements
- 21.77</changelog>
  <changelog author="wfeldt@opensuse.org" date="1636632000">- merge gh#openSUSE/hwinfo#106
- Always read numerical 32bit serial number from EDID header.
  Override this with ASCII serial number from display descriptor,
  if available.
- Display numerical 32bit serial number for monitors without serial
  number display descriptor
- 21.78</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639483200">- merge gh#openSUSE/hwinfo#108
- Donot close the open tray after read_cdrom_info.
- Donot close the open tray after read.
- 21.79</changelog>
  <changelog author="wfeldt@opensuse.org" date="1639742400">- merge gh#openSUSE/hwinfo#109
- fix logic around cdrom detection
- 21.80</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649851200">- merge gh#openSUSE/hwinfo#112
- fix bug in determining serial console device name (bsc#1198043)
- 21.81</changelog>
  <changelog author="wfeldt@opensuse.org" date="1655985600">- merge gh#openSUSE/hwinfo#113
- Keep NVMe's namespace output consistency when
  nvme_core.multipath=1 (bsc#1199948)
- 21.82</changelog>
  <changelog author="wfeldt@opensuse.org" date="1659700800">- merge gh#openSUSE/hwinfo#115
- improve treatment of NVME devices (bsc#1200975)
- fix compiler warnings
- 21.83</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673265600">- merge gh#openSUSE/hwinfo#127
- create xen usb controller device if necessary (bsc#1204294)
- 21.84</changelog>
  <changelog author="wfeldt@opensuse.org" date="1687867200">- avoid linking problems with libsamba (bsc#1212756)
- 21.85</changelog>
</package>
<package pkgid="8da415adb6e4b4fc760912bfa8d7e43794ece7d805d4a1990f53493a21693185" name="hyper-v" arch="src">
  <version epoch="0" ver="8" rel="150200.14.8.1"/>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
</package>
<package pkgid="767187bad20b34fa26b19b745d0474c039d15dd53e7149169707bb441c0595ff" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="8" rel="150200.14.8.1"/>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- hyper-v.tools.hv.hv_vss_daemon.c: Include &lt;sys/sysmacros.h&gt; for major</changelog>
  <changelog author="ohering@suse.de" date="1537876800">- vss: fix loop device detection (07136793)
- Fix IP reporting by KVP daemon with SRIOV (4ba63412)
- Fix a bug in the key delete code (86503bd3)
- fix compiler warnings about major/target_fname (1330fc35)
- PRIVATE hyper-v.compare-with-upstream.sh</changelog>
  <changelog author="ohering@suse.de" date="1539000000">- Update lsvmbus interpreter from python3(1) to python(1)
  because SLE12 lacks python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1539086400">- fcopy: set 'error' in case an unknown operation was requested (c2d68afb)</changelog>
  <changelog author="ohering@suse.de" date="1574856000">- async name resolution in kvp_daemon (bsc#1100758)
- kvp: eliminate 'may be used uninitialized' warning (89eb4d8d)
- fix typos in toolchain (2d35c660)
- fixed Python pep8/flake8 warnings for lsvmbus (5912e791)
- Replace GPLv2 boilerplate/reference with SPDX (43aa3132)
- Fix a warning of buffer overflow with gcc 8.0.1 (4fcba780)</changelog>
  <changelog author="ohering@suse.de" date="1575028800">- Update lsvmbus interpreter from python(1) to python3(1) again
  because only SLE12 lacked proper python3 support (bsc#1093910)</changelog>
  <changelog author="ohering@suse.de" date="1582200000">- Revert previous non-upstream change for async name resolution
  Just use gethostname via hyper-v.kvp.gethostname.patch (bsc#1100758)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1595419200">- Enable build on aarch64</changelog>
  <changelog author="ohering@suse.de" date="1595419201">- Remove dependency to network-online.target now that gethostname
  is used in kvp_daemon (bsc#1174443, bsc#1174444)
- Reopen the devices if read() or write() returns errors (9fc3c01a)
- Use either python2 or python3 for lsvmbus (bsc#1093910)
- Remove sysv init scripts</changelog>
  <changelog author="ohering@suse.de" date="1597924800">- Allow daemon restart again (bsc#1116957)
  Since some time the kernel moved from netlink sockets to char
  devices, which is supposed to handle a connection reopen for the
  kernel&lt;-&gt;daemon interface</changelog>
</package>
<package pkgid="e0d925fd229eec34603660147c144cfd572f0c96b5a09e2de1154d091827e9d8" name="icu" arch="src">
  <version epoch="0" ver="65.1" rel="150200.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="b77167df016d16a1eda852e725687537e61c6d21c89501f7378dabff06b63b38" name="icu" arch="src">
  <version epoch="0" ver="65.1" rel="150200.4.8.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="c1fcab1160f8fe44605d45d86f1dc314eae55f49d0c71d8d5230220efc6249b1" name="icu73_2" arch="src">
  <version epoch="0" ver="73.2" rel="150000.1.3.1"/>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
</package>
<package pkgid="454986fe745753e38085e76e64148ec55dd2006ea1ef01348db74dfc5e8ed33e" name="icu73_2" arch="src">
  <version epoch="0" ver="73.2" rel="150000.1.7.1"/>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
  <changelog author="meissner@suse.com" date="1701950400">- icu4c-73_c-ICU-22512-Fix-broken-TestHebrewCalendarInTemporalLeapYear.patch
  Fix testsuite issue in hebrew calendar (bsc#1217479)</changelog>
</package>
<package pkgid="45875849a1c738786439700261204b481f3494e23f24ee31eec3cbde89016ec9" name="ignition" arch="aarch64">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="a3c68355375bfb9d3c7b412f922ccc6414656bbd559e26b856e27d7da10e4993" name="ignition" arch="s390x">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="721e1caca2d311a145879589b080d3ed0aa83fbcc3adeeddd68d47997abea493" name="ignition" arch="src">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="738c461fc948863c1f688a75571fcbf74ae82a0fc2cd9333ff52da00af6d4cf5" name="ignition" arch="x86_64">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="4a59be5aebc1cc46306e3712b58f012dbcbb5ca0a10ff469d0c7daac35737460" name="ignition-dracut-grub2" arch="aarch64">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="7561c0f27a229090110ccaa87731d077ffa565980b4ed327f0062713e69017ef" name="ignition-dracut-grub2" arch="s390x">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="933543b9c8d00a4b5c0adcc2113ff4ff9570e0c0aa00f7512fb136e174103070" name="ignition-dracut-grub2" arch="x86_64">
  <version epoch="0" ver="2.15.0" rel="150400.4.2.1"/>
  <changelog author="rpm@fthiessen.de" date="1622462400">- Update to version 2.10.1:
  * Breaking Changes:
  * Rename Custom struct to ClevisCustom
  * Embed Clevis and ClevisCustom structs in parents
  * Always include interior nodes in merge transcript
  * Add kernel argument support
  * Fix fetching userdata on AWS when IMDSv1 is disabled
  * Fix creating Tang-based LUKS volumes before network is up
  * Document storage.filesystems.wipeFilesystem default
  * Fix file mode of ignition-kargs-helper script
- Fix Go dependency, 1.13+ is required</changelog>
  <changelog author="iforster@suse.com" date="1625659200">- Implement missing ignition-kargs-helper script for kernel
  argument support</changelog>
  <changelog author="iforster@suse.com" date="1625659201">- Update to version 2.11.0:
  * news: add notes for 2.11.0
  * Upgraded docs
  * config/*: return report from previous parser when chaining
  * config/*: re-order testcases by version
  * tree: update for stable v3.3.0 and new v3.4.0-experimental
  * config/v3_4_experimental: adapt for experimental
  * config/v3_4_experimental: copy from config/v3_3
  * config/v3_3: adapt for stabilization
  * config/v3_3_experimental: rename to config/v3_3
  * config/v3_3_exp: pointerify ClevisCustom Config and Pin
  * config/v3_3_exp: pointerify Raid.Level
  * config/v3_3_exp: pointerify LinkEmbedded1.Target
  * stages/disks: simplify a check
  * config/v3_1/translate: don't point to field from input struct
  * config/v3_3_exp: drop devices from schema "required" field
  * config/*: validate that storage.raid.devices is non-empty
  * config/*/types: add RAID validation tests
  * config/shared/errors: fix ErrSparesUnsupportedForLevel message
  * config: fix comment
  * *: formally bump Go to 1.13
  * platform: add powervs platform
  * internal/providers/*stack: drop dead timeout code
  * stages/disks: improve error reporting for LUKS device reuse
  * ignition-setup-user.service: drop Before=multipathd.service
  * Dockerfile: build ignition-validate container using Fedora
  * workflows: test on Go 1.16
  * tests/*: verify deletion of block device w/o creating a FS
  * *: allow erasing block device without creating a filesystem
  * *: rename other projects' master branches to main
  * *: rename master branch to main
  * config/*: add export functions for parsing any config version &lt; N
  * config/*: refactor config.go's Parse() to use GetConfigVersion
  * config/* : minor cleanup
- Refreshed to match new Ignition spec
  * 0002-allow-multiple-mounts-of-same-device.patch</changelog>
  <changelog author="iforster@suse.com" date="1625745600">- If a Combustion device was mounted, then unmount it in
  ignition-kargs-helper - the replacement script will be put on
  the same location</changelog>
  <changelog author="iforster@suse.com" date="1626868800">- Ignore error return code if no virtualization environment
  detected. [bsc#1188479]
  This makes it possible to use Ignition also on bare metal (e.g.
  when dumping images directly to disk) without adding a
  ignition.platform.id parameter.</changelog>
  <changelog author="kukuk@suse.com" date="1627473600">- Include vfat and nls kernel modules into initrd so that we can
  read the ignition configuration from USB drives [bsc#1184202]</changelog>
  <changelog author="iforster@suse.com" date="1628510400">- Update to version 2.12.0:
  * news: add notes for 2.12.0
  * stages/files: add previousReport to result report
  * tests: fix linter warning
  * workflows: limit permissions to reading repo contents
  * workflows: bump linter version
  * go.mod: revendor
  * Drop EOL Go versions
  * internal/distro: drop DiskByIDDir
  * providers/azure: add support for azure gen2 VMs [bsc#1196679]
  * stages/mount: correctly relabel the root of a fresh ext4 filesystem
  * exec: fix permissions for mountpoints in home dirs
  * tests: drop os.ModeDir requirement in mode of output directories
  * examples: reboot with --force
  * exec/util: add blkid API to query block devices based on FSTYPE
  * stages/files: use IntToPtr() in createCrypttabEntries()
  * stages/files: write result report to /var/lib/ignition
  * engine: persist fetched config summaries in State
  * stages/disks: use State to persist keyfiles for files stage
  * *: add general mechanism for persisting state between stages
  * main: drop -clear-cache flag
  * engine: don't hardcode neednet path
  * fetch-offline: return ErrNeedNet if we need net
  * engine: switch Engine.logReport() to pointer receiver
  * engine: fix incorrect error in log message
  * dracut: drop ignition-setup-user.service
  * dracut: drop reference to ignition-setup-base.service
  * providers/gcp: access GCP metadata service by IP address
  * Remove ignition-firstboot-complete.service
  * OWNERS: remove
  * internal/exec/util: drop device argument from cResultToErr()
  * docs/config*: document storage.luks.clevis.threshold default
  * ci: disable spec bump external test workaround
  * docs: Add Ignition release / Spec version table
  * templates: update example releng signing ticket
  * templates: don't update %gotest lines
  * Provide ignition-firstboot-complete.service (removed by upstream
  due to correctly being considered distro spcific), based on the
  old upstream version; removed all non-SUSE specific stuff and
  integrated our own changes
  * Removed change-ignition-firstboot-path.conf (changes are
  integrated into ignition-firstboot-complete.service now).
  * Provide ignition-setup-user.service  (removed by upstream due
  to correctly being considered distro spcific), based on the old
  upstream version.
  * Renamed ignition-setup-user-suse.sh to ignition-setup-user.sh
  * Adapted ignition-generator-suse and module-setup.sh to use the
  custom ignition-setup-user.service (no overriding of parts of the
  service file necessary any more).
  * Synced ignition-kargs-helper script with upstream example
  * Raising minimum Go version to 1.15 as required by upstream</changelog>
  <changelog author="iforster@suse.com" date="1628769600">- is-live-image doesn't exist on *SUSE, and our live images don't
  use Ignition, so just add the Ignition device dependency to the
  service file directly.</changelog>
  <changelog author="iforster@suse.com" date="1629720000">- Make sure to create /boot/writable (may not be present in some
  images)</changelog>
  <changelog author="iforster@suse.com" date="1638360000">- Update to version 2.13.0:
  * news: add notes for 2.13.0
  * config/v3_4_exp: noProxy entries cannot be null
  * config/v3_4_exp: mark ignition.version as required
  * docs/supported-platforms: add some description about Nutanix
  * providers/nutanix: add Nutanix platform
  * tests: use umountPath as a thin wrapper around umountPartition
  * internal/providers: refactor handling of unmounting the mount path
  * tests: address gostatic-check warning
  * tests: Add base64 decoding test
  * Dockerfile.validate: build with Fedora 35
  * go.mod: update dataurl to 1.0.0
  * ci: give blackbox tests two hours to run
  * tests/filesystem: fix umountPartition retry loop
  * templates: skip vendoring the new version in favor of dependabot
  * go.mod: update vcontext
  * providers/virtualbox: read config from /Ignition/Config guest property
  * stages/filesystems: use mkfs.fat instead of mkfs.vfat
  * docs/supported-platforms: switch to Afterburn docs URL
  * docs/supported-platforms: drop reference to platform-specific agents
  * test: ensure all platforms are documented
  * docs/supported-platforms: add missing platforms
  * stages/files: rename `relabelDirsForFile` and add docstring
  * stages/files: make variable name follow Go convention
  * docs/supported-platforms: update platform names and URLs
  * docs/supported-platforms: sort by platform ID
  * docs/supported-platforms: add platform IDs
  * docs: Remove default layout from front matter
  * docs: Do not convert -- &amp; --- to en/em-dash
  * internal/*: change the location of Ignition report
  * internal/exec/util: rename FindFirstMissingDirForFile and tweak docs
  * providers/qemu: start reporting progress reading fw_cfg after 10 s
  * providers/qemu: optimize fw_cfg read size
  * ci: use coreos-ci-lib helper for kola testiso
  * *: gofmt 1.17
  * workflows: bump Go and golangci-lint
  * config: update versions in comments
- Removed obsolete ignition-rpmlintrc</changelog>
  <changelog author="fvogt@suse.com" date="1646395200">- Add support for NetworkManager in dracut:
  * ignition-enable-network.service, ignition-enable-network.sh</changelog>
  <changelog author="fvogt@suse.com" date="1646395201">- Remove /var/lib/YaST2/reconfig_system if a config was provided:
  * ignition-remove-reconfig_system.service</changelog>
  <changelog author="iforster@suse.com" date="1648209600">- Add ignition-touch-selinux-autorelabel.conf:
  Trigger SELinux autorelabel after Ignition runs; Ignition would
  support SELinux itself, however this is a compile time option, so
  it can't be used here.
- Filter commented lines in ignition-mount-initrd-fstab.service</changelog>
  <changelog author="iforster@suse.com" date="1649073600">- Don't include non-MarkDown files in documentation</changelog>
  <changelog author="iforster@suse.com" date="1649160000">- ignition-mount-initrd-fstab.service:
  - Don't ignore errors in loops
  - Unmount mount points recursively - a new submount may have
    appeared
  - Split umount part into own service file:
- ignition-umount-initrd-fstab.service:
  - Unmounts the additional mounts as soon as they are not
    required for Ignition any more; the ExecStop operation is
    running quite late in initrd and may unmount essential mount
    points flagged with "x-initrd.mount" (e.g. when storing /usr on
    a separate mount point). In theory this will also affect
    Ignition itself, but it hasn't been reported as a problem so
    far.</changelog>
  <changelog author="iforster@suse.com" date="1649419200">- Use /bin/sh instead of /usr/bin/sh (for backwards compatibility
  with SLE Micro 5.1) [bsc#1196679]</changelog>
  <changelog author="iforster@suse.com" date="1652875200">- Update to version 2.14.0:
  * NEWS: update v2.14.0
  * docs/operator-notes: add section on provisioning secrets
  * Dockerfile.validate: build with Fedora 36
  * internal/resource: fix gs:// fetches in GCE without a service account
  * docs/operator-notes: document supported S3 URL formats
  * internal/resource: fix S3 access point object ARNs
  * exec/util: fix infinite loop in Depth() if -root is relative
  * Add ignition-delete-config.service and ignition-rmcfg symlink
  * providers/virtualbox: support deleting Ignition configs
  * providers/virtualbox: add comment referencing VirtualBox source
  * providers/virtualbox: add define for GUEST_PROP_FN_GET_PROP
  * providers/virtualbox: add helper to set up hypervisor connection
  * providers/vmware: support deleting Ignition configs
  * main: add ignition-rmcfg multicall binary
  * go.mod: add github.com/beevik/etree
  * providers/vmware: switch to internal copy of OVF parser
  * internal/resource: fix bucket field in error message
  * internal/resource: derive AWS region hint from ARN partition field
  * internal/resource: simplify test
  * internal/resource: fix minor nits
  * provider/azure: try to fetch userdata from IMDS
  * providers/vmware: convert OVF tests to testify
  * providers/vmware: drop vmw-ovflib docs
  * providers/vmware: add verbatim copy of vmw-ovflib
  * providers/vmware: add constants for guestinfo and OVF property names
  * providers/virtualbox: fix reading properties with flags
  * internal/resource: support S3 access point URLs
- Update fixes CVE from [bsc#1199524]; this introduces a new
  service "ignition-delete-config.service"
- Add ignition-rmcfg-suse.conf dropin to adapt to SUSE environment
- Use fixed paths in spec file for hardcoded installation paths</changelog>
  <changelog author="fvogt@suse.com" date="1659441600">- ignition-enable-network.sh: Use /lib/dracut/hooks directly
  instead of the usr-merged location which isn't available everywhere
  (bsc#1201957)</changelog>
  <changelog author="iforster@suse.com" date="1677499200">- Update to version 2.15.0:
  * Features
  * Support offline Tang provisioning via pre-shared advertisement (3.4.0)
  * Allow enabling discard passthrough on LUKS devices (3.4.0)
  * Allow specifying arbitrary LUKS open options (3.4.0)
  * Ship aarch64 macOS ignition-validate binary in GitHub release artifacts
  * Changes
  * Mark the 3.4.0 config spec as stable
  * No longer accept configs with version 3.4.0-experimental
  * Create new 3.5.0-experimental config spec from 3.4.0
  * Fail if files/links/dirs conflict with systemd units or dropins
  * Warn if template for enabled systemd instance unit has no Install section
  * Warn if filesystem overwrites partitioned disk
  * Warn if wipeTable overwrites a filesystem that would otherwise be reused
  * Warn if user/group specified for hard link
  * Install ignition-apply in /usr/libexec
  * Allow distros to add Ignition command-line arguments from a unit drop-in
  * Convert NEWS to Markdown and move to docs site
  * Require Go 1.18+
  * Bug fixes
  * Don't overwrite LUKS1 volume when storage.luks.wipeVolume is false
  * Request network when custom Clevis config has needsNetwork set
  * Fix creating LUKS volume with custom Clevis config that uses TPM2
  * Avoid logging spurious error when a LUKS volume wasn't previously formatted
  * Fix version string in ignition-validate release container
  * Fix reproducibility of systemd preset file in ignition-apply output
  * Document that user/group fields aren't applied to hard links
  * Clarify spec docs for files/directories/links group fields
- Modified 0002-allow-multiple-mounts-of-same-device.patch to add
  new Ignition spec version
- Add 0001-ignore-missing-qemu-blockdev.patch [bsc#1207679] to
  support booting without configuration device on s390x.
- Move all /usr/libexec contents to %sbindir</changelog>
  <changelog author="iforster@suse.com" date="1678363200">- Add `dasd_mod.dasd=autodetect` to kernel command line parameters
  (for Ignition device support on S/390) [boo#1207903]</changelog>
</package>
<package pkgid="87fb5902b50a6206b0566ac0204445af4d6ed3ae216f601dbdefa6c8efb888fe" name="ipset" arch="aarch64">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="be9f99df25092f07b85393b113671b68cf4b6c0318f8073898a0a3017f9d7f44" name="ipset" arch="s390x">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="9e10b3d7e5f130c62da8a87ba449643ab27c00a847a7c53b7a4dc4824f311e56" name="ipset" arch="src">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="0b40bc6879b41c5d95571807e2e4c3d8cbc42fa409fe4f53a8c6d089e3e4d94f" name="ipset" arch="x86_64">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="ce31d1ef00c72ddcca23d56e7f60be9b0c4870fc5e64ab30ac1aac27093d1481" name="jbigkit" arch="src">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="a7cbf2f03002b6d705c84d2aa642c2b280ee8918bc2c4d149a03f2d5d4fb0e3f" name="kbd" arch="aarch64">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="0136a656c667256c63e3b9ce0cc787346931169049acba98e7cb8d4fc4419122" name="kbd" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="3229ac5549ad4b311a3a06b0b2c2be731877617fefb354bc1021004ded8b2c4d" name="kbd" arch="src">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="f8dc5a79cf35d8ffca58a58e2c4058d5b195fe9a2064886dc958711fae28a192" name="kbd" arch="x86_64">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="c3d3cac6ead0412aa99fb4c26e356e033faca8bc42c57f3df6979e41b1ea0b09" name="kbd-legacy" arch="noarch">
  <version epoch="0" ver="2.4.0" rel="150400.5.6.1"/>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533211200">- fbtest.c: include &lt;sys/sysmacros.h&gt; for major/minor</changelog>
  <changelog author="mvidner@suse.com" date="1568894400">- Allow YaST to select Iranian (Persian, Farsi) keyboard layout
  (bsc#1092920)</changelog>
  <changelog author="kukuk@suse.de" date="1575547200">- Move pam.d/vlock to /usr/etc</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1578571200">- Use a UTF-8 capable locale, otherwise ckbcomp will not not able
  to do proper uppercase/lowercase conversions.
- Rebase cz-map.patch after UTF-8 changes.
- Skip compression/decompression of maps which are about to be
  discarded later (~30%). Avoid zgrep, which is a shell script
  spawning grep and gunzip for each input file.</changelog>
  <changelog author="sbrabec@suse.com" date="1583236800">- Update to version 2.2.0:
  * setfont: Add option -d to double size of font.
  * kbd_mode: Add -f option and deny dangerous mode switches
    without it.
  * Data files updates.
  * Fix gcc warnings and error with gcc-10 (boo#1160273).
  * Other fixes.
  * For a full list of changes see:
    https://git.kernel.org/pub/scm/linux/kernel/git/legion/kbd.git/log/
- Update home page.
- Refresh patches: kbd-1.15.2-dumpkeys-C-opt.patch,
  kbd-1.15.2-setfont-no-cruft.patch,
  kbd-1.15.5-loadkeys-search-path.patch.</changelog>
  <changelog author="lnussel@suse.de" date="1587470400">- drop broken kbd command as well as guess_encoding (boo#1170067)
- don't use subdirectory for legacy keymaps (boo#1166423)
- use fdupes</changelog>
  <changelog author="jslaby@suse.com" date="1597924800">- add libkeymap-Fix-mk_mapname-for-the-plain-map.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600344000">- Fix kbd-1.15.5-loadkeys-search-path.patch to prefer xkb keymaps
  (boo#1176302).</changelog>
  <changelog author="sbrabec@suse.com" date="1600344001">- Make kbdsettings working in both bash and dash (boo#1175040).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1600776000">- Refresh patch to fix build on non-x86 architecture broken
  by previous commit:
  * kbdsettings-nox86.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1600948800">- Update to version 2.3.0:
  * Added libkfont library (internal yet).
  * Added Canadian Multilingual Standard keyboard map.
  * Added us1 that maps Right Alt to AltGr and Shift+Tab to
    Alt+Tab.
  * The dead_macron is used instead of macron in fi.map.
  * Added retries when switching to the console (chvt, openvt).
  * Added option -d to double size of font (setfont).
  * Added long options, help messages.
  * Added solar24x32 font.
  * Updated eurlatgr font.
  * Fixed problems with formatting man pages.
  * Fixed search path error (boo#1176854).
- Refresh partially upstreamed kbd-1.15.2-dumpkeys-C-opt.patch
- Drop upstreamed libkeymap-Fix-mk_mapname-for-the-plain-map.patch
- Refresh kbd-1.15.2-setfont-no-cruft.patch and
  kbd-1.15.5-loadkeys-search-path.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035200">- Do not package libtswrap.so.0: it's only used by the test suite
  in a LD_PRELOAD fashion.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="jslaby@suse.cz" date="1608292800">- Update to version 2.4.0:
  * po: Update cs and sr translations (from translationproject.org)
  * libkfont: Use only KDFONTOP
  * Added support for a few derivatives of neo
  * Fix use-after-free of pipe_cmd
  * Update solar24x32 font
  * vlock's pam config added to destination directory
  * Update sun12x22.psfu
  * libkeymap: unify non/unicode accent_table generation
  * libkeymap: note about --unicode use
  * libkeymap: remove last ushort
  * fi.map: use newly added deadkeys
  * Do not install internal library
  * Additional deadkeys
- Remove kbd-1.15.2-setfont-no-cruft.patch
  The old ioctls were finally dropped.</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Update the installed license file.
  COPYING is a symlink to LICENSE. Let's use this file directly.</changelog>
  <changelog author="kukuk@suse.com" date="1627041600">- Only run kbdsettings.service if /etc/sysconfig/keyboard exists.
  Necessary for image based installations without admin made changes.</changelog>
  <changelog author="fvogt@suse.com" date="1642420800">- Add patch to fix random doubling of font sizes (bsc#1194698):
  * 0001-libkfont-Initialize-kfont_context-options.patch</changelog>
  <changelog author="fvogt@suse.com" date="1645444800">- Fix build without %_distconfdir (see bsc#1195679)</changelog>
  <changelog author="fbui@suse.com" date="1682596800">- Add 'ara' vc keymap (bsc#1210702)
  'ara' is slightly better than 'arabic' as it matches the name of its x11
  layout counterpart. Keep 'arabic' for backward compatibility sake.</changelog>
</package>
<package pkgid="d02d68e7734d42562b63b01c6153746b580249c24a93548fb3d3a222b46c1d36" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.100.2"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize remaining xfs_buf length tracepoints
  (git-fixes).
- commit 0960978</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518416">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="msuchanek@suse.de" date="1701691201">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="2cad6c704052e84b6b4730cbced9719b9e1466e5f4e9d6ee3b2cec415e9b2191" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.100.2"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize remaining xfs_buf length tracepoints
  (git-fixes).
- commit 0960978</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518416">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="msuchanek@suse.de" date="1701691201">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="a56f21697aa68dc7415bbc31c3d132e49786e35a0699096b256338eea62c0e1b" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.100.2"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize remaining xfs_buf length tracepoints
  (git-fixes).
- commit 0960978</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518416">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="msuchanek@suse.de" date="1701691201">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="d3e695196356db7c5b11740d13f3c9285ddfa8d7810e8fcf8cd6a5791497af59" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.100.2"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize remaining xfs_buf length tracepoints
  (git-fixes).
- commit 0960978</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518416">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="msuchanek@suse.de" date="1701691201">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="51c40224dea3675b37dcf84104279eb1ea6c83983b9607dd776a477a17976c21" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.103.1"/>
  <changelog author="pmladek@suse.com" date="1704715200">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715206">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="ohering@suse.de" date="1704801600">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jgross@suse.com" date="1704801601">- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- commit 146bca2</changelog>
  <changelog author="jgross@suse.com" date="1704801602">- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
  (git-fixes).
- commit 8696527</changelog>
  <changelog author="jgross@suse.com" date="1704801603">- virtio-mmio: fix memory leak of vm_dev (git-fixes).
- commit d624528</changelog>
  <changelog author="jgross@suse.com" date="1704801604">- virtio_balloon: Fix endless deflation and inflation on arm64
  (git-fixes).
- commit 6583f74</changelog>
  <changelog author="jgross@suse.com" date="1704801605">- vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE
  (git-fixes).
- commit ad9e29a</changelog>
  <changelog author="jgross@suse.com" date="1704801606">- vsock/virtio: Fix unsigned integer wrap around in
  virtio_transport_has_space() (git-fixes).
- commit db5c328</changelog>
  <changelog author="jroedel@suse.de" date="1704801607">- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- commit a41e3fe</changelog>
  <changelog author="jgross@suse.com" date="1704801608">- xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
  (git-fixes).
- commit f6ed3e4</changelog>
  <changelog author="jgross@suse.com" date="1704801609">- xen/events: fix delayed eoi list handling (git-fixes).
- commit eb0149c</changelog>
  <changelog author="jgross@suse.com" date="1704801610">- swiotlb-xen: provide the "max_mapping_size" method (git-fixes).
- commit a036bcf</changelog>
  <changelog author="lhenriques@suse.de" date="1704801611">- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()
  (bsc#1218659).
- commit 4ee6819</changelog>
  <changelog author="nik.borisov@suse.com" date="1704888000">- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- commit 8afebed</changelog>
</package>
<package pkgid="17b0f9a01358e9792778905bf12d6ab5ab75b45ccf8604e9f03db3701d275eb4" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.103.1"/>
  <changelog author="pmladek@suse.com" date="1704715200">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715206">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="ohering@suse.de" date="1704801600">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jgross@suse.com" date="1704801601">- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- commit 146bca2</changelog>
  <changelog author="jgross@suse.com" date="1704801602">- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
  (git-fixes).
- commit 8696527</changelog>
  <changelog author="jgross@suse.com" date="1704801603">- virtio-mmio: fix memory leak of vm_dev (git-fixes).
- commit d624528</changelog>
  <changelog author="jgross@suse.com" date="1704801604">- virtio_balloon: Fix endless deflation and inflation on arm64
  (git-fixes).
- commit 6583f74</changelog>
  <changelog author="jgross@suse.com" date="1704801605">- vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE
  (git-fixes).
- commit ad9e29a</changelog>
  <changelog author="jgross@suse.com" date="1704801606">- vsock/virtio: Fix unsigned integer wrap around in
  virtio_transport_has_space() (git-fixes).
- commit db5c328</changelog>
  <changelog author="jroedel@suse.de" date="1704801607">- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- commit a41e3fe</changelog>
  <changelog author="jgross@suse.com" date="1704801608">- xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
  (git-fixes).
- commit f6ed3e4</changelog>
  <changelog author="jgross@suse.com" date="1704801609">- xen/events: fix delayed eoi list handling (git-fixes).
- commit eb0149c</changelog>
  <changelog author="jgross@suse.com" date="1704801610">- swiotlb-xen: provide the "max_mapping_size" method (git-fixes).
- commit a036bcf</changelog>
  <changelog author="lhenriques@suse.de" date="1704801611">- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()
  (bsc#1218659).
- commit 4ee6819</changelog>
  <changelog author="nik.borisov@suse.com" date="1704888000">- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- commit 8afebed</changelog>
</package>
<package pkgid="5623abe7d596605eddbd509a22d644bd837143615a45ac879bdd3c3e8a5f92a3" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.103.1"/>
  <changelog author="pmladek@suse.com" date="1704715200">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715206">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="ohering@suse.de" date="1704801600">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jgross@suse.com" date="1704801601">- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- commit 146bca2</changelog>
  <changelog author="jgross@suse.com" date="1704801602">- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
  (git-fixes).
- commit 8696527</changelog>
  <changelog author="jgross@suse.com" date="1704801603">- virtio-mmio: fix memory leak of vm_dev (git-fixes).
- commit d624528</changelog>
  <changelog author="jgross@suse.com" date="1704801604">- virtio_balloon: Fix endless deflation and inflation on arm64
  (git-fixes).
- commit 6583f74</changelog>
  <changelog author="jgross@suse.com" date="1704801605">- vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE
  (git-fixes).
- commit ad9e29a</changelog>
  <changelog author="jgross@suse.com" date="1704801606">- vsock/virtio: Fix unsigned integer wrap around in
  virtio_transport_has_space() (git-fixes).
- commit db5c328</changelog>
  <changelog author="jroedel@suse.de" date="1704801607">- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- commit a41e3fe</changelog>
  <changelog author="jgross@suse.com" date="1704801608">- xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
  (git-fixes).
- commit f6ed3e4</changelog>
  <changelog author="jgross@suse.com" date="1704801609">- xen/events: fix delayed eoi list handling (git-fixes).
- commit eb0149c</changelog>
  <changelog author="jgross@suse.com" date="1704801610">- swiotlb-xen: provide the "max_mapping_size" method (git-fixes).
- commit a036bcf</changelog>
  <changelog author="lhenriques@suse.de" date="1704801611">- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()
  (bsc#1218659).
- commit 4ee6819</changelog>
  <changelog author="nik.borisov@suse.com" date="1704888000">- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- commit 8afebed</changelog>
</package>
<package pkgid="9eb5f7473eaf29e8cdb0a987c6f78e0e8e8d0665a3ce9961ece334bd4bab4a1c" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.103.1"/>
  <changelog author="pmladek@suse.com" date="1704715200">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715206">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="ohering@suse.de" date="1704801600">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jgross@suse.com" date="1704801601">- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- commit 146bca2</changelog>
  <changelog author="jgross@suse.com" date="1704801602">- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
  (git-fixes).
- commit 8696527</changelog>
  <changelog author="jgross@suse.com" date="1704801603">- virtio-mmio: fix memory leak of vm_dev (git-fixes).
- commit d624528</changelog>
  <changelog author="jgross@suse.com" date="1704801604">- virtio_balloon: Fix endless deflation and inflation on arm64
  (git-fixes).
- commit 6583f74</changelog>
  <changelog author="jgross@suse.com" date="1704801605">- vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE
  (git-fixes).
- commit ad9e29a</changelog>
  <changelog author="jgross@suse.com" date="1704801606">- vsock/virtio: Fix unsigned integer wrap around in
  virtio_transport_has_space() (git-fixes).
- commit db5c328</changelog>
  <changelog author="jroedel@suse.de" date="1704801607">- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- commit a41e3fe</changelog>
  <changelog author="jgross@suse.com" date="1704801608">- xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
  (git-fixes).
- commit f6ed3e4</changelog>
  <changelog author="jgross@suse.com" date="1704801609">- xen/events: fix delayed eoi list handling (git-fixes).
- commit eb0149c</changelog>
  <changelog author="jgross@suse.com" date="1704801610">- swiotlb-xen: provide the "max_mapping_size" method (git-fixes).
- commit a036bcf</changelog>
  <changelog author="lhenriques@suse.de" date="1704801611">- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()
  (bsc#1218659).
- commit 4ee6819</changelog>
  <changelog author="nik.borisov@suse.com" date="1704888000">- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- commit 8afebed</changelog>
</package>
<package pkgid="b81e4c76fe8ce17e35b124af4103d1e038b39809baa2877b4a6ff34cf79bf34d" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.108.1"/>
  <changelog author="jwiesner@suse.de" date="1706702400">- clocksource: disable watchdog checks on TSC when TSC is watchdog
  (bsc#1215885).
- commit 2f92dd8</changelog>
  <changelog author="jwiesner@suse.de" date="1706702401">- clocksource: Skip watchdog check for large watchdog intervals
  (bsc#1217217).
- commit 63b1d6d</changelog>
  <changelog author="dwagner@suse.de" date="1706702402">- nvmet-tcp: Fix the H2C expected PDU len calculation
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: remove boilerplate code (bsc#1217987 bsc#1217988
  bsc#1217989 CVE-2023-6535 CVE-2023-6536 CVE-2023-6356).
- nvmet-tcp: fix a crash in nvmet_req_complete() (bsc#1217987
  bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C
  PDU length (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535
  CVE-2023-6536 CVE-2023-6356).
- commit d968940</changelog>
  <changelog author="msuchanek@suse.de" date="1706702403">- kernel-source: Fix description typo
- commit 8abff35</changelog>
  <changelog author="mhocko@suse.com" date="1706788800">- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- trace,smp: Add tracepoints around remotelly called functions
  (bsc#1217895).
- vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- Refresh
  patches.suse/0002-kernel-smp-make-csdlock-timeout-depend-on-boot-param.patch.
- commit 668c0e0</changelog>
  <changelog author="mhocko@suse.com" date="1706788801">- kabi, vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- commit 8cb5798</changelog>
  <changelog author="lhenriques@suse.de" date="1706788802">- Update
  patches.suse/ext4-fix-kernel-BUG-in-ext4_write_inline_data_end.patch
  (CVE-2021-33631 bsc#1219412 bsc#1206894).
- commit 96c942c</changelog>
  <changelog author="jgross@suse.com" date="1706788803">- xen-netback: don't produce zero-size SKB frags (CVE-2023-46838,
  XSA-448, bsc#1218836).
- commit 9a897ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1706875200">- atm: Fix Use-After-Free in do_vcc_ioctl (CVE-2023-51780
  bsc#1218730).
- commit 658d424</changelog>
  <changelog author="alnovak@suse.cz" date="1707134400">- README.BRANCH: SLE15-SP4 became LTSS, update maintainers
- commit 94325df</changelog>
  <changelog author="petr.pavlu@suse.com" date="1707134401">- Revert "tracing: Increase trace array ref count on enable and
  filter files" (bsc#1219490).
  Deleted:
  patches.suse/tracing-Increase-trace-array-ref-count-on-enable-and-filter-files.patch
  patches.suse/tracing-Have-event-inject-files-inc-the-trace-array-ref-count.patch
  Backported commit f5ca233e2e66 ("tracing: Increase trace array ref count
  on enable and filter files") causes a kernel panic and its upstream
  fix-up bb32500fb9b7 ("tracing: Have trace_event_file have ref counters")
  cannot be easily backported because it affects kABI. Revert the commit
  and its one related + dependent patch, at least for now.
- commit 90d885a</changelog>
  <changelog author="jslaby@suse.cz" date="1707220800">- rpm/mkspec: sort entries in _multibuild
  Otherwise it creates unnecessary diffs when tar-up-ing. It's of course
  due to readdir() using "random" order as served by the underlying
  filesystem.
  See for example:
  https://build.opensuse.org/request/show/1144457/changes
- commit d1155de</changelog>
  <changelog author="pjakobsson@suse.de" date="1707220801">- Update
  patches.suse/drm-amdgpu-Fix-potential-fence-use-after-free-v2.patch
  (bsc#1219128 CVE-2023-51042 git-fixes).
- commit 4b937fc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220802">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit d77a474</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
</package>
<package pkgid="54056ba51b9a498780079b845c38f78d2cb9bb01b2ee27d647b1c5c28af28a28" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.108.1"/>
  <changelog author="jwiesner@suse.de" date="1706702400">- clocksource: disable watchdog checks on TSC when TSC is watchdog
  (bsc#1215885).
- commit 2f92dd8</changelog>
  <changelog author="jwiesner@suse.de" date="1706702401">- clocksource: Skip watchdog check for large watchdog intervals
  (bsc#1217217).
- commit 63b1d6d</changelog>
  <changelog author="dwagner@suse.de" date="1706702402">- nvmet-tcp: Fix the H2C expected PDU len calculation
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: remove boilerplate code (bsc#1217987 bsc#1217988
  bsc#1217989 CVE-2023-6535 CVE-2023-6536 CVE-2023-6356).
- nvmet-tcp: fix a crash in nvmet_req_complete() (bsc#1217987
  bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C
  PDU length (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535
  CVE-2023-6536 CVE-2023-6356).
- commit d968940</changelog>
  <changelog author="msuchanek@suse.de" date="1706702403">- kernel-source: Fix description typo
- commit 8abff35</changelog>
  <changelog author="mhocko@suse.com" date="1706788800">- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- trace,smp: Add tracepoints around remotelly called functions
  (bsc#1217895).
- vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- Refresh
  patches.suse/0002-kernel-smp-make-csdlock-timeout-depend-on-boot-param.patch.
- commit 668c0e0</changelog>
  <changelog author="mhocko@suse.com" date="1706788801">- kabi, vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- commit 8cb5798</changelog>
  <changelog author="lhenriques@suse.de" date="1706788802">- Update
  patches.suse/ext4-fix-kernel-BUG-in-ext4_write_inline_data_end.patch
  (CVE-2021-33631 bsc#1219412 bsc#1206894).
- commit 96c942c</changelog>
  <changelog author="jgross@suse.com" date="1706788803">- xen-netback: don't produce zero-size SKB frags (CVE-2023-46838,
  XSA-448, bsc#1218836).
- commit 9a897ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1706875200">- atm: Fix Use-After-Free in do_vcc_ioctl (CVE-2023-51780
  bsc#1218730).
- commit 658d424</changelog>
  <changelog author="alnovak@suse.cz" date="1707134400">- README.BRANCH: SLE15-SP4 became LTSS, update maintainers
- commit 94325df</changelog>
  <changelog author="petr.pavlu@suse.com" date="1707134401">- Revert "tracing: Increase trace array ref count on enable and
  filter files" (bsc#1219490).
  Deleted:
  patches.suse/tracing-Increase-trace-array-ref-count-on-enable-and-filter-files.patch
  patches.suse/tracing-Have-event-inject-files-inc-the-trace-array-ref-count.patch
  Backported commit f5ca233e2e66 ("tracing: Increase trace array ref count
  on enable and filter files") causes a kernel panic and its upstream
  fix-up bb32500fb9b7 ("tracing: Have trace_event_file have ref counters")
  cannot be easily backported because it affects kABI. Revert the commit
  and its one related + dependent patch, at least for now.
- commit 90d885a</changelog>
  <changelog author="jslaby@suse.cz" date="1707220800">- rpm/mkspec: sort entries in _multibuild
  Otherwise it creates unnecessary diffs when tar-up-ing. It's of course
  due to readdir() using "random" order as served by the underlying
  filesystem.
  See for example:
  https://build.opensuse.org/request/show/1144457/changes
- commit d1155de</changelog>
  <changelog author="pjakobsson@suse.de" date="1707220801">- Update
  patches.suse/drm-amdgpu-Fix-potential-fence-use-after-free-v2.patch
  (bsc#1219128 CVE-2023-51042 git-fixes).
- commit 4b937fc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220802">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit d77a474</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
</package>
<package pkgid="99687fd80b4fa733ea0ea66cde1928be8fd3e17598eb168e998ab00832b1c50b" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.108.1"/>
  <changelog author="jwiesner@suse.de" date="1706702400">- clocksource: disable watchdog checks on TSC when TSC is watchdog
  (bsc#1215885).
- commit 2f92dd8</changelog>
  <changelog author="jwiesner@suse.de" date="1706702401">- clocksource: Skip watchdog check for large watchdog intervals
  (bsc#1217217).
- commit 63b1d6d</changelog>
  <changelog author="dwagner@suse.de" date="1706702402">- nvmet-tcp: Fix the H2C expected PDU len calculation
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: remove boilerplate code (bsc#1217987 bsc#1217988
  bsc#1217989 CVE-2023-6535 CVE-2023-6536 CVE-2023-6356).
- nvmet-tcp: fix a crash in nvmet_req_complete() (bsc#1217987
  bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C
  PDU length (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535
  CVE-2023-6536 CVE-2023-6356).
- commit d968940</changelog>
  <changelog author="msuchanek@suse.de" date="1706702403">- kernel-source: Fix description typo
- commit 8abff35</changelog>
  <changelog author="mhocko@suse.com" date="1706788800">- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- trace,smp: Add tracepoints around remotelly called functions
  (bsc#1217895).
- vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- Refresh
  patches.suse/0002-kernel-smp-make-csdlock-timeout-depend-on-boot-param.patch.
- commit 668c0e0</changelog>
  <changelog author="mhocko@suse.com" date="1706788801">- kabi, vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- commit 8cb5798</changelog>
  <changelog author="lhenriques@suse.de" date="1706788802">- Update
  patches.suse/ext4-fix-kernel-BUG-in-ext4_write_inline_data_end.patch
  (CVE-2021-33631 bsc#1219412 bsc#1206894).
- commit 96c942c</changelog>
  <changelog author="jgross@suse.com" date="1706788803">- xen-netback: don't produce zero-size SKB frags (CVE-2023-46838,
  XSA-448, bsc#1218836).
- commit 9a897ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1706875200">- atm: Fix Use-After-Free in do_vcc_ioctl (CVE-2023-51780
  bsc#1218730).
- commit 658d424</changelog>
  <changelog author="alnovak@suse.cz" date="1707134400">- README.BRANCH: SLE15-SP4 became LTSS, update maintainers
- commit 94325df</changelog>
  <changelog author="petr.pavlu@suse.com" date="1707134401">- Revert "tracing: Increase trace array ref count on enable and
  filter files" (bsc#1219490).
  Deleted:
  patches.suse/tracing-Increase-trace-array-ref-count-on-enable-and-filter-files.patch
  patches.suse/tracing-Have-event-inject-files-inc-the-trace-array-ref-count.patch
  Backported commit f5ca233e2e66 ("tracing: Increase trace array ref count
  on enable and filter files") causes a kernel panic and its upstream
  fix-up bb32500fb9b7 ("tracing: Have trace_event_file have ref counters")
  cannot be easily backported because it affects kABI. Revert the commit
  and its one related + dependent patch, at least for now.
- commit 90d885a</changelog>
  <changelog author="jslaby@suse.cz" date="1707220800">- rpm/mkspec: sort entries in _multibuild
  Otherwise it creates unnecessary diffs when tar-up-ing. It's of course
  due to readdir() using "random" order as served by the underlying
  filesystem.
  See for example:
  https://build.opensuse.org/request/show/1144457/changes
- commit d1155de</changelog>
  <changelog author="pjakobsson@suse.de" date="1707220801">- Update
  patches.suse/drm-amdgpu-Fix-potential-fence-use-after-free-v2.patch
  (bsc#1219128 CVE-2023-51042 git-fixes).
- commit 4b937fc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220802">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit d77a474</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
</package>
<package pkgid="32f8b794ee6b169bfe44ec2ace1bf51894c3b3df0f0318c0a75480e3259b8373" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.108.1"/>
  <changelog author="jwiesner@suse.de" date="1706702400">- clocksource: disable watchdog checks on TSC when TSC is watchdog
  (bsc#1215885).
- commit 2f92dd8</changelog>
  <changelog author="jwiesner@suse.de" date="1706702401">- clocksource: Skip watchdog check for large watchdog intervals
  (bsc#1217217).
- commit 63b1d6d</changelog>
  <changelog author="dwagner@suse.de" date="1706702402">- nvmet-tcp: Fix the H2C expected PDU len calculation
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: remove boilerplate code (bsc#1217987 bsc#1217988
  bsc#1217989 CVE-2023-6535 CVE-2023-6536 CVE-2023-6356).
- nvmet-tcp: fix a crash in nvmet_req_complete() (bsc#1217987
  bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C
  PDU length (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535
  CVE-2023-6536 CVE-2023-6356).
- commit d968940</changelog>
  <changelog author="msuchanek@suse.de" date="1706702403">- kernel-source: Fix description typo
- commit 8abff35</changelog>
  <changelog author="mhocko@suse.com" date="1706788800">- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- trace,smp: Add tracepoints around remotelly called functions
  (bsc#1217895).
- vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- Refresh
  patches.suse/0002-kernel-smp-make-csdlock-timeout-depend-on-boot-param.patch.
- commit 668c0e0</changelog>
  <changelog author="mhocko@suse.com" date="1706788801">- kabi, vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- commit 8cb5798</changelog>
  <changelog author="lhenriques@suse.de" date="1706788802">- Update
  patches.suse/ext4-fix-kernel-BUG-in-ext4_write_inline_data_end.patch
  (CVE-2021-33631 bsc#1219412 bsc#1206894).
- commit 96c942c</changelog>
  <changelog author="jgross@suse.com" date="1706788803">- xen-netback: don't produce zero-size SKB frags (CVE-2023-46838,
  XSA-448, bsc#1218836).
- commit 9a897ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1706875200">- atm: Fix Use-After-Free in do_vcc_ioctl (CVE-2023-51780
  bsc#1218730).
- commit 658d424</changelog>
  <changelog author="alnovak@suse.cz" date="1707134400">- README.BRANCH: SLE15-SP4 became LTSS, update maintainers
- commit 94325df</changelog>
  <changelog author="petr.pavlu@suse.com" date="1707134401">- Revert "tracing: Increase trace array ref count on enable and
  filter files" (bsc#1219490).
  Deleted:
  patches.suse/tracing-Increase-trace-array-ref-count-on-enable-and-filter-files.patch
  patches.suse/tracing-Have-event-inject-files-inc-the-trace-array-ref-count.patch
  Backported commit f5ca233e2e66 ("tracing: Increase trace array ref count
  on enable and filter files") causes a kernel panic and its upstream
  fix-up bb32500fb9b7 ("tracing: Have trace_event_file have ref counters")
  cannot be easily backported because it affects kABI. Revert the commit
  and its one related + dependent patch, at least for now.
- commit 90d885a</changelog>
  <changelog author="jslaby@suse.cz" date="1707220800">- rpm/mkspec: sort entries in _multibuild
  Otherwise it creates unnecessary diffs when tar-up-ing. It's of course
  due to readdir() using "random" order as served by the underlying
  filesystem.
  See for example:
  https://build.opensuse.org/request/show/1144457/changes
- commit d1155de</changelog>
  <changelog author="pjakobsson@suse.de" date="1707220801">- Update
  patches.suse/drm-amdgpu-Fix-potential-fence-use-after-free-v2.patch
  (bsc#1219128 CVE-2023-51042 git-fixes).
- commit 4b937fc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220802">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit d77a474</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
</package>
<package pkgid="da834e3f5022df5f4167b59ae311d9e95c28d22d61d7e4fc58726e50c80e8ed0" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.111.2"/>
  <changelog author="mkubecek@suse.cz" date="1709553600">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="jroedel@suse.de" date="1709640002">- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (CVE-2023-52484 bsc#1220797).
- commit 2229de3</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640004">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="mbrugger@suse.com" date="1709640005">- mfd: syscon: Fix null pointer dereference in
  of_syscon_register() (bsc#1220433 CVE-2023-52467).
- commit b0262b8</changelog>
  <changelog author="jslaby@suse.cz" date="1709640006">- Update
  patches.suse/vt-fix-memory-overlapping-when-deleting-chars-in-the.patch
  (git-fixes bsc#1220845 CVE-2022-48627).
- Update
  patches.suse/x86-srso-add-srso-mitigation-for-hygon-processors.patch
  (git-fixes bsc#1220735 CVE-2023-52482).
  Add CVE references.
- commit dcdac38</changelog>
  <changelog author="pjakobsson@suse.de" date="1709640007">- drm/bridge: sii902x: Fix probing race issue (bsc#1220736 CVE-2024-26607).
- commit 70198c4</changelog>
  <changelog author="tiwai@suse.de" date="1709640008">- Update patch reference for pinctrl fix (CVE-2021-47083 bsc#1220917)
- commit b608623</changelog>
  <changelog author="tiwai@suse.de" date="1709640009">- Update patch reference for iwlwifi fix (CVE-2023-52531 bsc#1220931)
- commit bde87cf</changelog>
  <changelog author="tiwai@suse.de" date="1709640010">- wifi: mac80211: fix potential key use-after-free (CVE-2023-52530
  bsc#1220930).
- commit 3feca94</changelog>
  <changelog author="jdelvare@suse.de" date="1709640011">- Update patches.suse/i2c-validate-user-data-in-compat-ioctl.patch
  (git-fixes bsc#1220469 CVE-2021-46934).
  Add bug and CVE references.
- commit 3a04060</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640012">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit 81de603</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640013">- x86/rfds: Mitigate Register File Data Sampling (RFDS)  (bsc#1213456 CVE-2023-28746).
- Update config files.
- commit 29c1c99</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640014">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 4aebf4f</changelog>
  <changelog author="msuchanek@suse.de" date="1709640015">- Refresh patches.suse/0001-powerpc-pseries-memhp-Fix-access-beyond-end-of-drmem.patch.
  - update to upstream version
  - rename to same name as SLE15 SP5
- commit 1d2def1</changelog>
  <changelog author="jroedel@suse.de" date="1709726400">- iommu/vt-d: Avoid memory allocation in iommu_suspend()
  (CVE-2023-52559 bsc#1220933).
- commit c9b01ef</changelog>
  <changelog author="jlee@suse.com" date="1709726401">- efivarfs: force RO when remounting if SetVariable is not
  supported (bsc#1220328 CVE-2023-52463).
- commit eed7fb0</changelog>
  <changelog author="jlee@suse.com" date="1709726402">- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  (bsc#1218562 CVE-2023-6270).
- commit 57a4cd4</changelog>
</package>
<package pkgid="a184cc2b649676e9fd38c351c345ee47179ceed4cdbb05aa9d058839901bf30e" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.111.2"/>
  <changelog author="mkubecek@suse.cz" date="1709553600">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="jroedel@suse.de" date="1709640002">- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (CVE-2023-52484 bsc#1220797).
- commit 2229de3</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640004">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="mbrugger@suse.com" date="1709640005">- mfd: syscon: Fix null pointer dereference in
  of_syscon_register() (bsc#1220433 CVE-2023-52467).
- commit b0262b8</changelog>
  <changelog author="jslaby@suse.cz" date="1709640006">- Update
  patches.suse/vt-fix-memory-overlapping-when-deleting-chars-in-the.patch
  (git-fixes bsc#1220845 CVE-2022-48627).
- Update
  patches.suse/x86-srso-add-srso-mitigation-for-hygon-processors.patch
  (git-fixes bsc#1220735 CVE-2023-52482).
  Add CVE references.
- commit dcdac38</changelog>
  <changelog author="pjakobsson@suse.de" date="1709640007">- drm/bridge: sii902x: Fix probing race issue (bsc#1220736 CVE-2024-26607).
- commit 70198c4</changelog>
  <changelog author="tiwai@suse.de" date="1709640008">- Update patch reference for pinctrl fix (CVE-2021-47083 bsc#1220917)
- commit b608623</changelog>
  <changelog author="tiwai@suse.de" date="1709640009">- Update patch reference for iwlwifi fix (CVE-2023-52531 bsc#1220931)
- commit bde87cf</changelog>
  <changelog author="tiwai@suse.de" date="1709640010">- wifi: mac80211: fix potential key use-after-free (CVE-2023-52530
  bsc#1220930).
- commit 3feca94</changelog>
  <changelog author="jdelvare@suse.de" date="1709640011">- Update patches.suse/i2c-validate-user-data-in-compat-ioctl.patch
  (git-fixes bsc#1220469 CVE-2021-46934).
  Add bug and CVE references.
- commit 3a04060</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640012">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit 81de603</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640013">- x86/rfds: Mitigate Register File Data Sampling (RFDS)  (bsc#1213456 CVE-2023-28746).
- Update config files.
- commit 29c1c99</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640014">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 4aebf4f</changelog>
  <changelog author="msuchanek@suse.de" date="1709640015">- Refresh patches.suse/0001-powerpc-pseries-memhp-Fix-access-beyond-end-of-drmem.patch.
  - update to upstream version
  - rename to same name as SLE15 SP5
- commit 1d2def1</changelog>
  <changelog author="jroedel@suse.de" date="1709726400">- iommu/vt-d: Avoid memory allocation in iommu_suspend()
  (CVE-2023-52559 bsc#1220933).
- commit c9b01ef</changelog>
  <changelog author="jlee@suse.com" date="1709726401">- efivarfs: force RO when remounting if SetVariable is not
  supported (bsc#1220328 CVE-2023-52463).
- commit eed7fb0</changelog>
  <changelog author="jlee@suse.com" date="1709726402">- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  (bsc#1218562 CVE-2023-6270).
- commit 57a4cd4</changelog>
</package>
<package pkgid="5ba5071a7cfc70ce56a88add8cafae10145a513cb15f433fba54f485aee9163e" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.111.2"/>
  <changelog author="mkubecek@suse.cz" date="1709553600">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="jroedel@suse.de" date="1709640002">- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (CVE-2023-52484 bsc#1220797).
- commit 2229de3</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640004">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="mbrugger@suse.com" date="1709640005">- mfd: syscon: Fix null pointer dereference in
  of_syscon_register() (bsc#1220433 CVE-2023-52467).
- commit b0262b8</changelog>
  <changelog author="jslaby@suse.cz" date="1709640006">- Update
  patches.suse/vt-fix-memory-overlapping-when-deleting-chars-in-the.patch
  (git-fixes bsc#1220845 CVE-2022-48627).
- Update
  patches.suse/x86-srso-add-srso-mitigation-for-hygon-processors.patch
  (git-fixes bsc#1220735 CVE-2023-52482).
  Add CVE references.
- commit dcdac38</changelog>
  <changelog author="pjakobsson@suse.de" date="1709640007">- drm/bridge: sii902x: Fix probing race issue (bsc#1220736 CVE-2024-26607).
- commit 70198c4</changelog>
  <changelog author="tiwai@suse.de" date="1709640008">- Update patch reference for pinctrl fix (CVE-2021-47083 bsc#1220917)
- commit b608623</changelog>
  <changelog author="tiwai@suse.de" date="1709640009">- Update patch reference for iwlwifi fix (CVE-2023-52531 bsc#1220931)
- commit bde87cf</changelog>
  <changelog author="tiwai@suse.de" date="1709640010">- wifi: mac80211: fix potential key use-after-free (CVE-2023-52530
  bsc#1220930).
- commit 3feca94</changelog>
  <changelog author="jdelvare@suse.de" date="1709640011">- Update patches.suse/i2c-validate-user-data-in-compat-ioctl.patch
  (git-fixes bsc#1220469 CVE-2021-46934).
  Add bug and CVE references.
- commit 3a04060</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640012">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit 81de603</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640013">- x86/rfds: Mitigate Register File Data Sampling (RFDS)  (bsc#1213456 CVE-2023-28746).
- Update config files.
- commit 29c1c99</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640014">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 4aebf4f</changelog>
  <changelog author="msuchanek@suse.de" date="1709640015">- Refresh patches.suse/0001-powerpc-pseries-memhp-Fix-access-beyond-end-of-drmem.patch.
  - update to upstream version
  - rename to same name as SLE15 SP5
- commit 1d2def1</changelog>
  <changelog author="jroedel@suse.de" date="1709726400">- iommu/vt-d: Avoid memory allocation in iommu_suspend()
  (CVE-2023-52559 bsc#1220933).
- commit c9b01ef</changelog>
  <changelog author="jlee@suse.com" date="1709726401">- efivarfs: force RO when remounting if SetVariable is not
  supported (bsc#1220328 CVE-2023-52463).
- commit eed7fb0</changelog>
  <changelog author="jlee@suse.com" date="1709726402">- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  (bsc#1218562 CVE-2023-6270).
- commit 57a4cd4</changelog>
</package>
<package pkgid="a829881a1d53b22b6c1a9692ec99cca5f3876bf7c70851929bcd1c4575f5b3a9" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.111.2"/>
  <changelog author="mkubecek@suse.cz" date="1709553600">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="jroedel@suse.de" date="1709640002">- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (CVE-2023-52484 bsc#1220797).
- commit 2229de3</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640004">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="mbrugger@suse.com" date="1709640005">- mfd: syscon: Fix null pointer dereference in
  of_syscon_register() (bsc#1220433 CVE-2023-52467).
- commit b0262b8</changelog>
  <changelog author="jslaby@suse.cz" date="1709640006">- Update
  patches.suse/vt-fix-memory-overlapping-when-deleting-chars-in-the.patch
  (git-fixes bsc#1220845 CVE-2022-48627).
- Update
  patches.suse/x86-srso-add-srso-mitigation-for-hygon-processors.patch
  (git-fixes bsc#1220735 CVE-2023-52482).
  Add CVE references.
- commit dcdac38</changelog>
  <changelog author="pjakobsson@suse.de" date="1709640007">- drm/bridge: sii902x: Fix probing race issue (bsc#1220736 CVE-2024-26607).
- commit 70198c4</changelog>
  <changelog author="tiwai@suse.de" date="1709640008">- Update patch reference for pinctrl fix (CVE-2021-47083 bsc#1220917)
- commit b608623</changelog>
  <changelog author="tiwai@suse.de" date="1709640009">- Update patch reference for iwlwifi fix (CVE-2023-52531 bsc#1220931)
- commit bde87cf</changelog>
  <changelog author="tiwai@suse.de" date="1709640010">- wifi: mac80211: fix potential key use-after-free (CVE-2023-52530
  bsc#1220930).
- commit 3feca94</changelog>
  <changelog author="jdelvare@suse.de" date="1709640011">- Update patches.suse/i2c-validate-user-data-in-compat-ioctl.patch
  (git-fixes bsc#1220469 CVE-2021-46934).
  Add bug and CVE references.
- commit 3a04060</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640012">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit 81de603</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640013">- x86/rfds: Mitigate Register File Data Sampling (RFDS)  (bsc#1213456 CVE-2023-28746).
- Update config files.
- commit 29c1c99</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640014">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 4aebf4f</changelog>
  <changelog author="msuchanek@suse.de" date="1709640015">- Refresh patches.suse/0001-powerpc-pseries-memhp-Fix-access-beyond-end-of-drmem.patch.
  - update to upstream version
  - rename to same name as SLE15 SP5
- commit 1d2def1</changelog>
  <changelog author="jroedel@suse.de" date="1709726400">- iommu/vt-d: Avoid memory allocation in iommu_suspend()
  (CVE-2023-52559 bsc#1220933).
- commit c9b01ef</changelog>
  <changelog author="jlee@suse.com" date="1709726401">- efivarfs: force RO when remounting if SetVariable is not
  supported (bsc#1220328 CVE-2023-52463).
- commit eed7fb0</changelog>
  <changelog author="jlee@suse.com" date="1709726402">- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  (bsc#1218562 CVE-2023-6270).
- commit 57a4cd4</changelog>
</package>
<package pkgid="17a775236487d1b14ce0235bf160b13b2269d492c6eae058a2ceeeb9a4bcb5d7" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.116.1"/>
  <changelog author="jslaby@suse.cz" date="1709812800">- mm,ima,kexec,of: use memblock_free_late from
  ima_free_kexec_buffer (bsc#1220872 CVE-2023-52576).
- commit b1b1c9a</changelog>
  <changelog author="msuchanek@suse.de" date="1709812801">- group-source-files.pl: Quote filenames (boo#1221077).
  The kernel source now contains a file with a space in the name.
  Add quotes in group-source-files.pl to avoid splitting the filename.
  Also use -print0 / -0 when updating timestamps.
- commit a005e42</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899200">- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (bsc#1220411 CVE-2023-52469).
- commit f4f0cf4</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899201">- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (bsc#1220413 CVE-2023-52470).
- commit 9d7d799</changelog>
  <changelog author="oneukum@suse.com" date="1710158400">- Update
  patches.suse/usb-hub-Guard-against-accesses-to-uninitialized-BOS-.patch
  (bsc#1220790 CVE-2023-52477).
- commit d33bab7</changelog>
  <changelog author="jslaby@suse.cz" date="1710244800">- Refresh
  patches.suse/mm-ima-kexec-of-use-memblock_free_late-from-ima_free.patch.
  Fix:
  * Section mismatch (function ima_free_kexec_buffer()) in modpost: vmlinux.o in ima_free_kexec_buffer()
  WARNING: modpost: vmlinux.o(.text+0xac1250): Section mismatch in reference from the function ima_free_kexec_buffer() to the function .init.text:__memblock_free_late()
- commit 5522f01</changelog>
  <changelog author="lhenriques@suse.de" date="1710244801">- netfs: Only call folio_start_fscache() one time for each folio
  (CVE-2023-52582 bsc#1220878).
- commit dfd082b</changelog>
  <changelog author="lhenriques@suse.de" date="1710244802">- ceph: fix deadlock or deadcode of misusing dget() (bsc#1221058
  CVE-2023-52583).
- commit 1a81018</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1710331200">- Refresh patches.kabi/team-Hide-new-member-header-ops.patch.
  Fix for kABI workaround.
- commit 6ba2f5d</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417600">- Sort upstream patches
- Refresh
  patches.suse/Documentation-hw-vuln-Add-documentation-for-RFDS.patch.
- Refresh
  patches.suse/KVM-x86-Export-RFDS_NO-and-RFDS_CLEAR-to-guests.patch.
- Refresh
  patches.suse/x86-entry-ia32-Ensure-s32-is-sign-extended-to-s64.patch.
- Refresh
  patches.suse/x86-rfds-Mitigate-Register-File-Data-Sampling-RFDS.patch.
- commit f172e12</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417601">- x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is  set (bsc#1213456 CVE-2023-28746).
- commit 4fed4e6</changelog>
  <changelog author="tonyj@suse.de" date="1710504000">- perf/x86/intel/uncore: Fix NULL pointer dereference issue in
  upi_fill_topology() (bsc#1220237, CVE-2023-52450).
- commit 246b58a</changelog>
  <changelog author="iivanov@suse.de" date="1711108800">- dmaengine: fix NULL pointer in channel unregistration function (bsc#1221276 CVE-2023-52492)
- commit f21c2ab</changelog>
  <changelog author="mkoutny@suse.com" date="1711540800">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-harden-detection-of-controll.patch
  (git-fixes CVE-2021-46926 bsc#1220478).
- Update
  patches.suse/ALSA-rawmidi-fix-the-uninitalized-user_pversion.patch
  (git-fixes CVE-2021-47096 bsc#1220981).
- Update
  patches.suse/IB-qib-Fix-memory-leak-in-qib_user_sdma_queue_pkts.patch
  (git-fixes CVE-2021-47104 bsc#1220960).
- Update
  patches.suse/Input-elantech-fix-stack-out-of-bound-access-in-elan.patch
  (git-fixes CVE-2021-47097 bsc#1220982).
- Update
  patches.suse/KVM-x86-mmu-Don-t-advance-iterator-after-restart-due.patch
  (git-fixes CVE-2021-47094 bsc#1221551).
- Update patches.suse/NFSD-Fix-READDIR-buffer-overflow.patch
  (git-fixes bsc#1196346 CVE-2021-47107 bsc#1220965).
- Update
  patches.suse/asix-fix-uninit-value-in-asix_mdio_read.patch
  (git-fixes CVE-2021-47101 bsc#1220987).
- Update
  patches.suse/drm-mediatek-hdmi-Perform-NULL-pointer-check-for-mtk.patch
  (git-fixes CVE-2021-47108 bsc#1220986).
- Update
  patches.suse/hwmon-lm90-Prevent-integer-overflow-underflow-in-hys.patch
  (git-fixes CVE-2021-47098 bsc#1220983).
- Update
  patches.suse/ipmi-Fix-UAF-when-uninstall-ipmi_si-and-ipmi_msghand.patch
  (git-fixes CVE-2021-47100 bsc#1220985).
- Update
  patches.suse/ipmi-ssif-initialize-ssif_info-client-early.patch
  (bsc#1193490 CVE-2021-47095 bsc#1220979).
- Update
  patches.suse/mac80211-fix-locking-in-ieee80211_start_ap-error-pat.patch
  (git-fixes CVE-2021-47091 bsc#1220959).
- Update
  patches.suse/net-fix-use-after-free-in-tw_timer_handler.patch
  (bsc#1217195 CVE-2021-46936 bsc#1220439).
- Update
  patches.suse/net-marvell-prestera-fix-incorrect-structure-access.patch
  (git-fixes CVE-2021-47102 bsc#1221009).
- Update
  patches.suse/net-smc-fix-kernel-panic-caused-by-race-of-smc_sock
  (git-fixes CVE-2021-46925 bsc#1220466).
- Update
  patches.suse/nitro_enclaves-Use-get_user_pages_unlocked-call-to-handle-mmap-assert.patch
  (git fixes (mm/gup) CVE-2021-46927 bsc#1220443).
- Update
  patches.suse/platform-x86-intel_pmc_core-fix-memleak-on-registrat.patch
  (git-fixes CVE-2021-47093 bsc#1220978).
- Update patches.suse/sctp-use-call_rcu-to-free-endpoint.patch
  (CVE-2022-20154 bsc#1200599 CVE-2021-46929 bsc#1220482).
- Update patches.suse/tee-optee-Fix-incorrect-page-free-bug.patch
  (jsc#SLE-21844 CVE-2021-47087 bsc#1220954).
- Update
  patches.suse/tun-avoid-double-free-in-tun_free_netdev.patch
  (bsc#1209635 CVE-2022-4744 git-fixes CVE-2021-47082
  bsc#1220969).
- Update
  patches.suse/usb-gadget-f_fs-Clear-ffs_eventfd-in-ffs_data_clear.patch
  (git-fixes CVE-2021-46933 bsc#1220487).
- Update patches.suse/usb-mtu3-fix-list_head-check-warning.patch
  (git-fixes CVE-2021-46930 bsc#1220484).
- Update
  patches.suse/veth-ensure-skb-entering-GRO-are-not-cloned.patch
  (git-fixes CVE-2021-47099 bsc#1220955).
- commit b15f74e</changelog>
  <changelog author="mkoutny@suse.com" date="1711540801">- Update patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
  (bsc#1194516 CVE-2022-0487 CVE-2022-48626 bsc#1220366).
- Update
  patches.suse/crypto-qcom-rng-ensure-buffer-for-generate-is-comple.patch
  (git-fixes CVE-2022-48629 bsc#1220989).
- Update
  patches.suse/crypto-qcom-rng-fix-infinite-loop-on-requests-not-mu.patch
  (git-fixes CVE-2022-48630 bsc#1220990).
- commit f8cf886</changelog>
  <changelog author="mkoutny@suse.com" date="1711540802">- Update
  patches.suse/HID-intel-ish-hid-ipc-Disable-and-reenable-ACPI-GPE-.patch
  (git-fixes CVE-2023-52519 bsc#1220920).
- Update
  patches.suse/HID-sony-Fix-a-potential-memory-leak-in-sony_probe.patch
  (git-fixes CVE-2023-52529 bsc#1220929).
- Update
  patches.suse/IB-hfi1-Fix-bugs-with-non-PAGE_SIZE-end-multi-iovec-.patch
  (git-fixes CVE-2023-52474 bsc#1220445).
- Update
  patches.suse/RDMA-siw-Fix-connection-failure-handling.patch
  (git-fixes CVE-2023-52513 bsc#1221022).
- Update
  patches.suse/RDMA-srp-Do-not-call-scsi_done-from-srp_abort.patch
  (git-fixes CVE-2023-52515 bsc#1221048).
- Update
  patches.suse/Revert-tty-n_gsm-fix-UAF-in-gsm_cleanup_mux.patch
  (git-fixes CVE-2023-52564 bsc#1220938).
- Update
  patches.suse/bpf-Check-rcu_read_lock_trace_held-before-calling-bp.patch
  (bsc#1220251 CVE-2023-52447 CVE-2023-52621 bsc#1222073).
- Update
  patches.suse/ieee802154-ca8210-Fix-a-potential-UAF-in-ca8210_prob.patch
  (git-fixes CVE-2023-52510 bsc#1220898).
- Update
  patches.suse/net-nfc-llcp-Add-lock-when-modifying-device-list.patch
  (git-fixes CVE-2023-52524 bsc#1220927).
- Update
  patches.suse/net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch
  (git-fixes CVE-2023-52528 bsc#1220843).
- Update
  patches.suse/nfc-nci-assert-requested-protocol-is-valid.patch
  (git-fixes CVE-2023-52507 bsc#1220833).
- Update
  patches.suse/nilfs2-fix-potential-use-after-free-in-nilfs_gccache.patch
  (git-fixes CVE-2023-52566 bsc#1220940).
- Update
  patches.suse/nvme-fc-Prevent-null-pointer-dereference-in-nvme_fc_.patch
  (bsc#1214842 CVE-2023-52508 bsc#1221015).
- Update
  patches.suse/nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva.patch
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356 CVE-2023-52454 bsc#1220320).
- Update
  patches.suse/platform-x86-think-lmi-Fix-reference-leak.patch
  (git-fixes CVE-2023-52520 bsc#1220921).
- Update
  patches.suse/ravb-Fix-use-after-free-issue-in-ravb_tx_timeout_wor.patch
  (bsc#1212514 CVE-2023-35827 CVE-2023-52509 bsc#1220836).
- Update
  patches.suse/ring-buffer-Do-not-attempt-to-read-past-commit.patch
  (git-fixes CVE-2023-52501 bsc#1220885).
- Update
  patches.suse/serial-8250_port-Check-IRQ-data-before-use.patch
  (git-fixes CVE-2023-52567 bsc#1220839).
- Update
  patches.suse/spi-sun6i-fix-race-between-DMA-RX-transfer-completio.patch
  (git-fixes CVE-2023-52517 bsc#1221055).
- Update
  patches.suse/spi-sun6i-reduce-DMA-RX-transfer-width-to-single-byt.patch
  (git-fixes CVE-2023-52511 bsc#1221012).
- Update
  patches.suse/wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_proc.patch
  (git-fixes CVE-2023-52525 bsc#1220840).
- Update
  patches.suse/x86-alternatives-disable-kasan-in-apply_alternatives.patch
  (git-fixes CVE-2023-52504 bsc#1221553).
- Update
  patches.suse/x86-srso-fix-sbpb-enablement-for-spec_rstack_overflow-off.patch
  (git-fixes CVE-2023-52575 bsc#1220871).
- commit 5f353b0</changelog>
  <changelog author="mkoutny@suse.com" date="1711713600">- README.BRANCH: Remove copy of branch name
- commit 704bda3</changelog>
  <changelog author="mkoutny@suse.com" date="1711713601">- README.BRANCH: Remove copy of branch name
- commit 4834fba</changelog>
  <changelog author="jroedel@suse.de" date="1712059200">- x86/sev: Harden #VC instruction emulation somewhat (CVE-2024-25742 bsc#1221725).
- commit 2e3eba1</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 900d642</changelog>
</package>
<package pkgid="e0d4e6f3f6ec2a56ac6439e9f1d5a5def2c360b35b090c4fdbc3ba081724ff84" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.116.1"/>
  <changelog author="jslaby@suse.cz" date="1709812800">- mm,ima,kexec,of: use memblock_free_late from
  ima_free_kexec_buffer (bsc#1220872 CVE-2023-52576).
- commit b1b1c9a</changelog>
  <changelog author="msuchanek@suse.de" date="1709812801">- group-source-files.pl: Quote filenames (boo#1221077).
  The kernel source now contains a file with a space in the name.
  Add quotes in group-source-files.pl to avoid splitting the filename.
  Also use -print0 / -0 when updating timestamps.
- commit a005e42</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899200">- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (bsc#1220411 CVE-2023-52469).
- commit f4f0cf4</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899201">- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (bsc#1220413 CVE-2023-52470).
- commit 9d7d799</changelog>
  <changelog author="oneukum@suse.com" date="1710158400">- Update
  patches.suse/usb-hub-Guard-against-accesses-to-uninitialized-BOS-.patch
  (bsc#1220790 CVE-2023-52477).
- commit d33bab7</changelog>
  <changelog author="jslaby@suse.cz" date="1710244800">- Refresh
  patches.suse/mm-ima-kexec-of-use-memblock_free_late-from-ima_free.patch.
  Fix:
  * Section mismatch (function ima_free_kexec_buffer()) in modpost: vmlinux.o in ima_free_kexec_buffer()
  WARNING: modpost: vmlinux.o(.text+0xac1250): Section mismatch in reference from the function ima_free_kexec_buffer() to the function .init.text:__memblock_free_late()
- commit 5522f01</changelog>
  <changelog author="lhenriques@suse.de" date="1710244801">- netfs: Only call folio_start_fscache() one time for each folio
  (CVE-2023-52582 bsc#1220878).
- commit dfd082b</changelog>
  <changelog author="lhenriques@suse.de" date="1710244802">- ceph: fix deadlock or deadcode of misusing dget() (bsc#1221058
  CVE-2023-52583).
- commit 1a81018</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1710331200">- Refresh patches.kabi/team-Hide-new-member-header-ops.patch.
  Fix for kABI workaround.
- commit 6ba2f5d</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417600">- Sort upstream patches
- Refresh
  patches.suse/Documentation-hw-vuln-Add-documentation-for-RFDS.patch.
- Refresh
  patches.suse/KVM-x86-Export-RFDS_NO-and-RFDS_CLEAR-to-guests.patch.
- Refresh
  patches.suse/x86-entry-ia32-Ensure-s32-is-sign-extended-to-s64.patch.
- Refresh
  patches.suse/x86-rfds-Mitigate-Register-File-Data-Sampling-RFDS.patch.
- commit f172e12</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417601">- x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is  set (bsc#1213456 CVE-2023-28746).
- commit 4fed4e6</changelog>
  <changelog author="tonyj@suse.de" date="1710504000">- perf/x86/intel/uncore: Fix NULL pointer dereference issue in
  upi_fill_topology() (bsc#1220237, CVE-2023-52450).
- commit 246b58a</changelog>
  <changelog author="iivanov@suse.de" date="1711108800">- dmaengine: fix NULL pointer in channel unregistration function (bsc#1221276 CVE-2023-52492)
- commit f21c2ab</changelog>
  <changelog author="mkoutny@suse.com" date="1711540800">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-harden-detection-of-controll.patch
  (git-fixes CVE-2021-46926 bsc#1220478).
- Update
  patches.suse/ALSA-rawmidi-fix-the-uninitalized-user_pversion.patch
  (git-fixes CVE-2021-47096 bsc#1220981).
- Update
  patches.suse/IB-qib-Fix-memory-leak-in-qib_user_sdma_queue_pkts.patch
  (git-fixes CVE-2021-47104 bsc#1220960).
- Update
  patches.suse/Input-elantech-fix-stack-out-of-bound-access-in-elan.patch
  (git-fixes CVE-2021-47097 bsc#1220982).
- Update
  patches.suse/KVM-x86-mmu-Don-t-advance-iterator-after-restart-due.patch
  (git-fixes CVE-2021-47094 bsc#1221551).
- Update patches.suse/NFSD-Fix-READDIR-buffer-overflow.patch
  (git-fixes bsc#1196346 CVE-2021-47107 bsc#1220965).
- Update
  patches.suse/asix-fix-uninit-value-in-asix_mdio_read.patch
  (git-fixes CVE-2021-47101 bsc#1220987).
- Update
  patches.suse/drm-mediatek-hdmi-Perform-NULL-pointer-check-for-mtk.patch
  (git-fixes CVE-2021-47108 bsc#1220986).
- Update
  patches.suse/hwmon-lm90-Prevent-integer-overflow-underflow-in-hys.patch
  (git-fixes CVE-2021-47098 bsc#1220983).
- Update
  patches.suse/ipmi-Fix-UAF-when-uninstall-ipmi_si-and-ipmi_msghand.patch
  (git-fixes CVE-2021-47100 bsc#1220985).
- Update
  patches.suse/ipmi-ssif-initialize-ssif_info-client-early.patch
  (bsc#1193490 CVE-2021-47095 bsc#1220979).
- Update
  patches.suse/mac80211-fix-locking-in-ieee80211_start_ap-error-pat.patch
  (git-fixes CVE-2021-47091 bsc#1220959).
- Update
  patches.suse/net-fix-use-after-free-in-tw_timer_handler.patch
  (bsc#1217195 CVE-2021-46936 bsc#1220439).
- Update
  patches.suse/net-marvell-prestera-fix-incorrect-structure-access.patch
  (git-fixes CVE-2021-47102 bsc#1221009).
- Update
  patches.suse/net-smc-fix-kernel-panic-caused-by-race-of-smc_sock
  (git-fixes CVE-2021-46925 bsc#1220466).
- Update
  patches.suse/nitro_enclaves-Use-get_user_pages_unlocked-call-to-handle-mmap-assert.patch
  (git fixes (mm/gup) CVE-2021-46927 bsc#1220443).
- Update
  patches.suse/platform-x86-intel_pmc_core-fix-memleak-on-registrat.patch
  (git-fixes CVE-2021-47093 bsc#1220978).
- Update patches.suse/sctp-use-call_rcu-to-free-endpoint.patch
  (CVE-2022-20154 bsc#1200599 CVE-2021-46929 bsc#1220482).
- Update patches.suse/tee-optee-Fix-incorrect-page-free-bug.patch
  (jsc#SLE-21844 CVE-2021-47087 bsc#1220954).
- Update
  patches.suse/tun-avoid-double-free-in-tun_free_netdev.patch
  (bsc#1209635 CVE-2022-4744 git-fixes CVE-2021-47082
  bsc#1220969).
- Update
  patches.suse/usb-gadget-f_fs-Clear-ffs_eventfd-in-ffs_data_clear.patch
  (git-fixes CVE-2021-46933 bsc#1220487).
- Update patches.suse/usb-mtu3-fix-list_head-check-warning.patch
  (git-fixes CVE-2021-46930 bsc#1220484).
- Update
  patches.suse/veth-ensure-skb-entering-GRO-are-not-cloned.patch
  (git-fixes CVE-2021-47099 bsc#1220955).
- commit b15f74e</changelog>
  <changelog author="mkoutny@suse.com" date="1711540801">- Update patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
  (bsc#1194516 CVE-2022-0487 CVE-2022-48626 bsc#1220366).
- Update
  patches.suse/crypto-qcom-rng-ensure-buffer-for-generate-is-comple.patch
  (git-fixes CVE-2022-48629 bsc#1220989).
- Update
  patches.suse/crypto-qcom-rng-fix-infinite-loop-on-requests-not-mu.patch
  (git-fixes CVE-2022-48630 bsc#1220990).
- commit f8cf886</changelog>
  <changelog author="mkoutny@suse.com" date="1711540802">- Update
  patches.suse/HID-intel-ish-hid-ipc-Disable-and-reenable-ACPI-GPE-.patch
  (git-fixes CVE-2023-52519 bsc#1220920).
- Update
  patches.suse/HID-sony-Fix-a-potential-memory-leak-in-sony_probe.patch
  (git-fixes CVE-2023-52529 bsc#1220929).
- Update
  patches.suse/IB-hfi1-Fix-bugs-with-non-PAGE_SIZE-end-multi-iovec-.patch
  (git-fixes CVE-2023-52474 bsc#1220445).
- Update
  patches.suse/RDMA-siw-Fix-connection-failure-handling.patch
  (git-fixes CVE-2023-52513 bsc#1221022).
- Update
  patches.suse/RDMA-srp-Do-not-call-scsi_done-from-srp_abort.patch
  (git-fixes CVE-2023-52515 bsc#1221048).
- Update
  patches.suse/Revert-tty-n_gsm-fix-UAF-in-gsm_cleanup_mux.patch
  (git-fixes CVE-2023-52564 bsc#1220938).
- Update
  patches.suse/bpf-Check-rcu_read_lock_trace_held-before-calling-bp.patch
  (bsc#1220251 CVE-2023-52447 CVE-2023-52621 bsc#1222073).
- Update
  patches.suse/ieee802154-ca8210-Fix-a-potential-UAF-in-ca8210_prob.patch
  (git-fixes CVE-2023-52510 bsc#1220898).
- Update
  patches.suse/net-nfc-llcp-Add-lock-when-modifying-device-list.patch
  (git-fixes CVE-2023-52524 bsc#1220927).
- Update
  patches.suse/net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch
  (git-fixes CVE-2023-52528 bsc#1220843).
- Update
  patches.suse/nfc-nci-assert-requested-protocol-is-valid.patch
  (git-fixes CVE-2023-52507 bsc#1220833).
- Update
  patches.suse/nilfs2-fix-potential-use-after-free-in-nilfs_gccache.patch
  (git-fixes CVE-2023-52566 bsc#1220940).
- Update
  patches.suse/nvme-fc-Prevent-null-pointer-dereference-in-nvme_fc_.patch
  (bsc#1214842 CVE-2023-52508 bsc#1221015).
- Update
  patches.suse/nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva.patch
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356 CVE-2023-52454 bsc#1220320).
- Update
  patches.suse/platform-x86-think-lmi-Fix-reference-leak.patch
  (git-fixes CVE-2023-52520 bsc#1220921).
- Update
  patches.suse/ravb-Fix-use-after-free-issue-in-ravb_tx_timeout_wor.patch
  (bsc#1212514 CVE-2023-35827 CVE-2023-52509 bsc#1220836).
- Update
  patches.suse/ring-buffer-Do-not-attempt-to-read-past-commit.patch
  (git-fixes CVE-2023-52501 bsc#1220885).
- Update
  patches.suse/serial-8250_port-Check-IRQ-data-before-use.patch
  (git-fixes CVE-2023-52567 bsc#1220839).
- Update
  patches.suse/spi-sun6i-fix-race-between-DMA-RX-transfer-completio.patch
  (git-fixes CVE-2023-52517 bsc#1221055).
- Update
  patches.suse/spi-sun6i-reduce-DMA-RX-transfer-width-to-single-byt.patch
  (git-fixes CVE-2023-52511 bsc#1221012).
- Update
  patches.suse/wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_proc.patch
  (git-fixes CVE-2023-52525 bsc#1220840).
- Update
  patches.suse/x86-alternatives-disable-kasan-in-apply_alternatives.patch
  (git-fixes CVE-2023-52504 bsc#1221553).
- Update
  patches.suse/x86-srso-fix-sbpb-enablement-for-spec_rstack_overflow-off.patch
  (git-fixes CVE-2023-52575 bsc#1220871).
- commit 5f353b0</changelog>
  <changelog author="mkoutny@suse.com" date="1711713600">- README.BRANCH: Remove copy of branch name
- commit 704bda3</changelog>
  <changelog author="mkoutny@suse.com" date="1711713601">- README.BRANCH: Remove copy of branch name
- commit 4834fba</changelog>
  <changelog author="jroedel@suse.de" date="1712059200">- x86/sev: Harden #VC instruction emulation somewhat (CVE-2024-25742 bsc#1221725).
- commit 2e3eba1</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 900d642</changelog>
</package>
<package pkgid="299dbd9842dbd6df7f1b1c72677c5d906a3c401cdd09319c925e2ef4ca2df1ee" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.116.1"/>
  <changelog author="jslaby@suse.cz" date="1709812800">- mm,ima,kexec,of: use memblock_free_late from
  ima_free_kexec_buffer (bsc#1220872 CVE-2023-52576).
- commit b1b1c9a</changelog>
  <changelog author="msuchanek@suse.de" date="1709812801">- group-source-files.pl: Quote filenames (boo#1221077).
  The kernel source now contains a file with a space in the name.
  Add quotes in group-source-files.pl to avoid splitting the filename.
  Also use -print0 / -0 when updating timestamps.
- commit a005e42</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899200">- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (bsc#1220411 CVE-2023-52469).
- commit f4f0cf4</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899201">- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (bsc#1220413 CVE-2023-52470).
- commit 9d7d799</changelog>
  <changelog author="oneukum@suse.com" date="1710158400">- Update
  patches.suse/usb-hub-Guard-against-accesses-to-uninitialized-BOS-.patch
  (bsc#1220790 CVE-2023-52477).
- commit d33bab7</changelog>
  <changelog author="jslaby@suse.cz" date="1710244800">- Refresh
  patches.suse/mm-ima-kexec-of-use-memblock_free_late-from-ima_free.patch.
  Fix:
  * Section mismatch (function ima_free_kexec_buffer()) in modpost: vmlinux.o in ima_free_kexec_buffer()
  WARNING: modpost: vmlinux.o(.text+0xac1250): Section mismatch in reference from the function ima_free_kexec_buffer() to the function .init.text:__memblock_free_late()
- commit 5522f01</changelog>
  <changelog author="lhenriques@suse.de" date="1710244801">- netfs: Only call folio_start_fscache() one time for each folio
  (CVE-2023-52582 bsc#1220878).
- commit dfd082b</changelog>
  <changelog author="lhenriques@suse.de" date="1710244802">- ceph: fix deadlock or deadcode of misusing dget() (bsc#1221058
  CVE-2023-52583).
- commit 1a81018</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1710331200">- Refresh patches.kabi/team-Hide-new-member-header-ops.patch.
  Fix for kABI workaround.
- commit 6ba2f5d</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417600">- Sort upstream patches
- Refresh
  patches.suse/Documentation-hw-vuln-Add-documentation-for-RFDS.patch.
- Refresh
  patches.suse/KVM-x86-Export-RFDS_NO-and-RFDS_CLEAR-to-guests.patch.
- Refresh
  patches.suse/x86-entry-ia32-Ensure-s32-is-sign-extended-to-s64.patch.
- Refresh
  patches.suse/x86-rfds-Mitigate-Register-File-Data-Sampling-RFDS.patch.
- commit f172e12</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417601">- x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is  set (bsc#1213456 CVE-2023-28746).
- commit 4fed4e6</changelog>
  <changelog author="tonyj@suse.de" date="1710504000">- perf/x86/intel/uncore: Fix NULL pointer dereference issue in
  upi_fill_topology() (bsc#1220237, CVE-2023-52450).
- commit 246b58a</changelog>
  <changelog author="iivanov@suse.de" date="1711108800">- dmaengine: fix NULL pointer in channel unregistration function (bsc#1221276 CVE-2023-52492)
- commit f21c2ab</changelog>
  <changelog author="mkoutny@suse.com" date="1711540800">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-harden-detection-of-controll.patch
  (git-fixes CVE-2021-46926 bsc#1220478).
- Update
  patches.suse/ALSA-rawmidi-fix-the-uninitalized-user_pversion.patch
  (git-fixes CVE-2021-47096 bsc#1220981).
- Update
  patches.suse/IB-qib-Fix-memory-leak-in-qib_user_sdma_queue_pkts.patch
  (git-fixes CVE-2021-47104 bsc#1220960).
- Update
  patches.suse/Input-elantech-fix-stack-out-of-bound-access-in-elan.patch
  (git-fixes CVE-2021-47097 bsc#1220982).
- Update
  patches.suse/KVM-x86-mmu-Don-t-advance-iterator-after-restart-due.patch
  (git-fixes CVE-2021-47094 bsc#1221551).
- Update patches.suse/NFSD-Fix-READDIR-buffer-overflow.patch
  (git-fixes bsc#1196346 CVE-2021-47107 bsc#1220965).
- Update
  patches.suse/asix-fix-uninit-value-in-asix_mdio_read.patch
  (git-fixes CVE-2021-47101 bsc#1220987).
- Update
  patches.suse/drm-mediatek-hdmi-Perform-NULL-pointer-check-for-mtk.patch
  (git-fixes CVE-2021-47108 bsc#1220986).
- Update
  patches.suse/hwmon-lm90-Prevent-integer-overflow-underflow-in-hys.patch
  (git-fixes CVE-2021-47098 bsc#1220983).
- Update
  patches.suse/ipmi-Fix-UAF-when-uninstall-ipmi_si-and-ipmi_msghand.patch
  (git-fixes CVE-2021-47100 bsc#1220985).
- Update
  patches.suse/ipmi-ssif-initialize-ssif_info-client-early.patch
  (bsc#1193490 CVE-2021-47095 bsc#1220979).
- Update
  patches.suse/mac80211-fix-locking-in-ieee80211_start_ap-error-pat.patch
  (git-fixes CVE-2021-47091 bsc#1220959).
- Update
  patches.suse/net-fix-use-after-free-in-tw_timer_handler.patch
  (bsc#1217195 CVE-2021-46936 bsc#1220439).
- Update
  patches.suse/net-marvell-prestera-fix-incorrect-structure-access.patch
  (git-fixes CVE-2021-47102 bsc#1221009).
- Update
  patches.suse/net-smc-fix-kernel-panic-caused-by-race-of-smc_sock
  (git-fixes CVE-2021-46925 bsc#1220466).
- Update
  patches.suse/nitro_enclaves-Use-get_user_pages_unlocked-call-to-handle-mmap-assert.patch
  (git fixes (mm/gup) CVE-2021-46927 bsc#1220443).
- Update
  patches.suse/platform-x86-intel_pmc_core-fix-memleak-on-registrat.patch
  (git-fixes CVE-2021-47093 bsc#1220978).
- Update patches.suse/sctp-use-call_rcu-to-free-endpoint.patch
  (CVE-2022-20154 bsc#1200599 CVE-2021-46929 bsc#1220482).
- Update patches.suse/tee-optee-Fix-incorrect-page-free-bug.patch
  (jsc#SLE-21844 CVE-2021-47087 bsc#1220954).
- Update
  patches.suse/tun-avoid-double-free-in-tun_free_netdev.patch
  (bsc#1209635 CVE-2022-4744 git-fixes CVE-2021-47082
  bsc#1220969).
- Update
  patches.suse/usb-gadget-f_fs-Clear-ffs_eventfd-in-ffs_data_clear.patch
  (git-fixes CVE-2021-46933 bsc#1220487).
- Update patches.suse/usb-mtu3-fix-list_head-check-warning.patch
  (git-fixes CVE-2021-46930 bsc#1220484).
- Update
  patches.suse/veth-ensure-skb-entering-GRO-are-not-cloned.patch
  (git-fixes CVE-2021-47099 bsc#1220955).
- commit b15f74e</changelog>
  <changelog author="mkoutny@suse.com" date="1711540801">- Update patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
  (bsc#1194516 CVE-2022-0487 CVE-2022-48626 bsc#1220366).
- Update
  patches.suse/crypto-qcom-rng-ensure-buffer-for-generate-is-comple.patch
  (git-fixes CVE-2022-48629 bsc#1220989).
- Update
  patches.suse/crypto-qcom-rng-fix-infinite-loop-on-requests-not-mu.patch
  (git-fixes CVE-2022-48630 bsc#1220990).
- commit f8cf886</changelog>
  <changelog author="mkoutny@suse.com" date="1711540802">- Update
  patches.suse/HID-intel-ish-hid-ipc-Disable-and-reenable-ACPI-GPE-.patch
  (git-fixes CVE-2023-52519 bsc#1220920).
- Update
  patches.suse/HID-sony-Fix-a-potential-memory-leak-in-sony_probe.patch
  (git-fixes CVE-2023-52529 bsc#1220929).
- Update
  patches.suse/IB-hfi1-Fix-bugs-with-non-PAGE_SIZE-end-multi-iovec-.patch
  (git-fixes CVE-2023-52474 bsc#1220445).
- Update
  patches.suse/RDMA-siw-Fix-connection-failure-handling.patch
  (git-fixes CVE-2023-52513 bsc#1221022).
- Update
  patches.suse/RDMA-srp-Do-not-call-scsi_done-from-srp_abort.patch
  (git-fixes CVE-2023-52515 bsc#1221048).
- Update
  patches.suse/Revert-tty-n_gsm-fix-UAF-in-gsm_cleanup_mux.patch
  (git-fixes CVE-2023-52564 bsc#1220938).
- Update
  patches.suse/bpf-Check-rcu_read_lock_trace_held-before-calling-bp.patch
  (bsc#1220251 CVE-2023-52447 CVE-2023-52621 bsc#1222073).
- Update
  patches.suse/ieee802154-ca8210-Fix-a-potential-UAF-in-ca8210_prob.patch
  (git-fixes CVE-2023-52510 bsc#1220898).
- Update
  patches.suse/net-nfc-llcp-Add-lock-when-modifying-device-list.patch
  (git-fixes CVE-2023-52524 bsc#1220927).
- Update
  patches.suse/net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch
  (git-fixes CVE-2023-52528 bsc#1220843).
- Update
  patches.suse/nfc-nci-assert-requested-protocol-is-valid.patch
  (git-fixes CVE-2023-52507 bsc#1220833).
- Update
  patches.suse/nilfs2-fix-potential-use-after-free-in-nilfs_gccache.patch
  (git-fixes CVE-2023-52566 bsc#1220940).
- Update
  patches.suse/nvme-fc-Prevent-null-pointer-dereference-in-nvme_fc_.patch
  (bsc#1214842 CVE-2023-52508 bsc#1221015).
- Update
  patches.suse/nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva.patch
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356 CVE-2023-52454 bsc#1220320).
- Update
  patches.suse/platform-x86-think-lmi-Fix-reference-leak.patch
  (git-fixes CVE-2023-52520 bsc#1220921).
- Update
  patches.suse/ravb-Fix-use-after-free-issue-in-ravb_tx_timeout_wor.patch
  (bsc#1212514 CVE-2023-35827 CVE-2023-52509 bsc#1220836).
- Update
  patches.suse/ring-buffer-Do-not-attempt-to-read-past-commit.patch
  (git-fixes CVE-2023-52501 bsc#1220885).
- Update
  patches.suse/serial-8250_port-Check-IRQ-data-before-use.patch
  (git-fixes CVE-2023-52567 bsc#1220839).
- Update
  patches.suse/spi-sun6i-fix-race-between-DMA-RX-transfer-completio.patch
  (git-fixes CVE-2023-52517 bsc#1221055).
- Update
  patches.suse/spi-sun6i-reduce-DMA-RX-transfer-width-to-single-byt.patch
  (git-fixes CVE-2023-52511 bsc#1221012).
- Update
  patches.suse/wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_proc.patch
  (git-fixes CVE-2023-52525 bsc#1220840).
- Update
  patches.suse/x86-alternatives-disable-kasan-in-apply_alternatives.patch
  (git-fixes CVE-2023-52504 bsc#1221553).
- Update
  patches.suse/x86-srso-fix-sbpb-enablement-for-spec_rstack_overflow-off.patch
  (git-fixes CVE-2023-52575 bsc#1220871).
- commit 5f353b0</changelog>
  <changelog author="mkoutny@suse.com" date="1711713600">- README.BRANCH: Remove copy of branch name
- commit 704bda3</changelog>
  <changelog author="mkoutny@suse.com" date="1711713601">- README.BRANCH: Remove copy of branch name
- commit 4834fba</changelog>
  <changelog author="jroedel@suse.de" date="1712059200">- x86/sev: Harden #VC instruction emulation somewhat (CVE-2024-25742 bsc#1221725).
- commit 2e3eba1</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 900d642</changelog>
</package>
<package pkgid="52c26e41e3a758a8ceb6822b5ce342453c166f6541a404201d8ea59c24f91c8e" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.116.1"/>
  <changelog author="jslaby@suse.cz" date="1709812800">- mm,ima,kexec,of: use memblock_free_late from
  ima_free_kexec_buffer (bsc#1220872 CVE-2023-52576).
- commit b1b1c9a</changelog>
  <changelog author="msuchanek@suse.de" date="1709812801">- group-source-files.pl: Quote filenames (boo#1221077).
  The kernel source now contains a file with a space in the name.
  Add quotes in group-source-files.pl to avoid splitting the filename.
  Also use -print0 / -0 when updating timestamps.
- commit a005e42</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899200">- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (bsc#1220411 CVE-2023-52469).
- commit f4f0cf4</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899201">- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (bsc#1220413 CVE-2023-52470).
- commit 9d7d799</changelog>
  <changelog author="oneukum@suse.com" date="1710158400">- Update
  patches.suse/usb-hub-Guard-against-accesses-to-uninitialized-BOS-.patch
  (bsc#1220790 CVE-2023-52477).
- commit d33bab7</changelog>
  <changelog author="jslaby@suse.cz" date="1710244800">- Refresh
  patches.suse/mm-ima-kexec-of-use-memblock_free_late-from-ima_free.patch.
  Fix:
  * Section mismatch (function ima_free_kexec_buffer()) in modpost: vmlinux.o in ima_free_kexec_buffer()
  WARNING: modpost: vmlinux.o(.text+0xac1250): Section mismatch in reference from the function ima_free_kexec_buffer() to the function .init.text:__memblock_free_late()
- commit 5522f01</changelog>
  <changelog author="lhenriques@suse.de" date="1710244801">- netfs: Only call folio_start_fscache() one time for each folio
  (CVE-2023-52582 bsc#1220878).
- commit dfd082b</changelog>
  <changelog author="lhenriques@suse.de" date="1710244802">- ceph: fix deadlock or deadcode of misusing dget() (bsc#1221058
  CVE-2023-52583).
- commit 1a81018</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1710331200">- Refresh patches.kabi/team-Hide-new-member-header-ops.patch.
  Fix for kABI workaround.
- commit 6ba2f5d</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417600">- Sort upstream patches
- Refresh
  patches.suse/Documentation-hw-vuln-Add-documentation-for-RFDS.patch.
- Refresh
  patches.suse/KVM-x86-Export-RFDS_NO-and-RFDS_CLEAR-to-guests.patch.
- Refresh
  patches.suse/x86-entry-ia32-Ensure-s32-is-sign-extended-to-s64.patch.
- Refresh
  patches.suse/x86-rfds-Mitigate-Register-File-Data-Sampling-RFDS.patch.
- commit f172e12</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417601">- x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is  set (bsc#1213456 CVE-2023-28746).
- commit 4fed4e6</changelog>
  <changelog author="tonyj@suse.de" date="1710504000">- perf/x86/intel/uncore: Fix NULL pointer dereference issue in
  upi_fill_topology() (bsc#1220237, CVE-2023-52450).
- commit 246b58a</changelog>
  <changelog author="iivanov@suse.de" date="1711108800">- dmaengine: fix NULL pointer in channel unregistration function (bsc#1221276 CVE-2023-52492)
- commit f21c2ab</changelog>
  <changelog author="mkoutny@suse.com" date="1711540800">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-harden-detection-of-controll.patch
  (git-fixes CVE-2021-46926 bsc#1220478).
- Update
  patches.suse/ALSA-rawmidi-fix-the-uninitalized-user_pversion.patch
  (git-fixes CVE-2021-47096 bsc#1220981).
- Update
  patches.suse/IB-qib-Fix-memory-leak-in-qib_user_sdma_queue_pkts.patch
  (git-fixes CVE-2021-47104 bsc#1220960).
- Update
  patches.suse/Input-elantech-fix-stack-out-of-bound-access-in-elan.patch
  (git-fixes CVE-2021-47097 bsc#1220982).
- Update
  patches.suse/KVM-x86-mmu-Don-t-advance-iterator-after-restart-due.patch
  (git-fixes CVE-2021-47094 bsc#1221551).
- Update patches.suse/NFSD-Fix-READDIR-buffer-overflow.patch
  (git-fixes bsc#1196346 CVE-2021-47107 bsc#1220965).
- Update
  patches.suse/asix-fix-uninit-value-in-asix_mdio_read.patch
  (git-fixes CVE-2021-47101 bsc#1220987).
- Update
  patches.suse/drm-mediatek-hdmi-Perform-NULL-pointer-check-for-mtk.patch
  (git-fixes CVE-2021-47108 bsc#1220986).
- Update
  patches.suse/hwmon-lm90-Prevent-integer-overflow-underflow-in-hys.patch
  (git-fixes CVE-2021-47098 bsc#1220983).
- Update
  patches.suse/ipmi-Fix-UAF-when-uninstall-ipmi_si-and-ipmi_msghand.patch
  (git-fixes CVE-2021-47100 bsc#1220985).
- Update
  patches.suse/ipmi-ssif-initialize-ssif_info-client-early.patch
  (bsc#1193490 CVE-2021-47095 bsc#1220979).
- Update
  patches.suse/mac80211-fix-locking-in-ieee80211_start_ap-error-pat.patch
  (git-fixes CVE-2021-47091 bsc#1220959).
- Update
  patches.suse/net-fix-use-after-free-in-tw_timer_handler.patch
  (bsc#1217195 CVE-2021-46936 bsc#1220439).
- Update
  patches.suse/net-marvell-prestera-fix-incorrect-structure-access.patch
  (git-fixes CVE-2021-47102 bsc#1221009).
- Update
  patches.suse/net-smc-fix-kernel-panic-caused-by-race-of-smc_sock
  (git-fixes CVE-2021-46925 bsc#1220466).
- Update
  patches.suse/nitro_enclaves-Use-get_user_pages_unlocked-call-to-handle-mmap-assert.patch
  (git fixes (mm/gup) CVE-2021-46927 bsc#1220443).
- Update
  patches.suse/platform-x86-intel_pmc_core-fix-memleak-on-registrat.patch
  (git-fixes CVE-2021-47093 bsc#1220978).
- Update patches.suse/sctp-use-call_rcu-to-free-endpoint.patch
  (CVE-2022-20154 bsc#1200599 CVE-2021-46929 bsc#1220482).
- Update patches.suse/tee-optee-Fix-incorrect-page-free-bug.patch
  (jsc#SLE-21844 CVE-2021-47087 bsc#1220954).
- Update
  patches.suse/tun-avoid-double-free-in-tun_free_netdev.patch
  (bsc#1209635 CVE-2022-4744 git-fixes CVE-2021-47082
  bsc#1220969).
- Update
  patches.suse/usb-gadget-f_fs-Clear-ffs_eventfd-in-ffs_data_clear.patch
  (git-fixes CVE-2021-46933 bsc#1220487).
- Update patches.suse/usb-mtu3-fix-list_head-check-warning.patch
  (git-fixes CVE-2021-46930 bsc#1220484).
- Update
  patches.suse/veth-ensure-skb-entering-GRO-are-not-cloned.patch
  (git-fixes CVE-2021-47099 bsc#1220955).
- commit b15f74e</changelog>
  <changelog author="mkoutny@suse.com" date="1711540801">- Update patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
  (bsc#1194516 CVE-2022-0487 CVE-2022-48626 bsc#1220366).
- Update
  patches.suse/crypto-qcom-rng-ensure-buffer-for-generate-is-comple.patch
  (git-fixes CVE-2022-48629 bsc#1220989).
- Update
  patches.suse/crypto-qcom-rng-fix-infinite-loop-on-requests-not-mu.patch
  (git-fixes CVE-2022-48630 bsc#1220990).
- commit f8cf886</changelog>
  <changelog author="mkoutny@suse.com" date="1711540802">- Update
  patches.suse/HID-intel-ish-hid-ipc-Disable-and-reenable-ACPI-GPE-.patch
  (git-fixes CVE-2023-52519 bsc#1220920).
- Update
  patches.suse/HID-sony-Fix-a-potential-memory-leak-in-sony_probe.patch
  (git-fixes CVE-2023-52529 bsc#1220929).
- Update
  patches.suse/IB-hfi1-Fix-bugs-with-non-PAGE_SIZE-end-multi-iovec-.patch
  (git-fixes CVE-2023-52474 bsc#1220445).
- Update
  patches.suse/RDMA-siw-Fix-connection-failure-handling.patch
  (git-fixes CVE-2023-52513 bsc#1221022).
- Update
  patches.suse/RDMA-srp-Do-not-call-scsi_done-from-srp_abort.patch
  (git-fixes CVE-2023-52515 bsc#1221048).
- Update
  patches.suse/Revert-tty-n_gsm-fix-UAF-in-gsm_cleanup_mux.patch
  (git-fixes CVE-2023-52564 bsc#1220938).
- Update
  patches.suse/bpf-Check-rcu_read_lock_trace_held-before-calling-bp.patch
  (bsc#1220251 CVE-2023-52447 CVE-2023-52621 bsc#1222073).
- Update
  patches.suse/ieee802154-ca8210-Fix-a-potential-UAF-in-ca8210_prob.patch
  (git-fixes CVE-2023-52510 bsc#1220898).
- Update
  patches.suse/net-nfc-llcp-Add-lock-when-modifying-device-list.patch
  (git-fixes CVE-2023-52524 bsc#1220927).
- Update
  patches.suse/net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch
  (git-fixes CVE-2023-52528 bsc#1220843).
- Update
  patches.suse/nfc-nci-assert-requested-protocol-is-valid.patch
  (git-fixes CVE-2023-52507 bsc#1220833).
- Update
  patches.suse/nilfs2-fix-potential-use-after-free-in-nilfs_gccache.patch
  (git-fixes CVE-2023-52566 bsc#1220940).
- Update
  patches.suse/nvme-fc-Prevent-null-pointer-dereference-in-nvme_fc_.patch
  (bsc#1214842 CVE-2023-52508 bsc#1221015).
- Update
  patches.suse/nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva.patch
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356 CVE-2023-52454 bsc#1220320).
- Update
  patches.suse/platform-x86-think-lmi-Fix-reference-leak.patch
  (git-fixes CVE-2023-52520 bsc#1220921).
- Update
  patches.suse/ravb-Fix-use-after-free-issue-in-ravb_tx_timeout_wor.patch
  (bsc#1212514 CVE-2023-35827 CVE-2023-52509 bsc#1220836).
- Update
  patches.suse/ring-buffer-Do-not-attempt-to-read-past-commit.patch
  (git-fixes CVE-2023-52501 bsc#1220885).
- Update
  patches.suse/serial-8250_port-Check-IRQ-data-before-use.patch
  (git-fixes CVE-2023-52567 bsc#1220839).
- Update
  patches.suse/spi-sun6i-fix-race-between-DMA-RX-transfer-completio.patch
  (git-fixes CVE-2023-52517 bsc#1221055).
- Update
  patches.suse/spi-sun6i-reduce-DMA-RX-transfer-width-to-single-byt.patch
  (git-fixes CVE-2023-52511 bsc#1221012).
- Update
  patches.suse/wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_proc.patch
  (git-fixes CVE-2023-52525 bsc#1220840).
- Update
  patches.suse/x86-alternatives-disable-kasan-in-apply_alternatives.patch
  (git-fixes CVE-2023-52504 bsc#1221553).
- Update
  patches.suse/x86-srso-fix-sbpb-enablement-for-spec_rstack_overflow-off.patch
  (git-fixes CVE-2023-52575 bsc#1220871).
- commit 5f353b0</changelog>
  <changelog author="mkoutny@suse.com" date="1711713600">- README.BRANCH: Remove copy of branch name
- commit 704bda3</changelog>
  <changelog author="mkoutny@suse.com" date="1711713601">- README.BRANCH: Remove copy of branch name
- commit 4834fba</changelog>
  <changelog author="jroedel@suse.de" date="1712059200">- x86/sev: Harden #VC instruction emulation somewhat (CVE-2024-25742 bsc#1221725).
- commit 2e3eba1</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 900d642</changelog>
</package>
<package pkgid="0705ce987de3158834d5dc5704d31398f8bfe2f7e558fcebfef06867acc2fee2" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.119.1"/>
  <changelog author="vkarasulli@suse.de" date="1714478400">- Update
  patches.suse/ice-Don-t-double-unplug-aux-on-peer-initiated-reset.patch
  (git-fixes CVE-2022-48653 bsc#1223474).
- commit dba84ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478401">- Update
  patches.suse/dmaengine-ti-k3-udma-private-Fix-refcount-leak-bug-i.patch
  (git-fixes CVE-2022-48656 bsc#1223479).
- commit 90546f3</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478402">- Update
  patches.suse/netfilter-nfnetlink_osf-fix-possible-bogus-match-in-.patch
  (bsc#1204614 CVE-2022-48654 bsc#1223482).
- commit a8a2952</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478403">- Update
  patches.suse/arm64-topology-fix-possible-overflow-in-amu_fie_setu.patch
  (git-fixes CVE-2022-48657 bsc#1223484).
- commit d7e1659</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478404">- Update
  patches.suse/gpiolib-cdev-Set-lineevent_state-irq-after-IRQ-regis.patch
  (git-fixes CVE-2022-48660 bsc#1223487).
- commit 30d7811</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478405">- Update
  patches.suse/sfc-fix-null-pointer-dereference-in-efx_hard_start_x.patch
  (git-fixes CVE-2022-48648 bsc#1223503).
- commit 2cd307a</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478406">- Update
  patches.suse/scsi-qla2xxx-Fix-memory-leak-in-__qlt_24xx_handle_ab.patch
  (bsc#1203935 CVE-2022-48650 bsc#1223509).
- commit ecd523c</changelog>
  <changelog author="tiwai@suse.de" date="1714651200">- drm/i915/gem: Really move i915_gem_context.link under ref
  protection (CVE-2022-48662 bsc#1223505).
- commit 1ea0422</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651201">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-collapse-range.patch
  (bsc#1193629 CVE-2022-48668 bsc#1223516).
- commit ea57df6</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651202">- Update
  patches.suse/bnxt-prevent-skb-UAF-after-handing-over-to-PTP-worke.patch
  (jsc#SLE-18978 CVE-2022-48637 bsc#1223517).
- commit 8af9f52</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651203">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-insert-range.patch
  (bsc#1193629 CVE-2022-48667 bsc#1223518).
- commit 2544640</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651204">- Update
  patches.suse/sfc-fix-TX-channel-offset-when-using-legacy-interrup.patch
  (git-fixes CVE-2022-48647 bsc#1223519).
- commit 2df3009</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651205">- Update
  patches.suse/cgroup-cgroup_get_from_id-must-check-the-looked-up-kn-is-a-directory.patch
  (bsc#1203906 CVE-2022-48638 bsc#1223522).
- commit 1b1d545</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651206">- Update
  patches.suse/gpio-mockup-fix-NULL-pointer-dereference-when-removi.patch
  (git-fixes CVE-2022-48663 bsc#1223523).
- commit fb50f4d</changelog>
  <changelog author="tiwai@suse.de" date="1714651207">- media: cec: abort if the current transmit was canceled
  (CVE-2024-23848 bsc#1219104).
- commit f23b730</changelog>
  <changelog author="tiwai@suse.de" date="1714651208">- kABI workaround for cec_adapter (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid confusing "transmit timed out" message
  (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid recursive cec_claim_log_addrs
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-api: add locking in cec_release()
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  (CVE-2024-23848 bsc#1219104).
- commit 5f84bce</changelog>
  <changelog author="colyli@suse.de" date="1714651209">- md/raid5: fix atomicity violation in raid5_cache_count
  (bsc#1219169, CVE-2024-23307).
- commit d2d22f0</changelog>
  <changelog author="lhenriques@suse.de" date="1714737600">- Update
  patches.suse/ext4-fix-bug-in-extents-parsing-when-eh_entries-0-an.patch
  (bsc#1206881 bsc#1223475 CVE-2022-48631).
- commit 718df1c</changelog>
  <changelog author="tiwai@suse.de" date="1714737601">- media: edia: dvbdev: fix a use-after-free (CVE-2024-27043
  bsc#1223824).
- commit e3d9ce5</changelog>
  <changelog author="ddiss@suse.de" date="1714996800">- pstore: inode: Only d_invalidate() is needed (bsc#1223705
  CVE-2024-27389).
- commit bbe965a</changelog>
</package>
<package pkgid="86cace5cc807ebdf771c60cb0301d04a8efe7ccf293b0fafabbe47b444b3196a" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.119.1"/>
  <changelog author="vkarasulli@suse.de" date="1714478400">- Update
  patches.suse/ice-Don-t-double-unplug-aux-on-peer-initiated-reset.patch
  (git-fixes CVE-2022-48653 bsc#1223474).
- commit dba84ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478401">- Update
  patches.suse/dmaengine-ti-k3-udma-private-Fix-refcount-leak-bug-i.patch
  (git-fixes CVE-2022-48656 bsc#1223479).
- commit 90546f3</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478402">- Update
  patches.suse/netfilter-nfnetlink_osf-fix-possible-bogus-match-in-.patch
  (bsc#1204614 CVE-2022-48654 bsc#1223482).
- commit a8a2952</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478403">- Update
  patches.suse/arm64-topology-fix-possible-overflow-in-amu_fie_setu.patch
  (git-fixes CVE-2022-48657 bsc#1223484).
- commit d7e1659</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478404">- Update
  patches.suse/gpiolib-cdev-Set-lineevent_state-irq-after-IRQ-regis.patch
  (git-fixes CVE-2022-48660 bsc#1223487).
- commit 30d7811</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478405">- Update
  patches.suse/sfc-fix-null-pointer-dereference-in-efx_hard_start_x.patch
  (git-fixes CVE-2022-48648 bsc#1223503).
- commit 2cd307a</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478406">- Update
  patches.suse/scsi-qla2xxx-Fix-memory-leak-in-__qlt_24xx_handle_ab.patch
  (bsc#1203935 CVE-2022-48650 bsc#1223509).
- commit ecd523c</changelog>
  <changelog author="tiwai@suse.de" date="1714651200">- drm/i915/gem: Really move i915_gem_context.link under ref
  protection (CVE-2022-48662 bsc#1223505).
- commit 1ea0422</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651201">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-collapse-range.patch
  (bsc#1193629 CVE-2022-48668 bsc#1223516).
- commit ea57df6</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651202">- Update
  patches.suse/bnxt-prevent-skb-UAF-after-handing-over-to-PTP-worke.patch
  (jsc#SLE-18978 CVE-2022-48637 bsc#1223517).
- commit 8af9f52</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651203">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-insert-range.patch
  (bsc#1193629 CVE-2022-48667 bsc#1223518).
- commit 2544640</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651204">- Update
  patches.suse/sfc-fix-TX-channel-offset-when-using-legacy-interrup.patch
  (git-fixes CVE-2022-48647 bsc#1223519).
- commit 2df3009</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651205">- Update
  patches.suse/cgroup-cgroup_get_from_id-must-check-the-looked-up-kn-is-a-directory.patch
  (bsc#1203906 CVE-2022-48638 bsc#1223522).
- commit 1b1d545</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651206">- Update
  patches.suse/gpio-mockup-fix-NULL-pointer-dereference-when-removi.patch
  (git-fixes CVE-2022-48663 bsc#1223523).
- commit fb50f4d</changelog>
  <changelog author="tiwai@suse.de" date="1714651207">- media: cec: abort if the current transmit was canceled
  (CVE-2024-23848 bsc#1219104).
- commit f23b730</changelog>
  <changelog author="tiwai@suse.de" date="1714651208">- kABI workaround for cec_adapter (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid confusing "transmit timed out" message
  (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid recursive cec_claim_log_addrs
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-api: add locking in cec_release()
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  (CVE-2024-23848 bsc#1219104).
- commit 5f84bce</changelog>
  <changelog author="colyli@suse.de" date="1714651209">- md/raid5: fix atomicity violation in raid5_cache_count
  (bsc#1219169, CVE-2024-23307).
- commit d2d22f0</changelog>
  <changelog author="lhenriques@suse.de" date="1714737600">- Update
  patches.suse/ext4-fix-bug-in-extents-parsing-when-eh_entries-0-an.patch
  (bsc#1206881 bsc#1223475 CVE-2022-48631).
- commit 718df1c</changelog>
  <changelog author="tiwai@suse.de" date="1714737601">- media: edia: dvbdev: fix a use-after-free (CVE-2024-27043
  bsc#1223824).
- commit e3d9ce5</changelog>
  <changelog author="ddiss@suse.de" date="1714996800">- pstore: inode: Only d_invalidate() is needed (bsc#1223705
  CVE-2024-27389).
- commit bbe965a</changelog>
</package>
<package pkgid="4ff7c8ce3af0092dae955d5824ef0c45ffce098c1c8f1b7cee6ad3559cf71c34" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.119.1"/>
  <changelog author="vkarasulli@suse.de" date="1714478400">- Update
  patches.suse/ice-Don-t-double-unplug-aux-on-peer-initiated-reset.patch
  (git-fixes CVE-2022-48653 bsc#1223474).
- commit dba84ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478401">- Update
  patches.suse/dmaengine-ti-k3-udma-private-Fix-refcount-leak-bug-i.patch
  (git-fixes CVE-2022-48656 bsc#1223479).
- commit 90546f3</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478402">- Update
  patches.suse/netfilter-nfnetlink_osf-fix-possible-bogus-match-in-.patch
  (bsc#1204614 CVE-2022-48654 bsc#1223482).
- commit a8a2952</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478403">- Update
  patches.suse/arm64-topology-fix-possible-overflow-in-amu_fie_setu.patch
  (git-fixes CVE-2022-48657 bsc#1223484).
- commit d7e1659</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478404">- Update
  patches.suse/gpiolib-cdev-Set-lineevent_state-irq-after-IRQ-regis.patch
  (git-fixes CVE-2022-48660 bsc#1223487).
- commit 30d7811</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478405">- Update
  patches.suse/sfc-fix-null-pointer-dereference-in-efx_hard_start_x.patch
  (git-fixes CVE-2022-48648 bsc#1223503).
- commit 2cd307a</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478406">- Update
  patches.suse/scsi-qla2xxx-Fix-memory-leak-in-__qlt_24xx_handle_ab.patch
  (bsc#1203935 CVE-2022-48650 bsc#1223509).
- commit ecd523c</changelog>
  <changelog author="tiwai@suse.de" date="1714651200">- drm/i915/gem: Really move i915_gem_context.link under ref
  protection (CVE-2022-48662 bsc#1223505).
- commit 1ea0422</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651201">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-collapse-range.patch
  (bsc#1193629 CVE-2022-48668 bsc#1223516).
- commit ea57df6</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651202">- Update
  patches.suse/bnxt-prevent-skb-UAF-after-handing-over-to-PTP-worke.patch
  (jsc#SLE-18978 CVE-2022-48637 bsc#1223517).
- commit 8af9f52</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651203">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-insert-range.patch
  (bsc#1193629 CVE-2022-48667 bsc#1223518).
- commit 2544640</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651204">- Update
  patches.suse/sfc-fix-TX-channel-offset-when-using-legacy-interrup.patch
  (git-fixes CVE-2022-48647 bsc#1223519).
- commit 2df3009</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651205">- Update
  patches.suse/cgroup-cgroup_get_from_id-must-check-the-looked-up-kn-is-a-directory.patch
  (bsc#1203906 CVE-2022-48638 bsc#1223522).
- commit 1b1d545</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651206">- Update
  patches.suse/gpio-mockup-fix-NULL-pointer-dereference-when-removi.patch
  (git-fixes CVE-2022-48663 bsc#1223523).
- commit fb50f4d</changelog>
  <changelog author="tiwai@suse.de" date="1714651207">- media: cec: abort if the current transmit was canceled
  (CVE-2024-23848 bsc#1219104).
- commit f23b730</changelog>
  <changelog author="tiwai@suse.de" date="1714651208">- kABI workaround for cec_adapter (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid confusing "transmit timed out" message
  (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid recursive cec_claim_log_addrs
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-api: add locking in cec_release()
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  (CVE-2024-23848 bsc#1219104).
- commit 5f84bce</changelog>
  <changelog author="colyli@suse.de" date="1714651209">- md/raid5: fix atomicity violation in raid5_cache_count
  (bsc#1219169, CVE-2024-23307).
- commit d2d22f0</changelog>
  <changelog author="lhenriques@suse.de" date="1714737600">- Update
  patches.suse/ext4-fix-bug-in-extents-parsing-when-eh_entries-0-an.patch
  (bsc#1206881 bsc#1223475 CVE-2022-48631).
- commit 718df1c</changelog>
  <changelog author="tiwai@suse.de" date="1714737601">- media: edia: dvbdev: fix a use-after-free (CVE-2024-27043
  bsc#1223824).
- commit e3d9ce5</changelog>
  <changelog author="ddiss@suse.de" date="1714996800">- pstore: inode: Only d_invalidate() is needed (bsc#1223705
  CVE-2024-27389).
- commit bbe965a</changelog>
</package>
<package pkgid="ef91f01a18ad6afe2f67af36cd2635987bad7c5526dafd25011b75c9917b1d65" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.119.1"/>
  <changelog author="vkarasulli@suse.de" date="1714478400">- Update
  patches.suse/ice-Don-t-double-unplug-aux-on-peer-initiated-reset.patch
  (git-fixes CVE-2022-48653 bsc#1223474).
- commit dba84ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478401">- Update
  patches.suse/dmaengine-ti-k3-udma-private-Fix-refcount-leak-bug-i.patch
  (git-fixes CVE-2022-48656 bsc#1223479).
- commit 90546f3</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478402">- Update
  patches.suse/netfilter-nfnetlink_osf-fix-possible-bogus-match-in-.patch
  (bsc#1204614 CVE-2022-48654 bsc#1223482).
- commit a8a2952</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478403">- Update
  patches.suse/arm64-topology-fix-possible-overflow-in-amu_fie_setu.patch
  (git-fixes CVE-2022-48657 bsc#1223484).
- commit d7e1659</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478404">- Update
  patches.suse/gpiolib-cdev-Set-lineevent_state-irq-after-IRQ-regis.patch
  (git-fixes CVE-2022-48660 bsc#1223487).
- commit 30d7811</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478405">- Update
  patches.suse/sfc-fix-null-pointer-dereference-in-efx_hard_start_x.patch
  (git-fixes CVE-2022-48648 bsc#1223503).
- commit 2cd307a</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478406">- Update
  patches.suse/scsi-qla2xxx-Fix-memory-leak-in-__qlt_24xx_handle_ab.patch
  (bsc#1203935 CVE-2022-48650 bsc#1223509).
- commit ecd523c</changelog>
  <changelog author="tiwai@suse.de" date="1714651200">- drm/i915/gem: Really move i915_gem_context.link under ref
  protection (CVE-2022-48662 bsc#1223505).
- commit 1ea0422</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651201">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-collapse-range.patch
  (bsc#1193629 CVE-2022-48668 bsc#1223516).
- commit ea57df6</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651202">- Update
  patches.suse/bnxt-prevent-skb-UAF-after-handing-over-to-PTP-worke.patch
  (jsc#SLE-18978 CVE-2022-48637 bsc#1223517).
- commit 8af9f52</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651203">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-insert-range.patch
  (bsc#1193629 CVE-2022-48667 bsc#1223518).
- commit 2544640</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651204">- Update
  patches.suse/sfc-fix-TX-channel-offset-when-using-legacy-interrup.patch
  (git-fixes CVE-2022-48647 bsc#1223519).
- commit 2df3009</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651205">- Update
  patches.suse/cgroup-cgroup_get_from_id-must-check-the-looked-up-kn-is-a-directory.patch
  (bsc#1203906 CVE-2022-48638 bsc#1223522).
- commit 1b1d545</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651206">- Update
  patches.suse/gpio-mockup-fix-NULL-pointer-dereference-when-removi.patch
  (git-fixes CVE-2022-48663 bsc#1223523).
- commit fb50f4d</changelog>
  <changelog author="tiwai@suse.de" date="1714651207">- media: cec: abort if the current transmit was canceled
  (CVE-2024-23848 bsc#1219104).
- commit f23b730</changelog>
  <changelog author="tiwai@suse.de" date="1714651208">- kABI workaround for cec_adapter (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid confusing "transmit timed out" message
  (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid recursive cec_claim_log_addrs
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-api: add locking in cec_release()
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  (CVE-2024-23848 bsc#1219104).
- commit 5f84bce</changelog>
  <changelog author="colyli@suse.de" date="1714651209">- md/raid5: fix atomicity violation in raid5_cache_count
  (bsc#1219169, CVE-2024-23307).
- commit d2d22f0</changelog>
  <changelog author="lhenriques@suse.de" date="1714737600">- Update
  patches.suse/ext4-fix-bug-in-extents-parsing-when-eh_entries-0-an.patch
  (bsc#1206881 bsc#1223475 CVE-2022-48631).
- commit 718df1c</changelog>
  <changelog author="tiwai@suse.de" date="1714737601">- media: edia: dvbdev: fix a use-after-free (CVE-2024-27043
  bsc#1223824).
- commit e3d9ce5</changelog>
  <changelog author="ddiss@suse.de" date="1714996800">- pstore: inode: Only d_invalidate() is needed (bsc#1223705
  CVE-2024-27389).
- commit bbe965a</changelog>
</package>
<package pkgid="50f896585f2a2c2ccdf01ad6862587347d50a0f63f28b17274176d5928dacb76" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="b256975f29e4279f94a04f9f839159ca1d09e5b5dc67a9d04bf0b82849bf8dd1" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="db084a217a4838c8f52ccbd1fd5985feb56a67b37f63d3e4e11a405a0cce7349" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="a6e164202996e2623bc338352e3b4e38e907098e017eb00097a8cf58f2b3a770" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="cd71d7f3f9445803c1cad69d4cc4140cb8b2c846fbc13ee6543a2c1bdd1cc438" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W}
  usage" (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller
  (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling
  (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- commit da5f4d4</changelog>
  <changelog author="jack@suse.cz" date="1682596801">- ext4: use ext4_journal_start/stop for fast commit transactions
  (bsc#1210793).
  Refresh patches.suse/ext4-fast-commit-may-not-fallback-for-ineligible-com.patch
  patches.suse/ext4-fix-fallocate-to-use-file_modified-to-update-pe.patch
  patches.suse/ext4-fix-race-condition-between-ext4_write-and-ext4_.patch
- commit b470a11</changelog>
  <changelog author="dwagner@suse.de" date="1682596802">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596803">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="085b27c5fa1d7cf173a109784e2f13d66a4710ad01161c71731b1972d2f1f9e7" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W}
  usage" (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller
  (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling
  (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- commit da5f4d4</changelog>
  <changelog author="jack@suse.cz" date="1682596801">- ext4: use ext4_journal_start/stop for fast commit transactions
  (bsc#1210793).
  Refresh patches.suse/ext4-fast-commit-may-not-fallback-for-ineligible-com.patch
  patches.suse/ext4-fix-fallocate-to-use-file_modified-to-update-pe.patch
  patches.suse/ext4-fix-race-condition-between-ext4_write-and-ext4_.patch
- commit b470a11</changelog>
  <changelog author="dwagner@suse.de" date="1682596802">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596803">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="d1c515f238d3068afbc24506d585b2b9fb86d3a6c16e70e0c49f807cc1eeb472" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W}
  usage" (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller
  (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling
  (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- commit da5f4d4</changelog>
  <changelog author="jack@suse.cz" date="1682596801">- ext4: use ext4_journal_start/stop for fast commit transactions
  (bsc#1210793).
  Refresh patches.suse/ext4-fast-commit-may-not-fallback-for-ineligible-com.patch
  patches.suse/ext4-fix-fallocate-to-use-file_modified-to-update-pe.patch
  patches.suse/ext4-fix-race-condition-between-ext4_write-and-ext4_.patch
- commit b470a11</changelog>
  <changelog author="dwagner@suse.de" date="1682596802">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596803">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="c049712128df783d5ae08e1e3246cf28d033c7b51d800e0709d52885f92f6d9a" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme-fcloop: fix "inconsistent {IN-HARDIRQ-W} -&gt; {HARDIRQ-ON-W}
  usage" (git-fixes).
- nvme: fix async event trace event (git-fixes).
- nvmet: fix I/O Command Set specific Identify Controller
  (git-fixes).
- nvmet: fix Identify Active Namespace ID list handling
  (git-fixes).
- nvmet: fix Identify Controller handling (git-fixes).
- nvmet: fix Identify Namespace handling (git-fixes).
- commit da5f4d4</changelog>
  <changelog author="jack@suse.cz" date="1682596801">- ext4: use ext4_journal_start/stop for fast commit transactions
  (bsc#1210793).
  Refresh patches.suse/ext4-fast-commit-may-not-fallback-for-ineligible-com.patch
  patches.suse/ext4-fix-fallocate-to-use-file_modified-to-update-pe.patch
  patches.suse/ext4-fix-race-condition-between-ext4_write-and-ext4_.patch
- commit b470a11</changelog>
  <changelog author="dwagner@suse.de" date="1682596802">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596803">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="be1835171e90ed66d76053b8881dec66de52d6ac7ad38b58058825c7743d29bc" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1"/>
  <changelog author="nik.borisov@suse.com" date="1685966400">- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- commit 3cd00dd</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966401">- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- commit b67ebd4</changelog>
  <changelog author="tiwai@suse.de" date="1685966402">- Update patch-mainline metadata for a lockdown patch
- commit ff4a857</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966403">- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- commit 89bdacb</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966404">- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- commit f0be05e</changelog>
  <changelog author="dwagner@suse.de" date="1685966405">- blacklist: add nvme bogus nsid check
  We don't not need these quirks as we don't ship the check.
- commit bbebeaf</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1685966406">- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
  pressure (bsc#1211564).
- commit 8e0fc37</changelog>
  <changelog author="tiwai@suse.de" date="1685966407">- thunderbolt: Mask ring interrupt on Intel hardware as well
  (bsc#1210165).
- commit 4a76dd6</changelog>
  <changelog author="mkubecek@suse.cz" date="1685966408">- net: rpl: fix rpl header size calculation (CVE-2023-2156
  bsc#1211131).
- commit c308d83</changelog>
  <changelog author="tiwai@suse.de" date="1685966409">- misc: fastrpc: reject new invocations during device removal
  (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal
  (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
  IRQ_DISABLE_UNLAZY flag (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
  compatible value (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
  (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- iio: adc: ad7192: Change "shorted" channels to differential
  (git-fixes).
- iio: accel: st_accel: Fix invalid mount_matrix on devices
  without ACPI _ONT method (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations
  (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
  instead of UARTCTRL_SBK (git-fixes).
- serial: 8250_tegra: Fix an error handling path in
  tegra_uart_probe() (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
  (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
  (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- selinux: don't use make's grouped targets feature yet
  (git-fixes).
- mtd: rawnand: marvell: don't set the NAND frequency select
  (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written
  (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions
  (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported
  (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
  (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev()
  (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the
  memory descriptors (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before
  executing (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  (git-fixes).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- 3c589_cs: Fix an error handling path in tc589_probe()
  (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s
  for things to stabilize (git-fixes).
- power: supply: bq27xxx: Add cache parameter to
  bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race
  condition (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
  (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend
  period (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
  (git-fixes).
- net: mdio: mvusb: Fix an error handling path in
  mvusb_mdio_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting
  (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- commit 2ec09cc</changelog>
  <changelog author="tiwai@suse.de" date="1685966410">- ASoC: rt5682: Disable jack detection interrupt during suspend
  (git-fixes).
- Refresh patches.kabi/snd-soc-rt5682-kABI-workaround.patch.
- commit ce0cf1d</changelog>
  <changelog author="tiwai@suse.de" date="1686052800">- KEYS: asymmetric: Copy sig and digest in
  public_key_verify_signature() (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called
  on current sign changes (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
  (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races
  on remove (git-fixes).
- bluetooth: Add cmd validity checks at the start of
  hci_sock_ioctl() (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if
  not set (git-fixes).
- commit 31ed077</changelog>
  <changelog author="tiwai@suse.de" date="1686052801">- power: supply: bq27xxx: expose battery data when CI=1
  (git-fixes).
- Refresh
  patches.suse/power-supply-bq27xxx-Fix-bq27xxx_battery_update-race.patch.
- commit 3c4cf6c</changelog>
  <changelog author="dwagner@suse.de" date="1686052802">- nvme: fix passthrough csi check (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks
  (git-fixes).
- commit d03fbdf</changelog>
  <changelog author="tiwai@suse.de" date="1686052803">- kABI workaround for btbcm.c (git-fixes).
- commit ab2692b</changelog>
  <changelog author="tiwai@suse.de" date="1686052804">- kabi/severities: ignore kABI in bq27xxx_battery module
  Those are local symbols that are used only by child drivers
- commit 8d7e23d</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052805">- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- commit 4309e22</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052806">- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- commit 70a1ce4</changelog>
  <changelog author="tzimmermann@suse.com" date="1686052807">- Update "drm/i915/gem: add missing boundary check in vm_access" (bsc#1211263 CVE-2023-28410)
  Add bug and CVE number to the References tag.
- commit f799efb</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052808">- x86/topology: Fix duplicated core ID within a package (git-fixes).
- commit 98adc02</changelog>
</package>
<package pkgid="c3883757b356d716645dc85ec054eecd82f5e8fea80aa51f7d3cb8a21b156f2b" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1"/>
  <changelog author="nik.borisov@suse.com" date="1685966400">- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- commit 3cd00dd</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966401">- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- commit b67ebd4</changelog>
  <changelog author="tiwai@suse.de" date="1685966402">- Update patch-mainline metadata for a lockdown patch
- commit ff4a857</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966403">- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- commit 89bdacb</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966404">- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- commit f0be05e</changelog>
  <changelog author="dwagner@suse.de" date="1685966405">- blacklist: add nvme bogus nsid check
  We don't not need these quirks as we don't ship the check.
- commit bbebeaf</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1685966406">- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
  pressure (bsc#1211564).
- commit 8e0fc37</changelog>
  <changelog author="tiwai@suse.de" date="1685966407">- thunderbolt: Mask ring interrupt on Intel hardware as well
  (bsc#1210165).
- commit 4a76dd6</changelog>
  <changelog author="mkubecek@suse.cz" date="1685966408">- net: rpl: fix rpl header size calculation (CVE-2023-2156
  bsc#1211131).
- commit c308d83</changelog>
  <changelog author="tiwai@suse.de" date="1685966409">- misc: fastrpc: reject new invocations during device removal
  (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal
  (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
  IRQ_DISABLE_UNLAZY flag (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
  compatible value (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
  (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- iio: adc: ad7192: Change "shorted" channels to differential
  (git-fixes).
- iio: accel: st_accel: Fix invalid mount_matrix on devices
  without ACPI _ONT method (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations
  (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
  instead of UARTCTRL_SBK (git-fixes).
- serial: 8250_tegra: Fix an error handling path in
  tegra_uart_probe() (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
  (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
  (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- selinux: don't use make's grouped targets feature yet
  (git-fixes).
- mtd: rawnand: marvell: don't set the NAND frequency select
  (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written
  (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions
  (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported
  (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
  (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev()
  (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the
  memory descriptors (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before
  executing (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  (git-fixes).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- 3c589_cs: Fix an error handling path in tc589_probe()
  (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s
  for things to stabilize (git-fixes).
- power: supply: bq27xxx: Add cache parameter to
  bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race
  condition (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
  (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend
  period (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
  (git-fixes).
- net: mdio: mvusb: Fix an error handling path in
  mvusb_mdio_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting
  (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- commit 2ec09cc</changelog>
  <changelog author="tiwai@suse.de" date="1685966410">- ASoC: rt5682: Disable jack detection interrupt during suspend
  (git-fixes).
- Refresh patches.kabi/snd-soc-rt5682-kABI-workaround.patch.
- commit ce0cf1d</changelog>
  <changelog author="tiwai@suse.de" date="1686052800">- KEYS: asymmetric: Copy sig and digest in
  public_key_verify_signature() (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called
  on current sign changes (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
  (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races
  on remove (git-fixes).
- bluetooth: Add cmd validity checks at the start of
  hci_sock_ioctl() (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if
  not set (git-fixes).
- commit 31ed077</changelog>
  <changelog author="tiwai@suse.de" date="1686052801">- power: supply: bq27xxx: expose battery data when CI=1
  (git-fixes).
- Refresh
  patches.suse/power-supply-bq27xxx-Fix-bq27xxx_battery_update-race.patch.
- commit 3c4cf6c</changelog>
  <changelog author="dwagner@suse.de" date="1686052802">- nvme: fix passthrough csi check (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks
  (git-fixes).
- commit d03fbdf</changelog>
  <changelog author="tiwai@suse.de" date="1686052803">- kABI workaround for btbcm.c (git-fixes).
- commit ab2692b</changelog>
  <changelog author="tiwai@suse.de" date="1686052804">- kabi/severities: ignore kABI in bq27xxx_battery module
  Those are local symbols that are used only by child drivers
- commit 8d7e23d</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052805">- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- commit 4309e22</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052806">- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- commit 70a1ce4</changelog>
  <changelog author="tzimmermann@suse.com" date="1686052807">- Update "drm/i915/gem: add missing boundary check in vm_access" (bsc#1211263 CVE-2023-28410)
  Add bug and CVE number to the References tag.
- commit f799efb</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052808">- x86/topology: Fix duplicated core ID within a package (git-fixes).
- commit 98adc02</changelog>
</package>
<package pkgid="2b4630d57853a997c30824643d90d2be0dbb07d81ea7deb642c6ed46cf360a77" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1"/>
  <changelog author="nik.borisov@suse.com" date="1685966400">- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- commit 3cd00dd</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966401">- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- commit b67ebd4</changelog>
  <changelog author="tiwai@suse.de" date="1685966402">- Update patch-mainline metadata for a lockdown patch
- commit ff4a857</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966403">- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- commit 89bdacb</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966404">- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- commit f0be05e</changelog>
  <changelog author="dwagner@suse.de" date="1685966405">- blacklist: add nvme bogus nsid check
  We don't not need these quirks as we don't ship the check.
- commit bbebeaf</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1685966406">- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
  pressure (bsc#1211564).
- commit 8e0fc37</changelog>
  <changelog author="tiwai@suse.de" date="1685966407">- thunderbolt: Mask ring interrupt on Intel hardware as well
  (bsc#1210165).
- commit 4a76dd6</changelog>
  <changelog author="mkubecek@suse.cz" date="1685966408">- net: rpl: fix rpl header size calculation (CVE-2023-2156
  bsc#1211131).
- commit c308d83</changelog>
  <changelog author="tiwai@suse.de" date="1685966409">- misc: fastrpc: reject new invocations during device removal
  (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal
  (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
  IRQ_DISABLE_UNLAZY flag (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
  compatible value (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
  (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- iio: adc: ad7192: Change "shorted" channels to differential
  (git-fixes).
- iio: accel: st_accel: Fix invalid mount_matrix on devices
  without ACPI _ONT method (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations
  (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
  instead of UARTCTRL_SBK (git-fixes).
- serial: 8250_tegra: Fix an error handling path in
  tegra_uart_probe() (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
  (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
  (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- selinux: don't use make's grouped targets feature yet
  (git-fixes).
- mtd: rawnand: marvell: don't set the NAND frequency select
  (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written
  (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions
  (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported
  (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
  (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev()
  (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the
  memory descriptors (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before
  executing (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  (git-fixes).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- 3c589_cs: Fix an error handling path in tc589_probe()
  (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s
  for things to stabilize (git-fixes).
- power: supply: bq27xxx: Add cache parameter to
  bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race
  condition (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
  (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend
  period (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
  (git-fixes).
- net: mdio: mvusb: Fix an error handling path in
  mvusb_mdio_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting
  (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- commit 2ec09cc</changelog>
  <changelog author="tiwai@suse.de" date="1685966410">- ASoC: rt5682: Disable jack detection interrupt during suspend
  (git-fixes).
- Refresh patches.kabi/snd-soc-rt5682-kABI-workaround.patch.
- commit ce0cf1d</changelog>
  <changelog author="tiwai@suse.de" date="1686052800">- KEYS: asymmetric: Copy sig and digest in
  public_key_verify_signature() (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called
  on current sign changes (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
  (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races
  on remove (git-fixes).
- bluetooth: Add cmd validity checks at the start of
  hci_sock_ioctl() (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if
  not set (git-fixes).
- commit 31ed077</changelog>
  <changelog author="tiwai@suse.de" date="1686052801">- power: supply: bq27xxx: expose battery data when CI=1
  (git-fixes).
- Refresh
  patches.suse/power-supply-bq27xxx-Fix-bq27xxx_battery_update-race.patch.
- commit 3c4cf6c</changelog>
  <changelog author="dwagner@suse.de" date="1686052802">- nvme: fix passthrough csi check (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks
  (git-fixes).
- commit d03fbdf</changelog>
  <changelog author="tiwai@suse.de" date="1686052803">- kABI workaround for btbcm.c (git-fixes).
- commit ab2692b</changelog>
  <changelog author="tiwai@suse.de" date="1686052804">- kabi/severities: ignore kABI in bq27xxx_battery module
  Those are local symbols that are used only by child drivers
- commit 8d7e23d</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052805">- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- commit 4309e22</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052806">- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- commit 70a1ce4</changelog>
  <changelog author="tzimmermann@suse.com" date="1686052807">- Update "drm/i915/gem: add missing boundary check in vm_access" (bsc#1211263 CVE-2023-28410)
  Add bug and CVE number to the References tag.
- commit f799efb</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052808">- x86/topology: Fix duplicated core ID within a package (git-fixes).
- commit 98adc02</changelog>
</package>
<package pkgid="1b7d1fd17e8d83cb207aac6782eb790a787c8ca973e3491294636fa0bf1f7e89" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1"/>
  <changelog author="nik.borisov@suse.com" date="1685966400">- x86/fpu: Fix the init_fpstate size check with the actual size (git-fixes).
- commit 3cd00dd</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966401">- x86/tsx: Add a feature bit for TSX control MSR support (git-fixes).
- commit b67ebd4</changelog>
  <changelog author="tiwai@suse.de" date="1685966402">- Update patch-mainline metadata for a lockdown patch
- commit ff4a857</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966403">- x86/pm: Add enumeration check before spec MSRs save/restore setup (git-fixes).
- commit 89bdacb</changelog>
  <changelog author="nik.borisov@suse.com" date="1685966404">- x86/resctrl: Fix min_cbm_bits for AMD (git-fixes).
- commit f0be05e</changelog>
  <changelog author="dwagner@suse.de" date="1685966405">- blacklist: add nvme bogus nsid check
  We don't not need these quirks as we don't ship the check.
- commit bbebeaf</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1685966406">- net: mellanox: mlxbf_gige: Fix skb_panic splat under memory
  pressure (bsc#1211564).
- commit 8e0fc37</changelog>
  <changelog author="tiwai@suse.de" date="1685966407">- thunderbolt: Mask ring interrupt on Intel hardware as well
  (bsc#1210165).
- commit 4a76dd6</changelog>
  <changelog author="mkubecek@suse.cz" date="1685966408">- net: rpl: fix rpl header size calculation (CVE-2023-2156
  bsc#1211131).
- commit c308d83</changelog>
  <changelog author="tiwai@suse.de" date="1685966409">- misc: fastrpc: reject new invocations during device removal
  (git-fixes).
- misc: fastrpc: return -EPIPE to invocations on device removal
  (git-fixes).
- iio: imu: inv_icm42600: fix timestamp reset (git-fixes).
- iio: adc: ad_sigma_delta: Fix IRQ issue by setting
  IRQ_DISABLE_UNLAZY flag (git-fixes).
- dt-bindings: iio: adc: renesas,rcar-gyroadc: Fix adi,ad7476
  compatible value (git-fixes).
- iio: dac: mcp4725: Fix i2c_master_send() return value handling
  (git-fixes).
- iio: light: vcnl4035: fixed chip ID check (git-fixes).
- iio: adc: ad7192: Change "shorted" channels to differential
  (git-fixes).
- iio: accel: st_accel: Fix invalid mount_matrix on devices
  without ACPI _ONT method (git-fixes).
- iio: adc: mxs-lradc: fix the order of two cleanup operations
  (git-fixes).
- tty: serial: fsl_lpuart: use UARTCTRL_TXINV to send break
  instead of UARTCTRL_SBK (git-fixes).
- serial: 8250_tegra: Fix an error handling path in
  tegra_uart_probe() (git-fixes).
- usb: usbfs: Use consistent mmap functions (git-fixes).
- usb: usbfs: Enforce page requirements for mmap (git-fixes).
- dt-bindings: usb: snps,dwc3: Fix "snps,hsphy_interface" type
  (git-fixes).
- usb: gadget: f_fs: Add unbind event before functionfs_unbind
  (git-fixes).
- mmc: vub300: fix invalid response handling (git-fixes).
- selinux: don't use make's grouped targets feature yet
  (git-fixes).
- mtd: rawnand: marvell: don't set the NAND frequency select
  (git-fixes).
- mtd: rawnand: marvell: ensure timing values are written
  (git-fixes).
- mtd: rawnand: ingenic: fix empty stub helper definitions
  (git-fixes).
- selftests: mptcp: sockopt: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: pm nl: skip if MPTCP is not supported
  (git-fixes).
- selftests: mptcp: connect: skip if MPTCP is not supported
  (git-fixes).
- net: usb: qmi_wwan: Set DTR quirk for BroadMobi BM818
  (git-fixes).
- HID: wacom: avoid integer overflow in wacom_intuos_inout()
  (git-fixes).
- ata: libata-scsi: Use correct device no in ata_find_dev()
  (git-fixes).
- firmware: arm_ffa: Set reserved/MBZ fields to zero in the
  memory descriptors (git-fixes).
- firmware: arm_ffa: Check if ffa_driver remove is present before
  executing (git-fixes).
- dt-binding: cdns,usb3: Fix cdns,on-chip-buff-size type
  (git-fixes).
- gpio: mockup: Fix mode of debugfs files (git-fixes).
- drm/sched: Remove redundant check (git-fixes).
- 3c589_cs: Fix an error handling path in tc589_probe()
  (git-fixes).
- power: supply: sbs-charger: Fix INHIBITED bit for Status reg
  (git-fixes).
- power: supply: bq27xxx: After charger plug in/out wait 0.5s
  for things to stabilize (git-fixes).
- power: supply: bq27xxx: Add cache parameter to
  bq27xxx_battery_current_and_status() (git-fixes).
- power: supply: bq27xxx: Fix I2C IRQ race on remove (git-fixes).
- power: supply: bq27xxx: Fix bq27xxx_battery_update() race
  condition (git-fixes).
- power: supply: leds: Fix blink to LED on transition (git-fixes).
- ALSA: hda/realtek: Enable headset onLenovo M70/M90 (git-fixes).
- ASoC: Intel: Skylake: Fix declaration of enum skl_ch_cfg
  (git-fixes).
- ASoC: lpass: Fix for KASAN use_after_free out of bounds
  (git-fixes).
- ALSA: hda: Fix unhandled register update during auto-suspend
  period (git-fixes).
- ALSA: hda/ca0132: add quirk for EVGA X299 DARK (git-fixes).
- dt-bindings: ata: ahci-ceva: Cover all 4 iommus entries
  (git-fixes).
- net: mdio: mvusb: Fix an error handling path in
  mvusb_mdio_probe() (git-fixes).
- watchdog: sp5100_tco: Immediately trigger upon starting
  (git-fixes).
- dt-bindings: ata: ahci-ceva: convert to yaml (git-fixes).
- commit 2ec09cc</changelog>
  <changelog author="tiwai@suse.de" date="1685966410">- ASoC: rt5682: Disable jack detection interrupt during suspend
  (git-fixes).
- Refresh patches.kabi/snd-soc-rt5682-kABI-workaround.patch.
- commit ce0cf1d</changelog>
  <changelog author="tiwai@suse.de" date="1686052800">- KEYS: asymmetric: Copy sig and digest in
  public_key_verify_signature() (git-fixes).
- power: supply: bq27xxx: Ensure power_supply_changed() is called
  on current sign changes (git-fixes).
- power: supply: bq27xxx: Move bq27xxx_battery_update() down
  (git-fixes).
- power: supply: bq27xxx: Fix poll_interval handling and races
  on remove (git-fixes).
- bluetooth: Add cmd validity checks at the start of
  hci_sock_ioctl() (git-fixes).
- Bluetooth: hci_bcm: Fall back to getting bdaddr from EFI if
  not set (git-fixes).
- commit 31ed077</changelog>
  <changelog author="tiwai@suse.de" date="1686052801">- power: supply: bq27xxx: expose battery data when CI=1
  (git-fixes).
- Refresh
  patches.suse/power-supply-bq27xxx-Fix-bq27xxx_battery_update-race.patch.
- commit 3c4cf6c</changelog>
  <changelog author="dwagner@suse.de" date="1686052802">- nvme: fix passthrough csi check (git-fixes).
- nvme: move the Samsung X5 quirk entry to the core quirks
  (git-fixes).
- commit d03fbdf</changelog>
  <changelog author="tiwai@suse.de" date="1686052803">- kABI workaround for btbcm.c (git-fixes).
- commit ab2692b</changelog>
  <changelog author="tiwai@suse.de" date="1686052804">- kabi/severities: ignore kABI in bq27xxx_battery module
  Those are local symbols that are used only by child drivers
- commit 8d7e23d</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052805">- x86/syscall: Include asm/ptrace.h in syscall_wrapper header (git-fixes).
- commit 4309e22</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052806">- x86/topology: Fix multiple packages shown on a single-package system (git-fixes).
- commit 70a1ce4</changelog>
  <changelog author="tzimmermann@suse.com" date="1686052807">- Update "drm/i915/gem: add missing boundary check in vm_access" (bsc#1211263 CVE-2023-28410)
  Add bug and CVE number to the References tag.
- commit f799efb</changelog>
  <changelog author="nik.borisov@suse.com" date="1686052808">- x86/topology: Fix duplicated core ID within a package (git-fixes).
- commit 98adc02</changelog>
</package>
<package pkgid="7d1c8090d0b09cff6fac0c68fe309a36ca0cced7df6222971c7ab884fa7fad35" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="00670a697053df46100f66ffac54f8f16e7bbff69a72669969481ee08652cbf7" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="1ce528b72085e13ab1a17e77a9b9d7721d0a51522ca7c2bba47b913c88205e5d" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="9fb6c7ba54c8579b83a479faf5aa6b2eae6192e938bd240e5af1a865c5e157fd" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="1dd77eb30fdf0bffa9599971313aeb0fb80ed240c386b6e6e2e31bdd706b1388" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.74.1"/>
  <changelog author="ailiop@suse.com" date="1689940800">- xfs: separate out log shutdown callback processing
  (bsc#1211811).
- commit 8739ead</changelog>
  <changelog author="ailiop@suse.com" date="1689940801">- xfs: don't run shutdown callbacks on active iclogs
  (bsc#1211811).
- Refresh patches.suse/xfs-pass-a-CIL-context-to-xlog_write.patch.
- commit bbe5b6f</changelog>
  <changelog author="ailiop@suse.com" date="1689940802">- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state()
  (bsc#1211811).
- commit 7d0f707</changelog>
  <changelog author="ailiop@suse.com" date="1689940803">- xfs: order CIL checkpoint start records (bsc#1211811).
- commit 1723063</changelog>
  <changelog author="ailiop@suse.com" date="1689940804">- xfs: AIL needs asynchronous CIL forcing (bsc#1211811).
- commit df27a10</changelog>
  <changelog author="ailiop@suse.com" date="1689940805">- xfs: CIL work is serialised, not pipelined (bsc#1211811).
- commit 41681a2</changelog>
  <changelog author="ailiop@suse.com" date="1689940806">- xfs: move the CIL workqueue to the CIL (bsc#1211811).
- commit bdc017f</changelog>
  <changelog author="ailiop@suse.com" date="1689940807">- xfs: async CIL flushes need pending pushes to be made stable
  (bsc#1211811).
- commit a7a8e83</changelog>
  <changelog author="ailiop@suse.com" date="1689940808">- xfs: drop async cache flushes from CIL commits (bsc#1211811).
- commit b52f8c8</changelog>
  <changelog author="tiwai@suse.de" date="1690027200">- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp
  (git-fixes).
- ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
  (git-fixes).
- fbdev: imxfb: warn about invalid left/right margin (git-fixes).
- commit 61676e6</changelog>
  <changelog author="tiwai@suse.de" date="1690027201">- ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops
  (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
- commit 61a595d</changelog>
  <changelog author="tiwai@suse.de" date="1690027202">- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component
  remove (git-fixes).
- ASoC: codecs: wcd934x: fix resource leaks on component remove
  (git-fixes).
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
  (git-fixes).
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR
  (git-fixes).
- ASoC: codecs: wcd938x: fix soundwire initialisation race
  (git-fixes).
- ASoC: codecs: wcd938x: fix codec initialisation race
  (git-fixes).
- ASoC: tegra: Fix ADX byte map (git-fixes).
- ASoC: tegra: Fix AMX byte map (git-fixes).
- commit 2c27c0a</changelog>
  <changelog author="ailiop@suse.com" date="1690027203">- xfs: run callbacks before waking waiters in
  xlog_state_shutdown_callbacks (bsc#1211811).
- commit 602a6b0</changelog>
  <changelog author="ailiop@suse.com" date="1690027204">- xfs: wait iclog complete before tearing down AIL (bsc#1211811).
- commit a2d37c4</changelog>
  <changelog author="tiwai@suse.de" date="1690200000">- drm/atomic: Fix potential use-after-free in nonblocking commits
  (git-fixes).
- pinctrl: amd: Only use special debounce behavior for GPIO 0
  (git-fixes).
- drm/amdgpu: avoid restore process run into dead loop
  (git-fixes).
- i2c: xiic: Don't try to handle more interrupt events after error
  (git-fixes).
- drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes).
- drm/amdgpu: fix clearing mappings for BOs that are always
  valid in VM (git-fixes).
- USB: serial: option: add LARA-R6 01B PIDs (git-fixes).
- xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).
- xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
  (git-fixes).
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
  (git-fixes).
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
  (git-fixes).
- pinctrl: amd: Fix mistake in handling clearing pins at startup
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
  (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring
  on ADM1272 (git-fixes).
- selftests: rtnetlink: remove netdevsim device after ipsec
  offload test (git-fixes).
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev
  rename (git-fixes).
- mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).
- mmc: sdhci: fix DMA configure compatibility issue when 64bit
  DMA mode is used (git-fixes).
- kselftest: vDSO: Fix accumulation of uninitialized ret when
  CLOCK_REALTIME is undefined (git-fixes).
- ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error
  (git-fixes).
- crypto: qat - Use helper to set reqsize (git-fixes).
- crypto: kpp - Add helper to set reqsize (git-fixes).
- wifi: ray_cs: Drop useless status variable in parse_addr()
  (git-fixes).
- wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes).
- hwmon: (adm1275) Allow setting sample averaging (git-fixes).
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in
  xiic_process() (git-fixes).
- wl3501_cs: use eth_hw_addr_set() (git-fixes).
- commit 87a543d</changelog>
  <changelog author="tiwai@suse.de" date="1690200001">- usb: dwc2: platform: Improve error reporting for problems
  during .remove() (git-fixes).
- Refresh
  patches.suse/usb-dwc2-Fix-some-error-handling-paths.patch.
- commit c99cdac</changelog>
  <changelog author="tiwai@suse.de" date="1690200002">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 01f0700</changelog>
  <changelog author="tiwai@suse.de" date="1690200003">- pinctrl: amd: Detect internal GPIO0 debounce handling
  (git-fixes).
- commit 2209e7e</changelog>
  <changelog author="nmorey@suse.com" date="1690200004">- IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes)
- commit cb2f513</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 28a2488</changelog>
</package>
<package pkgid="7cab356f0e8b0448e3a12b59a2b9a5a3afb48f39135b658eee897c9b8efbeabf" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.74.1"/>
  <changelog author="ailiop@suse.com" date="1689940800">- xfs: separate out log shutdown callback processing
  (bsc#1211811).
- commit 8739ead</changelog>
  <changelog author="ailiop@suse.com" date="1689940801">- xfs: don't run shutdown callbacks on active iclogs
  (bsc#1211811).
- Refresh patches.suse/xfs-pass-a-CIL-context-to-xlog_write.patch.
- commit bbe5b6f</changelog>
  <changelog author="ailiop@suse.com" date="1689940802">- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state()
  (bsc#1211811).
- commit 7d0f707</changelog>
  <changelog author="ailiop@suse.com" date="1689940803">- xfs: order CIL checkpoint start records (bsc#1211811).
- commit 1723063</changelog>
  <changelog author="ailiop@suse.com" date="1689940804">- xfs: AIL needs asynchronous CIL forcing (bsc#1211811).
- commit df27a10</changelog>
  <changelog author="ailiop@suse.com" date="1689940805">- xfs: CIL work is serialised, not pipelined (bsc#1211811).
- commit 41681a2</changelog>
  <changelog author="ailiop@suse.com" date="1689940806">- xfs: move the CIL workqueue to the CIL (bsc#1211811).
- commit bdc017f</changelog>
  <changelog author="ailiop@suse.com" date="1689940807">- xfs: async CIL flushes need pending pushes to be made stable
  (bsc#1211811).
- commit a7a8e83</changelog>
  <changelog author="ailiop@suse.com" date="1689940808">- xfs: drop async cache flushes from CIL commits (bsc#1211811).
- commit b52f8c8</changelog>
  <changelog author="tiwai@suse.de" date="1690027200">- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp
  (git-fixes).
- ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
  (git-fixes).
- fbdev: imxfb: warn about invalid left/right margin (git-fixes).
- commit 61676e6</changelog>
  <changelog author="tiwai@suse.de" date="1690027201">- ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops
  (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
- commit 61a595d</changelog>
  <changelog author="tiwai@suse.de" date="1690027202">- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component
  remove (git-fixes).
- ASoC: codecs: wcd934x: fix resource leaks on component remove
  (git-fixes).
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
  (git-fixes).
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR
  (git-fixes).
- ASoC: codecs: wcd938x: fix soundwire initialisation race
  (git-fixes).
- ASoC: codecs: wcd938x: fix codec initialisation race
  (git-fixes).
- ASoC: tegra: Fix ADX byte map (git-fixes).
- ASoC: tegra: Fix AMX byte map (git-fixes).
- commit 2c27c0a</changelog>
  <changelog author="ailiop@suse.com" date="1690027203">- xfs: run callbacks before waking waiters in
  xlog_state_shutdown_callbacks (bsc#1211811).
- commit 602a6b0</changelog>
  <changelog author="ailiop@suse.com" date="1690027204">- xfs: wait iclog complete before tearing down AIL (bsc#1211811).
- commit a2d37c4</changelog>
  <changelog author="tiwai@suse.de" date="1690200000">- drm/atomic: Fix potential use-after-free in nonblocking commits
  (git-fixes).
- pinctrl: amd: Only use special debounce behavior for GPIO 0
  (git-fixes).
- drm/amdgpu: avoid restore process run into dead loop
  (git-fixes).
- i2c: xiic: Don't try to handle more interrupt events after error
  (git-fixes).
- drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes).
- drm/amdgpu: fix clearing mappings for BOs that are always
  valid in VM (git-fixes).
- USB: serial: option: add LARA-R6 01B PIDs (git-fixes).
- xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).
- xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
  (git-fixes).
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
  (git-fixes).
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
  (git-fixes).
- pinctrl: amd: Fix mistake in handling clearing pins at startup
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
  (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring
  on ADM1272 (git-fixes).
- selftests: rtnetlink: remove netdevsim device after ipsec
  offload test (git-fixes).
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev
  rename (git-fixes).
- mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).
- mmc: sdhci: fix DMA configure compatibility issue when 64bit
  DMA mode is used (git-fixes).
- kselftest: vDSO: Fix accumulation of uninitialized ret when
  CLOCK_REALTIME is undefined (git-fixes).
- ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error
  (git-fixes).
- crypto: qat - Use helper to set reqsize (git-fixes).
- crypto: kpp - Add helper to set reqsize (git-fixes).
- wifi: ray_cs: Drop useless status variable in parse_addr()
  (git-fixes).
- wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes).
- hwmon: (adm1275) Allow setting sample averaging (git-fixes).
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in
  xiic_process() (git-fixes).
- wl3501_cs: use eth_hw_addr_set() (git-fixes).
- commit 87a543d</changelog>
  <changelog author="tiwai@suse.de" date="1690200001">- usb: dwc2: platform: Improve error reporting for problems
  during .remove() (git-fixes).
- Refresh
  patches.suse/usb-dwc2-Fix-some-error-handling-paths.patch.
- commit c99cdac</changelog>
  <changelog author="tiwai@suse.de" date="1690200002">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 01f0700</changelog>
  <changelog author="tiwai@suse.de" date="1690200003">- pinctrl: amd: Detect internal GPIO0 debounce handling
  (git-fixes).
- commit 2209e7e</changelog>
  <changelog author="nmorey@suse.com" date="1690200004">- IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes)
- commit cb2f513</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 28a2488</changelog>
</package>
<package pkgid="8db92d96ccf7a9d530cf48fc111d3e997b7e7d6e6edbca20e3f92c4aa956e2ea" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.74.1"/>
  <changelog author="ailiop@suse.com" date="1689940800">- xfs: separate out log shutdown callback processing
  (bsc#1211811).
- commit 8739ead</changelog>
  <changelog author="ailiop@suse.com" date="1689940801">- xfs: don't run shutdown callbacks on active iclogs
  (bsc#1211811).
- Refresh patches.suse/xfs-pass-a-CIL-context-to-xlog_write.patch.
- commit bbe5b6f</changelog>
  <changelog author="ailiop@suse.com" date="1689940802">- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state()
  (bsc#1211811).
- commit 7d0f707</changelog>
  <changelog author="ailiop@suse.com" date="1689940803">- xfs: order CIL checkpoint start records (bsc#1211811).
- commit 1723063</changelog>
  <changelog author="ailiop@suse.com" date="1689940804">- xfs: AIL needs asynchronous CIL forcing (bsc#1211811).
- commit df27a10</changelog>
  <changelog author="ailiop@suse.com" date="1689940805">- xfs: CIL work is serialised, not pipelined (bsc#1211811).
- commit 41681a2</changelog>
  <changelog author="ailiop@suse.com" date="1689940806">- xfs: move the CIL workqueue to the CIL (bsc#1211811).
- commit bdc017f</changelog>
  <changelog author="ailiop@suse.com" date="1689940807">- xfs: async CIL flushes need pending pushes to be made stable
  (bsc#1211811).
- commit a7a8e83</changelog>
  <changelog author="ailiop@suse.com" date="1689940808">- xfs: drop async cache flushes from CIL commits (bsc#1211811).
- commit b52f8c8</changelog>
  <changelog author="tiwai@suse.de" date="1690027200">- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp
  (git-fixes).
- ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
  (git-fixes).
- fbdev: imxfb: warn about invalid left/right margin (git-fixes).
- commit 61676e6</changelog>
  <changelog author="tiwai@suse.de" date="1690027201">- ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops
  (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
- commit 61a595d</changelog>
  <changelog author="tiwai@suse.de" date="1690027202">- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component
  remove (git-fixes).
- ASoC: codecs: wcd934x: fix resource leaks on component remove
  (git-fixes).
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
  (git-fixes).
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR
  (git-fixes).
- ASoC: codecs: wcd938x: fix soundwire initialisation race
  (git-fixes).
- ASoC: codecs: wcd938x: fix codec initialisation race
  (git-fixes).
- ASoC: tegra: Fix ADX byte map (git-fixes).
- ASoC: tegra: Fix AMX byte map (git-fixes).
- commit 2c27c0a</changelog>
  <changelog author="ailiop@suse.com" date="1690027203">- xfs: run callbacks before waking waiters in
  xlog_state_shutdown_callbacks (bsc#1211811).
- commit 602a6b0</changelog>
  <changelog author="ailiop@suse.com" date="1690027204">- xfs: wait iclog complete before tearing down AIL (bsc#1211811).
- commit a2d37c4</changelog>
  <changelog author="tiwai@suse.de" date="1690200000">- drm/atomic: Fix potential use-after-free in nonblocking commits
  (git-fixes).
- pinctrl: amd: Only use special debounce behavior for GPIO 0
  (git-fixes).
- drm/amdgpu: avoid restore process run into dead loop
  (git-fixes).
- i2c: xiic: Don't try to handle more interrupt events after error
  (git-fixes).
- drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes).
- drm/amdgpu: fix clearing mappings for BOs that are always
  valid in VM (git-fixes).
- USB: serial: option: add LARA-R6 01B PIDs (git-fixes).
- xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).
- xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
  (git-fixes).
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
  (git-fixes).
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
  (git-fixes).
- pinctrl: amd: Fix mistake in handling clearing pins at startup
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
  (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring
  on ADM1272 (git-fixes).
- selftests: rtnetlink: remove netdevsim device after ipsec
  offload test (git-fixes).
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev
  rename (git-fixes).
- mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).
- mmc: sdhci: fix DMA configure compatibility issue when 64bit
  DMA mode is used (git-fixes).
- kselftest: vDSO: Fix accumulation of uninitialized ret when
  CLOCK_REALTIME is undefined (git-fixes).
- ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error
  (git-fixes).
- crypto: qat - Use helper to set reqsize (git-fixes).
- crypto: kpp - Add helper to set reqsize (git-fixes).
- wifi: ray_cs: Drop useless status variable in parse_addr()
  (git-fixes).
- wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes).
- hwmon: (adm1275) Allow setting sample averaging (git-fixes).
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in
  xiic_process() (git-fixes).
- wl3501_cs: use eth_hw_addr_set() (git-fixes).
- commit 87a543d</changelog>
  <changelog author="tiwai@suse.de" date="1690200001">- usb: dwc2: platform: Improve error reporting for problems
  during .remove() (git-fixes).
- Refresh
  patches.suse/usb-dwc2-Fix-some-error-handling-paths.patch.
- commit c99cdac</changelog>
  <changelog author="tiwai@suse.de" date="1690200002">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 01f0700</changelog>
  <changelog author="tiwai@suse.de" date="1690200003">- pinctrl: amd: Detect internal GPIO0 debounce handling
  (git-fixes).
- commit 2209e7e</changelog>
  <changelog author="nmorey@suse.com" date="1690200004">- IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes)
- commit cb2f513</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 28a2488</changelog>
</package>
<package pkgid="c69cb686fbb463c486161127721cf321c11e9979f9558af585819a67e6d40f3e" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.74.1"/>
  <changelog author="ailiop@suse.com" date="1689940800">- xfs: separate out log shutdown callback processing
  (bsc#1211811).
- commit 8739ead</changelog>
  <changelog author="ailiop@suse.com" date="1689940801">- xfs: don't run shutdown callbacks on active iclogs
  (bsc#1211811).
- Refresh patches.suse/xfs-pass-a-CIL-context-to-xlog_write.patch.
- commit bbe5b6f</changelog>
  <changelog author="ailiop@suse.com" date="1689940802">- xfs: attach iclog callbacks in xlog_cil_set_ctx_write_state()
  (bsc#1211811).
- commit 7d0f707</changelog>
  <changelog author="ailiop@suse.com" date="1689940803">- xfs: order CIL checkpoint start records (bsc#1211811).
- commit 1723063</changelog>
  <changelog author="ailiop@suse.com" date="1689940804">- xfs: AIL needs asynchronous CIL forcing (bsc#1211811).
- commit df27a10</changelog>
  <changelog author="ailiop@suse.com" date="1689940805">- xfs: CIL work is serialised, not pipelined (bsc#1211811).
- commit 41681a2</changelog>
  <changelog author="ailiop@suse.com" date="1689940806">- xfs: move the CIL workqueue to the CIL (bsc#1211811).
- commit bdc017f</changelog>
  <changelog author="ailiop@suse.com" date="1689940807">- xfs: async CIL flushes need pending pushes to be made stable
  (bsc#1211811).
- commit a7a8e83</changelog>
  <changelog author="ailiop@suse.com" date="1689940808">- xfs: drop async cache flushes from CIL commits (bsc#1211811).
- commit b52f8c8</changelog>
  <changelog author="tiwai@suse.de" date="1690027200">- ALSA: hda/realtek: Fix generic fixup definition for cs35l41 amp
  (git-fixes).
- ALSA: hda/realtek - remove 3k pull low procedure (git-fixes).
- fbdev: au1200fb: Fix missing IRQ check in au1200fb_drv_probe
  (git-fixes).
- fbdev: imxfb: warn about invalid left/right margin (git-fixes).
- commit 61676e6</changelog>
  <changelog author="tiwai@suse.de" date="1690027201">- ALSA: hda/realtek: Add support for DELL Oasis 13/14/16 laptops
  (git-fixes).
- ALSA: hda/realtek: Enable Mute LED on HP Laptop 15s-eq2xxx
  (git-fixes).
- ALSA: hda/realtek: Add quirk for Clevo NS70AU (git-fixes).
- commit 61a595d</changelog>
  <changelog author="tiwai@suse.de" date="1690027202">- ASoC: codecs: wcd-mbhc-v2: fix resource leaks on component
  remove (git-fixes).
- ASoC: codecs: wcd934x: fix resource leaks on component remove
  (git-fixes).
- ASoC: codecs: wcd938x: fix missing clsh ctrl error handling
  (git-fixes).
- ASoC: codecs: wcd938x: fix dB range for HPHL and HPHR
  (git-fixes).
- ASoC: codecs: wcd938x: fix soundwire initialisation race
  (git-fixes).
- ASoC: codecs: wcd938x: fix codec initialisation race
  (git-fixes).
- ASoC: tegra: Fix ADX byte map (git-fixes).
- ASoC: tegra: Fix AMX byte map (git-fixes).
- commit 2c27c0a</changelog>
  <changelog author="ailiop@suse.com" date="1690027203">- xfs: run callbacks before waking waiters in
  xlog_state_shutdown_callbacks (bsc#1211811).
- commit 602a6b0</changelog>
  <changelog author="ailiop@suse.com" date="1690027204">- xfs: wait iclog complete before tearing down AIL (bsc#1211811).
- commit a2d37c4</changelog>
  <changelog author="tiwai@suse.de" date="1690200000">- drm/atomic: Fix potential use-after-free in nonblocking commits
  (git-fixes).
- pinctrl: amd: Only use special debounce behavior for GPIO 0
  (git-fixes).
- drm/amdgpu: avoid restore process run into dead loop
  (git-fixes).
- i2c: xiic: Don't try to handle more interrupt events after error
  (git-fixes).
- drm/amd/display: Correct `DMUB_FW_VERSION` macro (git-fixes).
- drm/amdgpu: fix clearing mappings for BOs that are always
  valid in VM (git-fixes).
- USB: serial: option: add LARA-R6 01B PIDs (git-fixes).
- xhci: Show ZHAOXIN xHCI root hub speed correctly (git-fixes).
- xhci: Fix TRB prefetch issue of ZHAOXIN hosts (git-fixes).
- xhci: Fix resume issue of some ZHAOXIN hosts (git-fixes).
- tty: serial: fsl_lpuart: add earlycon for imx8ulp platform
  (git-fixes).
- PCI: Add function 1 DMA alias quirk for Marvell 88SE9235
  (git-fixes).
- PCI/PM: Avoid putting EloPOS E2/S2/H2 PCIe Ports in D3cold
  (git-fixes).
- pinctrl: amd: Fix mistake in handling clearing pins at startup
  (git-fixes).
- drm/msm/dpu: Set DPU_DATA_HCTL_EN for in INTF_SC7180_MASK
  (git-fixes).
- drm/bridge: tc358768: fix THS_TRAILCNT computation (git-fixes).
- drm/bridge: tc358768: fix THS_ZEROCNT computation (git-fixes).
- drm/bridge: tc358768: fix TCLK_TRAILCNT computation (git-fixes).
- drm/atomic: Allow vblank-enabled + self-refresh "disable"
  (git-fixes).
- drm/bridge: tc358768: Add atomic_get_input_bus_fmts()
  implementation (git-fixes).
- hwmon: (pmbus/adm1275) Fix problems with temperature monitoring
  on ADM1272 (git-fixes).
- selftests: rtnetlink: remove netdevsim device after ipsec
  offload test (git-fixes).
- leds: trigger: netdev: Recheck NETDEV_LED_MODE_LINKUP on dev
  rename (git-fixes).
- mmc: core: disable TRIM on Kingston EMMC04G-M627 (git-fixes).
- mmc: sdhci: fix DMA configure compatibility issue when 64bit
  DMA mode is used (git-fixes).
- kselftest: vDSO: Fix accumulation of uninitialized ret when
  CLOCK_REALTIME is undefined (git-fixes).
- ACPI: utils: Fix acpi_evaluate_dsm_typed() redefinition error
  (git-fixes).
- crypto: qat - Use helper to set reqsize (git-fixes).
- crypto: kpp - Add helper to set reqsize (git-fixes).
- wifi: ray_cs: Drop useless status variable in parse_addr()
  (git-fixes).
- wifi: ray_cs: Utilize strnlen() in parse_addr() (git-fixes).
- hwmon: (adm1275) Allow setting sample averaging (git-fixes).
- i2c: xiic: Defer xiic_wakeup() and __xiic_start_xfer() in
  xiic_process() (git-fixes).
- wl3501_cs: use eth_hw_addr_set() (git-fixes).
- commit 87a543d</changelog>
  <changelog author="tiwai@suse.de" date="1690200001">- usb: dwc2: platform: Improve error reporting for problems
  during .remove() (git-fixes).
- Refresh
  patches.suse/usb-dwc2-Fix-some-error-handling-paths.patch.
- commit c99cdac</changelog>
  <changelog author="tiwai@suse.de" date="1690200002">- drm/msm/disp/dpu: get timing engine status from intf status
  register (git-fixes).
- Refresh
  patches.suse/drm-msm-dpu-Remove-duplicate-register-defines-from-I.patch.
- commit 01f0700</changelog>
  <changelog author="tiwai@suse.de" date="1690200003">- pinctrl: amd: Detect internal GPIO0 debounce handling
  (git-fixes).
- commit 2209e7e</changelog>
  <changelog author="nmorey@suse.com" date="1690200004">- IB/hfi1: Use bitmap_zalloc() when applicable (git-fixes)
- commit cb2f513</changelog>
  <changelog author="vbabka@suse.cz" date="1690459200">- Delete patches.suse/memcg-drop-kmem-limit_in_bytes.patch.
  Drop the patch in order to fix bsc#1213705.
- commit 28a2488</changelog>
</package>
<package pkgid="cfbb858a293a7a9c08bd87baf21fcb11f3e880c4ad0d4f050e0866d227934ad1" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.81.1"/>
  <changelog author="tiwai@suse.de" date="1690804800">- Drop the recent USB gadget fix patches
  The recent USB gadget fix patches look dubious and likely leading to
  locking problem.  Drop them for now until we get the proper backports
  Deleted:
  patches.suse/usb-gadget-core-remove-unbalanced-mutex_unlock-in-us.patch
  patches.suse/usb-gadget-udc-core-Offload-usb_udc_vbus_handler-pro.patch
  patches.suse/usb-gadget-udc-core-Prevent-soft_connect_store-race.patch
- commit d9bbe1b</changelog>
  <changelog author="tiwai@suse.de" date="1690891200">- bpf: add missing header file include (bsc#1211738
  CVE-2023-0459).
- commit 1ccaaad</changelog>
  <changelog author="tiwai@suse.de" date="1690891201">- Update config files: set CONFIG_GDS_FORCE_MITIGATION=n
- commit f04be94</changelog>
  <changelog author="iivanov@suse.de" date="1690891202">- KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620)
- commit 222f2a2</changelog>
  <changelog author="lhenriques@suse.de" date="1690891203">- libceph: harden msgr2.1 frame segment length checks
  (bsc#1213857).
- ceph: don't let check_caps skip sending responses for revoke
  msgs (bsc#1213856).
- commit 9052bbe</changelog>
  <changelog author="mfranc@suse.cz" date="1690891204">- s390/decompressor: specify __decompress() buf len to avoid
  overflow (git-fixes bsc#1213863).
- commit 59015c6</changelog>
  <changelog author="mfranc@suse.cz" date="1690891205">- KVM: s390: pv: fix index value of replaced ASCE (git-fixes
  bsc#1213867).
- commit e789a10</changelog>
  <changelog author="mfranc@suse.cz" date="1690891206">- s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870).
- commit 66f8c8e</changelog>
  <changelog author="mfranc@suse.cz" date="1690891207">- blacklist.conf: has non-trivial dependencies
- commit 0c7dbe0</changelog>
  <changelog author="tiwai@suse.de" date="1690891208">- Move upstreamed sound patch into sorted sectoin
- commit 8a29738</changelog>
  <changelog author="mfranc@suse.cz" date="1690891209">- s390/ipl: add missing intersection check to ipl_report handling
  (git-fixes bsc#1213871).
- commit 8806556</changelog>
  <changelog author="mfranc@suse.cz" date="1690891210">- s390: introduce nospec_uses_trampoline() (git-fixes
  bsc#1213870).
- commit c2ccf75</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- can: af_can: fix NULL pointer dereference in can_rcv_filter
  (bsc#1210627 CVE-2023-2166).
- commit e89fee8</changelog>
  <changelog author="jlee@suse.com" date="1690977601">- relayfs: fix out-of-bounds access in relay_file_read
  (bsc#1212502 CVE-2023-3268).
- commit 9c2a6e6</changelog>
  <changelog author="oneukum@suse.com" date="1690977602">- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  (git-fixes).
- commit 0922201</changelog>
  <changelog author="oneukum@suse.com" date="1690977603">- Input: iqs269a - do not poll during suspend or resume
  (git-fixes).
- commit 467fdbf</changelog>
  <changelog author="oneukum@suse.com" date="1690977604">- Input: iqs269a - do not poll during ATI (git-fixes).
- commit 5bdf465</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150400">- Update config files.
  We want SRSO mitigation on by default
- commit acc813b</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150401">- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  Handle the newly added SBPB feature correctly when run in hypervisor
  context and interept an MSR write.
- commit ef9889a</changelog>
  <changelog author="nik.borisov@suse.com" date="1691496000">- x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569).
- commit 90a74a8</changelog>
</package>
<package pkgid="073af7735fee2a8243883c9e1c81b27d3d0cd83d5843c6efb3957b3d17e18da1" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.81.1"/>
  <changelog author="tiwai@suse.de" date="1690804800">- Drop the recent USB gadget fix patches
  The recent USB gadget fix patches look dubious and likely leading to
  locking problem.  Drop them for now until we get the proper backports
  Deleted:
  patches.suse/usb-gadget-core-remove-unbalanced-mutex_unlock-in-us.patch
  patches.suse/usb-gadget-udc-core-Offload-usb_udc_vbus_handler-pro.patch
  patches.suse/usb-gadget-udc-core-Prevent-soft_connect_store-race.patch
- commit d9bbe1b</changelog>
  <changelog author="tiwai@suse.de" date="1690891200">- bpf: add missing header file include (bsc#1211738
  CVE-2023-0459).
- commit 1ccaaad</changelog>
  <changelog author="tiwai@suse.de" date="1690891201">- Update config files: set CONFIG_GDS_FORCE_MITIGATION=n
- commit f04be94</changelog>
  <changelog author="iivanov@suse.de" date="1690891202">- KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620)
- commit 222f2a2</changelog>
  <changelog author="lhenriques@suse.de" date="1690891203">- libceph: harden msgr2.1 frame segment length checks
  (bsc#1213857).
- ceph: don't let check_caps skip sending responses for revoke
  msgs (bsc#1213856).
- commit 9052bbe</changelog>
  <changelog author="mfranc@suse.cz" date="1690891204">- s390/decompressor: specify __decompress() buf len to avoid
  overflow (git-fixes bsc#1213863).
- commit 59015c6</changelog>
  <changelog author="mfranc@suse.cz" date="1690891205">- KVM: s390: pv: fix index value of replaced ASCE (git-fixes
  bsc#1213867).
- commit e789a10</changelog>
  <changelog author="mfranc@suse.cz" date="1690891206">- s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870).
- commit 66f8c8e</changelog>
  <changelog author="mfranc@suse.cz" date="1690891207">- blacklist.conf: has non-trivial dependencies
- commit 0c7dbe0</changelog>
  <changelog author="tiwai@suse.de" date="1690891208">- Move upstreamed sound patch into sorted sectoin
- commit 8a29738</changelog>
  <changelog author="mfranc@suse.cz" date="1690891209">- s390/ipl: add missing intersection check to ipl_report handling
  (git-fixes bsc#1213871).
- commit 8806556</changelog>
  <changelog author="mfranc@suse.cz" date="1690891210">- s390: introduce nospec_uses_trampoline() (git-fixes
  bsc#1213870).
- commit c2ccf75</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- can: af_can: fix NULL pointer dereference in can_rcv_filter
  (bsc#1210627 CVE-2023-2166).
- commit e89fee8</changelog>
  <changelog author="jlee@suse.com" date="1690977601">- relayfs: fix out-of-bounds access in relay_file_read
  (bsc#1212502 CVE-2023-3268).
- commit 9c2a6e6</changelog>
  <changelog author="oneukum@suse.com" date="1690977602">- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  (git-fixes).
- commit 0922201</changelog>
  <changelog author="oneukum@suse.com" date="1690977603">- Input: iqs269a - do not poll during suspend or resume
  (git-fixes).
- commit 467fdbf</changelog>
  <changelog author="oneukum@suse.com" date="1690977604">- Input: iqs269a - do not poll during ATI (git-fixes).
- commit 5bdf465</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150400">- Update config files.
  We want SRSO mitigation on by default
- commit acc813b</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150401">- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  Handle the newly added SBPB feature correctly when run in hypervisor
  context and interept an MSR write.
- commit ef9889a</changelog>
  <changelog author="nik.borisov@suse.com" date="1691496000">- x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569).
- commit 90a74a8</changelog>
</package>
<package pkgid="5d88cf8b51e6b738f4d510960e53888cb0c0083001be6051b99f03206b7a375f" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.81.1"/>
  <changelog author="tiwai@suse.de" date="1690804800">- Drop the recent USB gadget fix patches
  The recent USB gadget fix patches look dubious and likely leading to
  locking problem.  Drop them for now until we get the proper backports
  Deleted:
  patches.suse/usb-gadget-core-remove-unbalanced-mutex_unlock-in-us.patch
  patches.suse/usb-gadget-udc-core-Offload-usb_udc_vbus_handler-pro.patch
  patches.suse/usb-gadget-udc-core-Prevent-soft_connect_store-race.patch
- commit d9bbe1b</changelog>
  <changelog author="tiwai@suse.de" date="1690891200">- bpf: add missing header file include (bsc#1211738
  CVE-2023-0459).
- commit 1ccaaad</changelog>
  <changelog author="tiwai@suse.de" date="1690891201">- Update config files: set CONFIG_GDS_FORCE_MITIGATION=n
- commit f04be94</changelog>
  <changelog author="iivanov@suse.de" date="1690891202">- KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620)
- commit 222f2a2</changelog>
  <changelog author="lhenriques@suse.de" date="1690891203">- libceph: harden msgr2.1 frame segment length checks
  (bsc#1213857).
- ceph: don't let check_caps skip sending responses for revoke
  msgs (bsc#1213856).
- commit 9052bbe</changelog>
  <changelog author="mfranc@suse.cz" date="1690891204">- s390/decompressor: specify __decompress() buf len to avoid
  overflow (git-fixes bsc#1213863).
- commit 59015c6</changelog>
  <changelog author="mfranc@suse.cz" date="1690891205">- KVM: s390: pv: fix index value of replaced ASCE (git-fixes
  bsc#1213867).
- commit e789a10</changelog>
  <changelog author="mfranc@suse.cz" date="1690891206">- s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870).
- commit 66f8c8e</changelog>
  <changelog author="mfranc@suse.cz" date="1690891207">- blacklist.conf: has non-trivial dependencies
- commit 0c7dbe0</changelog>
  <changelog author="tiwai@suse.de" date="1690891208">- Move upstreamed sound patch into sorted sectoin
- commit 8a29738</changelog>
  <changelog author="mfranc@suse.cz" date="1690891209">- s390/ipl: add missing intersection check to ipl_report handling
  (git-fixes bsc#1213871).
- commit 8806556</changelog>
  <changelog author="mfranc@suse.cz" date="1690891210">- s390: introduce nospec_uses_trampoline() (git-fixes
  bsc#1213870).
- commit c2ccf75</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- can: af_can: fix NULL pointer dereference in can_rcv_filter
  (bsc#1210627 CVE-2023-2166).
- commit e89fee8</changelog>
  <changelog author="jlee@suse.com" date="1690977601">- relayfs: fix out-of-bounds access in relay_file_read
  (bsc#1212502 CVE-2023-3268).
- commit 9c2a6e6</changelog>
  <changelog author="oneukum@suse.com" date="1690977602">- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  (git-fixes).
- commit 0922201</changelog>
  <changelog author="oneukum@suse.com" date="1690977603">- Input: iqs269a - do not poll during suspend or resume
  (git-fixes).
- commit 467fdbf</changelog>
  <changelog author="oneukum@suse.com" date="1690977604">- Input: iqs269a - do not poll during ATI (git-fixes).
- commit 5bdf465</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150400">- Update config files.
  We want SRSO mitigation on by default
- commit acc813b</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150401">- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  Handle the newly added SBPB feature correctly when run in hypervisor
  context and interept an MSR write.
- commit ef9889a</changelog>
  <changelog author="nik.borisov@suse.com" date="1691496000">- x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569).
- commit 90a74a8</changelog>
</package>
<package pkgid="77cb7e7093474af5d9ab63799baa0d37c51cd45da3b6fd80354a571aa92ff59b" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.81.1"/>
  <changelog author="tiwai@suse.de" date="1690804800">- Drop the recent USB gadget fix patches
  The recent USB gadget fix patches look dubious and likely leading to
  locking problem.  Drop them for now until we get the proper backports
  Deleted:
  patches.suse/usb-gadget-core-remove-unbalanced-mutex_unlock-in-us.patch
  patches.suse/usb-gadget-udc-core-Offload-usb_udc_vbus_handler-pro.patch
  patches.suse/usb-gadget-udc-core-Prevent-soft_connect_store-race.patch
- commit d9bbe1b</changelog>
  <changelog author="tiwai@suse.de" date="1690891200">- bpf: add missing header file include (bsc#1211738
  CVE-2023-0459).
- commit 1ccaaad</changelog>
  <changelog author="tiwai@suse.de" date="1690891201">- Update config files: set CONFIG_GDS_FORCE_MITIGATION=n
- commit f04be94</changelog>
  <changelog author="iivanov@suse.de" date="1690891202">- KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620)
- commit 222f2a2</changelog>
  <changelog author="lhenriques@suse.de" date="1690891203">- libceph: harden msgr2.1 frame segment length checks
  (bsc#1213857).
- ceph: don't let check_caps skip sending responses for revoke
  msgs (bsc#1213856).
- commit 9052bbe</changelog>
  <changelog author="mfranc@suse.cz" date="1690891204">- s390/decompressor: specify __decompress() buf len to avoid
  overflow (git-fixes bsc#1213863).
- commit 59015c6</changelog>
  <changelog author="mfranc@suse.cz" date="1690891205">- KVM: s390: pv: fix index value of replaced ASCE (git-fixes
  bsc#1213867).
- commit e789a10</changelog>
  <changelog author="mfranc@suse.cz" date="1690891206">- s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870).
- commit 66f8c8e</changelog>
  <changelog author="mfranc@suse.cz" date="1690891207">- blacklist.conf: has non-trivial dependencies
- commit 0c7dbe0</changelog>
  <changelog author="tiwai@suse.de" date="1690891208">- Move upstreamed sound patch into sorted sectoin
- commit 8a29738</changelog>
  <changelog author="mfranc@suse.cz" date="1690891209">- s390/ipl: add missing intersection check to ipl_report handling
  (git-fixes bsc#1213871).
- commit 8806556</changelog>
  <changelog author="mfranc@suse.cz" date="1690891210">- s390: introduce nospec_uses_trampoline() (git-fixes
  bsc#1213870).
- commit c2ccf75</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- can: af_can: fix NULL pointer dereference in can_rcv_filter
  (bsc#1210627 CVE-2023-2166).
- commit e89fee8</changelog>
  <changelog author="jlee@suse.com" date="1690977601">- relayfs: fix out-of-bounds access in relay_file_read
  (bsc#1212502 CVE-2023-3268).
- commit 9c2a6e6</changelog>
  <changelog author="oneukum@suse.com" date="1690977602">- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  (git-fixes).
- commit 0922201</changelog>
  <changelog author="oneukum@suse.com" date="1690977603">- Input: iqs269a - do not poll during suspend or resume
  (git-fixes).
- commit 467fdbf</changelog>
  <changelog author="oneukum@suse.com" date="1690977604">- Input: iqs269a - do not poll during ATI (git-fixes).
- commit 5bdf465</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150400">- Update config files.
  We want SRSO mitigation on by default
- commit acc813b</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150401">- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  Handle the newly added SBPB feature correctly when run in hypervisor
  context and interept an MSR write.
- commit ef9889a</changelog>
  <changelog author="nik.borisov@suse.com" date="1691496000">- x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569).
- commit 90a74a8</changelog>
</package>
<package pkgid="abd28deb8129e9ec281557252e6b3dc34c78e12cf6a5a5e95ee396ced193ca1a" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.84.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- commit e8addea</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- commit dd0f3ab</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- RDMA/hns: Fix port active speed (git-fixes)
- commit f1ca0f2</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828809">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828810">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828811">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828812">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828814">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828815">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828816">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828817">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
</package>
<package pkgid="f2b189b56c2a2f29ea6344da90e4ef9a08d94d973aefd58b6fc886c67eeb4e0f" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.84.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- commit e8addea</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- commit dd0f3ab</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- RDMA/hns: Fix port active speed (git-fixes)
- commit f1ca0f2</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828809">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828810">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828811">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828812">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828814">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828815">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828816">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828817">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
</package>
<package pkgid="14083c0bfe42e9ac34adee58d155c90457ef8b128cc02a994e42f66545a9d2d0" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.84.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- commit e8addea</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- commit dd0f3ab</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- RDMA/hns: Fix port active speed (git-fixes)
- commit f1ca0f2</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828809">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828810">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828811">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828812">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828814">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828815">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828816">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828817">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
</package>
<package pkgid="8706875a3d9d16c5824b66b2713d1b7c737100185629ab911b374d36b549ff18" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.84.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- commit e8addea</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- commit dd0f3ab</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- RDMA/hns: Fix port active speed (git-fixes)
- commit f1ca0f2</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828809">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828810">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828811">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828812">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828814">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828815">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828816">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828817">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
</package>
<package pkgid="fe1203ab9d4295709f53de9da975f588b9f258b6807b65be3c5a93ddfac2ba9c" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.88.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828809">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828810">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828811">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828812">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828814">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="jroedel@suse.de" date="1694520000">- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- commit 834e1c2</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 6271d90</changelog>
  <changelog author="tiwai@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2cab595</changelog>
</package>
<package pkgid="94ad229efc72adb53ede175a8398372529c46d69bbb1a37692f7b2796023a1c7" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.88.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828809">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828810">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828811">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828812">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828814">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="jroedel@suse.de" date="1694520000">- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- commit 834e1c2</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 6271d90</changelog>
  <changelog author="tiwai@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2cab595</changelog>
</package>
<package pkgid="c8c9c6bddf2c4ff5608a21121a1fb177fcb5fdf86f128ad62d644ea8c07efbc9" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.88.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828809">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828810">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828811">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828812">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828814">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="jroedel@suse.de" date="1694520000">- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- commit 834e1c2</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 6271d90</changelog>
  <changelog author="tiwai@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2cab595</changelog>
</package>
<package pkgid="e899398e3316752ee3850aaf1609aee5edb123d2154e74db7568925f9f852d17" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.88.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828809">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828810">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828811">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828812">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828814">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="jroedel@suse.de" date="1694520000">- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- commit 834e1c2</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 6271d90</changelog>
  <changelog author="tiwai@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 2cab595</changelog>
</package>
<package pkgid="825c3e9690d09950154348776511aaefdff04792ca21df8536994634b5b8e10a" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.92.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="733456cf7b0dca27b29814c69945ce2df19c4ebc81ac56202ec177947f2d295d" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.92.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="007cf0f79eed8267142643eb7205ed73274cd5acfd07deb8eb95fdf63c4e8d2c" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.92.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="e3084f36262b4482f628438d0237ecab881e43fa641a82cb95bbe098eec810dc" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.92.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="abfc74c5cf090d1797b945c9c3b7ce1c751ea09ec35fb19e0adebbed619251dd" name="kernel-default" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.97.1"/>
  <changelog author="mgorman@suse.de" date="1697716800">- sched/rt: Fix live lock between select_fallback_rq() and RT push
  (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes
  (sched)).
- commit a2350c1</changelog>
  <changelog author="tiwai@suse.de" date="1697803200">- net: rfkill: gpio: prevent value glitch during probe
  (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
  (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys
  (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn
  (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in
  send_acknowledge() (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane
  bonding (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with
  Intel Maple Ridge (git-fixes).
- Input: powermate - fix use-after-free in
  powermate_config_complete (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- Input: goodix - ensure int GPIO is in input for gpio_count ==
  1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
  (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/amd/display: Don't set dpms_off for seamless boot
  (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl()
  (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
  (git-fixes).
- commit e8f9edc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1697803201">- Fix metadata references
- commit 42e4c9a</changelog>
  <changelog author="jwiesner@suse.de" date="1697803202">- net: sched: fixed barrier to prevent skbuff sticking in qdisc
  backlog (bsc#1216345).
- commit 839637c</changelog>
  <changelog author="jwiesner@suse.de" date="1697803203">- net: sched: add barrier to fix packet stuck problem for lockless
  qdisc (bsc#1216345).
- commit 508758e</changelog>
  <changelog author="jwiesner@suse.de" date="1697803204">- net/sched: fix netdevice reference leaks in
  attach_default_qdiscs() (git-fixes).
- commit 31c27cf</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="tiwai@suse.de" date="1698321600">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321601">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321602">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321604">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408000">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408001">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
</package>
<package pkgid="9c603a52c6f59a8bd37f6b30ae838deee5ce53e8d0f018efe4a3e64b899ca07f" name="kernel-default" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.97.1"/>
  <changelog author="mgorman@suse.de" date="1697716800">- sched/rt: Fix live lock between select_fallback_rq() and RT push
  (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes
  (sched)).
- commit a2350c1</changelog>
  <changelog author="tiwai@suse.de" date="1697803200">- net: rfkill: gpio: prevent value glitch during probe
  (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
  (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys
  (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn
  (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in
  send_acknowledge() (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane
  bonding (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with
  Intel Maple Ridge (git-fixes).
- Input: powermate - fix use-after-free in
  powermate_config_complete (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- Input: goodix - ensure int GPIO is in input for gpio_count ==
  1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
  (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/amd/display: Don't set dpms_off for seamless boot
  (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl()
  (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
  (git-fixes).
- commit e8f9edc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1697803201">- Fix metadata references
- commit 42e4c9a</changelog>
  <changelog author="jwiesner@suse.de" date="1697803202">- net: sched: fixed barrier to prevent skbuff sticking in qdisc
  backlog (bsc#1216345).
- commit 839637c</changelog>
  <changelog author="jwiesner@suse.de" date="1697803203">- net: sched: add barrier to fix packet stuck problem for lockless
  qdisc (bsc#1216345).
- commit 508758e</changelog>
  <changelog author="jwiesner@suse.de" date="1697803204">- net/sched: fix netdevice reference leaks in
  attach_default_qdiscs() (git-fixes).
- commit 31c27cf</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="tiwai@suse.de" date="1698321600">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321601">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321602">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321604">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408000">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408001">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
</package>
<package pkgid="6837ee6e7640360d904a970892435b5f53110b4650d96baf3de4449dca7c21bd" name="kernel-default" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.97.1"/>
  <changelog author="mgorman@suse.de" date="1697716800">- sched/rt: Fix live lock between select_fallback_rq() and RT push
  (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes
  (sched)).
- commit a2350c1</changelog>
  <changelog author="tiwai@suse.de" date="1697803200">- net: rfkill: gpio: prevent value glitch during probe
  (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
  (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys
  (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn
  (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in
  send_acknowledge() (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane
  bonding (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with
  Intel Maple Ridge (git-fixes).
- Input: powermate - fix use-after-free in
  powermate_config_complete (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- Input: goodix - ensure int GPIO is in input for gpio_count ==
  1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
  (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/amd/display: Don't set dpms_off for seamless boot
  (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl()
  (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
  (git-fixes).
- commit e8f9edc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1697803201">- Fix metadata references
- commit 42e4c9a</changelog>
  <changelog author="jwiesner@suse.de" date="1697803202">- net: sched: fixed barrier to prevent skbuff sticking in qdisc
  backlog (bsc#1216345).
- commit 839637c</changelog>
  <changelog author="jwiesner@suse.de" date="1697803203">- net: sched: add barrier to fix packet stuck problem for lockless
  qdisc (bsc#1216345).
- commit 508758e</changelog>
  <changelog author="jwiesner@suse.de" date="1697803204">- net/sched: fix netdevice reference leaks in
  attach_default_qdiscs() (git-fixes).
- commit 31c27cf</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="tiwai@suse.de" date="1698321600">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321601">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321602">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321604">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408000">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408001">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
</package>
<package pkgid="ae5c80665a6e92b86c47ce7014aee662711119f27bb297b1c694c256c728a565" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.97.1"/>
  <changelog author="mgorman@suse.de" date="1697716800">- sched/rt: Fix live lock between select_fallback_rq() and RT push
  (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes
  (sched)).
- commit a2350c1</changelog>
  <changelog author="tiwai@suse.de" date="1697803200">- net: rfkill: gpio: prevent value glitch during probe
  (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
  (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys
  (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn
  (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in
  send_acknowledge() (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane
  bonding (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with
  Intel Maple Ridge (git-fixes).
- Input: powermate - fix use-after-free in
  powermate_config_complete (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- Input: goodix - ensure int GPIO is in input for gpio_count ==
  1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
  (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/amd/display: Don't set dpms_off for seamless boot
  (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl()
  (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
  (git-fixes).
- commit e8f9edc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1697803201">- Fix metadata references
- commit 42e4c9a</changelog>
  <changelog author="jwiesner@suse.de" date="1697803202">- net: sched: fixed barrier to prevent skbuff sticking in qdisc
  backlog (bsc#1216345).
- commit 839637c</changelog>
  <changelog author="jwiesner@suse.de" date="1697803203">- net: sched: add barrier to fix packet stuck problem for lockless
  qdisc (bsc#1216345).
- commit 508758e</changelog>
  <changelog author="jwiesner@suse.de" date="1697803204">- net/sched: fix netdevice reference leaks in
  attach_default_qdiscs() (git-fixes).
- commit 31c27cf</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="tiwai@suse.de" date="1698321600">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321601">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321602">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321604">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408000">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408001">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
</package>
<package pkgid="5b30e1a6cac87563c149d2ec7d07f4ded5f324fc150e4bb82848f7a339ce7411" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.100.2.150400.24.46.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="01f71f11fcca600a7cf41a031db8428ab88df5bcf7ea0dd8414611f770e19471" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.100.2.150400.24.46.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a02cd949fd8975bcb8984cf6697409d474b0a397f133cccb14c10879764e3346" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.100.2.150400.24.46.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="52353fc7caf69e04da0a9a59cccd9751863995ff8c461800a08e7b7f864b53e8" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.103.1.150400.24.48.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="353ce8343874a74497710ae1dda0f19ad44d444255cfbf673e00e9f16e9a69af" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.103.1.150400.24.48.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="65babe45f7251786d2a8fcd658c87fe40ee464169036c6934e5241e88b557fcd" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.103.1.150400.24.48.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="ec32c4d1a6149ac4d50c0cba075a4f7288faee6a5595467ea718fdc86106dffb" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.108.1.150400.24.50.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="845362fc1560a94a205c13192857ff3aa6a547166abc9ac07965667179c3a6aa" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.108.1.150400.24.50.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="79213ff1091062db1f401dc959f0e88c967d16c70787b43363beeb78a83d4370" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.108.1.150400.24.50.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="7d4245dd3a93ab5a159cf502e2f8db280f72f792bc2da3650826f73c16a25d3c" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.111.2.150400.24.52.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="686ce68ee81f306b458edb0297d4528f172e7bb200f294cc93ab7a18dd49fa73" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.111.2.150400.24.52.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a54067c5568973e8b3756f3aa19c457f12e5f4bc7217802b8c1b607b029895d2" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.111.2.150400.24.52.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="e822a0c649c7e6ff13e508b9f066f82f655903083d46567473787621acd7b202" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.116.1.150400.24.54.5"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="5b36552fb2f73dfbff3f5e071761d2eb0c419a09f70f20241cabbd0b4e3a8377" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.116.1.150400.24.54.5"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="289d1e16d66b928ab11bab5c8a8f8a97df262dec403fbf7a2bbec3e0a9e163e5" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.116.1.150400.24.54.5"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="bc6d14f4f234868a36eda7351d7be09204421ba359150ad83134fa5c53b3db5d" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.119.1.150400.24.56.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="610012aae9b701232c2dacd445bff86d071d875eebdda660e7e4c99c2770cb58" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.119.1.150400.24.56.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="1b9840b3f8f34f9ecd051cdec42fa8b226e8050882f0312c2b3f9bb7073be6ae" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.119.1.150400.24.56.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="68b61cdf6042ad0eec2a41baeb7070e3e6ab364a4909ea5c2c31d813881253b1" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1.150400.24.24.3"/>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
</package>
<package pkgid="8af7f965d95b5c2c7b71dc92a7bdc9bc334535a4e9a21eec42237e6ea83b16e3" name="kernel-default-base" arch="s390x">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1.150400.24.24.3"/>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
</package>
<package pkgid="9494d1c9866c1837c67cbd0b5fbecbf1810a94ed48d160f2aab764241f2d21ad" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1.150400.24.24.3"/>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
</package>
<package pkgid="876da6b658f340f0c4fc2375e35f52fcbf9917458ae943c254d7101703910c1f" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.60.1.150400.24.24.3"/>
  <changelog author="fvogt@suse.com" date="1565870400">- Fix wildcard for ip6t_.*</changelog>
  <changelog author="gmoro@suse.com" date="1571054400">- Add Ceph modules (bsc#1149605)</changelog>
  <changelog author="msuchanek@suse.com" date="1572004800">- Add efivarfs required by mokutil (bsc#1154858).</changelog>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
</package>
<package pkgid="a9bc9d325da1c5fc60ecdf7a84fd1be7066d477d8a3c5430eba07aa04579b955" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1.150400.24.27.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="8b6fb35c08d13a0624a883d5c2ec76c76666480481105471a9910e483522d091" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1.150400.24.27.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="74a46a27cfabcee748dc179046d637892967b9ac39da1fdcb51d530fd0347427" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.63.1.150400.24.27.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a339a0913d74d33d0285ab24f4187605f7b75814a80f82609a37c4a49e042c93" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1.150400.24.29.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="2661c8014e747d32271593740f66f407c67e09eb3d94ab11f06c3580ba617ba9" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1.150400.24.29.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="1aa98eaf5e1f71c666fb3d7c8d355dc70cd9b1d2e4a145fa60ced1c14b7be39e" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.66.1.150400.24.29.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a4d2fe8f8a78910c88171c62c20c015fb63e3696e04bf38aba49519a484ee67f" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1.150400.24.31.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="a2218b38bd241072961f5c79313ccd12762013f498d2a2704c7e1ed9a7113e01" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1.150400.24.31.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="f71e674c9a83b067424605daef5d7ee0dd4ebe128189717e4096151719cfed9d" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.69.1.150400.24.31.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="c6adfacbc16fae7b659fdda2986ec82623dea9d307fab87e202046f0390d4745" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.74.1.150400.24.33.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="188406514662d3e0c1e07fbc9eb049ddd2649fd7a9d3c0e86795803eb97e61dd" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.74.1.150400.24.33.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="cc616f7b5446571098420c1232f89865e431da6e4390b2ffb76f1f90d66fd253" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.74.1.150400.24.33.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="7f49ba4c304ee7ad2abfa4eff7e7f1807d1800199af5f72dabceab22983df685" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.81.1.150400.24.35.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="e592467f5cef33c4384621f66d0952e4158a4979d8b058bf60607549f9a133ed" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.81.1.150400.24.35.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="7868fedfb898769b4805fb3d932725c6098507ae91e579fb135ca8d7c19fdc7b" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.81.1.150400.24.35.3"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="93362876c8a00ba85bc2e73dd32a72fcd6d9c9995964b7f978d12462c0bbd27b" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.84.1.150400.24.37.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="ef4631c240d20867fd6df41c80a2210926526e4c5188f508a5c9f178419c9ed3" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.84.1.150400.24.37.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="d09c8380459b76757db4a369ddce4ddd760ddc2898148211643bda25c7ee7f33" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.84.1.150400.24.37.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="ee2a7b28fde1f894d8d833138990a8e2cb17de212aed853cf4718f3d944d3559" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.88.1.150400.24.40.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="11e9c6d83949e44bfc5d69bff2e2e72b065165a62383ae4adcbc312e12ed7a8a" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.88.1.150400.24.40.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="47d3ae070e9809d57783cc59de1586ec089110b128787ea0e7d4bafb745b2e03" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.88.1.150400.24.40.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="8072be5b0c6a03e8ce514d27afdd303d5066e18a5f6e29028179d74fa585c309" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.92.1.150400.24.42.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="7c24d7b6810e0a220c7334cbf8b1d50c88aeb7bf61c63195accc73231c624a23" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.92.1.150400.24.42.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="07ecc4e5013574b3a1ba4943e76885df1b4efeb705dd5af1252f838a8f61b30c" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.92.1.150400.24.42.1"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="f87781b9ef5a87496e8edba2372efb61a87067d3472bcfc1b0c147556fc9c478" name="kernel-default-base" arch="aarch64">
  <version epoch="0" ver="5.14.21" rel="150400.24.97.1.150400.24.44.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="6e1ec1d72b21f995f35a546d8f22c9d2c13a6e073d64236462280d8141a0afaf" name="kernel-default-base" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.24.97.1.150400.24.44.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="c2f0661722b9b7cbea78115c609cd1fb158796d8883766a27d3331aed46a3a3c" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.24.97.1.150400.24.44.2"/>
  <changelog author="gmoro@suse.com" date="1578571200">- Remove iscsi_ibft (bsc#1157460)</changelog>
  <changelog author="fvogt@suse.com" date="1582027200">- Add the brd module, used by the LTP testsuite and tiny</changelog>
  <changelog author="fvogt@suse.com" date="1582804800">- Add tcp_diag, needed by openslp</changelog>
  <changelog author="msuchanek@suse.de" date="1587470400">- Add qemu_fw_cfg needed by ignition (boo#1170069).</changelog>
  <changelog author="fvogt@suse.com" date="1588593600">- Add hardware-specific crc32c implementations (boo#1171065)</changelog>
  <changelog author="msuchanek@suse.com" date="1589803200">- Add usbhid and hid-generic for USB input devices (boo#1167749)</changelog>
  <changelog author="fvogt@suse.com" date="1589976000">- Add vxlan (bsc#1171903)</changelog>
  <changelog author="fvogt@suse.com" date="1601899200">- Add cifs</changelog>
  <changelog author="fvogt@suse.com" date="1602590400">- Create the list of crypto modules dynamically, supersedes hardcoded
  list of crc32 implementations (boo#1177577)</changelog>
  <changelog author="fvogt@suse.com" date="1606392000">- Add wireguard (boo#1179225)</changelog>
  <changelog author="fvogt@suse.com" date="1613044800">- Add modules which got lost when migrating away from supported.conf
  (bsc#1182110):
  * am53c974 had a typo
  * cls_bpf, iscsi_ibft, libahci, libata, openvswitch, sch_ingress
- Also add vport-* modules for Open vSwitch</changelog>
  <changelog author="fvogt@suse.com" date="1613995200">- Add fuse (boo#1182507)</changelog>
  <changelog author="fvogt@suse.com" date="1613995201">- Add squashfs for kiwi installiso support (bsc#1182341)</changelog>
  <changelog author="fvogt@suse.com" date="1622635200">- Add nfsd for nfs server support (boo#1186363 bsc#1089118)</changelog>
  <changelog author="fvogt@suse.com" date="1633089600">- Add nls_utf8 module (boo#1190797)</changelog>
  <changelog author="fvogt@suse.com" date="1646136000">- Add quota modules (bsc#1196585)
- Add nfs layout modules</changelog>
  <changelog author="fvogt@suse.com" date="1646222400">- Add binfmt_misc (boo#1196373)</changelog>
  <changelog author="fvogt@suse.com" date="1665144000">- Add _diag modules for included socket types (boo#1204042)</changelog>
  <changelog author="fvogt@suse.com" date="1680004800">- Add exfat (boo#1208822)</changelog>
  <changelog author="msuchanek@suse.com" date="1682337600">- Do not build on s390 (bsc#1210729)</changelog>
</package>
<package pkgid="f10d17733fe93736ba695d216fa742851420da8d45745e6cc668346f8b0b8237" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="da41d8a6c811e49bfe8f36bc033c1e8b0643dcaba9c2e5e7f92ac0e64d1bf59a" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="185c05a3bdd71d99001e4ed94f7cc0d5e90d42c4cc461ca2d377eba3a8ba16fb" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="c53323d05f2e7f4a42e6d8a1eefbc356f81c86bbd0ae57062f9dd6d98a0a02cf" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="f291bc0ae6b424a45818ef32ae10972964cc59dee500a008dd88c9cb89fef053" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="9509e11f1bf33c0740059c48a15b70a41aa3af28019bf973e3a42c10694559ed" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="e79e687007c0223a9272baa15f0c24625aab23816b7d23649aa74453423a2d41" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="f58fd9f06e32b3fbd0c1e3e79cb29cfca72afb81345f654cb7e8b86816be988f" name="kernel-firmware-all" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="eef8f791b5d198924df8c25ee38e37331be19a95c3317b6f9ee3f3f0ffb47e4f" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="90512519223e99c714ec6fee7cfa4c69c442e52859bbb06161c6cdf79f409bb5" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="460eec85be2ef6e076cdb29d6b3a7eaa1b8f4c53af194575f0eb7d373e354337" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="2d51548ecca4f36ade81e718de9fcb89fbaa2768860a2c65fcf4f1921d8f00d9" name="kernel-firmware-amdgpu" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="4f845979573a4b95d64c618f0e7732a71f1cec88dba9f02a55d3615927bbafe8" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="3566a29e444991b893dea59ee821d9cfcc7b3579f21777405bc419bdeaebc454" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="325e7a4f83062c550a75a4e5400e68c06596ad8b776708b0def6354557d91ae0" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="5926c9c3b53b2f0e590bd32004983821126c0502867abdd61883088d754242f5" name="kernel-firmware-ath10k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="f373e5cfb64812cc75446ad1a1a80533cc82c3247493ee082b9c4d2bb3a241cf" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="972d2c9b7e25b316d16d9d86014082c09a707722c0e5c72717fb40f3356a214e" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="d6ab02b13424171b66abf4518934bd1ab5c893ea667eaee5ddf3999d6c024ad4" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="7dc64c3a4bc89f56caf9a8f49db5ebb115cb18af152ce84cffe429363eae25bb" name="kernel-firmware-ath11k" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="f1980a923178fc2dae5b205da5dd532a993bebe79e34b1a0db7b38f1ace2abe1" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="9f3f86fc26fb44812d4a4f1882d5aaf3f49f0fac58e64766595dc38e3ada5aa6" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="c5a290249c98c2453324dc1be4016e2894eb419e3a7ea71b4985921fd3b32397" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="e1b89f339176f239d839c4750129a37f6ce9aafbda8a0894cc3391bdd4566e89" name="kernel-firmware-atheros" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="18aa6fe8c9026e7f5d242e0fcfb64dfadaeba1ffdc1009cffa1cfbc7ac7a54df" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="c47553b2bd6833365fdc8f579c4517c56bb0770f2a1d3629a48723bcc2969d97" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="5e6113ff85589f88aded480ba8e453c92afe137cfa2c239095b22a1442a56c6e" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="9e4123a05c9c9b4a9b8af951dcdde4f81593359751b8ccaf32f459fa6cde1362" name="kernel-firmware-bluetooth" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="e2404a18303bd004c6a4ca16787efba0f413e161d522ff93894796c50b79ca28" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="6641866ad7ef2fd3edef36e271bf62ab4c4dcb1f2409b81fe6cf9e573c3884e4" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="836c21863129a027982f5047b997ef5991acdd74ca7256b5a93924609ef5d95b" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="1cfe32c1db131cf82f2bc6702bbc3d1aaa19cb9d390350ed631b5a0b8447afa8" name="kernel-firmware-bnx2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="9c2ace2c621dc35d9cd0df74f77b8174d4b17dbe0f37c6c25fb6e181abf01492" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="904c20aa69a8c2cf54b102fa02ae3cf79ee50e39d66ba6341220db094d5b892f" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="45eb25d0fc9fe26de17587e73ef36d011508823e85849d1aeb6b8bd5cc6749a5" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="498661040d14ec1e8fa7bf7fc54a826c75aa202ddf2d915e4f56016e3267d1a5" name="kernel-firmware-brcm" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="df4c3e5076631c1a50351127b3c09443edd626a1d53424c43e9405164b8fbb34" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="4163e08356f9eb05ad9d980caa8dd65a646709eff1095355f47e565f69a0df5a" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="aff748bbd4bd908c683ed9fd35b3b687d420176709e7ec782dd670d8df0ec4e7" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="a395bc158afaa001fd325771a06a69f4d2e335caa2f5908ed0fa3b9e18e6c5c1" name="kernel-firmware-chelsio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="f384ae5629cb1c08252f4ed691ffc221656d6b7a49bad011873f142b181493b9" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="6fb9670037b80801a61b2900876d559e4f70675d9793c786a95218caf5acde1c" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="f4c064bc8ef984e6400f34d9da43e32fff3acdc2963a10e5d40f2146d85f2e1c" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="0753a5e235d52b2c894bfe3b3ed2ac60dff088c49704471d929045cb6a7d575f" name="kernel-firmware-dpaa2" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="b898af7be2d006002f159063fd8503c533dca62e45363941d633da040e8f2efe" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="7f678e01ae373a134f54982b5acf4d809ebbbd56c19818afeeacc610a720a41c" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="153d870972f625610e7b925eca9411ad02f068ac127d457406a0f6fdfd597138" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="859dc3a8a1f75942eeac0d7c42c8b35f1b971cb60ded5c2222d0d94aca362909" name="kernel-firmware-i915" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="d2a1959cae4a6b26528a614552b2501a543e1b266c39e7aa1a9eed0bc9a7c1a0" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="ff5ac8f6035c16b331f591e6f6bceae7d64686eae4763f9ff6069022935a4d30" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="732c8eee6dc6dc3ab15f32cdbda328dbe63b2727fa614b4c8e8ac28dbd8ebc9c" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="d0644dd6de9c30943f354574719409f67ea6cdbfd56a85be1804f5ea82ebbcdb" name="kernel-firmware-intel" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="7e12175947c85907d5afa648c0cc91935dfca6c10b35f45578315dd706885552" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="bff9a9e6bd59f98e2ed26c6cc790e9297b7b25bc2e341cd6ffc4e9b8eb3212de" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="0b4f9069c8b4bd2e330c3a6f49d2d1b97012f6f8e988f61467f457a07bdf9264" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="12347478c20d6021a999cde297d20493348efe7e76d0780d0adaa093d9529bf5" name="kernel-firmware-iwlwifi" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="b6f86da276dade5685f571026d2b144a03f0fb8f6565525df8c9fc99acbd128f" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="6035dbd6e19885868c751a2f4314dc0f33f908077f7ef4221f15b439aa2957f8" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="f0b4182edd27f539682a66a0922c0b066e8ad52a341d18612b8da646d8d55202" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="63153066d2788134d31477b8f5beefb6287919eb888f1526b926c20bba912fd7" name="kernel-firmware-liquidio" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="1ce375a4168288ee806d28e507983f948b93a6563f761fdb8960f2b07b93febc" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="bee4d530a4da6e5059df91cd23c48a772351f5e10d7e34e2520f6b5ae87e4c9c" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="630eb7ba4d59218f50a19bf8312fbec149ade5cf1dd414b7ee9bc315f56d03d3" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="3327935bd3a1a2373177a130e8ac6c4f9c4c286e7ec7c5c4c0a02e69f145ff82" name="kernel-firmware-marvell" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="e63904a4f8785bacfaee9901d85398a9a68baa9ef16fc725df57384def563f85" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="0fcd4d75c61fb2f6a3f84bf022ccb93e73356a812687dff3450c290fe25adc13" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="0fc9ae8d07450b7e19eda025cf522e503f7cdaff4747f7a922dfc2222cda3520" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="44c69654293c44fa9e395ad212fe6102583bdd01881a0fb90ac96832e74d8bf4" name="kernel-firmware-media" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="6bcd52561b856409f0d121c81369215723b9cc819e088df56d415e6aad7b2f8f" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="06d3d79cc6ef6f2a80605e2bcccf1370746a9b504afb0eee76e01b152b1a55b5" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="e745225d78f910f86b8227a349a91fb80531194cf8f91f1e259df781004dd47d" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="0eb62aa27028d1fa77727b6b4f8ce3a6cafab05146aed5ec3c415c9155320f48" name="kernel-firmware-mediatek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="94f53656c776b94691e82620f7f34f72df151cabd9f02c0682f7dd060e224c39" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="70db0daad4d394b6883b6b7f4ff92297d92e61c530790973464a17f613df816e" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="215cabf4024e19bf7abf06f12d7302308bfc87d86f4a6c59b549dc0127a2028f" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="2b576b83d258d2ce6d3065947fb47f13d521ea0ccdec6abb0bd0744a91ee8de2" name="kernel-firmware-mellanox" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="e8d748d4c7a6b4e71dad4dfc36799bd6bfd1c4a34d3ce6d9f9d6d1f8165300a5" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="9262a5e58e381559ce142e6c886fc1b9b942c9d3cbd34b3134688bf94ca31294" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="91ea9a4d7224227a8bc27947093d393b9f50594922225e78c016471f2774e305" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="d82e406e3b26ef93bb12e164038af0957d8de8d8f3be344674743708cbab2622" name="kernel-firmware-mwifiex" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="10719b6e6c6197d5f809155d890152b60384bac866f38cf410647d74797d01e5" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="de78dd02f60f0ab416d38eb7562344fc7a7b03c4db574ba2f1a8691c3fca4098" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="ffa923588fc47c297f93fc4d268a280dcfdfd3c1cdbe4b82f09431c6901ab38c" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="4fa5d17eeb591d6db815fa57a3db48c6b831061d650527bf83e195e280750a15" name="kernel-firmware-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="3f4bc6252f38e46643c4c9ce00b09f5f13eba96449104eb7bcd4ae919336b2d4" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="7fae8e4413b72e28702b10ea711e3cd6c0e5f8d061e85a4978190b722ca3aa99" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="dbf2b8bec94612bf5f89d62f58058764efdc56f6a8665107b73a1899839d66c4" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="16ceb8e1a81f22ae4356d7534aaaf654e95822e2fb302bf85cf07d2f744f0b1a" name="kernel-firmware-nfp" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="e8e21d5a38dc80bcdbcbd746df537a4c2cce56eb91d00d362b2a00dc99c34e32" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="0e954c0353241faf7d63b01249ea860de6be13dbf59dd2f09a47e653dbff637f" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="e3c63618424ba4e38b9170227c3923e2a696f959a0745e186eb2d3b4eda5fb99" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="0849f098da6029b492888dff95f2ae0d8451dcc65567f22ed30470df47c3c764" name="kernel-firmware-nvidia" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="44a1c3c0d5eb6ebdcb2525a8610766e5f5a9401b95106fc3a17a5a43d2ec5640" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="d30db3ca33a724a4beac7203fde495f8830bf6f6cbd2e44369d38d6080d555bb" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="afca1320e1363ad3170c26e22524112e2a7f0c7a0fe0730fef1aa000f9b6c9e8" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="4a6fe8e52ddf769d27f7774fc8c84784b8d16aefc18e89d8147efb1392db4396" name="kernel-firmware-platform" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="46e2a2cec4d194fc70b3aedd2757f26d2b9a2add5a350ffacc473ac8c27e13b4" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="6599019940c7325cd724e81becb7c63fae5c13d803bea4a851532984ba3871b9" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="4c3fd922d4fd0fb331f7d22b0796316392d33c370ec005dacb47c3189e5e8e0c" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="e75d2ff602282f334a54c833689d64fa3d0b8f2cc8692125c0461f1320b2af30" name="kernel-firmware-prestera" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="7971f89538b5261c4938d2b904f819f54834ba0ce119b51dd0963cac416fa80f" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="618d4de4bf2bd307fced144c8695b4104faf0e0cc8e8653752f9f11807f6bd57" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="d6a1145403d5eac9078e5253d2a0cb4083c9077e9ebee10baf135ded15f3e752" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="b1e86c54a71def3bab6e471bfe22ab9557ca9802607336bea35fe5a00c42481a" name="kernel-firmware-qcom" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="b9b6d7acc80c44470076781062249c4bf5483da0d96ee15556893e4612b0a703" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="8a77dd0a4f97df020ca00647b562c74c7e65306a750a714c05de53e1dbf042c1" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="c2f0588f2ad58acf21820d6f97500c1627d59082c2425706fbdd0359615fd2a3" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="babeddb50aea854b72299dc44ecc20c262eb2216a9815b345279dbd05bc1811f" name="kernel-firmware-qlogic" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="c619638e934d9ea83ade7630bb37aafe30983971951c1939573b529ab782b87d" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="c05865100995d15d75b96977d246d8e9f18b9de42a91205eab58e7e147b139fb" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="566acebc51643b98214cee9e832c2884bcc021c394925e4dc02e9b7263a8538b" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="7901d0ec8ff3b651ebe383667574e061174092b122fa74b2c23d9733ed54e3a0" name="kernel-firmware-radeon" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="c19269f74cf217a471cf40be2f63d67639ee2a65481cb3dc32eb0cde5e0f69b8" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="695f69d82ef05fe39a8c1426f1d674aec1a56a8ed56812bfb49719304f83c00e" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="66cce120c54e52d37ea12e15bffbb825c8eb92ca16c96fb68e21e791c7dfca3e" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="eed1aac3f742fdb102c01bb09a593c8d6e91393e756c9cd9fb7377c831c54568" name="kernel-firmware-realtek" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="8583eb82f47aef7f0ba419be0aea67957a634c25ba7c549af2fb43d0c532b9dd" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="7620b5690b3f459988848e134204b46013b4210c81cd6d0dc983f2a7b00114c5" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="bb1a80ed2228b6408f8b1c800b6e9d52c8ea0c15bb970e6054b475a02ea1a0ba" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="01f25449791dabd1f4c1801f097e37435523735fb006c03af18e43961ee0ac87" name="kernel-firmware-serial" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="a38185d813bf02c5acb30bb9327ff463ac3a2c5b85e861ecf7e0a7976110b14e" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="91d35a36d1d281f3316c4ba38d678ee64ac83722a69df3048ad3a6f9de9c6b86" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="f56e9dab12e00def8bdb8214ce304c71f4614d77b21de62b67533af1d3a8a467" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="4a431e6ca03dcde70f500ae24869fb5d77d63c6de399eb239d396fd302c3405e" name="kernel-firmware-sound" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="bb19e43ef8493ce9d6dfd6bd2bab5b6b40d592f52bcdc09d5a45af2b0616f20e" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="0ef21fbf53df0361059d8721ec801a5258be728a1611f025799bb12547a7e622" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="4c9738e3faef6ba650cfd89b1cdf07d30f69b50563074297359a951d98c3832d" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="b1efb17987c45b97af04773fd39f0edeab2486cf84db310927a49b7c06449378" name="kernel-firmware-ti" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="e878d855bc96f5f2378de8bd14c8c3969112b4dac19ec1120978c10e5c70db72" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="7b1b9e2f2be6f1be87c3ac093338647efaa3aa974deb1ce6fdcdc8afc6b0beec" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="574cc694ec13028bd490707e76da21389b6c973cff5ca3364bca53f3fad8c454" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="4dda7d806abed334323490cb9d1ab1658e0fc0ebf2fc9fc951dc850b2380cd1a" name="kernel-firmware-ueagle" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="023b03a34e2d852403aba73c33d3b989ba65f2d0968192b13bc83e806145580a" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.16.1"/>
  <changelog author="tiwai@suse.com" date="1626436800">- Update to version 20210716 (git commit b7c134f0d349):
  * linux-firmware: update NXP 8897/8997 firmware images
  * rtlwifi: de-dupe rtl8723b WiFi firmware
  * rtlwifi: de-dupe rtl8192e WiFi firmware
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * cxgb4: Update firmware to revision 1.26.0.0
  * firmware/i915/guc: Add HuC v7.9.3 for TGL &amp; DG1
  * firmware/i915/guc: Add GuC v62.0.3 for ADL-P
  * firmware/i915/guc: Add GuC v62.0.0 for all platforms
- Make TW packages only installable on post-UsrMerge systems;
  the packages for Leap are found in OBS Kernel:stable:Backport repo,
  instead
- Update aliases from 5.14-rc1</changelog>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
</package>
<package pkgid="3634bceea5f2929edf1e3749bfe7ff42c969ca20fc3a0010e7e5b5c0baf7dd72" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.19.1"/>
  <changelog author="tiwai@suse.com" date="1627041600">- Update to version 20210719 (git commit 5de082d4d0f2):
  * iwlwifi: add ty firmware from Core63-43
- Reduce the LZMA2 dictionary size (bsc#1188662)</changelog>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
</package>
<package pkgid="ae783799c98296b9e9046d0955f165b2f501d4f441e758716a5318480b76082f" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.22.1"/>
  <changelog author="tiwai@suse.com" date="1629115200">- Update to version 20210812 (git commit 24c4a85d8514):
  * amdgpu: revert back to older raven2 sdma firmware
  * amdgpu: revert back to older raven sdma firmware
  * amdgpu: revert back to older picasso sdma firmware
  * amdgpu: add initial vangogh support
  * amdgpu: update vega20 firmware from 21.30
  * amdgpu: update vega12 firmware from 21.30
  * amdgpu: update vega10 firmware from 21.30
  * amdgpu: update renoir firmware from 21.30
  * amdgpu: update raven2 firmware from 21.30
  * amdgpu: update raven firmware from 21.30
  * amdgpu: update polaris12 firmware from 21.30
  * amdgpu: update picasso firmware from 21.30
  * amdgpu: update dimgrey cavefish firmware from 21.30
  * amdgpu: update navy flounder firmware from 21.30
  * amdgpu: update sienna cichlid firmware from 21.30
  * amdgpu: update navi14 firmware from 21.30
  * amdgpu: update navi12 firmware from 21.30
  * amdgpu: update navi10 firmware from 21.30
  * amdgpu: update green sardine firmware from 21.30
  * amdgpu: update arcturus firmware from 21.30
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: add firmware for MT7922
  * QCA : Updated firmware files for WCN3991
  * i915: Add v2.03 DMC for RKL
  * i915: Add v2.12 DMC for TGL
  * qca: Add firmware files for BT chip WCN6750.</changelog>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
</package>
<package pkgid="92629a3147de0e12a48f6c321e37b572f31cd4edfd5db1a09dd61ada155d3c1f" name="kernel-firmware-usb-network" arch="noarch">
  <version epoch="0" ver="20220509" rel="150400.4.25.1"/>
  <changelog author="tiwai@suse.com" date="1630584000">- Update to version 20210901 (git commit 6f5aada830d6):
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_1D69
  * rtl_bt: Update RTL8822C BT UART firmware to 0x05A9_1A4A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x09A9_1A4A
  * Mellanox: Add new mlxsw_spectrum firmware xx.2008.3326
  * iwlwifi: add FW for new So/Gf device type
  * rtl_bt: Update RTL8852A BT USB firmware to 0xD9A9_127B
  * rtl_nic: update firmware of RTL8153C
  * ice: update package file to 1.3.26.0
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1633003200">- Update to version 20210928 (git commit 7a30050592e2):
  * brcm: Add 43455 based AP6255 NVRAM for the ACEPC T8 Mini PC
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * amdgpu: update VCN firmware for dimgrey cavefish
  * amdgpu: update VCN firmware for navy flounder
  * amdgpu: update VCN firmware for sienna cichlid
  * amdgpu: update VCN firmware for vangogh
  * amdgpu: update VCN firmware for renoir
  * amdgpu: update VCN firmware for picasso
  * amdgpu: update VCN firmware for raven2
  * amdgpu: update VCN firmware for raven
  * amdgpu: Add initial firmware for Beige Goby
  * cxgb4: Update firmware to revision 1.26.2.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * qed: Add firmware 8.59.1.0
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * iwlwifi: add FWs for new So device types with multiple RF modules
  * amdgpu: add initial firmware for Yellow Carp
  * i915: Update ADLP DMC v2.12
  * linux-firmware: add frimware for mediatek bluetooth chip (MT7922)
  * linux-firmware: Update AMD SEV firmware (bsc#1186938)
  * Revert "iwlwifi: add FW for new So/Gf device type"
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1635336000">- Update to version 20211027 (git commit 1d00989a6596):
  * linux-firmware: Update AMD cpu microcode
  * QCA: Update Bluetooth firmware for WCN685x
  * bnx2x: Add FW 7.13.20.0
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1006
  * linux-firmware: Update NXP Management Complex firmware to version 10.28.1
  * linux-firmware: update firmware for MT7921 WiFi device
  * rtw89: 8852a: update fw to v0.13.30.0
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
- Update topics and aliases for rtw88 and rtw89</changelog>
  <changelog author="tiwai@suse.com" date="1637064000">- Update to version 20211115 (git commit f5d519563ac9):
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: update raven2 firmware from 21.40
  * amdgpu: update navi14 firmware from 21.40
  * amdgpu: update raven firmware from 21.40
  * amdgpu: update navi12 firmware from 21.40
  * amdgpu: update navi10 firmware from 21.40
  * amdgpu: update vega20 firmware from 21.40
  * amdgpu: update vega12 firmware from 21.40
  * amdgpu: update vega10 firmware from 21.40
  * amdgpu: update picasso firmware from 21.40
  * amdgpu: update vangogh firmware from 21.40
  * amdgpu: update beige goby firmware from 21.40
  * amdgpu: add cyan skillfish firmware from 21.40
  * amdgpu: update dimgrey cavefish firmware from 21.40
  * amdgpu: update green sardine firmware from 21.40
  * amdgpu: update navy flounder firmware from 21.40
  * amdgpu: update renoir firmware from 21.40
  * amdgpu: update arcturus firmware from 21.40
  * amdgpu: update sienna cichlid firmware from 21.40
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBA9_6937
  * iwlwifi: add new FWs from core64-96 release
  * iwlwifi: update 9000-family firmwares to core64-96
  * amdgpu: update VCN firmware for green sardine
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1638360000">- Update to version 20211123 (git commit b0e898fbaf37):
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * amdgpu: update yellow carp dmcub firmware
  * amdgpu: update vangogh DMCUB firmware
  * Update ath10k/QCA6174/hw3.0/board-2.bin
  * mrvl: prestera: Update Marvell Prestera Switchdev v4.0
  * QCA: Add Bluetooth firmware for WCN685x
- Fix the script to adapt ZSTD compressed modules (jsc#SLE-21256)
- Update _service to follow branch main instead
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1641384000">- Update to version 20211229 (git commit 57d6b9507e28):
  * cnm: add chips&amp;media wave521c firmware.
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8822c: Update normal firmware to v9.9.11
  * QCA: Update Bluetooth WCN685x firmware to 2.1.0-00298
  * amdgpu: update green sardine PSP firmware
  * bnx2x: Add FW 7.13.21.0
  * linux-firmware: update frimware for mediatek bluetooth chip (MT7921)
  * linux-firmware: wilc1000: update WILC1000 firmware to v15.4.1
  * rtl_bt: Update RTL8761B BT UART firmware to 0x0CA9_8A6B
  * rtl_bt: Update RTL8761B BT USB firmware to 0x09A9_8A6B
  * cxgb4: Update firmware to revision 1.26.4.0
  * rtw89: 8852a: update fw to v0.13.33.0
  * i915: Add DMC firmware v2.14 for ADL-P
  * QCA: Add Bluetooth default nvm file for WCN685x</changelog>
  <changelog author="tiwai@suse.com" date="1642075200">- Update to version 20220111 (git commit 13dca280f760):
  * linux-firmware: update firmware for MT7915
  * iwlwifi: add new FWs from core63-136 release
  * iwlwifi: add new FWs from core66-88 release
  * iwlwifi: update 9000-family firmwares to core66-88
  * linux-firmware: add firmware for MT7916
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * WHENCE: add missing symlink for NanoPi R1
  * amdgpu: update yellow carp dmcub firmware
  * cxgb4: Update firmware to revision 1.26.6.0
- update aliases from 5.16 final</changelog>
  <changelog author="tiwai@suse.com" date="1642593600">- Update to version 20220119 (git commit 0c6a7b3bf728):
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: update firmware for MT7921 WiFi device
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1232
  * linux-firmware: add marvell CPT firmware images
  * QCA: Add Bluetooth nvm file for WCN685x
  * QCA: Update Bluetooth WCN685x 2.1 firmware to 2.1.0-00324
  * QCA: Update Bluetooth WCN685x 2.0 firmware to 2.0.0-00609
  * i915: Add GuC v69.0.3 for all platforms
- Add entry for rvu_cptpf</changelog>
  <changelog author="tiwai@suse.com" date="1645358400">- Update to version 20220218 (git commit c53073d4e148):
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDFB7_6D7A
  * rtl_bt: Update RTL8822C BT USB firmware to 0x19B7_6D7D
  * rtl_bt: Update RTL8822C BT UART firmware to 0x15B7_6D7D
  * amdgpu: Update yellow carp firmware from 21.50
  * amdgpu: Update vega20 firmware from 21.50
  * amdgpu: Update vega12 firmware from 21.50
  * amdgpu: Update vega10 firmware from 21.50
  * amdgpu: Update vangogh firmware from 21.50
  * amdgpu: Update renoir firmware from 21.50
  * amdgpu: Update raven2 firmware from 21.50
  * amdgpu: Update raven firmware from 21.50
  * amdgpu: Update picasso firmware from 21.50
  * amdgpu: Update beige goby firmware from 21.50
  * amdgpu: Update dimgrey cavefish firmware from 21.50
  * amdgpu: Update navy flounder firmware from 21.50
  * amdgpu: Update sienna cichlid firmware from 21.50
  * amdgpu: Update navi14 firmware from 21.50
  * amdgpu: Update navi12 firmware from 21.50
  * amdgpu: Update navi10 firmware from 21.50
  * amdgpu: Update cyan skillfish2 firmware from 21.50
  * amdgpu: Update green sardine firmware from 21.50
  * amdgpu: Update arcturus firmware from 21.50
  * amdgpu: Add aldebaran firmware from 21.50
  * LICENSE.amdgpu: update copyright date
  * linux-firmware: Update AMD cpu microcode
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: Amphion: Add VPU firmwares for NXP i.MX8Q SoCs
  * i915: Add DMC firmware v2.16 for ADL-P
  * linux-firmware: mediatek: Update MT8173 VPU firmware to v1.1.7
- Add entry for amphion
- Update spec template
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1646049600">- Update to version 20220224 (git commit 9cab94f59b23):
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1406
  * wfx: update to firmware 3.14
  * wfx: add antenna configuration files
  * wfx: rename silabs/ into wfx/
  * linux-firmware: update firmware for mediatek bluetooth chip(MT7921)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Intel BT 7265: Fix Security Issues
    (CVE-2021-33139,CVE-2021-33155,INTEL-SA-00604,bsc#1195786)
- Update license.txt for wfx
- Temporary fix for WHENCE for wfx:
  wfx-WHENCE-fix.diff</changelog>
  <changelog author="tiwai@suse.com" date="1647345600">- Update to version 20220309 (git commit cd01f857da28):
  * iwlwifi: add new FWs from core68-60 release
  * ath11k: add links for WCN6855 hw2.1
  * ath11k: WCN6855 hw2.0: add WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3
  * ath11k: WCN6855 hw2.0: add board-2.bin and regdb.bin
  * ath10k/ath11k: mark notice.txt as "File:"
  * linux-firmware: add firmware for MT7986
  * amdgpu: add firmware for SDMA 5.2.7 IP block
  * amdgpu: add firmware for PSP 13.0.8 IP block
  * amdgpu: add firmware for DCN 3.1.6 IP block
  * amdgpu: add firmware for GC 10.3.7 IP block
  * rtw89: 8852a: update fw to v0.13.36.0
  * iwlwifi: update 9000-family firmwares to core68-60
  * amdgpu: update raven2 VCN firmware
  * amdgpu: update raven VCN firmware
  * amdgpu: update picasso VCN firmware
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * linux-firmware: Update AMD SEV firmware
    (CVE-2021-46744, CVE-2021-26339, bsc#1199470, bsc#1199459)
  * rtw89: 8852a: update fw to v0.13.35.0</changelog>
  <changelog author="tiwai@suse.com" date="1649678400">- Update to version 20220411 (git commit f219d616f42b):
  * mediatek: Add mt8192 SCP firmware
  * linux-firmware: Update AMD cpu microcode
    (CVE-2021-26339, CVE-2021-26373, CVE-2021-26347, CVE-2021-26376,
    CVE-2021-26375, CVE-2021-26378, CVE-2021-26372, CVE-2021-26339,
    CVE-2021-26348, CVE-2021-26342, CVE-2021-26388, CVE-2021-26349,
    CVE-2021-26364, CVE-2021-26312, CVE-2021-26350, bsc#1199459)
  * nvidia: add GA102/GA103/GA104/GA106/GA107 signed firmware
  * brcm: rename Rock960 NVRAM to AP6356S and link devices to it
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9462
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX211
  * linux-firmware: Update firmware file for Intel Bluetooth AX210
  * linux-firmware: Update firmware file for Intel Bluetooth AX200
  * linux-firmware: Update firmware file for Intel Bluetooth AX201
  * linux-firmware: Update firmware file for Intel Bluetooth 9560
  * linux-firmware: Update firmware file for Intel Bluetooth 9260
  * amdgpu: update green sardine VCN firmware
  * amdgpu: update renoir VCN firmware
  * amdgpu: update navi14 VCN firmware
  * amdgpu: update navi12 VCN firmware
  * amdgpu: update navi10 VCN firmware
  * linux-firmware: update firmware for MT7921 WiFi device
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7921)
  * rtw88: 8821c: Update normal firmware to v24.11.00
  * ice: Add wireless edge file for Intel E800 series driver
  * ice: update ice DDP comms package to 1.3.31.0
  * amdgpu: update PSP 13.0.8 firmware
  * amdgpu: update GC 10.3.7 firmware
  * rtl_bt: Add firmware and config files for RTL8852B
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1652270400">- Update to version 20220509 (git commit b19cbdca78ab):
  * mediatek: Update mt8183 SCP firmware
  * ice: Update package to 1.3.28.0
  * i915: Add DMC v2.06 for DG2
  * rtl_bt: Update RTL8852A BT USB firmware to 0xDBB7_C1D9
  * amdgpu: update psp_13_0_8 firmware
  * amdgpu: update gc_10_3_7_rlc firmware
  * amdgpu: update dcn_3_1_6_dmcub firmware
  * ath11k: QCA6390 hw2.0: update to WLAN.HST.1.0.1-05266-QCAHSTSWPLZ_V2_TO_X86-1
  * qcom: add firmware files for Adreno a420 &amp; related generations
  * qcom: add firmware files for Adreno a330
  * qcom: add firmware files for Adreno a220
  * i915: Add GuC v70.1.2 for DG2
  * rtw89: 8852c: add new firmware v0.27.20.0 for RTL8852C
  * Mellanox: Add lc_ini_bundle for xx.2010.1006
  * Mellanox: xx.2010.1502: Distribute non-xz-compressed lc_ini_bundle
  * ath10k: QCA9984 hw1.0: update board-2.bin
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA9888 hw2.0: update board-2.bin
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.9.0.2-00156
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00288-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA99X0 hw2.0: add board-2.bin
  * ath11k: WCN6855 hw2.0: update to WLAN.HSP.1.1-03125-QCAHSPSWPL_V1_V2_SILICONZ_LITE-3.6510.7
  * ath11k: WCN6750 hw1.0: add to WLAN.MSL.1.0.1-00887-QCAMSLSWPLZ-1
  * ath11k: WCN6750 hw1.0: add board-2.bin
  * ath11k: QCN9074 hw1.0: add to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: QCN9074 hw1.0: add board-2.bin
  * ath11k: QCA6390 hw2.0: update board-2.bin
  * ath11k: IPQ8074 hw2.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ8074 hw2.0: update board-2.bin
  * ath11k: IPQ6018 hw1.0: update to WLAN.HK.2.5.0.1-01208-QCAHKSWPL_SILICONZ-1
  * ath11k: IPQ6018 hw1.0: update board-2.bin
  * Mellanox: Add new mlxsw_spectrum firmware xx.2010.1502
  * amdgpu: update yellow carp DMCUB firmware
  * linux-firmware: update firmware for mediatek bluetooth chip (MT7922)
  * linux-firmware: update firmware for MT7922 WiFi device
  * mediatek: Add mt8195 SCP firmware
  * qcom: apq8096: add modem firmware
  * qcom: apq8096: add aDSP firmware
  * rtl_bt: Add firmware and config files for RTL8852C
  * i915: Add GuC v70.1.1 for all platforms
- Update aliases</changelog>
  <changelog author="tiwai@suse.com" date="1658145600">- Fix missing aliases for qlogic (bsc#1200889);
  update other aliases as well from the latest SLE15-SP4 kernels</changelog>
  <changelog author="tiwai@suse.com" date="1664539200">- Add firmware files for CS35L41 codecs (bsc#1203699)
  Copied from the upstream linux-firmware tree</changelog>
  <changelog author="tiwai@suse.com" date="1666267200">- Update firmware for CS35L41 codecs (bsc#1203699):
  copied from https://github.com/CirrusLogic/linux-firmware</changelog>
  <changelog author="tiwai@suse.com" date="1679659200">- Add firmware for QAT 4xxx (jsc#PED-3699, bsc#1209601):
  copied from upstream linux-tree 20230313.
  WHENCE updated by qat_4xxx-WHENCE-fix.patch
- Add iwlwifi-*-72 ucode (bsc#1209681):
  copied from upstream linux-tree 20230313.
  WHENCE updated by iwlwifi-WHENCE-fix.patch
- Update constraints for 8GB (bsc#1205811)</changelog>
  <changelog author="tiwai@suse.com" date="1690200000">- Update AMD ucode for ZenBleed (CVE-2023-20593, bsc#1213286)</changelog>
  <changelog author="tiwai@suse.com" date="1691582400">- Update AMD 19h ucode for "Inception" (bsc#1213287, CVE-2023-20569)</changelog>
  <changelog author="tiwai@suse.com" date="1701259200">- Update AMD ucode to 20231030 (bsc#1215831, CVE-2021-26345,
  CVE-2021-46766, CVE-2021-46774, CVE-2022-23820, CVE-2022-23830,
  CVE-2023-20519, CVE-2023-20521, CVE-2023-20526, CVE-2023-20533,
  CVE-2023-20566, bsc#1215823, CVE-2023-20592 "CacheWarpAttack")</changelog>
</package>
<package pkgid="bfd42197e94cb2145249749499bf354d304aa4337d3d26577d5aa0e6fd150c79" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.23.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="6decfc493b6654526437d26929a90cbbb66adc15e9b0410ca1e708071ef619de" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.23.1"/>
  <changelog author="tiwai@suse.de" date="1680782400">- Input: focaltech - use explicitly signed char type (git-fixes).
- Input: goodix - add Lenovo Yoga Book X90F to nine_bytes_report
  DMI table (git-fixes).
- drm/etnaviv: fix reference leak when mmaping imported buffer
  (git-fixes).
- drm/amd/display: Add DSC Support for Synaptics Cascaded MST Hub
  (git-fixes).
- fbdev: au1200fb: Fix potential divide by zero (git-fixes).
- fbdev: lxfb: Fix potential divide by zero (git-fixes).
- fbdev: intelfb: Fix potential divide by zero (git-fixes).
- fbdev: nvidia: Fix potential divide by zero (git-fixes).
- fbdev: tgafb: Fix potential divide by zero (git-fixes).
- ALSA: hda/ca0132: fixup buffer overrun at tuning_ctl_set()
  (git-fixes).
- ALSA: asihpi: check pao in control_message() (git-fixes).
- ASoC: codecs: tx-macro: Fix for KASAN: slab-out-of-bounds
  (git-fixes).
- commit 83ef835</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1680782401">- Update
  patches.suse/Fix-double-fget-in-vhost_net_set_backend.patch
  (git-fixes bsc#1210203 CVE-2023-1838).
  Added CVE reference.
- commit 39f99de</changelog>
  <changelog author="fdmanana@suse.com" date="1680782402">- btrfs: fix race between quota disable and quota assign ioctls
  (CVE-2023-1611 bsc#1209687).
- commit dcf095c</changelog>
  <changelog author="tiwai@suse.de" date="1680868800">- can: isotp: isotp_ops: fix poll() to not report false EPOLLOUT
  events (git-fixes).
- can: j1939: j1939_tp_tx_dat_new(): fix out-of-bounds memory
  access (git-fixes).
- wifi: mac80211: fix invalid drv_sta_pre_rcu_remove calls for
  non-uploaded sta (git-fixes).
- pwm: sprd: Explicitly set .polarity in .get_state() (git-fixes).
- pwm: cros-ec: Explicitly set .polarity in .get_state()
  (git-fixes).
- drm/panfrost: Fix the panfrost_mmu_map_fault_addr() error path
  (git-fixes).
- platform/x86: think-lmi: Clean up display of current_value on
  Thinkstation (git-fixes).
- platform/x86: think-lmi: Fix memory leaks when parsing
  ThinkStation WMI strings (git-fixes).
- platform/x86: think-lmi: Fix memory leak when showing current
  settings (git-fixes).
- commit a8eaaa9</changelog>
  <changelog author="tiwai@suse.de" date="1680868801">- ALSA: hda/realtek: Add quirk for Clevo X370SNW (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs for a HP ProBook
  (git-fixes).
- ALSA: hda/realtek: fix mute/micmute LEDs don't work for a HP
  platform (git-fixes).
- commit f336cd9</changelog>
  <changelog author="tiwai@suse.de" date="1680955200">- gpio: davinci: Add irq chip flag to skip set wake (git-fixes).
- gpio: GPIO_REGMAP: select REGMAP instead of depending on it
  (git-fixes).
- commit b56644c</changelog>
  <changelog author="tiwai@suse.de" date="1681041600">- iio: adc: ti-ads7950: Set `can_sleep` flag for GPIO chip
  (git-fixes).
- iio: dac: cio-dac: Fix max DAC write value check for 12-bit
  (git-fixes).
- iio: light: cm32181: Unregister second I2C client if present
  (git-fixes).
- iio: adc: ad7791: fix IRQ flags (git-fixes).
- iio: adis16480: select CONFIG_CRC32 (git-fixes).
- tty: serial: sh-sci: Fix Rx on RZ/G2L SCI (git-fixes).
- tty: serial: fsl_lpuart: avoid checking for transfer complete
  when UARTCTRL_SBK is asserted in lpuart32_tx_empty (git-fixes).
- dt-bindings: serial: renesas,scif: Fix 4th IRQ for 4-IRQ SCIFs
  (git-fixes).
- tty: serial: sh-sci: Fix transmit end interrupt handler
  (git-fixes).
- usb: cdnsp: Fixes error: uninitialized symbol 'len' (git-fixes).
- usb: typec: altmodes/displayport: Fix configure initial pin
  assignment (git-fixes).
- xhci: Free the command allocated for setting LPM if we return
  early (git-fixes).
- xhci: also avoid the XHCI_ZERO_64B_REGS quirk with a passthrough
  iommu (git-fixes).
- usb: xhci: tegra: fix sleep in atomic call (git-fixes).
- nilfs2: fix sysfs interface lifetime (git-fixes).
- commit 3aae146</changelog>
  <changelog author="tiwai@suse.de" date="1681041601">- kABI workaround for xhci (git-fixes).
- commit cbab93c</changelog>
  <changelog author="palcantara@suse.de" date="1681128000">- cifs: double lock in cifs_reconnect_tcon() (git-fixes).
- commit cdf6666</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214400">- tracing: Fix wrong return in kprobe_event_gen_test.c
  (git-fixes).
- commit f76dcf0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214401">- mm: mmap: remove newline at the end of the trace (git-fixes).
- commit 01340e1</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214402">- rcu: Fix rcu_torture_read ftrace event (git-fixes).
- commit cb9e9b0</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214403">- ring-buffer: Fix race while reader and writer are on the same
  page (git-fixes).
- commit c740036</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214404">- ftrace: Mark get_lock_parent_ip() __always_inline (git-fixes).
- commit 46954c5</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214405">- tracing: Have tracing_snapshot_instance_cond() write errors
  to the appropriate instance (git-fixes).
- commit b3421ec</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214406">- tracing: Free error logs of tracing instances (git-fixes).
- commit b4f001c</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214407">- ftrace: Fix issue that 'direct-&gt;addr' not restored in
  modify_ftrace_direct() (git-fixes).
- commit 03fd814</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214408">- blacklist.conf: add a not-relevant ftrace commit
- commit 2220417</changelog>
  <changelog author="petr.pavlu@suse.com" date="1681214409">- tracing: Add trace_array_puts() to write into instance
  (git-fixes).
- commit 059865f</changelog>
  <changelog author="tiwai@suse.de" date="1681300800">- mtd: rawnand: meson: fix bitmask for length in command word
  (git-fixes).
- mtdblock: tolerate corrected bit-flips (git-fixes).
- mtd: rawnand: stm32_fmc2: use timings.mode instead of checking
  tRC_min (git-fixes).
- mtd: rawnand: stm32_fmc2: remove unsupported EDO mode
  (git-fixes).
- commit 6504d96</changelog>
</package>
<package pkgid="55c26fe5eebfe22b4d359c60cfffb75219023b51c15e73412d43f5768c5801b4" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.28.2"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596801">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="ykaukab@suse.de" date="1682596802">- config: arm64: enable ERRATUM_843419
  Config option was incorrectly replaced by the rt-refresh-configs script
- commit d2c5bee</changelog>
  <changelog author="ykaukab@suse.de" date="1682596803">- arm64: enable jump-label
  jump-label was disabled on arm64 by a backport error. Refresh
  patches.rt/jump-label-disable-if-stop_machine-is-used.patch to fix the
  error. Update arm64 config to reflect the change.
- commit 7f6bb31</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="51ca3b4fe8facb57e586e37804c242f40200691e6b60293b88554b6d5b88392a" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.28.2"/>
  <changelog author="dwagner@suse.de" date="1682596800">- nvme: improve the NVME_CONNECT_AUTHREQ* definitions (git-fixes).
- commit da2e21e</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1682596801">- Update
  patches.suse/net-mlx5-DR-Fix-NULL-vs-IS_ERR-checking-in-dr_domain.patch
  (jsc#SLE-19253 bsc#1208845 CVE-2023-23006).
  Added CVE reference.
- commit 53f1f7b</changelog>
  <changelog author="ykaukab@suse.de" date="1682596802">- config: arm64: enable ERRATUM_843419
  Config option was incorrectly replaced by the rt-refresh-configs script
- commit d2c5bee</changelog>
  <changelog author="ykaukab@suse.de" date="1682596803">- arm64: enable jump-label
  jump-label was disabled on arm64 by a backport error. Refresh
  patches.rt/jump-label-disable-if-stop_machine-is-used.patch to fix the
  error. Update arm64 config to reflect the change.
- commit 7f6bb31</changelog>
  <changelog author="dwagner@suse.de" date="1682596804">- blacklist.conf: add nvme git-fixes
- commit be17720</changelog>
  <changelog author="dwagner@suse.de" date="1682683200">- kabi/severities: ignore KABI for NVMe target (bsc#1174777)
  The target code is only for testing and there are no external users.
- commit a8c10fa</changelog>
  <changelog author="tiwai@suse.de" date="1682683201">- virtio_ring: don't update event idx on get_buf (git-fixes).
- firmware: stratix10-svc: Fix an NULL vs IS_ERR() bug in probe
  (git-fixes).
- dt-bindings: iio: ti,tmp117: fix documentation link (git-fixes).
- dt-bindings: nvmem: qcom,spmi-sdam: fix example 'reg' property
  (git-fixes).
- vmci_host: fix a race condition in vmci_host_poll() causing GPF
  (git-fixes).
- fpga: bridge: fix kernel-doc parameter description (git-fixes).
- driver core: Don't require dynamic_debug for initcall_debug
  probe timing (git-fixes).
- staging: rtl8192e: Fix W_DISABLE# does not work after stop/start
  (git-fixes).
- staging: iio: resolver: ads1210: fix config mode (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  rtw_scan_timeout_handler() (git-fixes).
- drivers: staging: rtl8723bs: Fix locking in
  _rtw_join_timeout_handler() (git-fixes).
- serial: 8250: Add missing wakeup event reporting (git-fixes).
- tty: serial: fsl_lpuart: adjust buffer length to the intended
  size (git-fixes).
- tty: Prevent writing chars during tcsetattr TCSADRAIN/FLUSH
  (git-fixes).
- serial: 8250_bcm7271: Fix arbitration handling (git-fixes).
- usb: chipidea: fix missing goto in `ci_hdrc_probe` (git-fixes).
- USB: dwc3: fix runtime pm imbalance on unbind (git-fixes).
- USB: dwc3: fix runtime pm imbalance on probe errors (git-fixes).
- xhci: fix debugfs register accesses while suspended (git-fixes).
- usb: gadget: tegra-xudc: Fix crash in vbus_draw (git-fixes).
- usb: chipidea: imx: avoid unnecessary probe defer (git-fixes).
- usb: gadget: udc: renesas_usb3: Fix use after free bug in
  renesas_usb3_remove due to race condition (git-fixes).
- usb: dwc3: gadget: Change condition for processing suspend event
  (git-fixes).
- usb: host: xhci-rcar: remove leftover quirk handling
  (git-fixes).
- i2c: cadence: cdns_i2c_master_xfer(): Fix runtime PM leak on
  error path (git-fixes).
- ipmi: fix SSIF not responding under certain cond (git-fixes).
- ipmi:ssif: Add send_retries increment (git-fixes).
- spi: cadence-quadspi: fix suspend-resume implementations
  (git-fixes).
- spi: fsl-spi: Fix CPM/QE mode Litte Endian (git-fixes).
- spi: qup: Don't skip cleanup in remove's error path (git-fixes).
- ASoC: fsl_mqs: move of_node_put() to the correct location
  (git-fixes).
- ASoC: es8316: Handle optional IRQ assignment (git-fixes).
- ASoC: cs35l41: Only disable internal boost (git-fixes).
- PCI: qcom: Fix the incorrect register usage in v2.7.0 config
  (git-fixes).
- PCI: imx6: Install the fault handler only on compatible match
  (git-fixes).
- PCI: pciehp: Fix AB-BA deadlock between reset_lock and
  device_lock (git-fixes).
- PCI/EDR: Clear Device Status after EDR error recovery
  (git-fixes).
- drm/panel: otm8009a: Set backlight parent to panel device
  (git-fixes).
- commit 30ae662</changelog>
  <changelog author="petr.pavlu@suse.com" date="1682683202">- keys: Fix linking a duplicate key to a keyring's assoc_array
  (bsc#1207088).
- commit 52b6749</changelog>
  <changelog author="ykaukab@suse.de" date="1682683203">- ACPI: CPPC: Disable FIE if registers in PCC regions
  (bsc#1210953).
- cpufreq: CPPC: Fix build error without
  CONFIG_ACPI_CPPC_CPUFREQ_FIE (bsc#1210953).
- cpufreq: CPPC: Fix performance/frequency conversion (git-fixes).
- commit 5d50d5f</changelog>
  <changelog author="dwagner@suse.de" date="1682683204">- scsi: kABI workaround for fc_host_fpin_rcv (git-fixes).
- scsi: lpfc: Silence an incorrect device output (bsc#1210943).
- scsi: lpfc: Fix ioremap issues in lpfc_sli4_pci_mem_setup()
  (bsc#1210943).
- scsi: lpfc: Drop redundant pci_enable_pcie_error_reporting()
  (bsc#1210943).
- scsi: lpfc: Copyright updates for 14.2.0.11 patches
  (bsc#1210943).
- scsi: lpfc: Update lpfc version to 14.2.0.11 (bsc#1210943).
- scsi: lpfc: Revise lpfc_error_lost_link() reason code evaluation
  logic (bsc#1210943).
- scsi: lpfc: Skip waiting for register ready bits when in
  unrecoverable state (bsc#1210943).
- scsi: lpfc: Correct used_rpi count when devloss tmo fires with
  no recovery (bsc#1210943).
- scsi: lpfc: Defer issuing new PLOGI if received RSCN before
  completing REG_LOGIN (bsc#1210943).
- scsi: lpfc: Record LOGO state with discovery engine even if
  aborted (bsc#1210943).
- scsi: lpfc: Fix lockdep warning for rx_monitor lock when
  unloading driver (bsc#1210943).
- scsi: lpfc: Reorder freeing of various DMA buffers and their
  list removal (bsc#1210943).
- scsi: lpfc: Prevent lpfc_debugfs_lockstat_write() buffer
  overflow (bsc#1210943).
- cpumask: fix incorrect cpumask scanning result checks
  (bsc#1210943).
- scsi: lpfc: Fix double word in comments (bsc#1210943).
- scsi: scsi_transport_fc: Add an additional flag to
  fc_host_fpin_rcv() (bsc#1210943).
- commit 7354766</changelog>
  <changelog author="dwagner@suse.de" date="1682683205">- nvme: send Identify with CNS 06h only to I/O controllers
  (bsc#1209693).
- commit fe51de7</changelog>
  <changelog author="dfaggioli@suse.com" date="1682683206">- KVM: VMX: Execute IBPB on emulated VM-exit when guest has IBRS (bsc#1206992
  CVE-2022-2196).
- commit 2cab1a4</changelog>
  <changelog author="neilb@suse.de" date="1682942400">- NFS: Cleanup unused rpc_clnt variable (git-fixes).
- NFSD: callback request does not use correct credential for
  AUTH_SYS (git-fixes).
- sunrpc: only free unix grouplist after RCU settles (git-fixes).
- nfsd: call op_release, even when op_func returns an error
  (git-fixes).
- NFSD: Avoid calling OPDESC() with ops-&gt;opnum == OP_ILLEGAL
  (git-fixes).
- commit aa8b700</changelog>
  <changelog author="tiwai@suse.de" date="1682942401">- power: supply: generic-adc-battery: fix unit scaling
  (git-fixes).
- dt-bindings: mailbox: qcom,apcs-kpss-global: fix SDX55 'if'
  match (git-fixes).
- clk: rockchip: rk3399: allow clk_cifout to force clk_cifout_src
  to reparent (git-fixes).
- clk: add missing of_node_put() in "assigned-clocks" property
  parsing (git-fixes).
- clk: at91: clk-sam9x60-pll: fix return value check (git-fixes).
- clocksource/drivers/davinci: Fix memory leak in
  davinci_timer_register when init fails (git-fixes).
- USB: serial: option: add UNISOC vendor and TOZED LT70C product
  (git-fixes).
- wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()
  (git-fixes).
- drm/fb-helper: set x/yres_virtual in drm_fb_helper_check_var
  (git-fixes).
- selftests/kselftest/runner/run_one(): allow running
  non-executable files (git-fixes).
- commit fc18250</changelog>
  <changelog author="tiwai@suse.de" date="1683028800">- Input: raspberrypi-ts - fix refcount leak in rpi_ts_probe
  (git-fixes).
- Input: hp_sdc_rtc - mark an unused function as __maybe_unused
  (git-fixes).
- rtc: meson-vrtc: Use ktime_get_real_ts64() to get the current
  time (git-fixes).
- rtc: omap: include header for omap_rtc_power_off_program
  prototype (git-fixes).
- commit 4f6ef5f</changelog>
  <changelog author="mgorman@suse.de" date="1683028801">- locking/rwbase: Mitigate indefinite writer starvation.
  Move out of sorted as the patch has moved within the tip tree.
- commit 0ba915d</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028802">- x86/bugs: Enable STIBP for IBPB mitigated RETBleed (git-fixes).
- commit f115e36</changelog>
  <changelog author="nik.borisov@suse.com" date="1683028803">- blacklist.conf: Exclude unrelated kconfig patch
- commit 2595126</changelog>
  <changelog author="mhocko@suse.com" date="1683028804">- Update
  patches.suse/perf-Fix-check-before-add_event_to_groups-in-perf_group_detach.patch
  (git fixes, bsc#1210986, CVE-2023-2235).
- commit c5399e7</changelog>
  <changelog author="vbabka@suse.cz" date="1683028805">- mm: take a page reference when removing device exclusive entries
  (bsc#1211025).
- commit fd0cc4f</changelog>
</package>
<package pkgid="6ee76a13af3b839232c9d8e6f562eef29223259e44006c4e6e7945da377cee42" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.37.2"/>
  <changelog author="lhenriques@suse.de" date="1687262400">- ceph: fix use-after-free bug for inodes when flushing capsnaps
  (bsc#1212540).
- commit c22ab50</changelog>
  <changelog author="mhocko@suse.com" date="1687262401">- binfmt_elf: Take the mmap lock when walking the VMA list
  (bsc#1209039 CVE-2023-1249).
- commit bc9a5c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262402">- Refresh patches.suse/init-invoke-arch_cpu_finalize_init-earlier.patch.
  Move arch_cpu_finalize_init() to the correct place.
- commit 87f94ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262403">- mm: Move mm_cachep initialization to mm_init() (bsc#1212448).
- commit b8943a6</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262404">- x86/mm: Initialize text poking earlier (bsc#1212448).
- Refresh patches.suse/init-provide-arch_cpu_finalize_init.patch.
- Refresh patches.suse/init-remove-check_bugs-leftovers.patch.
- commit fe545d9</changelog>
  <changelog author="tiwai@suse.de" date="1687348800">- ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
  (git-fixes).
- commit 7ecdfc8</changelog>
  <changelog author="jlee@suse.com" date="1687348801">- Update References tag
  patches.suse/usb-gadget-udc-renesas_usb3-Fix-use-after-free-bug-i.patch
  (git-fixes bsc#1212513 CVE-2023-35828).
- commit 058d07e</changelog>
  <changelog author="vbabka@suse.cz" date="1687348802">- mm: vmalloc: avoid warn_alloc noise caused by fatal signal
  (bsc#1211410).
- commit 0352c7c</changelog>
  <changelog author="mkoutny@suse.com" date="1687348803">- cgroup: always put cset in cgroup_css_set_put_fork
  (bsc#1212561).
- commit ae170c0</changelog>
  <changelog author="vbabka@suse.cz" date="1687348804">- mm/vmalloc: do not output a spurious warning when huge vmalloc()
  fails (bsc#1211410).
- commit ae4e43c</changelog>
  <changelog author="mkoutny@suse.com" date="1687348805">- cgroup: fix missing cpus_read_{lock,unlock}() in
  cgroup_transfer_tasks() (bsc#1212563).
- commit 2b82ccd</changelog>
  <changelog author="mkoutny@suse.com" date="1687348806">- bpf: Fix UAF in task local storage (bsc#1212564).
- commit 26b737d</changelog>
  <changelog author="nik.borisov@suse.com" date="1687348807">- x86/mm: Use mm_alloc() in poking_init() (bsc#1212448).
- commit ae2a42d</changelog>
  <changelog author="iivanov@suse.de" date="1687348808">- spi: tegra210-quad: Multi-cs support (bsc#1212584)
- commit 1e10d7b</changelog>
  <changelog author="iivanov@suse.de" date="1687348809">- spi: tegra210-quad: Fix combined sequence (bsc#1212584)
- commit 148b744</changelog>
  <changelog author="mkoutny@suse.com" date="1687348810">- cgroup: Use cgroup_attach_{lock,unlock}() from
  cgroup_attach_task_all() (bsc#1212563).
- commit f39cb40</changelog>
  <changelog author="mfranc@suse.cz" date="1687348811">- s390/dasd: Use correct lock while counting channel queue length
  (git-fixes bsc#1212592).
- commit 3416e6e</changelog>
  <changelog author="lduncan@suse.com" date="1687348812">- blacklist.conf: added drbd git-fix
  drbd in kernel no supported/used
- commit d232113</changelog>
  <changelog author="tiwai@suse.de" date="1687435200">- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes).
- regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes).
- USB: serial: option: add Quectel EM061KGL series (git-fixes).
- drm/amd/display: edp do not add non-edid timings (git-fixes).
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
  (git-fixes).
- net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes).
- spi: fsl-dspi: avoid SCK glitches with continuous transfers
  (git-fixes).
- nilfs2: fix incomplete buffer cleanup in
  nilfs_btnode_abort_change_key() (git-fixes).
- test_firmware: prevent race conditions by a correct
  implementation of locking (git-fixes).
- ARM: dts: vexpress: add missing cache properties (git-fixes).
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path
  (git-fixes).
- power: supply: Fix logic checking if system is running from
  battery (git-fixes).
- power: supply: Ratelimit no data debug output (git-fixes).
- power: supply: bq27xxx: Use mod_delayed_work() instead of
  cancel() + schedule() (git-fixes).
- power: supply: sc27xx: Fix external_power_changed race
  (git-fixes).
- power: supply: ab8500: Fix external_power_changed race
  (git-fixes).
- ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
  (git-fixes).
- ASoC: soc-pcm: test if a BE can be prepared (git-fixes).
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B,
  0xC0 (git-fixes).
- regulator: Fix error checking for debugfs_create_dir
  (git-fixes).
- spi: tegra210-quad: Fix iterator outside loop (git-fixes).
- test_firmware: Use kstrtobool() instead of strtobool()
  (git-fixes).
- commit 571f9b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1687435201">- x86/mm: fix poking_init() for Xen PV guests (git-fixes).
- commit 3f14de3</changelog>
</package>
<package pkgid="1330b7d4914b6acf06d1d21ab66c2c18b5d5b8074102d24d97aff16b635f09e5" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.37.2"/>
  <changelog author="lhenriques@suse.de" date="1687262400">- ceph: fix use-after-free bug for inodes when flushing capsnaps
  (bsc#1212540).
- commit c22ab50</changelog>
  <changelog author="mhocko@suse.com" date="1687262401">- binfmt_elf: Take the mmap lock when walking the VMA list
  (bsc#1209039 CVE-2023-1249).
- commit bc9a5c4</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262402">- Refresh patches.suse/init-invoke-arch_cpu_finalize_init-earlier.patch.
  Move arch_cpu_finalize_init() to the correct place.
- commit 87f94ba</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262403">- mm: Move mm_cachep initialization to mm_init() (bsc#1212448).
- commit b8943a6</changelog>
  <changelog author="nik.borisov@suse.com" date="1687262404">- x86/mm: Initialize text poking earlier (bsc#1212448).
- Refresh patches.suse/init-provide-arch_cpu_finalize_init.patch.
- Refresh patches.suse/init-remove-check_bugs-leftovers.patch.
- commit fe545d9</changelog>
  <changelog author="tiwai@suse.de" date="1687348800">- ACPI: sleep: Avoid breaking S3 wakeup due to might_sleep()
  (git-fixes).
- commit 7ecdfc8</changelog>
  <changelog author="jlee@suse.com" date="1687348801">- Update References tag
  patches.suse/usb-gadget-udc-renesas_usb3-Fix-use-after-free-bug-i.patch
  (git-fixes bsc#1212513 CVE-2023-35828).
- commit 058d07e</changelog>
  <changelog author="vbabka@suse.cz" date="1687348802">- mm: vmalloc: avoid warn_alloc noise caused by fatal signal
  (bsc#1211410).
- commit 0352c7c</changelog>
  <changelog author="mkoutny@suse.com" date="1687348803">- cgroup: always put cset in cgroup_css_set_put_fork
  (bsc#1212561).
- commit ae170c0</changelog>
  <changelog author="vbabka@suse.cz" date="1687348804">- mm/vmalloc: do not output a spurious warning when huge vmalloc()
  fails (bsc#1211410).
- commit ae4e43c</changelog>
  <changelog author="mkoutny@suse.com" date="1687348805">- cgroup: fix missing cpus_read_{lock,unlock}() in
  cgroup_transfer_tasks() (bsc#1212563).
- commit 2b82ccd</changelog>
  <changelog author="mkoutny@suse.com" date="1687348806">- bpf: Fix UAF in task local storage (bsc#1212564).
- commit 26b737d</changelog>
  <changelog author="nik.borisov@suse.com" date="1687348807">- x86/mm: Use mm_alloc() in poking_init() (bsc#1212448).
- commit ae2a42d</changelog>
  <changelog author="iivanov@suse.de" date="1687348808">- spi: tegra210-quad: Multi-cs support (bsc#1212584)
- commit 1e10d7b</changelog>
  <changelog author="iivanov@suse.de" date="1687348809">- spi: tegra210-quad: Fix combined sequence (bsc#1212584)
- commit 148b744</changelog>
  <changelog author="mkoutny@suse.com" date="1687348810">- cgroup: Use cgroup_attach_{lock,unlock}() from
  cgroup_attach_task_all() (bsc#1212563).
- commit f39cb40</changelog>
  <changelog author="mfranc@suse.cz" date="1687348811">- s390/dasd: Use correct lock while counting channel queue length
  (git-fixes bsc#1212592).
- commit 3416e6e</changelog>
  <changelog author="lduncan@suse.com" date="1687348812">- blacklist.conf: added drbd git-fix
  drbd in kernel no supported/used
- commit d232113</changelog>
  <changelog author="tiwai@suse.de" date="1687435200">- regulator: pca9450: Fix LDO3OUT and LDO4OUT MASK (git-fixes).
- regmap: spi-avmm: Fix regmap_bus max_raw_write (git-fixes).
- USB: serial: option: add Quectel EM061KGL series (git-fixes).
- drm/amd/display: edp do not add non-edid timings (git-fixes).
- selftests/ptp: Fix timestamp printf format for PTP_SYS_OFFSET
  (git-fixes).
- net: usb: qmi_wwan: add support for Compal RXM-G1 (git-fixes).
- spi: fsl-dspi: avoid SCK glitches with continuous transfers
  (git-fixes).
- nilfs2: fix incomplete buffer cleanup in
  nilfs_btnode_abort_change_key() (git-fixes).
- test_firmware: prevent race conditions by a correct
  implementation of locking (git-fixes).
- ARM: dts: vexpress: add missing cache properties (git-fixes).
- drm:amd:amdgpu: Fix missing buffer object unlock in failure path
  (git-fixes).
- power: supply: Fix logic checking if system is running from
  battery (git-fixes).
- power: supply: Ratelimit no data debug output (git-fixes).
- power: supply: bq27xxx: Use mod_delayed_work() instead of
  cancel() + schedule() (git-fixes).
- power: supply: sc27xx: Fix external_power_changed race
  (git-fixes).
- power: supply: ab8500: Fix external_power_changed race
  (git-fixes).
- ASoC: dwc: move DMA init to snd_soc_dai_driver probe()
  (git-fixes).
- ASoC: soc-pcm: test if a BE can be prepared (git-fixes).
- platform/x86: asus-wmi: Ignore WMI events with codes 0x7B,
  0xC0 (git-fixes).
- regulator: Fix error checking for debugfs_create_dir
  (git-fixes).
- spi: tegra210-quad: Fix iterator outside loop (git-fixes).
- test_firmware: Use kstrtobool() instead of strtobool()
  (git-fixes).
- commit 571f9b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1687435201">- x86/mm: fix poking_init() for Xen PV guests (git-fixes).
- commit 3f14de3</changelog>
</package>
<package pkgid="fad6e289caf186ff121a45a5ac5b0341f05b714be8e226c264415a98a22154fa" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.40.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="962208bddb768e4f23a55d3205adbdb4360500f3a673b61c21d5b688efc72da8" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.40.1"/>
  <changelog author="nmorey@suse.com" date="1688385600">- RDMA/bnxt_re: Disable/kill tasklet only if it is enabled (git-fixes)
- commit fa23528</changelog>
  <changelog author="nmorey@suse.com" date="1688385601">- RDMA/bnxt_re: Fix to remove unnecessary return labels (git-fixes)
- commit 0f82e06</changelog>
  <changelog author="nmorey@suse.com" date="1688385602">- RDMA/bnxt_re: Use unique names while registering interrupts (git-fixes)
- commit 4d45831</changelog>
  <changelog author="nmorey@suse.com" date="1688385603">- RDMA/bnxt_re: Remove a redundant check inside bnxt_re_update_gid (git-fixes)
- commit 5fd5166</changelog>
  <changelog author="nmorey@suse.com" date="1688385604">- RDMA/bnxt_re: Fix to remove an unnecessary log (git-fixes)
- commit 5b86f20</changelog>
  <changelog author="nmorey@suse.com" date="1688385605">- RDMA/bnxt_re: Return directly without goto jumps (git-fixes)
- commit a16408a</changelog>
  <changelog author="nmorey@suse.com" date="1688385606">- RDMA/bnxt_re: Remove unnecessary checks (git-fixes)
- commit 465a1cc</changelog>
  <changelog author="nmorey@suse.com" date="1688385607">- RDMA/irdma: avoid fortify-string warning in irdma_clr_wqes (git-fixes)
- commit 5d11670</changelog>
  <changelog author="nmorey@suse.com" date="1688385608">- RDMA/rxe: Remove dangling declaration of rxe_cq_disable() (git-fixes)
- commit 9e18a28</changelog>
  <changelog author="nmorey@suse.com" date="1688385609">- IB/hfi1: Fix wrong mmu_node used for user SDMA packet after invalidate (git-fixes)
- commit 030725c</changelog>
  <changelog author="nmorey@suse.com" date="1688385610">- RDMA/hns: Fix hns_roce_table_get return value (git-fixes)
- commit c5a9ac4</changelog>
  <changelog author="nmorey@suse.com" date="1688385611">- RDMA/vmw_pvrdma: Remove unnecessary check on wr-&gt;opcode (git-fixes)
- commit 4a80233</changelog>
  <changelog author="nmorey@suse.com" date="1688385612">- RDMA/bnxt_re: wraparound mbox producer index (git-fixes)
- commit 3193b97</changelog>
  <changelog author="nmorey@suse.com" date="1688385613">- RDMA/bnxt_re: Avoid calling wake_up threads from spin_lock context (git-fixes)
- commit 4610493</changelog>
  <changelog author="jgross@suse.com" date="1688385614">- x86/xen: fix secondary processor fpu initialization
  (bsc#1212869).
- commit 8ea47f4</changelog>
  <changelog author="tiwai@suse.de" date="1688385615">- Move upstreamed x86, scsi and arm patches into sorted section
- commit 68279fe</changelog>
  <changelog author="msuchanek@suse.de" date="1688385616">- ibmvnic: Do not reset dql stats on NON_FATAL err (bsc#1212603
  ltc#202604).
- commit 9cf4e75</changelog>
  <changelog author="tiwai@suse.de" date="1688472000">- usb: dwc3: gadget: Propagate core init errors to UDC during
  pullup (git-fixes).
- usb: dwc3-meson-g12a: Fix an error handling path in
  dwc3_meson_g12a_probe() (git-fixes).
- usb: dwc3: qcom: Fix an error handling path in dwc3_qcom_probe()
  (git-fixes).
- usb: dwc3: qcom: Release the correct resources in
  dwc3_qcom_remove() (git-fixes).
- usb: xhci: Remove unused udev from xhci_log_ctx trace event
  (git-fixes).
- usb: hide unused usbfs_notify_suspend/resume functions
  (git-fixes).
- usb: phy: phy-tahvo: fix memory leak in tahvo_usb_probe()
  (git-fixes).
- usb: gadget: u_serial: Add null pointer check in gserial_suspend
  (git-fixes).
- usb: dwc3: qcom: Fix potential memory leak (git-fixes).
- serial: atmel: don't enable IRQs prematurely (git-fixes).
- tty: serial: imx: fix rs485 rx after tx (git-fixes).
- serial: 8250_omap: Use force_suspend and resume for system
  suspend (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() when iterating clk (git-fixes).
- tty: serial: samsung_tty: Fix a memory leak in
  s3c24xx_serial_getclk() in case of error (git-fixes).
- serial: 8250: lock port for UART_IER access in omap8250_irq()
  (git-fixes).
- serial: 8250: lock port for stop_rx() in omap8250_irq()
  (git-fixes).
- serial: 8250: omap: Fix freeing of resources on failed register
  (git-fixes).
- extcon: Fix kernel doc of property capability fields to avoid
  warnings (git-fixes).
- extcon: Fix kernel doc of property fields to avoid warnings
  (git-fixes).
- misc: fastrpc: Create fastrpc scalar with correct buffer count
  (git-fixes).
- firmware: stratix10-svc: Fix a potential resource leak in
  svc_create_memory_pool() (git-fixes).
- test_firmware: return ENOMEM instead of ENOSPC on failed memory
  allocation (git-fixes).
- meson saradc: fix clock divider mask length (git-fixes).
- iio: accel: fxls8962af: errata bug only applicable for
  FXLS8962AF (git-fixes).
- iio: accel: fxls8962af: fixup buffer scan element type
  (git-fixes).
- iio: adc: ad7192: Fix internal/external clock selection
  (git-fixes).
- iio: adc: ad7192: Fix null ad7192_state pointer access
  (git-fixes).
- w1: fix loop in w1_fini() (git-fixes).
- w1: w1_therm: fix locking behavior in convert_t (git-fixes).
- mfd: stmpe: Only disable the regulators if they are enabled
  (git-fixes).
- mfd: stmfx: Nullify stmfx-&gt;vdd in case of error (git-fixes).
- mfd: stmfx: Fix error path in stmfx_chip_init (git-fixes).
- mfd: intel-lpss: Add missing check for platform_get_resource
  (git-fixes).
- mfd: pm8008: Fix module autoloading (git-fixes).
- mfd: rt5033: Drop rt5033-battery sub-device (git-fixes).
- mailbox: ti-msgmgr: Fill non-message tx data fields with 0x0
  (git-fixes).
- rtc: st-lpc: Release some resources in st_rtc_probe() in case
  of error (git-fixes).
- extcon: usbc-tusb320: Update state on probe even if no IRQ
  pending (git-fixes).
- extcon: usbc-tusb320: Call the Type-C IRQ handler only if a
  port is registered (git-fixes).
- extcon: usbc-tusb320: Add USB TYPE-C support (git-fixes).
- commit 5d09f51</changelog>
  <changelog author="tiwai@suse.de" date="1688472001">- extcon: usbc-tusb320: Unregister typec port on driver removal
  (git-fixes).
- commit b2eac46</changelog>
  <changelog author="mkoutny@suse.com" date="1688472002">- net/sched: tcindex: Do not use perfect hashing (bsc#1210335
  CVE-2023-1829).
- commit 28b65ec</changelog>
</package>
<package pkgid="a2e02aff6cd3059c7d3dc23f6a2d681e4f1fe6573dce2faf436b7f5b3172800f" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.46.1"/>
  <changelog author="tiwai@suse.de" date="1690804800">- Drop the recent USB gadget fix patches
  The recent USB gadget fix patches look dubious and likely leading to
  locking problem.  Drop them for now until we get the proper backports
  Deleted:
  patches.suse/usb-gadget-core-remove-unbalanced-mutex_unlock-in-us.patch
  patches.suse/usb-gadget-udc-core-Offload-usb_udc_vbus_handler-pro.patch
  patches.suse/usb-gadget-udc-core-Prevent-soft_connect_store-race.patch
- commit d9bbe1b</changelog>
  <changelog author="tiwai@suse.de" date="1690891200">- bpf: add missing header file include (bsc#1211738
  CVE-2023-0459).
- commit 1ccaaad</changelog>
  <changelog author="tiwai@suse.de" date="1690891201">- Update config files: set CONFIG_GDS_FORCE_MITIGATION=n
- commit f04be94</changelog>
  <changelog author="iivanov@suse.de" date="1690891202">- KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620)
- commit 222f2a2</changelog>
  <changelog author="lhenriques@suse.de" date="1690891203">- libceph: harden msgr2.1 frame segment length checks
  (bsc#1213857).
- ceph: don't let check_caps skip sending responses for revoke
  msgs (bsc#1213856).
- commit 9052bbe</changelog>
  <changelog author="mfranc@suse.cz" date="1690891204">- s390/decompressor: specify __decompress() buf len to avoid
  overflow (git-fixes bsc#1213863).
- commit 59015c6</changelog>
  <changelog author="mfranc@suse.cz" date="1690891205">- KVM: s390: pv: fix index value of replaced ASCE (git-fixes
  bsc#1213867).
- commit e789a10</changelog>
  <changelog author="mfranc@suse.cz" date="1690891206">- s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870).
- commit 66f8c8e</changelog>
  <changelog author="mfranc@suse.cz" date="1690891207">- blacklist.conf: has non-trivial dependencies
- commit 0c7dbe0</changelog>
  <changelog author="tiwai@suse.de" date="1690891208">- Move upstreamed sound patch into sorted sectoin
- commit 8a29738</changelog>
  <changelog author="mfranc@suse.cz" date="1690891209">- s390/ipl: add missing intersection check to ipl_report handling
  (git-fixes bsc#1213871).
- commit 8806556</changelog>
  <changelog author="mfranc@suse.cz" date="1690891210">- s390: introduce nospec_uses_trampoline() (git-fixes
  bsc#1213870).
- commit c2ccf75</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- can: af_can: fix NULL pointer dereference in can_rcv_filter
  (bsc#1210627 CVE-2023-2166).
- commit e89fee8</changelog>
  <changelog author="jlee@suse.com" date="1690977601">- relayfs: fix out-of-bounds access in relay_file_read
  (bsc#1212502 CVE-2023-3268).
- commit 9c2a6e6</changelog>
  <changelog author="oneukum@suse.com" date="1690977602">- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  (git-fixes).
- commit 0922201</changelog>
  <changelog author="oneukum@suse.com" date="1690977603">- Input: iqs269a - do not poll during suspend or resume
  (git-fixes).
- commit 467fdbf</changelog>
  <changelog author="oneukum@suse.com" date="1690977604">- Input: iqs269a - do not poll during ATI (git-fixes).
- commit 5bdf465</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150400">- Update config files.
  We want SRSO mitigation on by default
- commit acc813b</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150401">- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  Handle the newly added SBPB feature correctly when run in hypervisor
  context and interept an MSR write.
- commit ef9889a</changelog>
  <changelog author="nik.borisov@suse.com" date="1691496000">- x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569).
- commit 90a74a8</changelog>
</package>
<package pkgid="c75c627d8abf869f335b44da411613329648ee43012aabf1940644bd9f00b43c" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.46.1"/>
  <changelog author="tiwai@suse.de" date="1690804800">- Drop the recent USB gadget fix patches
  The recent USB gadget fix patches look dubious and likely leading to
  locking problem.  Drop them for now until we get the proper backports
  Deleted:
  patches.suse/usb-gadget-core-remove-unbalanced-mutex_unlock-in-us.patch
  patches.suse/usb-gadget-udc-core-Offload-usb_udc_vbus_handler-pro.patch
  patches.suse/usb-gadget-udc-core-Prevent-soft_connect_store-race.patch
- commit d9bbe1b</changelog>
  <changelog author="tiwai@suse.de" date="1690891200">- bpf: add missing header file include (bsc#1211738
  CVE-2023-0459).
- commit 1ccaaad</changelog>
  <changelog author="tiwai@suse.de" date="1690891201">- Update config files: set CONFIG_GDS_FORCE_MITIGATION=n
- commit f04be94</changelog>
  <changelog author="iivanov@suse.de" date="1690891202">- KVM: arm64: Warn if accessing timer pending state outside of vcpu (bsc#1213620)
- commit 222f2a2</changelog>
  <changelog author="lhenriques@suse.de" date="1690891203">- libceph: harden msgr2.1 frame segment length checks
  (bsc#1213857).
- ceph: don't let check_caps skip sending responses for revoke
  msgs (bsc#1213856).
- commit 9052bbe</changelog>
  <changelog author="mfranc@suse.cz" date="1690891204">- s390/decompressor: specify __decompress() buf len to avoid
  overflow (git-fixes bsc#1213863).
- commit 59015c6</changelog>
  <changelog author="mfranc@suse.cz" date="1690891205">- KVM: s390: pv: fix index value of replaced ASCE (git-fixes
  bsc#1213867).
- commit e789a10</changelog>
  <changelog author="mfranc@suse.cz" date="1690891206">- s390/bpf: Add expoline to tail calls (git-fixes bsc#1213870).
- commit 66f8c8e</changelog>
  <changelog author="mfranc@suse.cz" date="1690891207">- blacklist.conf: has non-trivial dependencies
- commit 0c7dbe0</changelog>
  <changelog author="tiwai@suse.de" date="1690891208">- Move upstreamed sound patch into sorted sectoin
- commit 8a29738</changelog>
  <changelog author="mfranc@suse.cz" date="1690891209">- s390/ipl: add missing intersection check to ipl_report handling
  (git-fixes bsc#1213871).
- commit 8806556</changelog>
  <changelog author="mfranc@suse.cz" date="1690891210">- s390: introduce nospec_uses_trampoline() (git-fixes
  bsc#1213870).
- commit c2ccf75</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- can: af_can: fix NULL pointer dereference in can_rcv_filter
  (bsc#1210627 CVE-2023-2166).
- commit e89fee8</changelog>
  <changelog author="jlee@suse.com" date="1690977601">- relayfs: fix out-of-bounds access in relay_file_read
  (bsc#1212502 CVE-2023-3268).
- commit 9c2a6e6</changelog>
  <changelog author="oneukum@suse.com" date="1690977602">- Input: i8042 - add Clevo PCX0DX to i8042 quirk table
  (git-fixes).
- commit 0922201</changelog>
  <changelog author="oneukum@suse.com" date="1690977603">- Input: iqs269a - do not poll during suspend or resume
  (git-fixes).
- commit 467fdbf</changelog>
  <changelog author="oneukum@suse.com" date="1690977604">- Input: iqs269a - do not poll during ATI (git-fixes).
- commit 5bdf465</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150400">- Update config files.
  We want SRSO mitigation on by default
- commit acc813b</changelog>
  <changelog author="nik.borisov@suse.com" date="1691150401">- Refresh patches.suse/x86-srso-add-srso_no-support.patch.
  Handle the newly added SBPB feature correctly when run in hypervisor
  context and interept an MSR write.
- commit ef9889a</changelog>
  <changelog author="nik.borisov@suse.com" date="1691496000">- x86/srso: Tie SBPB bit setting to microcode patch detection (bsc#1213287, CVE-2023-20569).
- commit 90a74a8</changelog>
</package>
<package pkgid="8f461235654b747d1d3e69529460a0f54c3800ed0c998f6938d76c548a4c9e49" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.49.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- commit e8addea</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- commit dd0f3ab</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- RDMA/hns: Fix port active speed (git-fixes)
- commit f1ca0f2</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828809">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828810">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828811">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828812">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828814">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828815">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828816">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828817">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
</package>
<package pkgid="20081c8b38b97c26d872c2b08ae6c2d0df2f17b4e92fb4f6b109de3c06981bb2" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.49.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/irdma: Replace one-element array with flexible-array member (git-fixes)
- commit e8addea</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/bnxt_re: Fix max_qp count for virtual functions (git-fixes)
- commit dd0f3ab</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- RDMA/hns: Fix port active speed (git-fixes)
- commit f1ca0f2</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828809">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828810">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828811">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828812">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828814">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828815">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828816">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828817">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
</package>
<package pkgid="1c806ceaa047f09d61c1ca0dcfe60468761be247080ad3e630a76435cdb5cc96" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.53.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828809">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828810">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828811">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828812">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828814">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="jroedel@suse.de" date="1694520000">- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- commit 399914f</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 21f93b0</changelog>
  <changelog author="tiwai@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 7ba0be2</changelog>
</package>
<package pkgid="3c374aa8a0b4ff3719eb0e67f122282bf267fecfd81dc899a5d71c782396d4ef" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.53.1"/>
  <changelog author="nmorey@suse.com" date="1693828800">- RDMA/hns: Fix incorrect post-send with direct wqe of wr-list (git-fixes)
- commit 988bb43</changelog>
  <changelog author="nmorey@suse.com" date="1693828801">- RDMA/hns: Fix CQ and QP cache affinity (git-fixes)
- commit fee7fe7</changelog>
  <changelog author="nmorey@suse.com" date="1693828802">- IB/uverbs: Fix an potential error pointer dereference (git-fixes)
- commit 0e5f5fb</changelog>
  <changelog author="nmorey@suse.com" date="1693828803">- RDMA/irdma: Prevent zero-length STAG registration (git-fixes)
- commit e55bab1</changelog>
  <changelog author="nmorey@suse.com" date="1693828804">- Revert "IB/isert: Fix incorrect release of isert connection" (git-fixes)
- commit 1b277c9</changelog>
  <changelog author="nmorey@suse.com" date="1693828805">- RDMA/siw: Balance the reference of cep-&gt;kref in the error path (git-fixes)
- commit 9281d22</changelog>
  <changelog author="nmorey@suse.com" date="1693828806">- RDMA/siw: Correct wrong debug message (git-fixes)
- commit 3732fc1</changelog>
  <changelog author="nmorey@suse.com" date="1693828807">- RDMA/efa: Fix wrong resources deallocation order (git-fixes)
- commit c7f667b</changelog>
  <changelog author="nmorey@suse.com" date="1693828808">- scsi: RDMA/srp: Fix residual handling (git-fixes)
- commit 429e77b</changelog>
  <changelog author="mfranc@suse.cz" date="1693828809">- Refresh
  patches.suse/0002-nvme-tcp-fix-potential-unbalanced-freeze-unfreeze.patch.
- Refresh
  patches.suse/0003-nvme-rdma-fix-potential-unbalanced-freeze-unfreeze.patch.
- commit 452e63f</changelog>
  <changelog author="oneukum@suse.com" date="1693828810">- USB: core: Unite old scheme and new scheme descriptor reads
  (bsc#1213123 CVE-2023-37453).
- commit 9f60ef1</changelog>
  <changelog author="oneukum@suse.com" date="1693828811">- USB: core: Fix race by not overwriting udev-&gt;descriptor in
  hub_port_init() (bsc#1213123 CVE-2023-37453).
- commit a1f446d</changelog>
  <changelog author="mgorman@suse.de" date="1693828812">- blacklist.conf: Not a fix, relatively high risk of performance regression
- commit fd04425</changelog>
  <changelog author="oneukum@suse.com" date="1693828813">- USB: core: Fix oversight in SuperSpeed initialization
  (bsc#1213123 CVE-2023-37453).
- commit 6b6c148</changelog>
  <changelog author="mgorman@suse.de" date="1693828814">- sched/fair: Use recent_used_cpu to test p-&gt;cpus_ptr (git fixes).
- sched/fair: Fix inaccurate tally of ttwu_move_affine (git
  fixes).
- commit 4be7d48</changelog>
  <changelog author="tiwai@suse.de" date="1693915200">- cpufreq: Fix the race condition while updating the
  transition_task of policy (git-fixes).
- rpmsg: glink: Add check for kstrdup (git-fixes).
- leds: turris-omnia: Drop unnecessary mutex locking (git-fixes).
- leds: trigger: tty: Do not use LED_ON/OFF constants, use
  led_blink_set_oneshot instead (git-fixes).
- leds: Fix BUG_ON check for LED_COLOR_ID_MULTI that is always
  false (git-fixes).
- leds: multicolor: Use rounded division when calculating color
  components (git-fixes).
- leds: pwm: Fix error code in led_pwm_create_fwnode()
  (git-fixes).
- docs: printk-formats: Fix hex printing of signed values
  (git-fixes).
- commit 1c98d58</changelog>
  <changelog author="nik.borisov@suse.com" date="1693915201">- x86/speculation: Mark all Skylake CPUs as vulnerable to GDS (git-fixes).
- commit 47ff352</changelog>
  <changelog author="jroedel@suse.de" date="1694520000">- x86/sev: Make enc_dec_hypercall() accept a size instead of npages (bsc#1214635).
- commit 399914f</changelog>
  <changelog author="jkosina@suse.cz" date="1695297600">- USB: core: Change usb_get_device_descriptor() API (bsc#1213123
  CVE-2023-37453 bsc#1215553 bsc#1215522 bsc#1215552).
  Refresh patches.suse/USB-core-Fix-race-by-not-overwriting-udev-descriptor.patch (add missing hunk)
  Refresh patches.suse/USB-core-Fix-oversight-in-SuperSpeed-initialization.patch (context)
- commit 21f93b0</changelog>
  <changelog author="tiwai@suse.de" date="1695297601">- Drop amdgpu patch causing spamming (bsc#1215523)
  Deleted:
  patches.suse/drm-amdgpu-install-stub-fence-into-potential-unused-.patch.
- commit 7ba0be2</changelog>
</package>
<package pkgid="99c8d7e9cdabddb1f367ed3c9f52d95f8d0c506ad51a49847e2d3b1c812ef2d8" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.56.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="1203ad421916b4ffc10664a22b71fa3a3020cc1f4d88a641eee2e02bfa75bb4a" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.56.1"/>
  <changelog author="pmladek@suse.com" date="1696248000">- printk: ringbuffer: Fix truncating buffer size min_t cast
  (bsc#1215875).
- commit e0d3999</changelog>
  <changelog author="pmladek@suse.com" date="1696248001">- blacklist.conf: printk: the changes look good but they do not fix
  any serious problem
- commit c560ceb</changelog>
  <changelog author="pmladek@suse.com" date="1696248002">- blacklist.conf: workqueue: Code refactoring
- commit e204334</changelog>
  <changelog author="pmladek@suse.com" date="1696248003">- blacklist.conf: workqueue: compiler warning on 32-bit systems with
  Clang (bsc#1215877)
- commit b7e65aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334400">- tcp: Reduce chance of collisions in inet6_hashfn()
  (CVE-2023-1206 bsc#1212703).
- commit e3ebd17</changelog>
  <changelog author="mkubecek@suse.cz" date="1696334401">- netfilter: ipset: add the missing IP_SET_HASH_WITH_NET0 macro
  for ip_set_hash_netportnet.c (CVE-2023-42753 bsc#1215150).
- commit 7a6be79</changelog>
  <changelog author="mfranc@suse.cz" date="1696334402">- KVM: s390: vsie: Fix the initialization of the epoch extension
  (epdx) field (git-fixes bsc#1215894).
- commit 9c5bbd7</changelog>
  <changelog author="mfranc@suse.cz" date="1696334403">- KVM: s390: vsie: fix the length of APCB bitmap (git-fixes
  bsc#1215895).
- commit 9ff1a1e</changelog>
  <changelog author="mfranc@suse.cz" date="1696334404">- KVM: s390: interrupt: use READ_ONCE() before cmpxchg()
  (git-fixes bsc#1215896).
- commit 8726736</changelog>
  <changelog author="mfranc@suse.cz" date="1696334405">- blacklist.conf: kABi breakage (vmalloc)
- commit 10bad47</changelog>
  <changelog author="palcantara@suse.de" date="1696334406">- fs/smb/client: Reset password pointer to NULL (bsc#1215899
  CVE-2023-5345).
- commit 679511d</changelog>
  <changelog author="mfranc@suse.cz" date="1696334407">- KVM: s390/diag: fix racy access of physical cpu number in diag
  9c handler (git-fixes bsc#1215911).
- commit 6454286</changelog>
  <changelog author="mfranc@suse.cz" date="1696334408">- KVM: s390: fix KVM_S390_GET_CMMA_BITS for GFNs in memslot holes
  (git-fixes bsc#1215915).
- commit fe7fbfc</changelog>
  <changelog author="jdelvare@suse.de" date="1696334409">- btrfs: fix root ref counts in error handling in
  btrfs_get_root_ref (bsc#1214351 CVE-2023-4389).
- commit 3731029</changelog>
  <changelog author="mfranc@suse.cz" date="1696334410">- KVM: s390: pv: fix external interruption loop not always
  detected (git-fixes bsc#1215916).
- commit f1893aa</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420800">- ipv4: fix null-deref in ipv4_link_failure (CVE-2023-42754
  bsc#1215467).
- commit ad87dd3</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420801">- netfilter: xt_u32: validate user space input (CVE-2023-39192
  bsc#1215858).
- commit 292c059</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420802">- netfilter: xt_sctp: validate the flag_info count (CVE-2023-39193
  bsc#1215860).
- commit 5ec24b7</changelog>
  <changelog author="mkubecek@suse.cz" date="1696420803">- net: xfrm: Fix xfrm_address_filter OOB read (CVE-2023-39194
  bsc#1215861).
- commit 55308cb</changelog>
  <changelog author="mfranc@suse.cz" date="1696420804">- scsi: zfcp: Fix a double put in zfcp_port_enqueue() (git-fixes
  bsc#1215941).
- commit a62865f</changelog>
</package>
<package pkgid="74093c69126c541f8a1140b766f22300b08ddbd4a2c62ff77b9a3f5a32fb8e05" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.59.1"/>
  <changelog author="mgorman@suse.de" date="1697716800">- sched/rt: Fix live lock between select_fallback_rq() and RT push
  (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes
  (sched)).
- commit a2350c1</changelog>
  <changelog author="tiwai@suse.de" date="1697803200">- net: rfkill: gpio: prevent value glitch during probe
  (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
  (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys
  (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn
  (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in
  send_acknowledge() (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane
  bonding (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with
  Intel Maple Ridge (git-fixes).
- Input: powermate - fix use-after-free in
  powermate_config_complete (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- Input: goodix - ensure int GPIO is in input for gpio_count ==
  1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
  (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/amd/display: Don't set dpms_off for seamless boot
  (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl()
  (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
  (git-fixes).
- commit e8f9edc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1697803201">- Fix metadata references
- commit 42e4c9a</changelog>
  <changelog author="jwiesner@suse.de" date="1697803202">- net: sched: fixed barrier to prevent skbuff sticking in qdisc
  backlog (bsc#1216345).
- commit 839637c</changelog>
  <changelog author="jwiesner@suse.de" date="1697803203">- net: sched: add barrier to fix packet stuck problem for lockless
  qdisc (bsc#1216345).
- commit 508758e</changelog>
  <changelog author="jwiesner@suse.de" date="1697803204">- net/sched: fix netdevice reference leaks in
  attach_default_qdiscs() (git-fixes).
- commit 31c27cf</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="tiwai@suse.de" date="1698321600">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321601">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321602">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321604">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408000">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408001">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
</package>
<package pkgid="5a1df0490e13dfdee8bd8d09e1b618dad601912c38fa5f09c05f4fa37339f002" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.59.1"/>
  <changelog author="mgorman@suse.de" date="1697716800">- sched/rt: Fix live lock between select_fallback_rq() and RT push
  (git fixes (sched)).
- sched/rt: Fix sysctl_sched_rr_timeslice intial value (git fixes
  (sched)).
- commit a2350c1</changelog>
  <changelog author="tiwai@suse.de" date="1697803200">- net: rfkill: gpio: prevent value glitch during probe
  (git-fixes).
- net: usb: smsc95xx: Fix an error code in smsc95xx_reset()
  (git-fixes).
- gve: Do not fully free QPL pages on prefill errors (git-fixes).
- Bluetooth: hci_event: Fix using memcmp when comparing keys
  (git-fixes).
- Bluetooth: Fix a refcnt underflow problem for hci_conn
  (git-fixes).
- Bluetooth: hci_event: Ignore NULL link key (git-fixes).
- nfc: nci: fix possible NULL pointer dereference in
  send_acknowledge() (git-fixes).
- thunderbolt: Check that lane 1 is in CL0 before enabling lane
  bonding (git-fixes).
- thunderbolt: Workaround an IOMMU fault on certain systems with
  Intel Maple Ridge (git-fixes).
- Input: powermate - fix use-after-free in
  powermate_config_complete (git-fixes).
- Input: xpad - add PXN V900 support (git-fixes).
- Input: goodix - ensure int GPIO is in input for gpio_count ==
  1 &amp;&amp; gpio_int_idx == 0 case (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CBA
  (git-fixes).
- drm/amdgpu: add missing NULL check (git-fixes).
- drm/amd/display: Don't set dpms_off for seamless boot
  (git-fixes).
- pinctrl: avoid unsafe code pattern in find_pinctrl()
  (git-fixes).
- HID: logitech-hidpp: Fix kernel crash on receiver USB disconnect
  (git-fixes).
- ALSA: usb-audio: Fix microphone sound on Opencomm2 Headset
  (git-fixes).
- commit e8f9edc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1697803201">- Fix metadata references
- commit 42e4c9a</changelog>
  <changelog author="jwiesner@suse.de" date="1697803202">- net: sched: fixed barrier to prevent skbuff sticking in qdisc
  backlog (bsc#1216345).
- commit 839637c</changelog>
  <changelog author="jwiesner@suse.de" date="1697803203">- net: sched: add barrier to fix packet stuck problem for lockless
  qdisc (bsc#1216345).
- commit 508758e</changelog>
  <changelog author="jwiesner@suse.de" date="1697803204">- net/sched: fix netdevice reference leaks in
  attach_default_qdiscs() (git-fixes).
- commit 31c27cf</changelog>
  <changelog author="tiwai@suse.de" date="1697889600">- ACPI: irq: Fix incorrect return value in acpi_register_gsi()
  (git-fixes).
- Revert "pinctrl: avoid unsafe code pattern in find_pinctrl()"
  (git-fixes).
- mtd: rawnand: qcom: Unmap the right resource upon probe failure
  (git-fixes).
- mtd: rawnand: pl353: Ensure program page operations are
  successful (git-fixes).
- mtd: rawnand: arasan: Ensure program page operations are
  successful (git-fixes).
- mtd: spinand: micron: correct bitmask for ecc status
  (git-fixes).
- mtd: physmap-core: Restore map_rom fallback (git-fixes).
- mtd: rawnand: marvell: Ensure program page operations are
  successful (git-fixes).
- mmc: mtk-sd: Use readl_poll_timeout_atomic in msdc_reset_hw
  (git-fixes).
- mmc: core: sdio: hold retuning if sdio in 1-bit mode
  (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix runtime PM imbalance on probe
  errors (git-fixes).
- ASoC: codecs: wcd938x-sdw: fix use after free on driver unbind
  (git-fixes).
- ASoC: codecs: wcd938x: fix unbind tear down order (git-fixes).
- ASoC: codecs: wcd938x: drop bogus bind error handling
  (git-fixes).
- ASoC: pxa: fix a memory leak in probe() (git-fixes).
- drm/i915: Retry gtt fault when out of fence registers
  (git-fixes).
- commit 766bf5d</changelog>
  <changelog author="mfranc@suse.cz" date="1698062400">- s390/cio: fix a memleak in css_alloc_subchannel (git-fixes
  bsc#1216510).
- commit d475feb</changelog>
  <changelog author="mfranc@suse.cz" date="1698062401">- s390/pci: fix iommu bitmap allocation (git-fixes bsc#1216511).
- commit 2bb6835</changelog>
  <changelog author="mfranc@suse.cz" date="1698062402">- KVM: s390: fix gisa destroy operation might lead to cpu stalls
  (git-fixes bsc#1216512).
- commit 3976fa9</changelog>
  <changelog author="oneukum@suse.com" date="1698148800">- Update
  patches.suse/USB-ene_usb6250-Allocate-enough-memory-for-full-obje.patch
  (bsc#1216051 CVE-2023-45862).
  Retroactively recognized as a security issue
- commit 716929e</changelog>
  <changelog author="tiwai@suse.de" date="1698148801">- ubi: Refuse attaching if mtd's erasesize is 0 (CVE-2023-31085
  bsc#1210778).
- commit 86e05f1</changelog>
  <changelog author="mwilck@suse.com" date="1698148802">- nvme-fc: Prevent null pointer dereference in
  nvme_fc_io_getuuid() (bsc#1214842).
- commit 3b513db</changelog>
  <changelog author="tiwai@suse.de" date="1698321600">- phy: mapphone-mdm6600: Fix pinctrl_pm handling for sleep pins
  (git-fixes).
- phy: mapphone-mdm6600: Fix runtime PM for remove (git-fixes).
- phy: mapphone-mdm6600: Fix runtime disable on probe (git-fixes).
- gpio: vf610: set value before the direction to avoid a glitch
  (git-fixes).
- platform/surface: platform_profile: Propagate error if profile
  registration fails (git-fixes).
- platform/x86: asus-wmi: Map 0x2a code, Ignore 0x2b and 0x2c
  events (git-fixes).
- platform/x86: asus-wmi: Change ASUS_WMI_BRN_DOWN code from
  0x20 to 0x2e (git-fixes).
- USB: serial: option: add Fibocom to DELL custom modem FM101R-GL
  (git-fixes).
- USB: serial: option: add entry for Sierra EM9191 with new
  firmware (git-fixes).
- USB: serial: option: add Telit LE910C4-WWX 0x1035 composition
  (git-fixes).
- mmc: core: Capture correct oemid-bits for eMMC cards
  (git-fixes).
- Bluetooth: hci_sock: Correctly bounds check and pad
  HCI_MON_NEW_INDEX name (git-fixes).
- Bluetooth: avoid memcmp() out of bounds warning (git-fixes).
- Bluetooth: hci_sock: fix slab oob read in create_monitor_event
  (git-fixes).
- Bluetooth: hci_event: Fix coding style (git-fixes).
- Bluetooth: Reject connection with the device which has same
  BD_ADDR (git-fixes).
- Bluetooth: vhci: Fix race when opening vhci device (git-fixes).
- platform/x86: touchscreen_dmi: Add info for the Positivo C4128B
  (git-fixes).
- drm: panel-orientation-quirks: Add quirk for One Mix 2S
  (git-fixes).
- HID: multitouch: Add required quirk for Synaptics 0xcd7e device
  (git-fixes).
- HID: holtek: fix slab-out-of-bounds Write in
  holtek_kbd_input_event (git-fixes).
- wifi: cfg80211: avoid leaking stack data into trace (git-fixes).
- wifi: mac80211: allow transmitting EAPOL frames with tainted
  key (git-fixes).
- wifi: cfg80211: Fix 6GHz scan configuration (git-fixes).
- wifi: iwlwifi: Ensure ack flag is properly cleared (git-fixes).
- wifi: mwifiex: Sanity check tlv_len and tlv_bitmap_len
  (git-fixes).
- Bluetooth: Avoid redundant authentication (git-fixes).
- Bluetooth: btusb: add shutdown function for QCA6174 (git-fixes).
- i2c: mux: Avoid potential false error message in
  i2c_mux_add_adapter (git-fixes).
- gpio: timberdale: Fix potential deadlock on &amp;tgpio-&gt;lock
  (git-fixes).
- commit b480af6</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321601">- x86/sev: Disable MMIO emulation from user mode (bsc#1212649).
- commit 5dae47e</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321602">- x86/sev: Check IOBM for IOIO exceptions from user-space
  (bsc#1212649).
- commit 2b69036</changelog>
  <changelog author="vkarasulli@suse.de" date="1698321603">- x86/sev: Check for user-space IOIO pointing to kernel space
  (bsc#1212649).
- commit 816f817</changelog>
  <changelog author="jack@suse.cz" date="1698321604">- quota: Fix slow quotaoff (bsc#1216621).
- commit 988e5f4</changelog>
  <changelog author="vkarasulli@suse.de" date="1698408000">- Update
  patches.suse/0001-x86-sev-Disable-MMIO-emulation-from-user-mode.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0002-x86-sev-Check-IOBM-for-IOIO-exceptions-from-user-spa.patch
  (bsc#1212649 CVE-2023-46813).
- Update
  patches.suse/0003-x86-sev-Check-for-user-space-IOIO-pointing-to-kernel.patch
  (bsc#1212649 CVE-2023-46813).
- commit dd6a315</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1698408001">- netfilter: nf_tables: skip bound chain on rule flush
  (bsc#1215095 CVE-2023-3777).
- commit afb7c25</changelog>
</package>
<package pkgid="acccc717b35aec5dbc2aaa175dd87845df10a3b7fa311f824d82b67fd9502bc2" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.62.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize remaining xfs_buf length tracepoints
  (git-fixes).
- commit 0960978</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518416">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="msuchanek@suse.de" date="1701691201">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="6297c11978abeda34cc0f927d36c2dffd763407a120fdb7e986da48c8adc45cc" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.62.1"/>
  <changelog author="ailiop@suse.com" date="1701518400">- xfs: standardize remaining xfs_buf length tracepoints
  (git-fixes).
- commit 0960978</changelog>
  <changelog author="ailiop@suse.com" date="1701518401">- xfs: standardize inode generation formatting in ftrace output
  (git-fixes).
- commit 81e4504</changelog>
  <changelog author="ailiop@suse.com" date="1701518402">- xfs: convert buffer flags to unsigned (git-fixes).
- commit 6147a1c</changelog>
  <changelog author="ailiop@suse.com" date="1701518403">- xfs: convert attr type flags to unsigned (git-fixes).
- commit c641f4d</changelog>
  <changelog author="ailiop@suse.com" date="1701518404">- xfs: convert scrub type flags to unsigned (git-fixes).
- commit c3c7c82</changelog>
  <changelog author="ailiop@suse.com" date="1701518405">- xfs: convert bmap extent type flags to unsigned (git-fixes).
- commit 30fead3</changelog>
  <changelog author="ailiop@suse.com" date="1701518406">- xfs: convert bmapi flags to unsigned (git-fixes).
- commit 1ec6360</changelog>
  <changelog author="ailiop@suse.com" date="1701518407">- xfs: convert AGF log flags to unsigned (git-fixes).
- commit 91cefbb</changelog>
  <changelog author="ailiop@suse.com" date="1701518408">- xfs: convert AGI log flags to unsigned (git-fixes).
- commit 66d955b</changelog>
  <changelog author="ailiop@suse.com" date="1701518409">- xfs: convert btree buffer log flags to unsigned (git-fixes).
- commit ced67a9</changelog>
  <changelog author="ailiop@suse.com" date="1701518410">- xfs: convert buffer log item flags to unsigned (git-fixes).
- commit d4d0c9c</changelog>
  <changelog author="ailiop@suse.com" date="1701518411">- xfs: convert da btree operations flags to unsigned (git-fixes).
- commit 41198d9</changelog>
  <changelog author="ailiop@suse.com" date="1701518412">- xfs: convert dquot flags to unsigned (git-fixes).
- commit 1630213</changelog>
  <changelog author="ailiop@suse.com" date="1701518413">- xfs: convert log item tracepoint flags to unsigned (git-fixes).
- commit 411032a</changelog>
  <changelog author="ailiop@suse.com" date="1701518414">- xfs: convert inode lock flags to unsigned (git-fixes).
- commit 831f7e2</changelog>
  <changelog author="ailiop@suse.com" date="1701518415">- xfs: convert quota options flags to unsigned (git-fixes).
- commit 7dfe466</changelog>
  <changelog author="ailiop@suse.com" date="1701518416">- xfs: convert log ticket and iclog flags to unsigned (git-fixes).
- commit 57245d3</changelog>
  <changelog author="tiwai@suse.de" date="1701604800">- firewire: core: fix possible memory leak in create_units()
  (git-fixes).
- commit 0ade49c</changelog>
  <changelog author="tiwai@suse.de" date="1701691200">- USB: serial: option: add Luat Air72*U series products
  (git-fixes).
- USB: serial: option: add Fibocom L7xx modules (git-fixes).
- USB: serial: option: don't claim interface 4 for ZTE MF290
  (git-fixes).
- ACPI: resource: Skip IRQ override on ASUS ExpertBook B1402CVA
  (git-fixes).
- commit 4c40fde</changelog>
  <changelog author="msuchanek@suse.de" date="1701691201">- powerpc: Don't clobber f0/vs0 during fp|altivec register save
  (bsc#1217780).
- commit 46d31e2</changelog>
</package>
<package pkgid="0d68b7d9873db14ad1bc5cdda756e4958a0a4e05e1051aae9946df1afa069f4f" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.65.1"/>
  <changelog author="pmladek@suse.com" date="1704715200">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715206">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="ohering@suse.de" date="1704801600">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jgross@suse.com" date="1704801601">- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- commit 146bca2</changelog>
  <changelog author="jgross@suse.com" date="1704801602">- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
  (git-fixes).
- commit 8696527</changelog>
  <changelog author="jgross@suse.com" date="1704801603">- virtio-mmio: fix memory leak of vm_dev (git-fixes).
- commit d624528</changelog>
  <changelog author="jgross@suse.com" date="1704801604">- virtio_balloon: Fix endless deflation and inflation on arm64
  (git-fixes).
- commit 6583f74</changelog>
  <changelog author="jgross@suse.com" date="1704801605">- vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE
  (git-fixes).
- commit ad9e29a</changelog>
  <changelog author="jgross@suse.com" date="1704801606">- vsock/virtio: Fix unsigned integer wrap around in
  virtio_transport_has_space() (git-fixes).
- commit db5c328</changelog>
  <changelog author="jroedel@suse.de" date="1704801607">- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- commit a41e3fe</changelog>
  <changelog author="jgross@suse.com" date="1704801608">- xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
  (git-fixes).
- commit f6ed3e4</changelog>
  <changelog author="jgross@suse.com" date="1704801609">- xen/events: fix delayed eoi list handling (git-fixes).
- commit eb0149c</changelog>
  <changelog author="jgross@suse.com" date="1704801610">- swiotlb-xen: provide the "max_mapping_size" method (git-fixes).
- commit a036bcf</changelog>
  <changelog author="lhenriques@suse.de" date="1704801611">- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()
  (bsc#1218659).
- commit 4ee6819</changelog>
  <changelog author="nik.borisov@suse.com" date="1704888000">- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- commit 8afebed</changelog>
</package>
<package pkgid="c104f3f95526e0de18fbf4bf8ef54ab99f29678ec73c3aff9413414e5921fe61" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.65.1"/>
  <changelog author="pmladek@suse.com" date="1704715200">- vsprintf/kallsyms: Prevent invalid data when printing symbol
  (bsc#1217602).
- commit 8dab9cc</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715201">- x86/cpu/amd: Enable Zenbleed fix for AMD Custom APU 0405 (git-fixes).
- commit d74349c</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715202">- x86/cpu: Fix amd_check_microcode() declaration (git-fixes).
- Refresh patches.suse/x86-srso-set-cpuid-feature-bits-independently-of-bug-or-mitigation-status.patch.
- commit c22f4b4</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715203">- x86/fpu: Invalidate FPU state correctly on exec() (git-fixes).
- commit 7686df9</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715204">- x86/fpu/xstate: Prevent false-positive warning in __copy_xstate_uabi_buf() (git-fixes).
- commit 46d60b3</changelog>
  <changelog author="nik.borisov@suse.com" date="1704715205">- x86/purgatory: Remove LTO flags (git-fixes).
- commit bbd4f84</changelog>
  <changelog author="palcantara@suse.de" date="1704715206">- smb: client: fix potential OOB in smb2_dump_detail()
  (bsc#1217946 CVE-2023-6610).
- commit cfca7f7</changelog>
  <changelog author="ohering@suse.de" date="1704801600">- io_uring/af_unix: disable sending io_uring over sockets
  (bsc#1218447, CVE-2023-6531).
- commit fdc256b</changelog>
  <changelog author="jgross@suse.com" date="1704801601">- KVM: x86: Mask LVTPC when handling a PMI (jsc#PED-7322).
- commit 146bca2</changelog>
  <changelog author="jgross@suse.com" date="1704801602">- KVM: SVM: Update EFER software model on CR0 trap for SEV-ES
  (git-fixes).
- commit 8696527</changelog>
  <changelog author="jgross@suse.com" date="1704801603">- virtio-mmio: fix memory leak of vm_dev (git-fixes).
- commit d624528</changelog>
  <changelog author="jgross@suse.com" date="1704801604">- virtio_balloon: Fix endless deflation and inflation on arm64
  (git-fixes).
- commit 6583f74</changelog>
  <changelog author="jgross@suse.com" date="1704801605">- vhost: Allow null msg.size on VHOST_IOTLB_INVALIDATE
  (git-fixes).
- commit ad9e29a</changelog>
  <changelog author="jgross@suse.com" date="1704801606">- vsock/virtio: Fix unsigned integer wrap around in
  virtio_transport_has_space() (git-fixes).
- commit db5c328</changelog>
  <changelog author="jroedel@suse.de" date="1704801607">- swiotlb: fix a braino in the alignment check fix (bsc#1216559).
- swiotlb: fix slot alignment checks (bsc#1216559).
- commit a41e3fe</changelog>
  <changelog author="jgross@suse.com" date="1704801608">- xen-pciback: Consider INTx disabled when MSI/MSI-X is enabled
  (git-fixes).
- commit f6ed3e4</changelog>
  <changelog author="jgross@suse.com" date="1704801609">- xen/events: fix delayed eoi list handling (git-fixes).
- commit eb0149c</changelog>
  <changelog author="jgross@suse.com" date="1704801610">- swiotlb-xen: provide the "max_mapping_size" method (git-fixes).
- commit a036bcf</changelog>
  <changelog author="lhenriques@suse.de" date="1704801611">- fuse: dax: set fc-&gt;dax to NULL in fuse_dax_conn_free()
  (bsc#1218659).
- commit 4ee6819</changelog>
  <changelog author="nik.borisov@suse.com" date="1704888000">- x86/entry/ia32: Ensure s32 is sign extended to s64 (bsc#1193285).
- commit 8afebed</changelog>
</package>
<package pkgid="109349e31c741b50549ac770a296b45e765beed597fdc222f1ca3fa819686fd5" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.68.1"/>
  <changelog author="jwiesner@suse.de" date="1706702400">- clocksource: disable watchdog checks on TSC when TSC is watchdog
  (bsc#1215885).
- commit 2f92dd8</changelog>
  <changelog author="jwiesner@suse.de" date="1706702401">- clocksource: Skip watchdog check for large watchdog intervals
  (bsc#1217217).
- commit 63b1d6d</changelog>
  <changelog author="dwagner@suse.de" date="1706702402">- nvmet-tcp: Fix the H2C expected PDU len calculation
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: remove boilerplate code (bsc#1217987 bsc#1217988
  bsc#1217989 CVE-2023-6535 CVE-2023-6536 CVE-2023-6356).
- nvmet-tcp: fix a crash in nvmet_req_complete() (bsc#1217987
  bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C
  PDU length (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535
  CVE-2023-6536 CVE-2023-6356).
- commit d968940</changelog>
  <changelog author="msuchanek@suse.de" date="1706702403">- kernel-source: Fix description typo
- commit 8abff35</changelog>
  <changelog author="mhocko@suse.com" date="1706788800">- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- trace,smp: Add tracepoints around remotelly called functions
  (bsc#1217895).
- vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- Refresh
  patches.suse/0002-kernel-smp-make-csdlock-timeout-depend-on-boot-param.patch.
- commit 668c0e0</changelog>
  <changelog author="mhocko@suse.com" date="1706788801">- kabi, vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- commit 8cb5798</changelog>
  <changelog author="lhenriques@suse.de" date="1706788802">- Update
  patches.suse/ext4-fix-kernel-BUG-in-ext4_write_inline_data_end.patch
  (CVE-2021-33631 bsc#1219412 bsc#1206894).
- commit 96c942c</changelog>
  <changelog author="jgross@suse.com" date="1706788803">- xen-netback: don't produce zero-size SKB frags (CVE-2023-46838,
  XSA-448, bsc#1218836).
- commit 9a897ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1706875200">- atm: Fix Use-After-Free in do_vcc_ioctl (CVE-2023-51780
  bsc#1218730).
- commit 658d424</changelog>
  <changelog author="alnovak@suse.cz" date="1707134400">- README.BRANCH: SLE15-SP4 became LTSS, update maintainers
- commit 94325df</changelog>
  <changelog author="petr.pavlu@suse.com" date="1707134401">- Revert "tracing: Increase trace array ref count on enable and
  filter files" (bsc#1219490).
  Deleted:
  patches.suse/tracing-Increase-trace-array-ref-count-on-enable-and-filter-files.patch
  patches.suse/tracing-Have-event-inject-files-inc-the-trace-array-ref-count.patch
  Backported commit f5ca233e2e66 ("tracing: Increase trace array ref count
  on enable and filter files") causes a kernel panic and its upstream
  fix-up bb32500fb9b7 ("tracing: Have trace_event_file have ref counters")
  cannot be easily backported because it affects kABI. Revert the commit
  and its one related + dependent patch, at least for now.
- commit 90d885a</changelog>
  <changelog author="jslaby@suse.cz" date="1707220800">- rpm/mkspec: sort entries in _multibuild
  Otherwise it creates unnecessary diffs when tar-up-ing. It's of course
  due to readdir() using "random" order as served by the underlying
  filesystem.
  See for example:
  https://build.opensuse.org/request/show/1144457/changes
- commit d1155de</changelog>
  <changelog author="pjakobsson@suse.de" date="1707220801">- Update
  patches.suse/drm-amdgpu-Fix-potential-fence-use-after-free-v2.patch
  (bsc#1219128 CVE-2023-51042 git-fixes).
- commit 4b937fc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220802">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit d77a474</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
</package>
<package pkgid="8dca5b5804a7582c05de01bdf1e4691dc1cd65db17e4fae5cdba313e9ab5a3f0" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.68.1"/>
  <changelog author="jwiesner@suse.de" date="1706702400">- clocksource: disable watchdog checks on TSC when TSC is watchdog
  (bsc#1215885).
- commit 2f92dd8</changelog>
  <changelog author="jwiesner@suse.de" date="1706702401">- clocksource: Skip watchdog check for large watchdog intervals
  (bsc#1217217).
- commit 63b1d6d</changelog>
  <changelog author="dwagner@suse.de" date="1706702402">- nvmet-tcp: Fix the H2C expected PDU len calculation
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: remove boilerplate code (bsc#1217987 bsc#1217988
  bsc#1217989 CVE-2023-6535 CVE-2023-6536 CVE-2023-6356).
- nvmet-tcp: fix a crash in nvmet_req_complete() (bsc#1217987
  bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356).
- nvmet-tcp: Fix a kernel panic when host sends an invalid H2C
  PDU length (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535
  CVE-2023-6536 CVE-2023-6356).
- commit d968940</changelog>
  <changelog author="msuchanek@suse.de" date="1706702403">- kernel-source: Fix description typo
- commit 8abff35</changelog>
  <changelog author="mhocko@suse.com" date="1706788800">- sched/isolation: add cpu_is_isolated() API (bsc#1217895).
- trace,smp: Add tracepoints around remotelly called functions
  (bsc#1217895).
- vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- Refresh
  patches.suse/0002-kernel-smp-make-csdlock-timeout-depend-on-boot-param.patch.
- commit 668c0e0</changelog>
  <changelog author="mhocko@suse.com" date="1706788801">- kabi, vmstat: skip periodic vmstat update for isolated CPUs
  (bsc#1217895).
- commit 8cb5798</changelog>
  <changelog author="lhenriques@suse.de" date="1706788802">- Update
  patches.suse/ext4-fix-kernel-BUG-in-ext4_write_inline_data_end.patch
  (CVE-2021-33631 bsc#1219412 bsc#1206894).
- commit 96c942c</changelog>
  <changelog author="jgross@suse.com" date="1706788803">- xen-netback: don't produce zero-size SKB frags (CVE-2023-46838,
  XSA-448, bsc#1218836).
- commit 9a897ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1706875200">- atm: Fix Use-After-Free in do_vcc_ioctl (CVE-2023-51780
  bsc#1218730).
- commit 658d424</changelog>
  <changelog author="alnovak@suse.cz" date="1707134400">- README.BRANCH: SLE15-SP4 became LTSS, update maintainers
- commit 94325df</changelog>
  <changelog author="petr.pavlu@suse.com" date="1707134401">- Revert "tracing: Increase trace array ref count on enable and
  filter files" (bsc#1219490).
  Deleted:
  patches.suse/tracing-Increase-trace-array-ref-count-on-enable-and-filter-files.patch
  patches.suse/tracing-Have-event-inject-files-inc-the-trace-array-ref-count.patch
  Backported commit f5ca233e2e66 ("tracing: Increase trace array ref count
  on enable and filter files") causes a kernel panic and its upstream
  fix-up bb32500fb9b7 ("tracing: Have trace_event_file have ref counters")
  cannot be easily backported because it affects kABI. Revert the commit
  and its one related + dependent patch, at least for now.
- commit 90d885a</changelog>
  <changelog author="jslaby@suse.cz" date="1707220800">- rpm/mkspec: sort entries in _multibuild
  Otherwise it creates unnecessary diffs when tar-up-ing. It's of course
  due to readdir() using "random" order as served by the underlying
  filesystem.
  See for example:
  https://build.opensuse.org/request/show/1144457/changes
- commit d1155de</changelog>
  <changelog author="pjakobsson@suse.de" date="1707220801">- Update
  patches.suse/drm-amdgpu-Fix-potential-fence-use-after-free-v2.patch
  (bsc#1219128 CVE-2023-51042 git-fixes).
- commit 4b937fc</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707220802">- netfilter: nf_tables: reject QUEUE/DROP verdict parameters
  (CVE-2024-1086 bsc#1219434).
- commit 5f917ff</changelog>
  <changelog author="denis.kirjanov@suse.com" date="1707307200">- netfilter: nf_tables: check if catch-all set element is active
  in next generation (CVE-2024-1085 bsc#1219429).
- commit 7b3f4c4</changelog>
  <changelog author="vbabka@suse.cz" date="1707393600">- README.BRANCH: update branch name to cve/linux-5.14, update maintainers
  as requested
- commit 8e34879</changelog>
  <changelog author="vkarasulli@suse.de" date="1707393601">- Bluetooth: Fix atomicity violation in {min,max}_key_size_set
  (git-fixes bsc#1219608 CVE-2024-24860).
- commit a1186fd</changelog>
  <changelog author="neilb@suse.de" date="1707480000">- Refresh patches.suse/nfsd-fix-RELEASE_LOCKOWNER.patch.
  Accidentally removed nfs4_get_stateowner
- commit d77a474</changelog>
  <changelog author="mkoutny@suse.com" date="1707480001">- README.BRANCH: Update cve/linux-5.14 maintainers
  Add myself to match SLE15-SP5 consumer + fix typo in branch name.
- commit da26653</changelog>
  <changelog author="jgross@suse.com" date="1707480002">- vhost: use kzalloc() instead of kmalloc() followed by memset()
  (CVE-2024-0340, bsc#1218689).
- commit 4c5a740</changelog>
</package>
<package pkgid="f91fa20c98426de35e2bd82c95c86714adb1e1851b068897980ddce20d862afe" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.71.1"/>
  <changelog author="mkubecek@suse.cz" date="1709553600">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="jroedel@suse.de" date="1709640002">- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (CVE-2023-52484 bsc#1220797).
- commit 2229de3</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640004">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="mbrugger@suse.com" date="1709640005">- mfd: syscon: Fix null pointer dereference in
  of_syscon_register() (bsc#1220433 CVE-2023-52467).
- commit b0262b8</changelog>
  <changelog author="jslaby@suse.cz" date="1709640006">- Update
  patches.suse/vt-fix-memory-overlapping-when-deleting-chars-in-the.patch
  (git-fixes bsc#1220845 CVE-2022-48627).
- Update
  patches.suse/x86-srso-add-srso-mitigation-for-hygon-processors.patch
  (git-fixes bsc#1220735 CVE-2023-52482).
  Add CVE references.
- commit dcdac38</changelog>
  <changelog author="pjakobsson@suse.de" date="1709640007">- drm/bridge: sii902x: Fix probing race issue (bsc#1220736 CVE-2024-26607).
- commit 70198c4</changelog>
  <changelog author="tiwai@suse.de" date="1709640008">- Update patch reference for pinctrl fix (CVE-2021-47083 bsc#1220917)
- commit b608623</changelog>
  <changelog author="tiwai@suse.de" date="1709640009">- Update patch reference for iwlwifi fix (CVE-2023-52531 bsc#1220931)
- commit bde87cf</changelog>
  <changelog author="tiwai@suse.de" date="1709640010">- wifi: mac80211: fix potential key use-after-free (CVE-2023-52530
  bsc#1220930).
- commit 3feca94</changelog>
  <changelog author="jdelvare@suse.de" date="1709640011">- Update patches.suse/i2c-validate-user-data-in-compat-ioctl.patch
  (git-fixes bsc#1220469 CVE-2021-46934).
  Add bug and CVE references.
- commit 3a04060</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640012">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit 81de603</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640013">- x86/rfds: Mitigate Register File Data Sampling (RFDS)  (bsc#1213456 CVE-2023-28746).
- Update config files.
- commit 29c1c99</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640014">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 4aebf4f</changelog>
  <changelog author="msuchanek@suse.de" date="1709640015">- Refresh patches.suse/0001-powerpc-pseries-memhp-Fix-access-beyond-end-of-drmem.patch.
  - update to upstream version
  - rename to same name as SLE15 SP5
- commit 1d2def1</changelog>
  <changelog author="jroedel@suse.de" date="1709726400">- iommu/vt-d: Avoid memory allocation in iommu_suspend()
  (CVE-2023-52559 bsc#1220933).
- commit c9b01ef</changelog>
  <changelog author="jlee@suse.com" date="1709726401">- efivarfs: force RO when remounting if SetVariable is not
  supported (bsc#1220328 CVE-2023-52463).
- commit eed7fb0</changelog>
  <changelog author="jlee@suse.com" date="1709726402">- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  (bsc#1218562 CVE-2023-6270).
- commit 57a4cd4</changelog>
</package>
<package pkgid="7cf5c9f8be4a2c437e8650c00561fa66fa239ce580f812313e5c1b3dd1d82548" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.71.1"/>
  <changelog author="mkubecek@suse.cz" date="1709553600">- netfilter: nf_tables: fix 64-bit load issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- netfilter: nf_tables: fix pointer math issue in
  nft_byteorder_eval() (CVE-2024-0607 bsc#1218915).
- commit e095cd0</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640000">- kabi: restore return type of dst_ops::gc() callback
  (CVE-2023-52340 bsc#1219295).
- ipv6: remove max_size check inline with ipv4 (CVE-2023-52340
  bsc#1219295).
- commit b8eec42</changelog>
  <changelog author="mkubecek@suse.cz" date="1709640001">- tls: fix race between tx work scheduling and socket close
  (CVE-2024-26585 bsc#1220187).
- commit 1306bff</changelog>
  <changelog author="jroedel@suse.de" date="1709640002">- iommu/arm-smmu-v3: Fix soft lockup triggered by arm_smmu_mm_invalidate_range (CVE-2023-52484 bsc#1220797).
- commit 2229de3</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640003">- selftests/bpf: Add test for alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- bpf: Reject variable offset alu on PTR_TO_FLOW_KEYS (bsc#1220255
  CVE-2024-26589).
- commit 8a833ce</changelog>
  <changelog author="shung-hsi.yu@suse.com" date="1709640004">- bpf: Fix re-attachment branch in bpf_tracing_prog_attach
  (bsc#1220254 CVE-2024-26591).
- commit fc948d3</changelog>
  <changelog author="mbrugger@suse.com" date="1709640005">- mfd: syscon: Fix null pointer dereference in
  of_syscon_register() (bsc#1220433 CVE-2023-52467).
- commit b0262b8</changelog>
  <changelog author="jslaby@suse.cz" date="1709640006">- Update
  patches.suse/vt-fix-memory-overlapping-when-deleting-chars-in-the.patch
  (git-fixes bsc#1220845 CVE-2022-48627).
- Update
  patches.suse/x86-srso-add-srso-mitigation-for-hygon-processors.patch
  (git-fixes bsc#1220735 CVE-2023-52482).
  Add CVE references.
- commit dcdac38</changelog>
  <changelog author="pjakobsson@suse.de" date="1709640007">- drm/bridge: sii902x: Fix probing race issue (bsc#1220736 CVE-2024-26607).
- commit 70198c4</changelog>
  <changelog author="tiwai@suse.de" date="1709640008">- Update patch reference for pinctrl fix (CVE-2021-47083 bsc#1220917)
- commit b608623</changelog>
  <changelog author="tiwai@suse.de" date="1709640009">- Update patch reference for iwlwifi fix (CVE-2023-52531 bsc#1220931)
- commit bde87cf</changelog>
  <changelog author="tiwai@suse.de" date="1709640010">- wifi: mac80211: fix potential key use-after-free (CVE-2023-52530
  bsc#1220930).
- commit 3feca94</changelog>
  <changelog author="jdelvare@suse.de" date="1709640011">- Update patches.suse/i2c-validate-user-data-in-compat-ioctl.patch
  (git-fixes bsc#1220469 CVE-2021-46934).
  Add bug and CVE references.
- commit 3a04060</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640012">- Documentation/hw-vuln: Add documentation for RFDS (bsc#1213456 CVE-2023-28746).
- commit 81de603</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640013">- x86/rfds: Mitigate Register File Data Sampling (RFDS)  (bsc#1213456 CVE-2023-28746).
- Update config files.
- commit 29c1c99</changelog>
  <changelog author="nik.borisov@suse.com" date="1709640014">- KVM: x86: Export RFDS_NO and RFDS_CLEAR to guests (bsc#1213456 CVE-2023-28746).
- commit 4aebf4f</changelog>
  <changelog author="msuchanek@suse.de" date="1709640015">- Refresh patches.suse/0001-powerpc-pseries-memhp-Fix-access-beyond-end-of-drmem.patch.
  - update to upstream version
  - rename to same name as SLE15 SP5
- commit 1d2def1</changelog>
  <changelog author="jroedel@suse.de" date="1709726400">- iommu/vt-d: Avoid memory allocation in iommu_suspend()
  (CVE-2023-52559 bsc#1220933).
- commit c9b01ef</changelog>
  <changelog author="jlee@suse.com" date="1709726401">- efivarfs: force RO when remounting if SetVariable is not
  supported (bsc#1220328 CVE-2023-52463).
- commit eed7fb0</changelog>
  <changelog author="jlee@suse.com" date="1709726402">- aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
  (bsc#1218562 CVE-2023-6270).
- commit 57a4cd4</changelog>
</package>
<package pkgid="7f35985f43039e61806695d5b423765d30b613bd72f6290820ced7160f785d86" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.76.1"/>
  <changelog author="jslaby@suse.cz" date="1709812800">- mm,ima,kexec,of: use memblock_free_late from
  ima_free_kexec_buffer (bsc#1220872 CVE-2023-52576).
- commit b1b1c9a</changelog>
  <changelog author="msuchanek@suse.de" date="1709812801">- group-source-files.pl: Quote filenames (boo#1221077).
  The kernel source now contains a file with a space in the name.
  Add quotes in group-source-files.pl to avoid splitting the filename.
  Also use -print0 / -0 when updating timestamps.
- commit a005e42</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899200">- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (bsc#1220411 CVE-2023-52469).
- commit f4f0cf4</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899201">- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (bsc#1220413 CVE-2023-52470).
- commit 9d7d799</changelog>
  <changelog author="oneukum@suse.com" date="1710158400">- Update
  patches.suse/usb-hub-Guard-against-accesses-to-uninitialized-BOS-.patch
  (bsc#1220790 CVE-2023-52477).
- commit d33bab7</changelog>
  <changelog author="jslaby@suse.cz" date="1710244800">- Refresh
  patches.suse/mm-ima-kexec-of-use-memblock_free_late-from-ima_free.patch.
  Fix:
  * Section mismatch (function ima_free_kexec_buffer()) in modpost: vmlinux.o in ima_free_kexec_buffer()
  WARNING: modpost: vmlinux.o(.text+0xac1250): Section mismatch in reference from the function ima_free_kexec_buffer() to the function .init.text:__memblock_free_late()
- commit 5522f01</changelog>
  <changelog author="lhenriques@suse.de" date="1710244801">- netfs: Only call folio_start_fscache() one time for each folio
  (CVE-2023-52582 bsc#1220878).
- commit dfd082b</changelog>
  <changelog author="lhenriques@suse.de" date="1710244802">- ceph: fix deadlock or deadcode of misusing dget() (bsc#1221058
  CVE-2023-52583).
- commit 1a81018</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1710331200">- Refresh patches.kabi/team-Hide-new-member-header-ops.patch.
  Fix for kABI workaround.
- commit 6ba2f5d</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417600">- Sort upstream patches
- Refresh
  patches.suse/Documentation-hw-vuln-Add-documentation-for-RFDS.patch.
- Refresh
  patches.suse/KVM-x86-Export-RFDS_NO-and-RFDS_CLEAR-to-guests.patch.
- Refresh
  patches.suse/x86-entry-ia32-Ensure-s32-is-sign-extended-to-s64.patch.
- Refresh
  patches.suse/x86-rfds-Mitigate-Register-File-Data-Sampling-RFDS.patch.
- commit f172e12</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417601">- x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is  set (bsc#1213456 CVE-2023-28746).
- commit 4fed4e6</changelog>
  <changelog author="tonyj@suse.de" date="1710504000">- perf/x86/intel/uncore: Fix NULL pointer dereference issue in
  upi_fill_topology() (bsc#1220237, CVE-2023-52450).
- commit 246b58a</changelog>
  <changelog author="iivanov@suse.de" date="1711108800">- dmaengine: fix NULL pointer in channel unregistration function (bsc#1221276 CVE-2023-52492)
- commit f21c2ab</changelog>
  <changelog author="mkoutny@suse.com" date="1711540800">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-harden-detection-of-controll.patch
  (git-fixes CVE-2021-46926 bsc#1220478).
- Update
  patches.suse/ALSA-rawmidi-fix-the-uninitalized-user_pversion.patch
  (git-fixes CVE-2021-47096 bsc#1220981).
- Update
  patches.suse/IB-qib-Fix-memory-leak-in-qib_user_sdma_queue_pkts.patch
  (git-fixes CVE-2021-47104 bsc#1220960).
- Update
  patches.suse/Input-elantech-fix-stack-out-of-bound-access-in-elan.patch
  (git-fixes CVE-2021-47097 bsc#1220982).
- Update
  patches.suse/KVM-x86-mmu-Don-t-advance-iterator-after-restart-due.patch
  (git-fixes CVE-2021-47094 bsc#1221551).
- Update patches.suse/NFSD-Fix-READDIR-buffer-overflow.patch
  (git-fixes bsc#1196346 CVE-2021-47107 bsc#1220965).
- Update
  patches.suse/asix-fix-uninit-value-in-asix_mdio_read.patch
  (git-fixes CVE-2021-47101 bsc#1220987).
- Update
  patches.suse/drm-mediatek-hdmi-Perform-NULL-pointer-check-for-mtk.patch
  (git-fixes CVE-2021-47108 bsc#1220986).
- Update
  patches.suse/hwmon-lm90-Prevent-integer-overflow-underflow-in-hys.patch
  (git-fixes CVE-2021-47098 bsc#1220983).
- Update
  patches.suse/ipmi-Fix-UAF-when-uninstall-ipmi_si-and-ipmi_msghand.patch
  (git-fixes CVE-2021-47100 bsc#1220985).
- Update
  patches.suse/ipmi-ssif-initialize-ssif_info-client-early.patch
  (bsc#1193490 CVE-2021-47095 bsc#1220979).
- Update
  patches.suse/mac80211-fix-locking-in-ieee80211_start_ap-error-pat.patch
  (git-fixes CVE-2021-47091 bsc#1220959).
- Update
  patches.suse/net-fix-use-after-free-in-tw_timer_handler.patch
  (bsc#1217195 CVE-2021-46936 bsc#1220439).
- Update
  patches.suse/net-marvell-prestera-fix-incorrect-structure-access.patch
  (git-fixes CVE-2021-47102 bsc#1221009).
- Update
  patches.suse/net-smc-fix-kernel-panic-caused-by-race-of-smc_sock
  (git-fixes CVE-2021-46925 bsc#1220466).
- Update
  patches.suse/nitro_enclaves-Use-get_user_pages_unlocked-call-to-handle-mmap-assert.patch
  (git fixes (mm/gup) CVE-2021-46927 bsc#1220443).
- Update
  patches.suse/platform-x86-intel_pmc_core-fix-memleak-on-registrat.patch
  (git-fixes CVE-2021-47093 bsc#1220978).
- Update patches.suse/sctp-use-call_rcu-to-free-endpoint.patch
  (CVE-2022-20154 bsc#1200599 CVE-2021-46929 bsc#1220482).
- Update patches.suse/tee-optee-Fix-incorrect-page-free-bug.patch
  (jsc#SLE-21844 CVE-2021-47087 bsc#1220954).
- Update
  patches.suse/tun-avoid-double-free-in-tun_free_netdev.patch
  (bsc#1209635 CVE-2022-4744 git-fixes CVE-2021-47082
  bsc#1220969).
- Update
  patches.suse/usb-gadget-f_fs-Clear-ffs_eventfd-in-ffs_data_clear.patch
  (git-fixes CVE-2021-46933 bsc#1220487).
- Update patches.suse/usb-mtu3-fix-list_head-check-warning.patch
  (git-fixes CVE-2021-46930 bsc#1220484).
- Update
  patches.suse/veth-ensure-skb-entering-GRO-are-not-cloned.patch
  (git-fixes CVE-2021-47099 bsc#1220955).
- commit b15f74e</changelog>
  <changelog author="mkoutny@suse.com" date="1711540801">- Update patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
  (bsc#1194516 CVE-2022-0487 CVE-2022-48626 bsc#1220366).
- Update
  patches.suse/crypto-qcom-rng-ensure-buffer-for-generate-is-comple.patch
  (git-fixes CVE-2022-48629 bsc#1220989).
- Update
  patches.suse/crypto-qcom-rng-fix-infinite-loop-on-requests-not-mu.patch
  (git-fixes CVE-2022-48630 bsc#1220990).
- commit f8cf886</changelog>
  <changelog author="mkoutny@suse.com" date="1711540802">- Update
  patches.suse/HID-intel-ish-hid-ipc-Disable-and-reenable-ACPI-GPE-.patch
  (git-fixes CVE-2023-52519 bsc#1220920).
- Update
  patches.suse/HID-sony-Fix-a-potential-memory-leak-in-sony_probe.patch
  (git-fixes CVE-2023-52529 bsc#1220929).
- Update
  patches.suse/IB-hfi1-Fix-bugs-with-non-PAGE_SIZE-end-multi-iovec-.patch
  (git-fixes CVE-2023-52474 bsc#1220445).
- Update
  patches.suse/RDMA-siw-Fix-connection-failure-handling.patch
  (git-fixes CVE-2023-52513 bsc#1221022).
- Update
  patches.suse/RDMA-srp-Do-not-call-scsi_done-from-srp_abort.patch
  (git-fixes CVE-2023-52515 bsc#1221048).
- Update
  patches.suse/Revert-tty-n_gsm-fix-UAF-in-gsm_cleanup_mux.patch
  (git-fixes CVE-2023-52564 bsc#1220938).
- Update
  patches.suse/bpf-Check-rcu_read_lock_trace_held-before-calling-bp.patch
  (bsc#1220251 CVE-2023-52447 CVE-2023-52621 bsc#1222073).
- Update
  patches.suse/ieee802154-ca8210-Fix-a-potential-UAF-in-ca8210_prob.patch
  (git-fixes CVE-2023-52510 bsc#1220898).
- Update
  patches.suse/net-nfc-llcp-Add-lock-when-modifying-device-list.patch
  (git-fixes CVE-2023-52524 bsc#1220927).
- Update
  patches.suse/net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch
  (git-fixes CVE-2023-52528 bsc#1220843).
- Update
  patches.suse/nfc-nci-assert-requested-protocol-is-valid.patch
  (git-fixes CVE-2023-52507 bsc#1220833).
- Update
  patches.suse/nilfs2-fix-potential-use-after-free-in-nilfs_gccache.patch
  (git-fixes CVE-2023-52566 bsc#1220940).
- Update
  patches.suse/nvme-fc-Prevent-null-pointer-dereference-in-nvme_fc_.patch
  (bsc#1214842 CVE-2023-52508 bsc#1221015).
- Update
  patches.suse/nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva.patch
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356 CVE-2023-52454 bsc#1220320).
- Update
  patches.suse/platform-x86-think-lmi-Fix-reference-leak.patch
  (git-fixes CVE-2023-52520 bsc#1220921).
- Update
  patches.suse/ravb-Fix-use-after-free-issue-in-ravb_tx_timeout_wor.patch
  (bsc#1212514 CVE-2023-35827 CVE-2023-52509 bsc#1220836).
- Update
  patches.suse/ring-buffer-Do-not-attempt-to-read-past-commit.patch
  (git-fixes CVE-2023-52501 bsc#1220885).
- Update
  patches.suse/serial-8250_port-Check-IRQ-data-before-use.patch
  (git-fixes CVE-2023-52567 bsc#1220839).
- Update
  patches.suse/spi-sun6i-fix-race-between-DMA-RX-transfer-completio.patch
  (git-fixes CVE-2023-52517 bsc#1221055).
- Update
  patches.suse/spi-sun6i-reduce-DMA-RX-transfer-width-to-single-byt.patch
  (git-fixes CVE-2023-52511 bsc#1221012).
- Update
  patches.suse/wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_proc.patch
  (git-fixes CVE-2023-52525 bsc#1220840).
- Update
  patches.suse/x86-alternatives-disable-kasan-in-apply_alternatives.patch
  (git-fixes CVE-2023-52504 bsc#1221553).
- Update
  patches.suse/x86-srso-fix-sbpb-enablement-for-spec_rstack_overflow-off.patch
  (git-fixes CVE-2023-52575 bsc#1220871).
- commit 5f353b0</changelog>
  <changelog author="mkoutny@suse.com" date="1711713600">- README.BRANCH: Remove copy of branch name
- commit 704bda3</changelog>
  <changelog author="mkoutny@suse.com" date="1711713601">- README.BRANCH: Remove copy of branch name
- commit 4834fba</changelog>
  <changelog author="jroedel@suse.de" date="1712059200">- x86/sev: Harden #VC instruction emulation somewhat (CVE-2024-25742 bsc#1221725).
- commit 2e3eba1</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 900d642</changelog>
</package>
<package pkgid="08db725a79ff3eaba14e6d5793b019dd61a08e3f7904be3644b36ba0626e7998" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.76.1"/>
  <changelog author="jslaby@suse.cz" date="1709812800">- mm,ima,kexec,of: use memblock_free_late from
  ima_free_kexec_buffer (bsc#1220872 CVE-2023-52576).
- commit b1b1c9a</changelog>
  <changelog author="msuchanek@suse.de" date="1709812801">- group-source-files.pl: Quote filenames (boo#1221077).
  The kernel source now contains a file with a space in the name.
  Add quotes in group-source-files.pl to avoid splitting the filename.
  Also use -print0 / -0 when updating timestamps.
- commit a005e42</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899200">- drivers/amd/pm: fix a use-after-free in kv_parse_power_table (bsc#1220411 CVE-2023-52469).
- commit f4f0cf4</changelog>
  <changelog author="pjakobsson@suse.de" date="1709899201">- drm/radeon: check the alloc_workqueue return value in radeon_crtc_init() (bsc#1220413 CVE-2023-52470).
- commit 9d7d799</changelog>
  <changelog author="oneukum@suse.com" date="1710158400">- Update
  patches.suse/usb-hub-Guard-against-accesses-to-uninitialized-BOS-.patch
  (bsc#1220790 CVE-2023-52477).
- commit d33bab7</changelog>
  <changelog author="jslaby@suse.cz" date="1710244800">- Refresh
  patches.suse/mm-ima-kexec-of-use-memblock_free_late-from-ima_free.patch.
  Fix:
  * Section mismatch (function ima_free_kexec_buffer()) in modpost: vmlinux.o in ima_free_kexec_buffer()
  WARNING: modpost: vmlinux.o(.text+0xac1250): Section mismatch in reference from the function ima_free_kexec_buffer() to the function .init.text:__memblock_free_late()
- commit 5522f01</changelog>
  <changelog author="lhenriques@suse.de" date="1710244801">- netfs: Only call folio_start_fscache() one time for each folio
  (CVE-2023-52582 bsc#1220878).
- commit dfd082b</changelog>
  <changelog author="lhenriques@suse.de" date="1710244802">- ceph: fix deadlock or deadcode of misusing dget() (bsc#1221058
  CVE-2023-52583).
- commit 1a81018</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1710331200">- Refresh patches.kabi/team-Hide-new-member-header-ops.patch.
  Fix for kABI workaround.
- commit 6ba2f5d</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417600">- Sort upstream patches
- Refresh
  patches.suse/Documentation-hw-vuln-Add-documentation-for-RFDS.patch.
- Refresh
  patches.suse/KVM-x86-Export-RFDS_NO-and-RFDS_CLEAR-to-guests.patch.
- Refresh
  patches.suse/x86-entry-ia32-Ensure-s32-is-sign-extended-to-s64.patch.
- Refresh
  patches.suse/x86-rfds-Mitigate-Register-File-Data-Sampling-RFDS.patch.
- commit f172e12</changelog>
  <changelog author="nik.borisov@suse.com" date="1710417601">- x86/mmio: Disable KVM mitigation when X86_FEATURE_CLEAR_CPU_BUF is  set (bsc#1213456 CVE-2023-28746).
- commit 4fed4e6</changelog>
  <changelog author="tonyj@suse.de" date="1710504000">- perf/x86/intel/uncore: Fix NULL pointer dereference issue in
  upi_fill_topology() (bsc#1220237, CVE-2023-52450).
- commit 246b58a</changelog>
  <changelog author="iivanov@suse.de" date="1711108800">- dmaengine: fix NULL pointer in channel unregistration function (bsc#1221276 CVE-2023-52492)
- commit f21c2ab</changelog>
  <changelog author="mkoutny@suse.com" date="1711540800">- Update
  patches.suse/ALSA-hda-intel-sdw-acpi-harden-detection-of-controll.patch
  (git-fixes CVE-2021-46926 bsc#1220478).
- Update
  patches.suse/ALSA-rawmidi-fix-the-uninitalized-user_pversion.patch
  (git-fixes CVE-2021-47096 bsc#1220981).
- Update
  patches.suse/IB-qib-Fix-memory-leak-in-qib_user_sdma_queue_pkts.patch
  (git-fixes CVE-2021-47104 bsc#1220960).
- Update
  patches.suse/Input-elantech-fix-stack-out-of-bound-access-in-elan.patch
  (git-fixes CVE-2021-47097 bsc#1220982).
- Update
  patches.suse/KVM-x86-mmu-Don-t-advance-iterator-after-restart-due.patch
  (git-fixes CVE-2021-47094 bsc#1221551).
- Update patches.suse/NFSD-Fix-READDIR-buffer-overflow.patch
  (git-fixes bsc#1196346 CVE-2021-47107 bsc#1220965).
- Update
  patches.suse/asix-fix-uninit-value-in-asix_mdio_read.patch
  (git-fixes CVE-2021-47101 bsc#1220987).
- Update
  patches.suse/drm-mediatek-hdmi-Perform-NULL-pointer-check-for-mtk.patch
  (git-fixes CVE-2021-47108 bsc#1220986).
- Update
  patches.suse/hwmon-lm90-Prevent-integer-overflow-underflow-in-hys.patch
  (git-fixes CVE-2021-47098 bsc#1220983).
- Update
  patches.suse/ipmi-Fix-UAF-when-uninstall-ipmi_si-and-ipmi_msghand.patch
  (git-fixes CVE-2021-47100 bsc#1220985).
- Update
  patches.suse/ipmi-ssif-initialize-ssif_info-client-early.patch
  (bsc#1193490 CVE-2021-47095 bsc#1220979).
- Update
  patches.suse/mac80211-fix-locking-in-ieee80211_start_ap-error-pat.patch
  (git-fixes CVE-2021-47091 bsc#1220959).
- Update
  patches.suse/net-fix-use-after-free-in-tw_timer_handler.patch
  (bsc#1217195 CVE-2021-46936 bsc#1220439).
- Update
  patches.suse/net-marvell-prestera-fix-incorrect-structure-access.patch
  (git-fixes CVE-2021-47102 bsc#1221009).
- Update
  patches.suse/net-smc-fix-kernel-panic-caused-by-race-of-smc_sock
  (git-fixes CVE-2021-46925 bsc#1220466).
- Update
  patches.suse/nitro_enclaves-Use-get_user_pages_unlocked-call-to-handle-mmap-assert.patch
  (git fixes (mm/gup) CVE-2021-46927 bsc#1220443).
- Update
  patches.suse/platform-x86-intel_pmc_core-fix-memleak-on-registrat.patch
  (git-fixes CVE-2021-47093 bsc#1220978).
- Update patches.suse/sctp-use-call_rcu-to-free-endpoint.patch
  (CVE-2022-20154 bsc#1200599 CVE-2021-46929 bsc#1220482).
- Update patches.suse/tee-optee-Fix-incorrect-page-free-bug.patch
  (jsc#SLE-21844 CVE-2021-47087 bsc#1220954).
- Update
  patches.suse/tun-avoid-double-free-in-tun_free_netdev.patch
  (bsc#1209635 CVE-2022-4744 git-fixes CVE-2021-47082
  bsc#1220969).
- Update
  patches.suse/usb-gadget-f_fs-Clear-ffs_eventfd-in-ffs_data_clear.patch
  (git-fixes CVE-2021-46933 bsc#1220487).
- Update patches.suse/usb-mtu3-fix-list_head-check-warning.patch
  (git-fixes CVE-2021-46930 bsc#1220484).
- Update
  patches.suse/veth-ensure-skb-entering-GRO-are-not-cloned.patch
  (git-fixes CVE-2021-47099 bsc#1220955).
- commit b15f74e</changelog>
  <changelog author="mkoutny@suse.com" date="1711540801">- Update patches.suse/0001-mmc-moxart_remove-Fix-UAF.patch
  (bsc#1194516 CVE-2022-0487 CVE-2022-48626 bsc#1220366).
- Update
  patches.suse/crypto-qcom-rng-ensure-buffer-for-generate-is-comple.patch
  (git-fixes CVE-2022-48629 bsc#1220989).
- Update
  patches.suse/crypto-qcom-rng-fix-infinite-loop-on-requests-not-mu.patch
  (git-fixes CVE-2022-48630 bsc#1220990).
- commit f8cf886</changelog>
  <changelog author="mkoutny@suse.com" date="1711540802">- Update
  patches.suse/HID-intel-ish-hid-ipc-Disable-and-reenable-ACPI-GPE-.patch
  (git-fixes CVE-2023-52519 bsc#1220920).
- Update
  patches.suse/HID-sony-Fix-a-potential-memory-leak-in-sony_probe.patch
  (git-fixes CVE-2023-52529 bsc#1220929).
- Update
  patches.suse/IB-hfi1-Fix-bugs-with-non-PAGE_SIZE-end-multi-iovec-.patch
  (git-fixes CVE-2023-52474 bsc#1220445).
- Update
  patches.suse/RDMA-siw-Fix-connection-failure-handling.patch
  (git-fixes CVE-2023-52513 bsc#1221022).
- Update
  patches.suse/RDMA-srp-Do-not-call-scsi_done-from-srp_abort.patch
  (git-fixes CVE-2023-52515 bsc#1221048).
- Update
  patches.suse/Revert-tty-n_gsm-fix-UAF-in-gsm_cleanup_mux.patch
  (git-fixes CVE-2023-52564 bsc#1220938).
- Update
  patches.suse/bpf-Check-rcu_read_lock_trace_held-before-calling-bp.patch
  (bsc#1220251 CVE-2023-52447 CVE-2023-52621 bsc#1222073).
- Update
  patches.suse/ieee802154-ca8210-Fix-a-potential-UAF-in-ca8210_prob.patch
  (git-fixes CVE-2023-52510 bsc#1220898).
- Update
  patches.suse/net-nfc-llcp-Add-lock-when-modifying-device-list.patch
  (git-fixes CVE-2023-52524 bsc#1220927).
- Update
  patches.suse/net-usb-smsc75xx-Fix-uninit-value-access-in-__smsc75.patch
  (git-fixes CVE-2023-52528 bsc#1220843).
- Update
  patches.suse/nfc-nci-assert-requested-protocol-is-valid.patch
  (git-fixes CVE-2023-52507 bsc#1220833).
- Update
  patches.suse/nilfs2-fix-potential-use-after-free-in-nilfs_gccache.patch
  (git-fixes CVE-2023-52566 bsc#1220940).
- Update
  patches.suse/nvme-fc-Prevent-null-pointer-dereference-in-nvme_fc_.patch
  (bsc#1214842 CVE-2023-52508 bsc#1221015).
- Update
  patches.suse/nvmet-tcp-Fix-a-kernel-panic-when-host-sends-an-inva.patch
  (bsc#1217987 bsc#1217988 bsc#1217989 CVE-2023-6535 CVE-2023-6536
  CVE-2023-6356 CVE-2023-52454 bsc#1220320).
- Update
  patches.suse/platform-x86-think-lmi-Fix-reference-leak.patch
  (git-fixes CVE-2023-52520 bsc#1220921).
- Update
  patches.suse/ravb-Fix-use-after-free-issue-in-ravb_tx_timeout_wor.patch
  (bsc#1212514 CVE-2023-35827 CVE-2023-52509 bsc#1220836).
- Update
  patches.suse/ring-buffer-Do-not-attempt-to-read-past-commit.patch
  (git-fixes CVE-2023-52501 bsc#1220885).
- Update
  patches.suse/serial-8250_port-Check-IRQ-data-before-use.patch
  (git-fixes CVE-2023-52567 bsc#1220839).
- Update
  patches.suse/spi-sun6i-fix-race-between-DMA-RX-transfer-completio.patch
  (git-fixes CVE-2023-52517 bsc#1221055).
- Update
  patches.suse/spi-sun6i-reduce-DMA-RX-transfer-width-to-single-byt.patch
  (git-fixes CVE-2023-52511 bsc#1221012).
- Update
  patches.suse/wifi-mwifiex-Fix-oob-check-condition-in-mwifiex_proc.patch
  (git-fixes CVE-2023-52525 bsc#1220840).
- Update
  patches.suse/x86-alternatives-disable-kasan-in-apply_alternatives.patch
  (git-fixes CVE-2023-52504 bsc#1221553).
- Update
  patches.suse/x86-srso-fix-sbpb-enablement-for-spec_rstack_overflow-off.patch
  (git-fixes CVE-2023-52575 bsc#1220871).
- commit 5f353b0</changelog>
  <changelog author="mkoutny@suse.com" date="1711713600">- README.BRANCH: Remove copy of branch name
- commit 704bda3</changelog>
  <changelog author="mkoutny@suse.com" date="1711713601">- README.BRANCH: Remove copy of branch name
- commit 4834fba</changelog>
  <changelog author="jroedel@suse.de" date="1712059200">- x86/sev: Harden #VC instruction emulation somewhat (CVE-2024-25742 bsc#1221725).
- commit 2e3eba1</changelog>
  <changelog author="jslaby@suse.cz" date="1712836800">- tty: n_gsm: require CAP_NET_ADMIN to attach N_GSM0710 ldisc
  (bsc#1222619).
- commit 900d642</changelog>
</package>
<package pkgid="f14862c3c42d4fece2cc88797f4bf0350e5db3ea8079e17f965f6bb5e0e6811f" name="kernel-rt" arch="src">
  <version epoch="0" ver="5.14.21" rel="150400.15.79.1"/>
  <changelog author="vkarasulli@suse.de" date="1714478400">- Update
  patches.suse/ice-Don-t-double-unplug-aux-on-peer-initiated-reset.patch
  (git-fixes CVE-2022-48653 bsc#1223474).
- commit dba84ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478401">- Update
  patches.suse/dmaengine-ti-k3-udma-private-Fix-refcount-leak-bug-i.patch
  (git-fixes CVE-2022-48656 bsc#1223479).
- commit 90546f3</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478402">- Update
  patches.suse/netfilter-nfnetlink_osf-fix-possible-bogus-match-in-.patch
  (bsc#1204614 CVE-2022-48654 bsc#1223482).
- commit a8a2952</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478403">- Update
  patches.suse/arm64-topology-fix-possible-overflow-in-amu_fie_setu.patch
  (git-fixes CVE-2022-48657 bsc#1223484).
- commit d7e1659</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478404">- Update
  patches.suse/gpiolib-cdev-Set-lineevent_state-irq-after-IRQ-regis.patch
  (git-fixes CVE-2022-48660 bsc#1223487).
- commit 30d7811</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478405">- Update
  patches.suse/sfc-fix-null-pointer-dereference-in-efx_hard_start_x.patch
  (git-fixes CVE-2022-48648 bsc#1223503).
- commit 2cd307a</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478406">- Update
  patches.suse/scsi-qla2xxx-Fix-memory-leak-in-__qlt_24xx_handle_ab.patch
  (bsc#1203935 CVE-2022-48650 bsc#1223509).
- commit ecd523c</changelog>
  <changelog author="tiwai@suse.de" date="1714651200">- drm/i915/gem: Really move i915_gem_context.link under ref
  protection (CVE-2022-48662 bsc#1223505).
- commit 1ea0422</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651201">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-collapse-range.patch
  (bsc#1193629 CVE-2022-48668 bsc#1223516).
- commit ea57df6</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651202">- Update
  patches.suse/bnxt-prevent-skb-UAF-after-handing-over-to-PTP-worke.patch
  (jsc#SLE-18978 CVE-2022-48637 bsc#1223517).
- commit 8af9f52</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651203">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-insert-range.patch
  (bsc#1193629 CVE-2022-48667 bsc#1223518).
- commit 2544640</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651204">- Update
  patches.suse/sfc-fix-TX-channel-offset-when-using-legacy-interrup.patch
  (git-fixes CVE-2022-48647 bsc#1223519).
- commit 2df3009</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651205">- Update
  patches.suse/cgroup-cgroup_get_from_id-must-check-the-looked-up-kn-is-a-directory.patch
  (bsc#1203906 CVE-2022-48638 bsc#1223522).
- commit 1b1d545</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651206">- Update
  patches.suse/gpio-mockup-fix-NULL-pointer-dereference-when-removi.patch
  (git-fixes CVE-2022-48663 bsc#1223523).
- commit fb50f4d</changelog>
  <changelog author="tiwai@suse.de" date="1714651207">- media: cec: abort if the current transmit was canceled
  (CVE-2024-23848 bsc#1219104).
- commit f23b730</changelog>
  <changelog author="tiwai@suse.de" date="1714651208">- kABI workaround for cec_adapter (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid confusing "transmit timed out" message
  (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid recursive cec_claim_log_addrs
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-api: add locking in cec_release()
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  (CVE-2024-23848 bsc#1219104).
- commit 5f84bce</changelog>
  <changelog author="colyli@suse.de" date="1714651209">- md/raid5: fix atomicity violation in raid5_cache_count
  (bsc#1219169, CVE-2024-23307).
- commit d2d22f0</changelog>
  <changelog author="lhenriques@suse.de" date="1714737600">- Update
  patches.suse/ext4-fix-bug-in-extents-parsing-when-eh_entries-0-an.patch
  (bsc#1206881 bsc#1223475 CVE-2022-48631).
- commit 718df1c</changelog>
  <changelog author="tiwai@suse.de" date="1714737601">- media: edia: dvbdev: fix a use-after-free (CVE-2024-27043
  bsc#1223824).
- commit e3d9ce5</changelog>
  <changelog author="ddiss@suse.de" date="1714996800">- pstore: inode: Only d_invalidate() is needed (bsc#1223705
  CVE-2024-27389).
- commit bbe965a</changelog>
</package>
<package pkgid="c6a7fa362e9cc683ad14a1e6d7ea7125d8fb73d0cfd5f3539aa4aa285c454cb6" name="kernel-rt" arch="x86_64">
  <version epoch="0" ver="5.14.21" rel="150400.15.79.1"/>
  <changelog author="vkarasulli@suse.de" date="1714478400">- Update
  patches.suse/ice-Don-t-double-unplug-aux-on-peer-initiated-reset.patch
  (git-fixes CVE-2022-48653 bsc#1223474).
- commit dba84ad</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478401">- Update
  patches.suse/dmaengine-ti-k3-udma-private-Fix-refcount-leak-bug-i.patch
  (git-fixes CVE-2022-48656 bsc#1223479).
- commit 90546f3</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478402">- Update
  patches.suse/netfilter-nfnetlink_osf-fix-possible-bogus-match-in-.patch
  (bsc#1204614 CVE-2022-48654 bsc#1223482).
- commit a8a2952</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478403">- Update
  patches.suse/arm64-topology-fix-possible-overflow-in-amu_fie_setu.patch
  (git-fixes CVE-2022-48657 bsc#1223484).
- commit d7e1659</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478404">- Update
  patches.suse/gpiolib-cdev-Set-lineevent_state-irq-after-IRQ-regis.patch
  (git-fixes CVE-2022-48660 bsc#1223487).
- commit 30d7811</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478405">- Update
  patches.suse/sfc-fix-null-pointer-dereference-in-efx_hard_start_x.patch
  (git-fixes CVE-2022-48648 bsc#1223503).
- commit 2cd307a</changelog>
  <changelog author="vkarasulli@suse.de" date="1714478406">- Update
  patches.suse/scsi-qla2xxx-Fix-memory-leak-in-__qlt_24xx_handle_ab.patch
  (bsc#1203935 CVE-2022-48650 bsc#1223509).
- commit ecd523c</changelog>
  <changelog author="tiwai@suse.de" date="1714651200">- drm/i915/gem: Really move i915_gem_context.link under ref
  protection (CVE-2022-48662 bsc#1223505).
- commit 1ea0422</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651201">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-collapse-range.patch
  (bsc#1193629 CVE-2022-48668 bsc#1223516).
- commit ea57df6</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651202">- Update
  patches.suse/bnxt-prevent-skb-UAF-after-handing-over-to-PTP-worke.patch
  (jsc#SLE-18978 CVE-2022-48637 bsc#1223517).
- commit 8af9f52</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651203">- Update
  patches.suse/smb3-fix-temporary-data-corruption-in-insert-range.patch
  (bsc#1193629 CVE-2022-48667 bsc#1223518).
- commit 2544640</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651204">- Update
  patches.suse/sfc-fix-TX-channel-offset-when-using-legacy-interrup.patch
  (git-fixes CVE-2022-48647 bsc#1223519).
- commit 2df3009</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651205">- Update
  patches.suse/cgroup-cgroup_get_from_id-must-check-the-looked-up-kn-is-a-directory.patch
  (bsc#1203906 CVE-2022-48638 bsc#1223522).
- commit 1b1d545</changelog>
  <changelog author="vkarasulli@suse.de" date="1714651206">- Update
  patches.suse/gpio-mockup-fix-NULL-pointer-dereference-when-removi.patch
  (git-fixes CVE-2022-48663 bsc#1223523).
- commit fb50f4d</changelog>
  <changelog author="tiwai@suse.de" date="1714651207">- media: cec: abort if the current transmit was canceled
  (CVE-2024-23848 bsc#1219104).
- commit f23b730</changelog>
  <changelog author="tiwai@suse.de" date="1714651208">- kABI workaround for cec_adapter (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid confusing "transmit timed out" message
  (CVE-2024-23848 bsc#1219104).
- media: cec: core: avoid recursive cec_claim_log_addrs
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-api: add locking in cec_release()
  (CVE-2024-23848 bsc#1219104).
- media: cec: cec-adap: always cancel work in cec_transmit_msg_fh
  (CVE-2024-23848 bsc#1219104).
- commit 5f84bce</changelog>
  <changelog author="colyli@suse.de" date="1714651209">- md/raid5: fix atomicity violation in raid5_cache_count
  (bsc#1219169, CVE-2024-23307).
- commit d2d22f0</changelog>
  <changelog author="lhenriques@suse.de" date="1714737600">- Update
  patches.suse/ext4-fix-bug-in-extents-parsing-when-eh_entries-0-an.patch
  (bsc#1206881 bsc#1223475 CVE-2022-48631).
- commit 718df1c</changelog>
  <changelog author="tiwai@suse.de" date="1714737601">- media: edia: dvbdev: fix a use-after-free (CVE-2024-27043
  bsc#1223824).
- commit e3d9ce5</changelog>
  <changelog author="ddiss@suse.de" date="1714996800">- pstore: inode: Only d_invalidate() is needed (bsc#1223705
  CVE-2024-27389).
- commit bbe965a</changelog>
</package>
<package pkgid="9265b8821318860f1a225c0bdeff3b27343ee11057ef62f11b67fcb8f161b3a3" name="kpartx" arch="aarch64">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="90134e8bcbb6bb859d903f5d2117bb0dc2833d28a728f9d51bd0f508e68950ea" name="kpartx" arch="s390x">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="9cd466758af007f16ea956eb305b61167178e0fc1ad88689fc859ee571965b57" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="a2193d505239da7e6832d89f0517e3d34e7013da4b78d1891552173478cfdeca" name="kpartx" arch="aarch64">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="efe25c9873d93908d4c3fb0ee13312259c1fd58ee595c7f253611e1b7e091245" name="kpartx" arch="s390x">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="dc2cf535d0bbee08a5042903d3cb0e8b46d9c533bb0cdb743511df08cfcf4975" name="kpartx" arch="x86_64">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="cc2fcf3e0902b9ed5f7d4604aaa8ac5a0ccbd76ffce0732b6a11d3e8cfa3f54d" name="krb5" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0011-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
</package>
<package pkgid="e71e332d3a86bc81e1340fdb6d3d053c69cd5a94196e2dd0fa18a7b0b9decc27" name="krb5" arch="s390x">
  <version epoch="0" ver="1.19.2" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0011-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
</package>
<package pkgid="8e753c36fe93aa3104d3903091b6594da345b5d64a16eae41083e0ec4ba54f64" name="krb5" arch="src">
  <version epoch="0" ver="1.19.2" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0011-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
</package>
<package pkgid="2a53e70bdc9fdd17cb9c2ee5980d5d3f8d38c6f00354cb976237f9bda9a541be" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1506340800">- Upgrade to 1.15.2
  * Fix a KDC denial of service vulnerability caused by unset status
    strings [CVE-2017-11368]
  * Preserve GSS contexts on init/accept failure [CVE-2017-11462]
  * Fix kadm5 setkey operation with LDAP KDB module
  * Use a ten-second timeout after successful connection for HTTPS KDC
    requests, as we do for TCP requests
  * Fix client null dereference when KDC offers encrypted challenge
    without FAST
  * Ignore dotfiles when processing profile includedir directive
  * Improve documentation</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0011-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
</package>
<package pkgid="0d4020c646e8a0bcd3d60407da0482551f7d5e293e811a9890994d24aa0a2fe6" name="krb5" arch="aarch64">
  <version epoch="0" ver="1.19.2" rel="150400.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0011-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0012-Fix-two-unlikely-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771</changelog>
</package>
<package pkgid="bf6d48e3183eaa33532c2f722df830147714523cd7e9f774ed25a0bb2ae7ebc3" name="krb5" arch="s390x">
  <version epoch="0" ver="1.19.2" rel="150400.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0011-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0012-Fix-two-unlikely-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771</changelog>
</package>
<package pkgid="86111d1af91e42899b38a9761a4572351d7115353b9b9fafbde75f4b33128607" name="krb5" arch="src">
  <version epoch="0" ver="1.19.2" rel="150400.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0011-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0012-Fix-two-unlikely-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771</changelog>
</package>
<package pkgid="f7bc2fda268519fdc1612bff13db0fda31f6ce807ad7e85229c5dc49c3b7200c" name="krb5" arch="x86_64">
  <version epoch="0" ver="1.19.2" rel="150400.3.9.1"/>
  <changelog author="jengelh@inai.de" date="1506945600">- Update package descriptions.</changelog>
  <changelog author="hguo@suse.com" date="1509969600">- Remove build dependency doxygen, python-Cheetah, python-Sphinx,
  python-libxml2, python-lxml, most of which are python 2 programs.
  Consequently remove -doc subpackage. Users are encouraged to use
  online documentation. (bsc#1066461)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="luizluca@gmail.com" date="1524657600">- Added support for /etc/krb5.conf.d/ for configuration snippets</changelog>
  <changelog author="michael@stroeder.com" date="1525435200">- Upgrade to 1.15.3
  * Fix flaws in LDAP DN checking, including a null dereference KDC
    crash which could be triggered by kadmin clients with administrative
    privileges [CVE-2018-5729, CVE-2018-5730].
  * Fix a KDC PKINIT memory leak.
  * Fix a small KDC memory leak on transited or authdata errors when
    processing TGS requests.
  * Fix a null dereference when the KDC sends a large TGS reply.
  * Fix "kdestroy -A" with the KCM credential cache type.
  * Fix the handling of capaths "." values.
  * Fix handling of repeated subsection specifications in profile files
    (such as when multiple included files specify relations in the same
    subsection).</changelog>
  <changelog author="mcepl@suse.com" date="1529323200">- BSC#1021402 move %{_libdir}/krb5/plugins/tls/k5tls.so to krb5 package
  so it is avaiable for krb5-client as well.</changelog>
  <changelog author="jmcdonough@suse.com" date="1539086400">- Upgrade to 1.16.1
  * kdc client cert matching on client principal entry
  * Allow ktutil addent command to ignore key version and use
    non-default salt string.
  * add kpropd pidfile support
  * enable "encrypted_challenge_indicator" realm option on tickets
    obtained using FAST encrypted challenge pre-authentication.
  * dates through 2106 accepted
  * KDC support for trivially renewable tickets
  * stop caching referral and alternate cross-realm TGTs to prevent
    duplicate credential cache entries</changelog>
  <changelog author="scabrero@suse.de" date="1548849600">- Upgrade to 1.16.3
  * Fix a regression in the MEMORY credential cache type which could cause
    client programs to crash.
  * MEMORY credential caches will not be listed in the global collection,
    with the exception of the default credential cache if it is of type MEMORY.
  * Remove an incorrect assertion in the KDC which could be used to cause
    a crash [CVE-2018-20217].
  * Fix bugs with concurrent use of MEMORY ccache handles.
  * Fix a KDC crash when falling back between multiple OTP tokens configured
    for a principal entry.
  * Fix memory bugs when gss_add_cred() is used to create a new credential,
    and fix a bug where it ignores the desired_name.
  * Fix the behavior of gss_inquire_cred_by_mech() when the credential does
    not contain an element of the requested mechanism.
  * Make cross-realm S4U2Self requests work on the client when no
    default_realm is configured.
  * Add a kerberos(7) man page containing documentation of the environment
    variables that affect Kerberos programs.
- Use systemd-tmpfiles to create files under /var/lib/kerberos, required
  by transactional updates; (bsc#1100126);
- Rename patches:
  * krb5-1.12-pam.patch =&gt; 0001-krb5-1.12-pam.patch
  * krb5-1.9-manpaths.dif =&gt; 0002-krb5-1.9-manpaths.patch
  * krb5-1.12-buildconf.patch =&gt; 0003-krb5-1.12-buildconf.patch
  * krb5-1.6.3-gssapi_improve_errormessages.dif to
    0004-krb5-1.6.3-gssapi_improve_errormessages.patch
  * krb5-1.6.3-ktutil-manpage.dif =&gt; 0005-krb5-1.6.3-ktutil-manpage.patch
  * krb5-1.12-api.patch =&gt; 0006-krb5-1.12-api.patch
  * krb5-1.12-ksu-path.patch =&gt; 0007-krb5-1.12-ksu-path.patch
  * krb5-1.12-selinux-label.patch =&gt;  0008-krb5-1.12-selinux-label.patch
  * krb5-1.9-debuginfo.patch =&gt; 0009-krb5-1.9-debuginfo.patch</changelog>
  <changelog author="scabrero@suse.de" date="1557230400">- Move LDAP schema files from /usr/share/doc/packages/krb5 to
  /usr/share/kerberos/ldap; (bsc#1134217);</changelog>
  <changelog author="scabrero@suse.de" date="1565006400">- Integrate pam_keyinit pam module, ksu-pam.d; (bsc#1081947);
  (bsc#1144047);</changelog>
  <changelog author="scabrero@suse.de" date="1591617600">- Update logrotate script, call systemd to reload the services
  instead of init-scripts. (boo#1169357)</changelog>
  <changelog author="scabrero@suse.de" date="1595851200">- Fix prefix reported by krb5-config, libraries and headers are not
  installed under /usr/lib/mit prefix. (bsc#1174079)</changelog>
  <changelog author="scabrero@suse.de" date="1604923200">- Add recursion limit for ASN.1 indefinite lengths; (CVE-2020-28196);
  (bsc#1178512);
- Added patches:
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619092800">- Use /run instead of /var/run for daemon PID files; (bsc#1185163);</changelog>
  <changelog author="scabrero@suse.de" date="1627300800">- Fix KDC null deref on bad encrypted challenge; (CVE-2021-36222);
  (bsc#1188571);
- Added patches:
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch</changelog>
  <changelog author="scabrero@suse.de" date="1630324800">- Fix KDC null pointer dereference via a FAST inner body that
  lacks a server field; (CVE-2021-37750); (bsc#1189929);
- Added patches:
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="scabrero@suse.de" date="1631880000">- Update to 1.19.2
  * Fix a denial of service attack against the KDC encrypted challenge
    code; (CVE-2021-36222);
  * Fix a memory leak when gss_inquire_cred() is called without a
    credential handle.
- Changes from 1.19.1
  * Fix a linking issue with Samba.
  * Better support multiple pkinit_identities values by checking whether
    certificates can be loaded for each value.
- Changes from 1.19
  Administrator experience
  * When a client keytab is present, the GSSAPI krb5 mech will refresh
    credentials even if the current credentials were acquired manually.
  * It is now harder to accidentally delete the K/M entry from a KDB.
  Developer experience
  * gss_acquire_cred_from() now supports the "password" and "verify"
    options, allowing credentials to be acquired via password and
    verified using a keytab key.
  * When an application accepts a GSS security context, the new
    GSS_C_CHANNEL_BOUND_FLAG will be set if the initiator and acceptor
    both provided matching channel bindings.
  * Added the GSS_KRB5_NT_X509_CERT name type, allowing S4U2Self requests
    to identify the desired client principal by certificate.
  * PKINIT certauth modules can now cause the hw-authent flag to be set
    in issued tickets.
  * The krb5_init_creds_step() API will now issue the same password
    expiration warnings as krb5_get_init_creds_password().
  Protocol evolution
  * Added client and KDC support for Microsoft's Resource-Based Constrained
    Delegation, which allows cross-realm S4U2Proxy requests. A third-party
    database module is required for KDC support.
  * kadmin/admin is now the preferred server principal name for kadmin
    connections, and the host-based form is no longer created by default.
    The client will still try the host-based form as a fallback.
  * Added client and server support for Microsoft's KERB_AP_OPTIONS_CBT
    extension, which causes channel bindings to be required for the
    initiator if the acceptor provided them. The client will send this
    option if the client_aware_gss_bindings profile option is set.
  User experience
  * kinit will now issue a warning if the des3-cbc-sha1 encryption type is
    used in the reply. This encryption type will be deprecated and removed
    in future releases.
  * Added kvno flags --out-cache, --no-store, and --cached-only
    (inspired by Heimdal's kgetcred).
- Changes from 1.18.3
  * Fix a denial of service vulnerability when decoding Kerberos
    protocol messages.
  * Fix a locking issue with the LMDB KDB module which could cause
    KDC and kadmind processes to lose access to the database.
  * Fix an assertion failure when libgssapi_krb5 is repeatedly loaded
    and unloaded while libkrb5support remains loaded.
- Changes from 1.18.2
  * Fix a SPNEGO regression where an acceptor using the default credential
    would improperly filter mechanisms, causing a negotiation failure.
  * Fix a bug where the KDC would fail to issue tickets if the local krbtgt
    principal's first key has a single-DES enctype.
  * Add stub functions to allow old versions of OpenSSL libcrypto to link
    against libkrb5.
  * Fix a NegoEx bug where the client name and delegated credential might
    not be reported.
- Changes from 1.18.1
  * Fix a crash when qualifying short hostnames when the system has
    no primary DNS domain.
  * Fix a regression when an application imports "service@" as a GSS
    host-based name for its acceptor credential handle.
  * Fix KDC enforcement of auth indicators when they are modified by
    the KDB module.
  * Fix removal of require_auth string attributes when the LDAP KDB
    module is used.
  * Fix a compile error when building with musl libc on Linux.
  * Fix a compile error when building with gcc 4.x.
  * Change the KDC constrained delegation precedence order for consistency
    with Windows KDCs.
- Changes from 1.18
  Administrator experience:
  * Remove support for single-DES encryption types.
  * Change the replay cache format to be more efficient and robust.
    Replay cache filenames using the new format end with ".rcache2"
    by default.
  * setuid programs will automatically ignore environment variables
    that normally affect krb5 API functions, even if the caller does
    not use krb5_init_secure_context().
  * Add an "enforce_ok_as_delegate" krb5.conf relation to disable
    credential forwarding during GSSAPI authentication unless the KDC
    sets the ok-as-delegate bit in the service ticket.
  * Use the permitted_enctypes krb5.conf setting as the default value
    for default_tkt_enctypes and default_tgs_enctypes.
  Developer experience:
  * Implement krb5_cc_remove_cred() for all credential cache types.
  * Add the krb5_pac_get_client_info() API to get the client account
    name from a PAC.
  Protocol evolution:
  * Add KDC support for S4U2Self requests where the user is identified
    by X.509 certificate. (Requires support for certificate lookup from
    a third-party KDB module.)
  * Remove support for an old ("draft 9") variant of PKINIT.
  * Add support for Microsoft NegoEx. (Requires one or more third-party
    GSS modules implementing NegoEx mechanisms.)
  User experience:
  * Add support for "dns_canonicalize_hostname=fallback", causing
    host-based principal names to be tried first without DNS
    canonicalization, and again with DNS canonicalization if the
    un-canonicalized server is not found.
  * Expand single-component hostnames in host-based principal names
    when DNS canonicalization is not used, adding the system's first DNS
    search path as a suffix. Add a "qualify_shortname" krb5.conf relation
    to override this suffix or disable expansion.
  * Honor the transited-policy-checked ticket flag on application servers,
    eliminating the requirement to configure capaths on servers in some
    scenarios.
  Code quality:
  * The libkrb5 serialization code (used to export and import krb5 GSS
    security contexts) has been simplified and made type-safe.
  * The libkrb5 code for creating KRB-PRIV, KRB-SAFE, and KRB-CRED
    messages has been revised to conform to current coding practices.
  * The test suite has been modified to work with macOS System Integrity
    Protection enabled.
  * The test suite incorporates soft-pkcs11 so that PKINIT PKCS11 support
    can always be tested.
- Changes from 1.17.1
  * Fix a bug preventing "addprinc -randkey -kvno" from working in kadmin.
  * Fix a bug preventing time skew correction from working when a KCM
    credential cache is used.
- Changes from 1.17:
  Administrator experience:
  * A new Kerberos database module using the Lightning Memory-Mapped
    Database library (LMDB) has been added.  The LMDB KDB module should
    be more performant and more robust than the DB2 module, and may
    become the default module for new databases in a future release.
  * "kdb5_util dump" will no longer dump policy entries when specific
    principal names are requested.
  Developer experience:
  * The new krb5_get_etype_info() API can be used to retrieve enctype,
    salt, and string-to-key parameters from the KDC for a client
    principal.
  * The new GSS_KRB5_NT_ENTERPRISE_NAME name type allows enterprise
    principal names to be used with GSS-API functions.
  * KDC and kadmind modules which call com_err() will now write to the
    log file in a format more consistent with other log messages.
  * Programs which use large numbers of memory credential caches should
    perform better.
  Protocol evolution:
  * The SPAKE pre-authentication mechanism is now supported.  This
    mechanism protects against password dictionary attacks without
    requiring any additional infrastructure such as certificates.  SPAKE
    is enabled by default on clients, but must be manually enabled on
    the KDC for this release.
  * PKINIT freshness tokens are now supported.  Freshness tokens can
    protect against scenarios where an attacker uses temporary access to
    a smart card to generate authentication requests for the future.
  * Password change operations now prefer TCP over UDP, to avoid
    spurious error messages about replays when a response packet is
    dropped.
  * The KDC now supports cross-realm S4U2Self requests when used with a
    third-party KDB module such as Samba's.  The client code for
    cross-realm S4U2Self requests is also now more robust.
  User experience:
  * The new ktutil addent -f flag can be used to fetch salt information
    from the KDC for password-based keys.
  * The new kdestroy -p option can be used to destroy a credential cache
    within a collection by client principal name.
  * The Kerberos man page has been restored, and documents the
    environment variables that affect programs using the Kerberos
    library.
  Code quality:
  * Python test scripts now use Python 3.
  * Python test scripts now display markers in verbose output, making it
    easier to find where a failure occurred within the scripts.
  * The Windows build system has been simplified and updated to work
    with more recent versions of Visual Studio.  A large volume of
    unused Windows-specific code has been removed.  Visual Studio 2013
    or later is now required.
- Replace old $RPM_* shell vars
- Removal of SuSEfirewall2 service since SuSEfirewall2 has been replaced
  by firewalld
- Remove cruft to support distributions older than SLE 12
- Use macros where applicable
- Switch to pkgconfig style dependencies
- Use %_tmpfilesdir instead of the wrong %_libexecdir/tmpfiles.d
  notation: libexecdir is likely changing away from /usr/lib to
  /usr/libexec
- Build with full Cyrus SASL support. Negotiating SASL credentials with
  an EXTERNAL bind mechanism requires interaction. Kerberos provides its
  own interaction function that skips all interaction, thus preventing the
  mechanism from working.
- Removed patches:
  * 0007-krb5-1.12-ksu-path.patch
  * 0010-Add-recursion-limit-for-ASN.1-indefinite-lengths.patch
  * 0011-Fix-KDC-null-deref-on-bad-encrypted-challenge.patch
- Renamed patches:
  * 0001-krb5-1.12-pam.patch =&gt; 0001-ksu-pam-integration.patch
  * 0003-krb5-1.12-buildconf.patch =&gt; 0003-Adjust-build-configuration.patch
  * 0008-krb5-1.12-selinux-label.patch =&gt; 0007-SELinux-integration.patch
  * 0009-krb5-1.9-debuginfo.patch =&gt; 0008-krb5-1.9-debuginfo.patch
  * 0012-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch =&gt;
    0009-Fix-KDC-null-deref-on-TGS-inner-body-null-server.patch</changelog>
  <changelog author="nopower@suse.com" date="1667822400">- Fix integer overflows in PAC parsing; (CVE-2022-42898);
  (bso#15203), (bsc#1205126).
- Added patches:
  * 0010-Fix-integer-overflows-in-PAC-parsing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1691496000">- Ensure array count consistency in kadm5 RPC; (bsc#1214054);
  (CVE-2023-36054);
- Added patches:
  * 0011-Ensure-array-count-consistency-in-kadm5-RPC.patch</changelog>
  <changelog author="scabrero@suse.de" date="1711108800">- Fix memory leaks, add patch 0012-Fix-two-unlikely-memory-leaks.patch
  * CVE-2024-26458, bsc#1220770
  * CVE-2024-26461, bsc#1220771</changelog>
</package>
<package pkgid="23691fffda79ffd9086a327d6570d6910f00ba30fef14975ec7ba165a8b224b2" name="kubevirt" arch="src">
  <version epoch="0" ver="0.54.0" rel="150400.3.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1625227200">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1630929600">- Update to version 0.44.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1
- Drop patches:
  dont-build-virtctl-darwin.patch
  dont-use-bazel-in-build-manifests.patch
  fix-double-free-of-VirDomain.patch
  fix-virsh-domcapabilities-error.patch (bsc#1185119)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1631188800">- Update to version 0.45.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
</package>
<package pkgid="5a5f888f5521b03fe73c11c17c788134cdc7f89e974f8c3d735909d102352a03" name="kubevirt" arch="src">
  <version epoch="0" ver="0.54.0" rel="150400.3.16.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
</package>
<package pkgid="98b9569579cb9a23d92fea65d56033feceed37085461d96a9077a984d4fd47f4" name="kubevirt" arch="src">
  <version epoch="0" ver="0.54.0" rel="150400.3.19.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
</package>
<package pkgid="f3e37cc5ad80cce4ebc73d0488580414124aec41ecc36ddedfee5706ede0713e" name="kubevirt" arch="src">
  <version epoch="0" ver="0.54.0" rel="150400.3.23.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Set cache mode on hotplugged disks
  0015-Set-cache-mode-on-hotplugged-disks.patch
- Delete VMI prior to NFS server pod in tests
  0016-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="f4d4eaea6e4a304195ce822c79c59817836a8de058f26fbd4c4556fcbc251778" name="kubevirt" arch="src">
  <version epoch="0" ver="0.54.0" rel="150400.3.26.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Set cache mode on hotplugged disks
  0015-Set-cache-mode-on-hotplugged-disks.patch
- Delete VMI prior to NFS server pod in tests
  0016-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="ad3f11ebb2a7d139fd312538f24da4a0842f9610a633463947533371987b88d1" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1625227200">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1630929600">- Update to version 0.44.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1
- Drop patches:
  dont-build-virtctl-darwin.patch
  dont-use-bazel-in-build-manifests.patch
  fix-double-free-of-VirDomain.patch
  fix-virsh-domcapabilities-error.patch (bsc#1185119)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1631188800">- Update to version 0.45.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
</package>
<package pkgid="4e6b283ab953e67317f36af9fcfa446d44a949deb82957cf8e614913e3112fc9" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.16.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
</package>
<package pkgid="c43bc1ac572c8b355e33ec3b82734a1a1625d739d8362f5d41204d10f6dfe532" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.19.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
</package>
<package pkgid="ea248ac6730278f4b17daeea7be8d860069ac9e8bb2d67c07a5d847dcd1c3c54" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.23.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Set cache mode on hotplugged disks
  0015-Set-cache-mode-on-hotplugged-disks.patch
- Delete VMI prior to NFS server pod in tests
  0016-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="bf64655481110c0ee7189d1a577d908639bab45ab93fcc2058db6e4271fcefd8" name="kubevirt-manifests" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.26.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Set cache mode on hotplugged disks
  0015-Set-cache-mode-on-hotplugged-disks.patch
- Delete VMI prior to NFS server pod in tests
  0016-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="ba5bef41dcc4d1a355c322b55ef39096e30b9543a5b52303efe61c9872260362" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.13.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1625227200">- Generate meta info for containers during rpm build</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1630929600">- Update to version 0.44.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.44.1
- Drop patches:
  dont-build-virtctl-darwin.patch
  dont-use-bazel-in-build-manifests.patch
  fix-double-free-of-VirDomain.patch
  fix-virsh-domcapabilities-error.patch (bsc#1185119)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1631188800">- Update to version 0.45.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.45.0</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
</package>
<package pkgid="45793cb152365253b00cc667c0471e2f7fa2ac316806e6f4229799b41f95f127" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.16.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
</package>
<package pkgid="0ee42c3049419e68aef6b6c32844cd05717e70496182d064fa7418f88bbc275e" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.19.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1634731200">- Pack only kubevirt-{operator,cr}.yaml into manifests
- Include manifests/testing/* into tests package
- Use disks-images-provider.yaml from upstream
- Allow overwrite the default DNS service in tests
  0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
</package>
<package pkgid="0f18599df80b18e831516eb679950f9d79327f57130942efd2f475ff8c318a71" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.23.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Set cache mode on hotplugged disks
  0015-Set-cache-mode-on-hotplugged-disks.patch
- Delete VMI prior to NFS server pod in tests
  0016-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="82d97be49ca4a9c23119d9e1a92f42e50bb6a128b77a9b824c635ee42fa88dde" name="kubevirt-virtctl" arch="x86_64">
  <version epoch="0" ver="0.54.0" rel="150400.3.26.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1638360000">- Detect SLE15 SP4 build environment
- Update to version 0.47.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.47.1
- Drop 0001-Allow-overwrite-the-default-DNS-service-in-tests.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1639656000">- Update to version 0.48.1
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.48.1</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1641988800">- Update to version 0.49.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.49.0
  Includes the fix for CVE-2021-43565 (bsc#1193930)</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645444800">- Allow to configure utility containers for update test
  0001-improve-kubevirt-update-test.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1645531200">- Drop kubevirt-psp-caasp.yaml</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393600">- Use semantic equality comparison
  0002-use-semantic-equality-comparison.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393601">- Avoid to return nil failure message
  0003-Avoid-to-return-nil-failure-message.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1653393602">- Increase storage requirements in _constraints
- Pack nft rules and nsswitch.conf for virt-handler
- Only create 1MiB-aligned disk images (bsc#1199603)
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1655899200">- Update to version 0.54.0
  Release notes https://github.com/kubevirt/kubevirt/releases/tag/v0.54.0
- Drop upstreamed patches
  0001-improve-kubevirt-update-test.patch
  0002-use-semantic-equality-comparison.patch
  0003-Avoid-to-return-nil-failure-message.patch
  0004-only-create-1MiB-aligned-disk-images.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1658923200">- Add CVE fixes
  0001-Bump-the-version-of-go-restful-to-2.16.0.patch (CVE-2022-1996, bsc#1200528)
  0002-CVE-2022-29162-Bump-runc-dependency-to-1.1.2.patch (CVE-2022-29162, bsc#1199460)
  0003-Update-the-cgroup-tests-for-the-new-changes-in-runc-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659528000">- Update libvirt-go to fix memory leak
  0004-Update-libvirt-go-to-fix-memory-leak.patch
- Fix arbitrary file read on the host from KubeVirt VMs (CVE-2022-1798, bsc#1202516)
  0005-Improve-non-root-path-handling</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1659960000">- Support topology spread constraints
  0006-topology-spread-constraints.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1661947200">- Fix containerdisk unmount logic
  0007-Fix-containerdisk-unmount-logic.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675252800">- Cleanup node labels properly
  0008-Fix-node-labeller-bug-Remove-proper-labels-search-fo.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1675944000">- Fix SEV device exposure
  0009-Respect-the-feature-gate-when-exposing-SEV-device.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1678968000">- Use recent golang compiler (bsc#1208916)
- Limit operator secrets permission (CVE-2023-26484, bsc#1209359)
  0010-Vulnerability-fix-limit-operator-secrets-permission.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1682596800">- Follow the recommended semantics for the device plugin registration
  process (https://github.com/kubernetes/kubernetes/issues/112395)
  0011-Start-serving-the-device-plugin-API-prior-to-registe.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683028800">- TSC frequencies: add 250PPM tolerance (bsc#1210906)
  0012-TSC-frequencies-add-250PPM-tolerance.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1683806400">- Always render block devices in hp-volume- pod template
  0013-render-hp-volume-pod-should-respect-blockdevices.patch
- Detect ServiceMonitor and PrometheusRule CRDs
  0014-ServiceMonitor-and-PrometheusRule-API-detection-and-.patch</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1693224000">- Set cache mode on hotplugged disks
  0015-Set-cache-mode-on-hotplugged-disks.patch
- Delete VMI prior to NFS server pod in tests
  0016-tests-Delete-VMI-prior-to-NFS-server-pod.patch</changelog>
</package>
<package pkgid="3afc3480076cc976b3eb40ea875357e22a062c37269eff1332c453f288276dc8" name="less" arch="aarch64">
  <version epoch="0" ver="590" rel="150400.3.6.2"/>
  <changelog author="astieger@suse.com" date="1446379200">- less 481:
  * Don't overwrite history file; just append to it. This behaves
    better when multiple sessions are running less simultaneously
    and using the same history file.
  * New command ESC-G goes to end of currently buffered data in a
    pipe.
  * Disable history feature when compiled with LESSHISTFILE set to
    "-".
  * In more-compatible mode, make the -p option apply to every file
    opened, not just the first one.
  * In more-compatible mode, change the -e option to work like -E,
    not -EF.
  * Treat multiple CRs before LF are like one CR (all the CRs are
    hidden).
  * Allow "extra" string in lesskey file to append to a multi-char
    command (like a search pattern), without executing the command.
  * Ignore -u/-U setting while viewing help file, so that underline
    and bold chars are displayed correctly.
  * Improve detection of "binary" files in UTF-8 mode.
  * Fix bug with ++ commands.
  * Fix bug where prompt was sometimes not displayed with +G.
  * Fix possible memory corruption
  * Fix bugs and improve performance in ampersand filtering.
  * Allow %% escape sequence in LESSOPEN variable.
  * Automate construction of Unicode tables from Unicode database.
- add keyring and verify source signature
- drop upstream patches:
  * less-458-out_of_bounds_read.patch
  * less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
</package>
<package pkgid="e9940f9f132191b314d559e108494d8113a798d8c2a8a6f651e79c1c0e13d055" name="less" arch="s390x">
  <version epoch="0" ver="590" rel="150400.3.6.2"/>
  <changelog author="astieger@suse.com" date="1446379200">- less 481:
  * Don't overwrite history file; just append to it. This behaves
    better when multiple sessions are running less simultaneously
    and using the same history file.
  * New command ESC-G goes to end of currently buffered data in a
    pipe.
  * Disable history feature when compiled with LESSHISTFILE set to
    "-".
  * In more-compatible mode, make the -p option apply to every file
    opened, not just the first one.
  * In more-compatible mode, change the -e option to work like -E,
    not -EF.
  * Treat multiple CRs before LF are like one CR (all the CRs are
    hidden).
  * Allow "extra" string in lesskey file to append to a multi-char
    command (like a search pattern), without executing the command.
  * Ignore -u/-U setting while viewing help file, so that underline
    and bold chars are displayed correctly.
  * Improve detection of "binary" files in UTF-8 mode.
  * Fix bug with ++ commands.
  * Fix bug where prompt was sometimes not displayed with +G.
  * Fix possible memory corruption
  * Fix bugs and improve performance in ampersand filtering.
  * Allow %% escape sequence in LESSOPEN variable.
  * Automate construction of Unicode tables from Unicode database.
- add keyring and verify source signature
- drop upstream patches:
  * less-458-out_of_bounds_read.patch
  * less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
</package>
<package pkgid="5f0432b0f6a4f326872b24bc7ec69713b80b9884b368f092e3ba6b046b57d15d" name="less" arch="src">
  <version epoch="0" ver="590" rel="150400.3.6.2"/>
  <changelog author="astieger@suse.com" date="1446379200">- less 481:
  * Don't overwrite history file; just append to it. This behaves
    better when multiple sessions are running less simultaneously
    and using the same history file.
  * New command ESC-G goes to end of currently buffered data in a
    pipe.
  * Disable history feature when compiled with LESSHISTFILE set to
    "-".
  * In more-compatible mode, make the -p option apply to every file
    opened, not just the first one.
  * In more-compatible mode, change the -e option to work like -E,
    not -EF.
  * Treat multiple CRs before LF are like one CR (all the CRs are
    hidden).
  * Allow "extra" string in lesskey file to append to a multi-char
    command (like a search pattern), without executing the command.
  * Ignore -u/-U setting while viewing help file, so that underline
    and bold chars are displayed correctly.
  * Improve detection of "binary" files in UTF-8 mode.
  * Fix bug with ++ commands.
  * Fix bug where prompt was sometimes not displayed with +G.
  * Fix possible memory corruption
  * Fix bugs and improve performance in ampersand filtering.
  * Allow %% escape sequence in LESSOPEN variable.
  * Automate construction of Unicode tables from Unicode database.
- add keyring and verify source signature
- drop upstream patches:
  * less-458-out_of_bounds_read.patch
  * less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
</package>
<package pkgid="cb1578b311115055798125e859cf31a5bcfa91d9636967bee56af085a26c5a74" name="less" arch="x86_64">
  <version epoch="0" ver="590" rel="150400.3.6.2"/>
  <changelog author="astieger@suse.com" date="1446379200">- less 481:
  * Don't overwrite history file; just append to it. This behaves
    better when multiple sessions are running less simultaneously
    and using the same history file.
  * New command ESC-G goes to end of currently buffered data in a
    pipe.
  * Disable history feature when compiled with LESSHISTFILE set to
    "-".
  * In more-compatible mode, make the -p option apply to every file
    opened, not just the first one.
  * In more-compatible mode, change the -e option to work like -E,
    not -EF.
  * Treat multiple CRs before LF are like one CR (all the CRs are
    hidden).
  * Allow "extra" string in lesskey file to append to a multi-char
    command (like a search pattern), without executing the command.
  * Ignore -u/-U setting while viewing help file, so that underline
    and bold chars are displayed correctly.
  * Improve detection of "binary" files in UTF-8 mode.
  * Fix bug with ++ commands.
  * Fix bug where prompt was sometimes not displayed with +G.
  * Fix possible memory corruption
  * Fix bugs and improve performance in ampersand filtering.
  * Allow %% escape sequence in LESSOPEN variable.
  * Automate construction of Unicode tables from Unicode database.
- add keyring and verify source signature
- drop upstream patches:
  * less-458-out_of_bounds_read.patch
  * less-fix_crash_in_hilite_line.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
</package>
<package pkgid="a2329c53e2f8a15e22fca1f3589a9509c5ad2bf9ce4c8fd8189e6e360734805b" name="less" arch="aarch64">
  <version epoch="0" ver="590" rel="150400.3.9.1"/>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Fix CVE-2024-32487, mishandling of \n character in paths when
  LESSOPEN is set leads to OS command execution
  (CVE-2024-32487, bsc#1222849)
  * CVE-2024-32487.patch</changelog>
</package>
<package pkgid="ede59e465bddaa29453658b4ca0e3ef343d7a6405a33223013f4ac03dfc53b59" name="less" arch="s390x">
  <version epoch="0" ver="590" rel="150400.3.9.1"/>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Fix CVE-2024-32487, mishandling of \n character in paths when
  LESSOPEN is set leads to OS command execution
  (CVE-2024-32487, bsc#1222849)
  * CVE-2024-32487.patch</changelog>
</package>
<package pkgid="f8cee9f1d73de0eade14e310714aedc254abf14d648095417cf08acb84bfed69" name="less" arch="src">
  <version epoch="0" ver="590" rel="150400.3.9.1"/>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Fix CVE-2024-32487, mishandling of \n character in paths when
  LESSOPEN is set leads to OS command execution
  (CVE-2024-32487, bsc#1222849)
  * CVE-2024-32487.patch</changelog>
</package>
<package pkgid="e887921ac431a19512e594e818d5665a497b24b8f0ed9aa2997891b356f9766a" name="less" arch="x86_64">
  <version epoch="0" ver="590" rel="150400.3.9.1"/>
  <changelog author="kstreitova@suse.com" date="1491307200">- update to version 487
  * New commands ESC-{ and ESC-} to shift to start/end of displayed
    lines.
  * Make search highlights work correctly when changing caselessness
    with -i.
  * New option -Da in Windows version to enable SGR mode.
  * Fix "nothing to search" error when top or bottom line on screen
    is empty.
  * Fix bug when terminal has no "cm" termcap entry.
  * Fix incorrect display when entering double-width chars in search
    string.
  * Fix bug in Unicode handling that missed some double width
    characters.
  * Update Unicode database to 9.0.0.
- remove less-429-widechars.patch that is no longer needed
  (fixed upstream)
- refresh less-429-shell.patch
- get rid of %{name} macro from the patch names</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Extend lesskey with mappings for 8-bit controls key escape sequences</changelog>
  <changelog author="werner@suse.de" date="1509105600">- Let lessopen.sh also handle UTF-8 for (g)roff input, only apparmor
  as breaker of /usr/bin/file re,mains as "file" is not allowed to
  read files within the tool lessopen.sh</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1525003200">- update to version 530 [bsc#1091308]
  * Don't output terminal init sequence if using -F and file fits
    on one screen.
  * When using -S, mark truncated lines with a special character.
    The character can be changed or disabled via the new --rscroll
    option.
  * New command M marks the last line displayed on the screen.
  * New command ESC-m removes a line mark.
  * Status column (enabled via -J) now shows mark letters.
  * Status column shows search matches even if highlighting is
    disabled via -G.
  * A second ESC-u command will clear search match markers in the
    status column.
  * Do same ANSI escape code filtering for tag matching that we do
    for searching, to help when viewing syntax-highlighted code.
  * Catch SIGTERM and clean up before exiting.
  * Fix bug initializing default charset on Windows.
  * Handle keypad ENTER key correctly if it sends something other
    than newline.
  * Fix buffering bug when using stdin with a LESSOPEN pipe.
  * Update Unicode tables to 2017-03-08.
  * Pass-thru Unicode formating chars (Cf type) instead of treating
    them as binary chars. But treat them as binary if -U is set.
  * Fix erroneous binary file warning when UTF-8 file contains ANSI
    SGR sequences.
  * Fix bugs when using LESSOPEN and switching between stdin and
    other files.
  * Fix some bugs handling filenames containing shell metacharacters
  * Fix some memory leaks.
  * Allow some debugging environment variables to be set in lesskey
    file.
  * Code improvements:
  * Use ANSI prototypes in funcs.h declarations.
  * Fix some const mismatches.
  * Remove archaic "register" in variable declarations.
- remove the following patches (applied upstream)
  * less-429-strict_aliasing.patch
  * less-429-terminate.patch
- renumber patches
- remove 'make mkhelp' from the specfile as mkhelp.pl is now
  distributed in the tarball</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1569067200">- less 551:
  * Add --mouse option
  * Add --wheel-lines option
  * Add --no-histdups option
  * Add --save-marks option
  * Support PCRE2 regular expression library
  * Redraw screen on SIGWINCH even if screen size doesn't change
  * Shell-escape filenames in history so they can be used again
  * Ring bell if user enters invalid long option name
  * Use PCRE_UTF8 flag for pcre regular expressions when in UTF-8 mode
  * Don't count lines in initial screen if using -X with -F
  * Fix bug in v command on empty file
  * Fix bug in v command when filename contains shell metacharacters
- refresh less-429-shell.patch</changelog>
  <changelog author="kukuk@suse.com" date="1576065600">- Move lesskey* from /etc to /usr/etc</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1586001600">- less 557:
  * Update Unicode tables
  * Treat Hangul Jamo medial vowels and final consonants as zero width
  * Display error message immediately when -o is toggled and
    input is not a pipe
  * Fix memory corruption when built with libtermcap
  * Support libtinfow</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1589976000">- less 562:
  * Update unicode tables
  * formatting changes in man pages</changelog>
  <changelog author="dmueller@suse.com" date="1597492800">- update to 563:
  * Update Unicode tables.
  * Treat Hangul Jamo medial vowels and final consonants as zero width.
  * Display error message immediately when -o is toggled and
    input is not a pipe.
  * Fix regression: make screen repaint when "squished" and
    a no-movement command is given.
  * Fix erroneous EOF calculation when F command is interrupted.
  * Make WIN32C version include this fix from 551:
    Don't count lines in initial screen if using -X with -F.
  * Fix display bug in WIN32C version.
  * Fix memory corruption when built with libtermcap.
  * Support libtinfow.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1619179200">- less 581:
  * Change ESC-u command to toggle, not disable, highlighting per
    man page
  * Add ESC-U command
  * Add ctrl-W search modifier for wrapping search
  * F command can be interrupted by ^X
  * Support OSC 8 hyperlinks when -R is in effect
  * g command with no number will ignore -j and put first line at
    top of screen
  * Multiple + or -p command line options are handled better
  * Add the --incsearch option
  * Add the --line-num-width option
  * Add the --status-col-width option
  * Add the --use-color and --color options
  * Display -w highlight even if highlighted line is empty
  * If search result is in a long line, scroll to ensure it is
    visible
  * Editing the same file under different names now creates only
    one entry in the file list.
  * Make visual bell more visible on some terminals
  * Ring end-of-file bell no more than once per second
  * Build can use either Python or Perl for Makefile.aut operations
  * Fix crash when using the @ search modifier.
  * Fix crash in the 's' command due to duplicate free
- drop less-429-save_line_position.patch which was never accepted
  upstream due to solving one problem and creating others</changelog>
  <changelog author="dmueller@suse.com" date="1619697600">- update to 581.2:
  * This fixes a bug found in less-581 where the terminal was sometimes left in
    mouse-reporting mode after exiting less.</changelog>
  <changelog author="dmueller@suse.com" date="1621166400">- update to 586:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * Fix bug which could leave terminal in mouse-reporting mode
    after exiting less.
  * Fix bug which caused failure to respond to window resize.
  * Fix backslash bug searching in tag file.</changelog>
  <changelog author="jengelh@inai.de" date="1623672000">- Remove --with-pic (no static libs are ever produced).</changelog>
  <changelog author="dmueller@suse.com" date="1623931200">- update to 590:
  * Make less able to read lesskey source files (deprecating lesskey).
  * If XDG_CONFIG_HOME is set, find lesskey source file
    in $XDG_CONFIG_HOME/lesskey rather than $HOME/.lesskey.
  * If XDG_DATA_HOME is set, find and store history file
    in $XDG_DATA_HOME/lesshst rather than $HOME/.lesshst.
  * Add the --lesskey-src option.
  * Add the --file-size option.
  * With -F, if screen is resized to make file fit on one screen, don't exit.</changelog>
  <changelog author="predivan@mts.rs" date="1625572800">- Fix build on Leap:
    Account for distinction in confdir after UsrMerge.</changelog>
  <changelog author="danilo.spinella@suse.com" date="1631793600">- Add missing runtime dependency on which, which it is used by lessopen.sh.
  Fix bsc#1190552.</changelog>
  <changelog author="psimons@suse.com" date="1675771200">- Apply "cve-2022-46663.patch" to fix a vulnerability in less that
  could be exploited for denial-of-service attacks or even remote
  code execution by printing specially crafted escape sequences to
  the terminal. [CVE-2022-46663, bsc#1207815]</changelog>
  <changelog author="danilo.spinella@suse.com" date="1711713600">- Fix CVE-2022-48624, LESSCLOSE handling in less does not quote shell
  metacharacters, bsc#1219901
  * CVE-2022-48624.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714478400">- Fix CVE-2024-32487, mishandling of \n character in paths when
  LESSOPEN is set leads to OS command execution
  (CVE-2024-32487, bsc#1222849)
  * CVE-2024-32487.patch</changelog>
</package>
<package pkgid="5150653047ee3ce5b4393a430f742f3d0f64bd4d249d41d744676d37f68a6eb9" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1370347200">- Update to final version 1.6.0:
  Changes since libX11 1.5 (found in the release candidates) include fixes
  for the recently announced security issues CVE-2013-1981, CVE-2013-1997,
  and CVE-2013-2004; the addition of the _XEatDataWords API for use by
  Xlib-based extension libraries, to help them avoid integer overflows when
  it is necessary to discard data; removal of ancient, unused, incomplete
  support for the Cray Unicos OS, and the DECnet and TLI transport types;
  numerous improvements to compose files and locale data; man page macro
  cleanups to improve compatibility with doclifter; and various other
  code cleanups and compiler warning fixes.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="cbd4e69beb882ff159f8fad9cf059867d1c2ec2b0b24e1256f3a87efc4577d3e" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1375185600">- Update to version 1.6.1:
  This release includes fixes to the code, docs &amp; build system.
  It makes both clang &amp; doclifter happier.  It includes patches
  upstreamed from Ubuntu, NetBSD, and Solaris.</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="f5f6ce7f85e83103dd76c8b1cfca2799c0ce699ac89da885f70706cac6b52159" name="libX11" arch="src">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1378728000">- Update to version 1.6.2:
  This release of libX11 includes a number of fixes to handle realloc() failure
  better, resolves a number of compiler &amp; static analyzer warnings, fixes several
  bugs in the X Input Method framework, and cleans up the XKB code to be a little
  more maintainable.
- Drop upstreamed patches:
  + Patch10: bug-239698_libx11.diff
  + Patch13: bug-221326-xim-sync.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1395662400">- U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch
  * fix typo in en_US Compose file (s/dead_actute/dead_acute/)
    (bnc#869333)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="38243651224a223bff8eaec397c57762f180d47cae3e705b767477875fe63be3" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="2e11f71dc7144150b8a6f27809dcac91fa0eb47b5ed64a89564a03875dfcacd3" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="c8e94dadc019282f7165995857f3cb75b1eb85b25371d72079d7710da368841a" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="690a3e681f79655cf744d14764ea77535809d16ece0adc2d24be510c8f5a2261" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="0271cc8e459dbfa967e74677d52d3981c8061ca9292136096d65e1620c42786d" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="e7bac92becdd0e7e216a9072c0e11f60896b7dfdbf181875692a38c95aed3d97" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="de9f9fe22fb4268565a310a62316ba8737096c3b5466ba49ae206e402ecfd65b" name="libX11-6" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="9975584c06db530ee59e809c369d62416d273bc36c289b15375184632901e060" name="libX11-6" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="091b7a4e7b57eaf46901b5fadf94cf159136f38a8a37c358924a01948766614a" name="libX11-6" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="a39d007b5aae1de803cb9b76827a7477152bb121ab7414adb6401f26bcf53db6" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="647933eb6c6d422bfec9cce60bbde83348a0d0da8d68f2e34325a54179e466f2" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="40043ca918cf34ad6a925de041020b875f95b1fb4eba167a73e65652b32a5551" name="libX11-data" arch="noarch">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="a11f38d8ac40e8d35d0e03c750ccf4cdd0ecccf526c1c3439b75d23da3adf59e" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="0b39dd1df625e23688ad712e6e363d255e0bc6eaad4de582f2876626099d9d3a" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="07dff8f1db319ed94d1c53287d7036483bef6823038b35850454380f20d1b4ba" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.27.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
</package>
<package pkgid="53866c62f3d61fc27d2689f113a22897fd57144d7c8f73e8693bf60f88d90217" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="24488c0333ce7b6b562b1034be7d0cc82b92bd4d96ba77cb85ec1bf84d99dae0" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="a6b0cf8ee8446f3c3268afff527f390837669f126c8f108991ce3daac1bb67f8" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.30.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
</package>
<package pkgid="79753d4ab87d404262c9ec674289d0912b06e31744a5d63b5899d60e5ac2de42" name="libX11-xcb1" arch="aarch64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="8d1ff75268b669793bc0850b9dbbd6497d64260b8cee1c95e2ecf839ac6c94e5" name="libX11-xcb1" arch="s390x">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="9b2034ab43589e1c33401f316c299753c84ee4f07b843e406e5b4eab365b240d" name="libX11-xcb1" arch="x86_64">
  <version epoch="0" ver="1.6.5" rel="150000.3.33.1"/>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1426075200">- Update to version 1.6.3:
  This release of libX11 looks bigger than it is, due to a lot of spec/doc
  cleanup work that doesn't affect the code itself.  There is still a good
  deal of bug fixes, code cleanup, locale improvements, and compose key table
  additions, including new UTF-8 compose sequences for:
  + &lt;Multi_key&gt; &lt;R&gt; &lt;equal&gt;      : "&lt;U+20B9&gt;" U20b9 # INDIAN RUPEE SIGN
  + &lt;Multi_key&gt; &lt;S&gt; &lt;semicolon&gt;  : "Ș"   U0218  # LATIN CAPITAL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;s&gt; &lt;semicolon&gt;  : "ș"   U0219  # LATIN SMALL LETTER S WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;T&gt; &lt;semicolon&gt;  : "Ț"   U021A  # LATIN CAPITAL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;t&gt; &lt;semicolon&gt;  : "ț"   U021B  # LATIN SMALL LETTER T WITH COMMA BELOW
  + &lt;Multi_key&gt; &lt;F&gt; &lt;U&gt;          : "&lt;U+1F595&gt;"  U1F595 # REVERSED HAND WITH MIDDLE FINGER EXTENDED
  + &lt;Multi_key&gt; &lt;L&gt; &lt;L&gt; &lt;A&gt; &lt;P&gt;  : "&lt;U+1F596&gt;"  U1F596 # RAISED HAND WITH PART BETWEEN MIDDLE AND RING FINGERS
- Changes to package:
  + remove Patch16: U_nls-en_US.UTF-8-Compose.pre-Fix-typo.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1426161600">- marked baselibs.conf as source file in specfile</changelog>
  <changelog author="msrb@suse.com" date="1448280000">- U_fix_for_Xlib_32-bit_request_number_issues.patch
  * Fix for overflow of requet number on 32bit platforms.
    (bnc#845916)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1477742400">- Update to version 1.6.4:
  + Move Compose \ o / to be with other emoji compose sequences
  + Replace Xmalloc+memset pairs with Xcalloc calls
  + Remove unused definition of XCONN_CHECK_FREQ
  + Bug 93184: read_EncodingInfo invalid free
  + Bug 93183: _XDefaultOpenIM memory leaks in out-of-memory error paths
  + Use strdup instead of Xmalloc+strcpy in _XDefaultOpenIM
  + XDefaultOMIF: replace strlen+Xmalloc+strcpy with strdup, code simplification
  + XlcDL.c: replace strcpy+strcat sequences with snprintf
  + XlcDL.c: reduce code duplication
  + lcPubWrap: replace malloc(strlen) + strcpy with strdup
  + Stop checking XTRANS_SECURE_RPC_FLAGS since we no longer use them
  + Stop checking for preferred order of local transports
  + Don't need to link libX11-xcb against libX11
  + xcms: use size_t for strlen/sizeof values instead of converting to int &amp; back
  + xcms: use unsigned indexes when looping through unsigned values
  + xcms: use size_t for pointer offsets passed to strncmp
  + omGeneric.c: Correct the parameter usage of sizeof
  + fix for Xlib 32-bit request number issues
  + Add Compose sequence for U+1F4A9.
  + Xlib.h: Fix macros imitating C functions.
  + Add compose file for pt_PT similar to pt_BR
  + Mark _XNextRequest as hidden
  + New compose keys for local languages in Togo
  + Fixup param specification for XChangeProperty()
- Package changes:
  + Remove upstream patch U_fix_for_Xlib_32-bit_request_number_issues.patch</changelog>
  <changelog author="jengelh@inai.de" date="1478347200">- Run fdupes over at least the manpages</changelog>
  <changelog author="sndirsch@suse.com" date="1478606400">- u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch
  * refix cs_CZ.UTF-locale (boo#1008951, fdo#81875, fdo#98219)</changelog>
  <changelog author="tobias.johannes.klausmann@mni.thm.de" date="1488369600">- Update to version 1.6.5:
  + Revert "Compose sequences for rouble sign"
  + specs/libX11: More synopsis fixes
  + specs/libX11: Fix paramdef entries listing multiple parameters
  + specs/libX11: Make paramdef spacing more consistent
  + specs/libX11: Add missing parameter types for XGetWindowProperty()
  + specs/libX11: Fix broken synopsis for Data/Data16/Data32
  + specs/libX11: Update Portability Considerations for the 21st century
  + autogen.sh: use quoted string variables
  + Plug a memory leak
  + Fix wrong Xfree in XListFonts failure path
  + Typos in "Xlib - C Language X Interface" document - Chapter 02
  + autogen: add default patch prefix
  + Compose sequences for rouble sign
  + autogen.sh: use exec instead of waiting for configure to finish
  + Revert cs_CZ.UTF-8 XLC_LOCALE to en_US.UTF-8
- supersedes u_nls-fix-handling-of-cs_CZ.UTF8_locale.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1532433600">- u_off-by-one-write-in-XListExtensions.patch
  * fixes off-by-one write in XListExtensions (bsc#1102062, CVE-2018-14599)
- u_out-of-boundary-write-in-XListExtensions.patch
  * fixes out of boundary write in XListExtensions (bsc#1102068, CVE-2018-14600)
- u_crash-on-invalid-reply-in-XListExtensions.patch
  * crash on invalid reply in XListExtensions (bsc#1102073, CVE-2018-14598)</changelog>
  <changelog author="sndirsch@suse.com" date="1596110400">- U_001-ChangeTheData_lenParameterOf_XimAttributeToValueToCARD16.patch,
  U_002-FixIntegerOverflowsIn_XimAttributeToValue.patch,
  U_003-FixMoreUncheckedLengths.patch,
  U_004-FixSignedLengthValuesIn_XimGetAttributeID.patch,
  U_005-ZeroOutBuffersInFunctions.patch,
  * XIM client heap overflows (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="tiwai@suse.de" date="1596542400">- U_006-Fix-size-calculation-in-_XimAttributeToValue.patch:
  * Regression fix in previous XIM client head overflow fixes
    (CVE-2020-14344, bsc#1174628)</changelog>
  <changelog author="sndirsch@suse.com" date="1598356800">- U_0001-Fix-an-integer-overflow-in-init_om.patch
  * Fix an integer overflow in init_om() [CVE-2020-14363, boo#1175239]</changelog>
  <changelog author="sndirsch@suse.com" date="1612958400">- U_0001-_XIOError-dpy-will-never-return-so-remore-dead.patch
  U_0002-remove-empty-line.patch
  U_0003-poll_for_response-Call-poll_for_event-again-if-xcb_p.patch
  U_0004-poll_for_event-Allow-using-xcb_poll_for_queued_event.patch
  U_0005-Prepare-for-_XIOError-possibly-returning.patch
  U_0006-Fix-poll_for_response-race-condition.patch
  * fixes a race condition in libX11 that causes various
    applications to crash randomly (boo#1181963)
- refreshed U_0001-Fix-an-integer-overflow-in-init_om.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1621252800">-  U_CVE-2021-31535.patch
  * adds missing request length checks in libX11 (CVE-2021-31535,
    bsc#1182506)</changelog>
  <changelog author="sndirsch@suse.com" date="1622462400">- redone U_CVE-2021-31535.patch due to regressions (boo#1186643)
  * fixes segfaults for xforms applications like fdesign</changelog>
  <changelog author="sndirsch@suse.com" date="1666180800">- U_fix-a-memory-leak-in-XRegisterIMInstantiateCallback.patch
  * security update for CVE-2022-3554 (bsc#1204422)
- U_Fix-two-memory-leaks-in-_XFreeX11XCBStructure.patch
  * security update for CVE-2022-3555 (bsc#1204425)</changelog>
  <changelog author="sndirsch@suse.com" date="1677844800">- U_Don-t-try-to-destroy-NULL-condition-variables.patch
  * fixes regression introduced with security update for
    CVE-2022-3555 (bsc#1204425, bsc#1208881)</changelog>
  <changelog author="sndirsch@suse.com" date="1686571200">- U_InitExt.c-Add-bounds-checks-for-extension-request-ev.patch
  * Buffer overflows in InitExt.c (boo#1212102, CVE-2023-3138)</changelog>
  <changelog author="sndirsch@suse.com" date="1695816000">- U_0001-CVE-2023-43785-out-of-bounds-memory-access-in-_XkbRe.patch
  U_0002-CVE-2023-43786-stack-exhaustion-from-infinite-recurs.patch
  U_0003-XPutImage-clip-images-to-maximum-height-width-allowe.patch
  U_0004-XCreatePixmap-trigger-BadValue-error-for-out-of-rang.patch
  U_0005-CVE-2023-43787-Integer-overflow-in-XCreateImage-lead.patch
  * CVE-2023-43785 libX11: out-of-bounds memory access in
    _XkbReadKeySyms() (boo#1215683)
  * CVE-2023-43786 libX11: stack exhaustion from infinite recursion
  in PutSubImage() (boo#1215684)
  * CVE-2023-43787 libX11: integer overflow in XCreateImage()
    leading to a heap overflow (boo#1215685)</changelog>
</package>
<package pkgid="ca83b27fa24c2c90d9d9f8a9a7e1054cdcb4b9c844e604e307d9cb35d0e8f664" name="libabsl2308_0_0" arch="aarch64">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="65fd36e91f7e166c51b13c48cef25e6654bbc1f0b88bbc1d08a4f2000fb80b5b" name="libabsl2308_0_0" arch="ppc64le">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="1a62bdac75f522fb481456cce64040977d1ef3357223c239f4eee3f8440d0697" name="libabsl2308_0_0" arch="s390x">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="218ac726dd655e61d5658c3ac169cbc46f939e241d7459e5200e029aadb5dc82" name="libabsl2308_0_0" arch="x86_64">
  <version epoch="0" ver="20230802.1" rel="150400.10.4.1"/>
  <changelog author="fvogt@suse.com" date="1604664000">- Drop source package, was only used by grpc which was switched
  over to use the shared library</changelog>
  <changelog author="elimat@opensuse.org" date="1609243200">- Update to version 20200923.2
  What's New:
  * absl::StatusOr&lt;T&gt; has been released. See our blog
    post for more information.
  * Abseil Flags reflection interfaces have been released.
  * Abseil Flags memory usage has been significantly optimized.
  * Abseil now supports a "hardened" build mode. This build mode enables
    runtime checks that guard against programming errors that may lead
    to security vulnerabilities.
  Notable Fixes:
  * Sanitizer dynamic annotations like AnnotateRWLockCreate that are
    also defined by the compiler sanitizer implementation are no longer
    also defined by Abseil.
  * Sanitizer macros are now prefixed with ABSL_ to avoid naming collisions.
  * Sanitizer usage is now automatically detected and no longer requires
    macros like ADDRESS_SANITIZER to be defined on the command line.
  Breaking Changes:
  * Abseil no longer contains a dynamic_annotations library. Users
    using a supported build system (Bazel or CMake) are unaffected by
    this, but users manually specifying link libraries may get an error
    about a missing linker input.</changelog>
  <changelog author="rpm@fthiessen.de" date="1618315200">- Update to LTS version 20210324.0
  * Breaking: The empty absl::container target has been removed from
    the CMake build. This target had no effect and references to
    this target in user code can safely be removed.
  * New: The cleanup library has been released. This library contains
    the control-flow-construct-like type absl::Cleanup which is used
    for executing a callback on scope exit.
  * New: The numeric library now includes bits.h, a polyfill header
    containing implementations of C++20's bitwise math functions.
  * New: Abseil now installs pkg-config files to make it easier to
    use Abseil with some other build systems.
  * New: Abseil now respects the default CMake installation paths.
    Standard CMake variables like CMAKE_INSTALL_PREFIX can be used
    to change the installation path.
- Added Correctly-install-pkgconfig.patch from upstream to fix
  installation of pkgconfig files
- Call ldconfig on post and postun</changelog>
  <changelog author="rpm@fthiessen.de" date="1619352000">- Update to LTS version 20210324.1
  * Fixed missing absl::Cleanup
  * Fixed pkgconfig install path
- Dropped upstream merged Correctly-install-pkgconfig.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1625054400">- Update to version 20210324.2 (LTS):
  * No user visible changes, only build system related</changelog>
  <changelog author="dmueller@suse.com" date="1641297600">- update to 20211102.0:
  * absl::Cord is now implemented as a b-tree. The new implementation offers
    improved performance in most workloads.
  * absl::SimpleHexAtoi() has been added to strings library for parsing
    hexadecimal strings</changelog>
  <changelog author="danilo.spinella@suse.com" date="1646395200">- Fix build on SLE-12-SP5</changelog>
  <changelog author="jengelh@inai.de" date="1649073600">- Implement shlib packaging policy</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1656504000">- Add options-old.patch, options-cxx17.patch (boo#1203378)
  * Ensure ABI stability regardless of compiler settings per instruction in the header.</changelog>
  <changelog author="fvogt@suse.com" date="1656504001">- Remove obsolete 0%{suse_version} &lt; 1500 conditions</changelog>
  <changelog author="elimat@opensuse.org" date="1656849600">- Update to version 20220623.0
  What's New:
  * Added absl::AnyInvocable, a move-only function type.
  * Added absl::CordBuffer, a type for buffering data for eventual inclusion an
    absl::Cord, which is useful for writing zero-copy code.
  * Added support for command-line flags of type absl::optional&lt;T&gt;.
  Breaking Changes:
  * CMake builds now use the flag ABSL_BUILD_TESTING (default: OFF) to control
    whether or not unit tests are built.
  * The ABSL_DEPRECATED macro now works with the GCC compiler. GCC users that
    are experiencing new warnings can use -Wno-deprecated-declatations silence
  the warnings or use -Wno-error=deprecated-declarations to see warnings but
  not fail the build.
  * ABSL_CONST_INIT uses the C++20 keyword constinit when available. Some
    compilers are more strict about where this keyword must appear compared to
  the pre-C++20 implementation.
  * Bazel builds now depend on the bazelbuild/bazel-skylib repository.
    See Abseil's WORKSPACE file for an example of how to add this dependency.
  Other:
  * This will be the last release to support C++11. Future releases will require at least C++14.
- run spec-cleaner</changelog>
  <changelog author="brunopitrus@hotmail.com" date="1657540800">- Add Fix-maes-msse41-leaking-into-pkgconfig.patch
  * Do not make programs compiled with abseil require new-ish CPUs (boo#1203379)</changelog>
  <changelog author="dmueller@suse.com" date="1664020800">- update to 20220623.1:
  * minor warning fix</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to 20230125.2
  What's New:
    The Abseil logging library has been released. This library
    provides facilities for writing short text messages about the
    status of a program to stderr, disk files, or other sinks
    (via an extension API). See the logging library documentation
    for more information.
    An extension point, AbslStringify(), allows user-defined types
    to seamlessly work with Abseil's string formatting functions
    like absl::StrCat() and absl::StrFormat().
    A library for computing CRC32C checksums has been added.
    Floating-point parsing now uses the Eisel-Lemire algorithm,
    which provides a significant speed improvement.
    The flags library now provides suggestions for the closest
    flag(s) in the case of misspelled flags.
    Using CMake to install Abseil now makes the installed artifacts
    (in particular absl/base/options.h) reflect the compiled ABI.
  Breaking Changes:
    Abseil now requires at least C++14 and follows Google's Foundational
    C++ Support Policy. See this table for a list of currently supported
    versions compilers, platforms, and build tools.
    The legacy spellings of the thread annotation macros/functions
    (e.g. GUARDED_BY()) have been removed by default in favor of the
    ABSL_ prefixed versions (e.g. ABSL_GUARDED_BY()) due to clashes with
    other libraries. The compatibility macro ABSL_LEGACY_THREAD_ANNOTATIONS
    can be defined on the compile command-line to temporarily restore these
    spellings, but this compatibility macro will be removed in the future.
  Known Issues
    The Abseil logging library in this release is not a feature-complete
    replacement for glog yet. VLOG and DFATAL are examples of features
    that have not yet been released.
- obsolete Fix-maes-msse41-leaking-into-pkgconfig.patch</changelog>
  <changelog author="adrian@suse.de" date="1685016000">- update to 20230125.3
  Details can be found on:
    https://github.com/abseil/abseil-cpp/releases/tag/20230125.3</changelog>
  <changelog author="fvogt@suse.com" date="1688040000">- Add baselibs.conf to make protobuf happy. Hopefully temporary.</changelog>
  <changelog author="fstrba@suse.com" date="1691582400">- Fix build on older systems by requiring C++17 compliant compiler
- Added patch:
  * cmake.patch
    + lower the cmake requirement to 3.5 in order to be able to
    build on SLE12SP5</changelog>
  <changelog author="adrian@suse.de" date="1694088000">- update to 20230802.0
  What's New:
  * Added the nullability library for designating the expected
    nullability of pointers. Currently these serve as annotations
    only, but it is expected that compilers will one day be able
    to use these annotations for diagnostic purposes.
  * Added the prefetch library as a portable layer for moving data
    into caches before it is read.
  * Abseil's hash tables now detect many more programming errors
    in debug and sanitizer builds.
  * Abseil's synchronization objects now differentiate absolute
    waits (when passed an absl::Time) from relative waits (when
    passed an absl::Duration) when the underlying platform supports
    differentiating these cases. This only makes a difference when
    system clocks are adjusted.
  * Abseil's flag parsing library includes additional methods that
    make it easier to use when another library also expects to be
    able to parse flags.
  * absl::string_view is now available as a smaller target,
    @com_google_absl//absl/strings:string_view, so that users may
    use this library without depending on the much larger
    @com_google_absl//absl/strings target.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1696593600">- update to 20230802.1:
  * Add StdcppWaiter to the end of the list of waiter
    implementations</changelog>
  <changelog author="dmueller@suse.com" date="1705665600">- fix build for non-SUSE distributions</changelog>
</package>
<package pkgid="80520129ca54ef233dc64e4cd70865212c53ad1883753a96bc42697678db54c1" name="libapparmor" arch="src">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="bc653cee2e43657a1dafab2b80a37de0105843349b13380db7f6cacfab72b435" name="libapparmor" arch="src">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="0c69782853b06730793b574621ca08a1845747128cf3af1557244eef1b20e21b" name="libapparmor1" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="955498b96ac7b9c608f94a87e870cf92eedf43773e8a3bd4f0d3269eb97e36ac" name="libapparmor1" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="60e5a116faddd209ce59ae2941f6e30d97a6287b53bbe2de3ff6476cd5ef2a1d" name="libapparmor1" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="479144ef7a7db6d3903a0291f5fedc89424344b1c9d8e336ba276c2a7305afbf" name="libapparmor1" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="3056c1e63b558da2523431002dc44f4af3a9c3dbdaa07297dde7ab02eb5dbf2a" name="libapparmor1" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="b76630a5d9495ce6aefbbba8f80efb9b56f0dac7f5dd0a08da073b32cb58a54a" name="libapparmor1" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="516237645b6823f271041870280f94866a4860f2a38525becaa4545e107613fe" name="libappindicator3-1" arch="aarch64">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="65d485d22b1ea950680c1896fbec4e5f3b4270ef11c052c6c753671acd3dfc85" name="libappindicator3-1" arch="s390x">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="8bc0021181e33276b839ba5548ab6f13af444f937808702206017ec6abd02c91" name="libappindicator3-1" arch="x86_64">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="cd1c5fbddfb76f082996a1c483f3f0bdae59ce982be62422cda5523d8b9fe97a" name="libappindicator3" arch="src">
  <version epoch="0" ver="12.10.1+bzr20170215" rel="150200.3.3.1"/>
  <changelog author="p.drouand@gmail.com" date="1394452800">- Fix license; src/generate-id.c is released and distributed under
  GPL-3.0 license</changelog>
  <changelog author="p.drouand@gmail.com" date="1394539200">- Fix appindicator-sharp require in appindicator-sharp-devel</changelog>
  <changelog author="schwab@suse.de" date="1425556800">- Allow building without mono support</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.1+bzr20141110:
  * scroll-event: change parameter to the right type.
- Rebase 0001_Fix_mono_dir.patch.
- Remove no-deprecated.patch: merged upstream.
- Remove dont-build-examples.patch: fixed upstream.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1465819200">- Little spec cleanup.</changelog>
  <changelog author="t.gruner@katodev.de" date="1467892800">- Allow building with mono support in case without mono is set</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492603200">- Update to version 12.10.1+bzr20170215 (changes since
  12.10.1+bzr20141110):
  * Handle watcher service appearing and disappearing.
  * Make test-simple-app really working.
  * Fix icon and theme paths when running in $SNAP environment
    (lp#1600136).
  * Do not emit label changes when guide is still empty.
  * Do not append the snap prefix if the icon is saved in a well
    known readable path.
- Add libappindicator-activate-support.patch: Open menu on the
  left-click action (lp#1403449).
- Rename python-appindicator to python2-appindicator.</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Rename %soname to %sover to better reflect its purpose.
- Update summaries.
- Remove redundant pkgconfig() reqiures; these are already
  autodiscovered.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504526400">- Disable building of -doc subpackage (source not compatible with
  gtk-doc 1.26 - and the doc is available online anyway):
  + Remove gtk-doc BuildRequires.
  + Replace --enable-gtk-doc configure parameter with
  - -disable-gtk-doc,
  + Drop the -doc subpackage.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Add libappindicator-no-Werror.patch: the libappindicator code is
  aging and is not keeping up well with the moving world around it.</changelog>
  <changelog author="ximi.obs@gmail.com" date="1547294400">- Changed the activate-support patch to signal an "activate-event"
  so users can create callbacks themselves.
  Original patch from Yichao Yu &lt;yyc1992@gmail.com&gt;.</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1557921600">- Drop libappindicator-activate-support.patch as it's no longer needed and
  breaks context menu / actions in fall-back mode (boo#1132659)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1568808000">- Split gtk2 and gtk3 builds using _multibuild. Python2 and Mono
  bindings are only available for GTK2, so the GTK3 version has
  significantly less build dependencies,
  add only_require_python_for_gtk2.patch
- Drop dependency on deprecated gnome-common, see
  https://wiki.gnome.org/Projects/GnomeCommon/Migration
- Allow configure run to succeed even when gtk-doc is not installed,
  add make_gtk_doc_optional.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1569931200">- Make sure the OBS spec file parser does not apply the gtk3 psuffix
  for the default ("") multibuild flavor.</changelog>
  <changelog author="mailaender@opensuse.org" date="1580644800">- Use the vanilla nunit for compatibility with newer Mono</changelog>
  <changelog author="maurizio.galli@gmail.com" date="1581508800">- Added xappstatusicon.patch. It adds support for XAppStatus Icon by
  Linux Mint.</changelog>
  <changelog author="tchvatal@suse.com" date="1584964800">- Fix build on py2 less system</changelog>
  <changelog author="dleuenberger@suse.com" date="1586433600">- Do not apply xappstatusicon.patch: pulls half of Mate into Ring1.</changelog>
  <changelog author="mliska@suse.cz" date="1586865600">- Add -fcommon in order to fix boo#1164492.</changelog>
  <changelog author="yfjiang@suse.com" date="1673611200">- Provide RH/Fedora used libappindicator-gtk3 symbol required by
  Slack (bsc#1207112).</changelog>
</package>
<package pkgid="80048e41c96b06e8b6e5ff2ec35c2ce5549d19003510ed70883b72d735142e52" name="libassuan" arch="src">
  <version epoch="0" ver="2.5.5" rel="150000.4.5.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1376913600">- update to 2.1.1
  * no changes on the GNU/Linux platform
- includes changes from 2.1.0:
  * Support for the nPth library.
  * Add assuan_check_version and two version macros.
  * Interface changes relative to the 2.0.3 release:
    ASSUAN_SYSTEM_NPTH_IMPL  NEW macro.
    ASSUAN_SYSTEM_NPTH       NEW macro.
    __assuan_read            NEW (private).
    __assuan_write           NEW (private).
    __assuan_recvmsg         NEW (private).
    __assuan_sendmsg         NEW (private).
    __assuan_waitpid         NEW (private).
    ASSUAN_VERSION           NEW macro.
    ASSUAN_VERSION_NUMBER    NEW macro.
    assuan_check_version     NEW.
- add tarball signature and keyring
- run unit tests during build
- libgpg-error requirement is &gt;= 1.8</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1408276800">- update to 2.1.2:
  * Added support for ppc64le.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1415448000">- update to 2.1.3:
  + Performance fix for a platform other than GNU/Linux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419768000">- libassuan 2.2.0:
  * Added support for socket redirection.
  * Interface changes relative to the 2.1.3 release:
  assuan_sock_set_sockaddr_un  NEW.
- fix SLE 11 SP2 build (make install)</changelog>
  <changelog author="astieger@suse.com" date="1431432000">- libassuan 2.2.1:
  * Documentation updates.
  * Fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1440763200">- libassuan 2.3.0:
  * Now wipes out the memory of the context structure before freeing.
  The context may have stored sensitive data in its line buffers.
  * Fixed a problem with the data length limit in assuan_inquire.
  * Returns GPG_ERR_SOURCE_ASSUAN with errors from functions w/o a
  context.
  * Two new functions to tweak the behaviour of the socket wrappers.
  * By default build without a build timestamp.
  * Interface changes relative to the 2.2.1 release:
  assuan_sock_set_flag     NEW.
  assuan_sock_get_flag     NEW.</changelog>
  <changelog author="astieger@suse.com" date="1446724800">- libassuan 2.4.0:
  * New flags "socks" and "tor-mode" for assuan_sock_{set,get}_flag.
  * New function assuan_sock_connect_byname.
  * Require at least libgpg-error 1.17.
  * Interface changes relative to the 2.3.0 release:
    assuan_sock_connect_byname    NEW.
    ASSUAN_SOCK_TOR               NEW.
    ASSUAN_SOCK_SOCKS             NEW.
    assuan_sock_set_flag          EXTENDED.
    assuan_sock_get_flag          EXTENDED.</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- libassuan 2.4.1:
  * In Tor mode fallback to port 9150 if 9050 is not listening.</changelog>
  <changelog author="astieger@suse.com" date="1449144000">- libassuan 2.4.2:
  * The nPth version of the connect system hook does now wrap the
  call with npth_unprotec/npth_protect to avoid blocking during a
  connect.
  * Add feature to assuan_sock_connect_byname to test for SOCKS5
  availability.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- libassuan 2.4.3:
  * Allow socket redirection with assuan_socket_connect.
  * Speedup spawning programs on Linux
  * Fix minor memory leaks</changelog>
  <changelog author="schwab@suse.de" date="1478692800">- qemu-disable-fdpassing-test.patch: disable fdpassing test when running
  under qemu-linux-user</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
</package>
<package pkgid="c3bbb3e3f0b19d573c2ad57f07380f721adc17a106532d47b268d294b7eecfac" name="libassuan0" arch="aarch64">
  <version epoch="0" ver="2.5.5" rel="150000.4.5.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1415448000">- update to 2.1.3:
  + Performance fix for a platform other than GNU/Linux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419768000">- libassuan 2.2.0:
  * Added support for socket redirection.
  * Interface changes relative to the 2.1.3 release:
  assuan_sock_set_sockaddr_un  NEW.
- fix SLE 11 SP2 build (make install)</changelog>
  <changelog author="astieger@suse.com" date="1431432000">- libassuan 2.2.1:
  * Documentation updates.
  * Fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1440763200">- libassuan 2.3.0:
  * Now wipes out the memory of the context structure before freeing.
  The context may have stored sensitive data in its line buffers.
  * Fixed a problem with the data length limit in assuan_inquire.
  * Returns GPG_ERR_SOURCE_ASSUAN with errors from functions w/o a
  context.
  * Two new functions to tweak the behaviour of the socket wrappers.
  * By default build without a build timestamp.
  * Interface changes relative to the 2.2.1 release:
  assuan_sock_set_flag     NEW.
  assuan_sock_get_flag     NEW.</changelog>
  <changelog author="astieger@suse.com" date="1446724800">- libassuan 2.4.0:
  * New flags "socks" and "tor-mode" for assuan_sock_{set,get}_flag.
  * New function assuan_sock_connect_byname.
  * Require at least libgpg-error 1.17.
  * Interface changes relative to the 2.3.0 release:
    assuan_sock_connect_byname    NEW.
    ASSUAN_SOCK_TOR               NEW.
    ASSUAN_SOCK_SOCKS             NEW.
    assuan_sock_set_flag          EXTENDED.
    assuan_sock_get_flag          EXTENDED.</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- libassuan 2.4.1:
  * In Tor mode fallback to port 9150 if 9050 is not listening.</changelog>
  <changelog author="astieger@suse.com" date="1449144000">- libassuan 2.4.2:
  * The nPth version of the connect system hook does now wrap the
  call with npth_unprotec/npth_protect to avoid blocking during a
  connect.
  * Add feature to assuan_sock_connect_byname to test for SOCKS5
  availability.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- libassuan 2.4.3:
  * Allow socket redirection with assuan_socket_connect.
  * Speedup spawning programs on Linux
  * Fix minor memory leaks</changelog>
  <changelog author="schwab@suse.de" date="1478692800">- qemu-disable-fdpassing-test.patch: disable fdpassing test when running
  under qemu-linux-user</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
</package>
<package pkgid="9142986a3de1db6fd5754f2ac701f61b71ebcc7ca0b0568201399852d324e276" name="libassuan0" arch="s390x">
  <version epoch="0" ver="2.5.5" rel="150000.4.5.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1415448000">- update to 2.1.3:
  + Performance fix for a platform other than GNU/Linux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419768000">- libassuan 2.2.0:
  * Added support for socket redirection.
  * Interface changes relative to the 2.1.3 release:
  assuan_sock_set_sockaddr_un  NEW.
- fix SLE 11 SP2 build (make install)</changelog>
  <changelog author="astieger@suse.com" date="1431432000">- libassuan 2.2.1:
  * Documentation updates.
  * Fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1440763200">- libassuan 2.3.0:
  * Now wipes out the memory of the context structure before freeing.
  The context may have stored sensitive data in its line buffers.
  * Fixed a problem with the data length limit in assuan_inquire.
  * Returns GPG_ERR_SOURCE_ASSUAN with errors from functions w/o a
  context.
  * Two new functions to tweak the behaviour of the socket wrappers.
  * By default build without a build timestamp.
  * Interface changes relative to the 2.2.1 release:
  assuan_sock_set_flag     NEW.
  assuan_sock_get_flag     NEW.</changelog>
  <changelog author="astieger@suse.com" date="1446724800">- libassuan 2.4.0:
  * New flags "socks" and "tor-mode" for assuan_sock_{set,get}_flag.
  * New function assuan_sock_connect_byname.
  * Require at least libgpg-error 1.17.
  * Interface changes relative to the 2.3.0 release:
    assuan_sock_connect_byname    NEW.
    ASSUAN_SOCK_TOR               NEW.
    ASSUAN_SOCK_SOCKS             NEW.
    assuan_sock_set_flag          EXTENDED.
    assuan_sock_get_flag          EXTENDED.</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- libassuan 2.4.1:
  * In Tor mode fallback to port 9150 if 9050 is not listening.</changelog>
  <changelog author="astieger@suse.com" date="1449144000">- libassuan 2.4.2:
  * The nPth version of the connect system hook does now wrap the
  call with npth_unprotec/npth_protect to avoid blocking during a
  connect.
  * Add feature to assuan_sock_connect_byname to test for SOCKS5
  availability.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- libassuan 2.4.3:
  * Allow socket redirection with assuan_socket_connect.
  * Speedup spawning programs on Linux
  * Fix minor memory leaks</changelog>
  <changelog author="schwab@suse.de" date="1478692800">- qemu-disable-fdpassing-test.patch: disable fdpassing test when running
  under qemu-linux-user</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
</package>
<package pkgid="7a9d3e498ee7f4d57961cf394ab34e0f11054b7bfa571482f19969d71dc5a4bd" name="libassuan0" arch="x86_64">
  <version epoch="0" ver="2.5.5" rel="150000.4.5.2"/>
  <changelog author="andreas.stieger@gmx.de" date="1415448000">- update to 2.1.3:
  + Performance fix for a platform other than GNU/Linux</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1419768000">- libassuan 2.2.0:
  * Added support for socket redirection.
  * Interface changes relative to the 2.1.3 release:
  assuan_sock_set_sockaddr_un  NEW.
- fix SLE 11 SP2 build (make install)</changelog>
  <changelog author="astieger@suse.com" date="1431432000">- libassuan 2.2.1:
  * Documentation updates.
  * Fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1440763200">- libassuan 2.3.0:
  * Now wipes out the memory of the context structure before freeing.
  The context may have stored sensitive data in its line buffers.
  * Fixed a problem with the data length limit in assuan_inquire.
  * Returns GPG_ERR_SOURCE_ASSUAN with errors from functions w/o a
  context.
  * Two new functions to tweak the behaviour of the socket wrappers.
  * By default build without a build timestamp.
  * Interface changes relative to the 2.2.1 release:
  assuan_sock_set_flag     NEW.
  assuan_sock_get_flag     NEW.</changelog>
  <changelog author="astieger@suse.com" date="1446724800">- libassuan 2.4.0:
  * New flags "socks" and "tor-mode" for assuan_sock_{set,get}_flag.
  * New function assuan_sock_connect_byname.
  * Require at least libgpg-error 1.17.
  * Interface changes relative to the 2.3.0 release:
    assuan_sock_connect_byname    NEW.
    ASSUAN_SOCK_TOR               NEW.
    ASSUAN_SOCK_SOCKS             NEW.
    assuan_sock_set_flag          EXTENDED.
    assuan_sock_get_flag          EXTENDED.</changelog>
  <changelog author="astieger@suse.com" date="1448712000">- libassuan 2.4.1:
  * In Tor mode fallback to port 9150 if 9050 is not listening.</changelog>
  <changelog author="astieger@suse.com" date="1449144000">- libassuan 2.4.2:
  * The nPth version of the connect system hook does now wrap the
  call with npth_unprotec/npth_protect to avoid blocking during a
  connect.
  * Add feature to assuan_sock_connect_byname to test for SOCKS5
  availability.</changelog>
  <changelog author="astieger@suse.com" date="1468843200">- libassuan 2.4.3:
  * Allow socket redirection with assuan_socket_connect.
  * Speedup spawning programs on Linux
  * Fix minor memory leaks</changelog>
  <changelog author="schwab@suse.de" date="1478692800">- qemu-disable-fdpassing-test.patch: disable fdpassing test when running
  under qemu-linux-user</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- libassuan 2.4.4:
  * New configure option --disable-doc
  * Fix the use of nanosleep
  * Portability fix for systems not defining INADDR_LOOPBACK</changelog>
  <changelog author="astieger@suse.com" date="1512388800">- libassuan 2.4.5:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="astieger@suse.com" date="1512993600">- libassuan 2.5.1:
  * New function to change the system hooks for the socket
    interface (assuan_sock_set_system_hooks)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="atoptsoglou@suse.com" date="1544702400">-Update to 2.5.2:
  * configure.ac: Bump LT version to C8/A8/R2
  * include libassuan.pc in the spec file</changelog>
  <changelog author="schwab@suse.de" date="1545220800">- qemu-disable-fdpassing-test.patch: remove</changelog>
  <changelog author="kbabioch@suse.de" date="1549886400">- Update to 2.5.3:
  * Add a timeout for writing to a SOCKS5 proxy.
  * Add workaround for a problem with LD_LIBRARY_PATH on newer systems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1603540800">- update to 2.5.4:
  * Fix some minor build annoyances</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1616760000">- update to 2.5.5:
  * Fix a crash in the logging code
  * Upgrade autoconf</changelog>
</package>
<package pkgid="5d0b36991ab233b5568cd69f53e1d6b3fe97a6e94378b37f7a5058336f773de6" name="libaudit1" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="25f63b7ee6f11796525425bbafc5eac5d9a1f9ef929fe429a2dc1d6f205b0e4b" name="libaudit1" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="a277f1f400fcbdbaef3a2cb4165169407a85364adb605b756e5aaa829bdf8115" name="libaudit1" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="516cb310e88e60421712b1850f466d832f6d08b632e70b19414c0a7ba9f2af7c" name="libaudit1" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="257094c2c0fee8a949b3834d538e4ae467f7229456de5618141acd0ab62368b1" name="libaudit1" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="993d2391798bd131793c3ee656c6b4b041c4e37a6f94e7d9637b7ad9b3efb3e1" name="libaudit1" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="8a32069126e1e0ed08edbd387fb66de45b7dfb1591c397fd7e1bf4d6fb6c31dd" name="libaudit1" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="07b5f74130a90f896e6061b23815e1a2032c3144e73cbe082e6cb7f6f8086dec" name="libaudit1" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="ca3d889253782b9a19217151fb9e6796d11fc50809951ef53407c61255d6128b" name="libaudit1" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="d629d0bd2537abc20b1e892feb350def919acd723096b82b1d7064a6116eaa32" name="libauparse0" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="25222168d28ece72a8dc137993849c5b6ec031e7a031f0609fdbabf0068842d7" name="libauparse0" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="b78dcecff45c8073247f8ceaa823c914cd06eb64fe57a6d36e049186e86f4438" name="libauparse0" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="24aa8faf2670d43dcb29b5ad1d0fc11634140a8b9c534b1dd1032e24e859b2c5" name="libauparse0" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="becbdd7b669de9f351664013953787e82cf388e1773bddc2b06f3a9e5de162f8" name="libauparse0" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="2a77d088665d7f957ad2e4785f19e8d5f4a61d287dcaa5c01d2d793672591bf5" name="libauparse0" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="957ce612621766e7e94fc7fc0b6c094daee122a9dcf526f6eb9c3aca006bdddb" name="libauparse0" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="4ceba0cd6b670d243889534d385eeec4c9a63d363e758ceeb91e02e45e497c62" name="libauparse0" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="6c0561449bbb0acb3f7485b0ebac38b857dd7a12614633608e18574e20e26465" name="libauparse0" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="p.drouand@gmail.com" date="1449057600">- Do not depend on insserv nor fillup; the package provides
  neither sysconfig nor sysvinit files</changelog>
  <changelog author="tchvatal@suse.com" date="1459512000">- Version update to 2.5 release
- Refresh two patches and README to contain SUSE and not SuSE
  * audit-allow-manual-stop.patch
  * audit-plugins-path.patch
- Cleanup with spec-cleaner and do not use subshells but rather use
  - C parameter of make
- Install m4 file to the devel package</changelog>
  <changelog author="tchvatal@suse.com" date="1459598400">- Create folder for the m4 file from previous commit to avoid install
  failure</changelog>
  <changelog author="tonyj@suse.com" date="1500379200">- Update to version 2.7.7 release
  Changelog: https://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Rectify RPM groups, diversify descriptions.
- Remove mentions of static libraries because they are not built.</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 2.8.1 release (includes 2.8 and 2.7.8 changes)
  * many features added to auparse_normalize
  * cli option added to auditd and audispd for setting config dir
  * in auditd, restore the umask after creating a log file
  * option added to auditd for skipping email verification
-  Full changelog: http://people.redhat.com/sgrubb/audit/ChangeLog</changelog>
  <changelog author="tchvatal@suse.com" date="1518004800">- Add patch to fix test run without python2 interpreter:
  * audit-python3.patch
- Update to 2.8.2 release:
  * Update tables for 4.14 kernel
  * Fixup ipv6 server side binding
  * AVC report from aureport was missing result column header (#1511606)
  * Add SOFTWARE_UPDATE event
  * In ausearch/report pickup any path and new-disk fields as a file
  * Fix value returned by auditctl --reset-lost (Richard Guy Briggs)
  * In auparse, fix expr_create_timestamp_comparison_ex to be numeric field
  * Fix building on old systems without linux/fanotify.h
  * Fix shell portability issues reported by shellcheck
  * Auditd validate_email should not use gethostbyname</changelog>
  <changelog author="tonyj@suse.com" date="1521201600">- Update header in audit-python3.patch
- Update patch guidelines in README-BEFORE-ADDING-PATCHES</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529236800">- Update to version 2.8.3:
  * Correct msg function name in lru debug code.
  * Fix a segfault in auditd when dns resolution isn't available.
  * Make a reload legacy service for auditd.
  * In auparse python bindings, expose some new types that were
    missing.
  * In normalizer, pickup subject kind for user_login events.
  * Fix interpretation of unknown ioctcmds (rh#1540507).
  * Add ANOM_LOGIN_SERVICE, RESP_ORIGIN_BLOCK, &amp;
    RESP_ORIGIN_BLOCK_TIMED events.
  * In auparse_normalize for USER_LOGIN events, map acct for
    subj_kind.
  * Fix logging of IPv6 addresses in DAEMON_ACCEPT events
    (rh#1534748).
  * Do not rotate auditd logs when num_logs &lt; 2 (brozs).</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1529755200">- Update to version 2.8.4:
  * Generate checkpoint file even when not results are returned
    (Burn Alting).
  * Fix log file creation when file logging is disabled entirely
    (Vlad Glagolev).
  * Use SIGCONT to dump auditd internal state (rh#1504251).
  * Fix parsing of virtual timestamp fields in ausearch_expression
    (rh#1515903).
  * Fix parsing of uid &amp; success for ausearch.
  * Hide lru symbols in auparse.
  * Fix aureport summary time range reporting.
  * Allow unlimited retries on startup for remote logging.
  * Add queue_depth to remote logging stats and increase default
    queue_depth size.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Make use of some %make_install.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Remote zos building is now a configurable option.
  It should be disabled in audit (and left enabled in audit-secondary).</changelog>
  <changelog author="ematsumiya@suse.com" date="1591012800">- Fix specfile to require libauparse0 and libaudit1 after splitting
  audit-libs (bsc#1172295)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Remove audit-fno-common.patch: fixed in upstream
- Remove audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1679313600">- Enable livepatching on main library on x86_64.</changelog>
</package>
<package pkgid="f5761828e84d6153994f4d5cba2ad9b69a22bac7d98d0333c6119d4241334ce5" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="013eb14562d0d38e1747c2e502e12b0c7bd4ad617439e7c08e8ad109bc1f5041" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="0dfb6b8fdd07df202a88f1d06b6799d58d24bb6bde5d9b432ae88b1887893ccc" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="b75ce724bbbb61e89848a7041541de0e00e30eed8462a43dc9911a2156fbd62b" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="c4ad27ab0c1aeacd1bdb2305bde84198f31b73536a492dd4dbf78f13bd29e8a6" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="cac31da7f8e67043692c50f20998ece5abb8daa08d8b6822f1b4a1af67e38a33" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="53d47fe34db407b8384c488e68dcb406e79ea3c48279c8290a3d3724060006ce" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="8316e62070fb01159de377da1469abef1ac0f427a5d88597c69b07b0b1eabe68" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="9a1f10389254317ead2000e0826667ac1ccae234830306766f99b99fc38f6de8" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="8fc5b8000fd2ad238825a621b77865253e0a76f6118a41baca333f0c822ec240" name="libavahi-client3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="254330469ac9bb25640e260b2fc50b167daeb5ceee400c0459812f2b36de82e8" name="libavahi-client3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="fc99759fc668398616f15d997a85164f55e5f61514a0ad2ad6b2591505dbce59" name="libavahi-client3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="86395b4b5b8c0cda6f3b9e7140c00db97452a9becb03f0b93a6c9b4807853712" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="27a693ac9298921efcaaaabbaa8e02242b7969fafc20901307b7aa027a247993" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="b074cff28ff65e38bac3414ed8c4b69bbc3f60673dc8dcb51c256fe5c51ea73f" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="9c92fe1cacc45212ce9451ce61c7659ea1cf40e2e4b080d2972636c2ee85723e" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="8e73e5f384855e7bdf632e1f333464f7ead469d067c501dc43719e4b6b39d058" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="e922542dcc77345b89587d20777f7f85276d27d642a1a57407d6811fcd6be2c1" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="b7b395055048c4c160fd7b733c2a12b1dc9ba08d46e7768a2f1eafe2187a3faa" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="e5ccc1d56cf9b0514b44f510d8d25e75d375febecec6c81d3f64eaa056645dec" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="6eba40cc3c97e71c08255848ee9dde3956b020c8764f5948c634ea5899bfd5e7" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="204d441497172d2b26b0f9560d7fcd1bb68c919dc0cc0d5dc405e4b9e575ff13" name="libavahi-common3" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="202ae2cc846dd480daf99da70e6020fe294e647db203c4334e664a70876dc46b" name="libavahi-common3" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="4ebb50d8e701e754d3a75490bd603f56a4810705321b2991c72f368c05d7d530" name="libavahi-common3" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="9a8e9f4a290b2e8bb796a221b2351e532940136b4ca0dc1a6dee2c4da12c74f9" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="db1ebd01f96195aa8eb60d6f7fe4cc5c24d0db4a71b8bab6ef45fcf110a974aa" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="7b737bec445b4463641bff7a848254df25509d84c77f252c1408ab7a0b994a96" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.10.1"/>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
</package>
<package pkgid="bf88d73d33af4ec45a9340bb229ab51c6d59650ba49c485f840906929c7740bc" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="c37e8567939c6e45bc411eb4a0fda7cfce35bd5a8a4c85f725255d420ce28bab" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="bd1aa14af4a6f0a64b13a84473c41b6a36280fb2ce12fe51c6b50a6d9f87e404" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.13.1"/>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
</package>
<package pkgid="5703d885ad3cd98031406a9c20bd137424034db1ff66c5dbe9aaaf9d75c7041a" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="1840b293a291976d747c880654c21978d6484543d9370b58efe952c3be3e2e4f" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="637c6c52c47f4e17fa839665d9a3ea3e7a437ae7b3474c53b1190813e2306502" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.16.1"/>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1698321600">- Add avahi-CVE-2023-38473.patch: derive alternative host name from
  its unescaped version (bsc#1216419 CVE-2023-38473).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1698840000">- Add avahi-CVE-2023-38470.patch: Ensure each label is at least one
  byte long (bsc#1215947, CVE-2023-38470).</changelog>
  <changelog author="alynx.zhou@suse.com" date="1701345600">- Add avahi-CVE-2023-38472.patch: Fix reachable assertion in
  avahi_rdata_parse (bsc#1216853, CVE-2023-38472).</changelog>
  <changelog author="xiaoguang.wang@suse.com" date="1711454400">- Add avahi-CVE-2023-38471.patch: Extract host name using
  avahi_unescape_label (bsc#1216594, CVE-2023-38471).
- Add avahi-CVE-2023-38469.patch: Reject overly long TXT resource
  records (bsc#1216598, CVE-2023-38469).</changelog>
</package>
<package pkgid="c83f7a1ebde9d7315d822ffa95d92f4a2cfcc58f2a4661a95365a53d448c3c9f" name="libavahi-core7" arch="aarch64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="4a70a39c33bc1c4a5cc441fb84e81cc845280ef8fe46e1abeaffbe731be44217" name="libavahi-core7" arch="s390x">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="057ebe65f567b70655d321a581d39b7186252329331ac8fc9b29c25830747cca" name="libavahi-core7" arch="x86_64">
  <version epoch="0" ver="0.8" rel="150400.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1596715200">- Skip the xargs dance and just use find directly.</changelog>
  <changelog author="alarrosa@suse.com" date="1598875200">- Update to version 0.8:
  + The Avahi 0.8 release brings a number of new features and bug
    fix changes including a backward-compatible addition to the
    D-Bus API and the avahi-core API.
  + The existing API is still fully supported however clients
    using the new API will not work with older Avahi releases.
    The avahi-client library is not affected. See the "API Changes"
    section for further details.
  + New Features:
  - New options for filtering reflected queries between networks
    (reflect-filter)
  - New mainloop integration for Qt5 and libevent
  - docs/THREADS: Information for multi-threaded avahi-client
    apps
  - Listen on loopback interfaces by default, allowing local-only
    services to be consumed by the local machine
  - New D-Bus V2 API and additions to the avahi-core API for
    splitting "New" calls into "Prepare" and "Start". See "API
    Changes" for more details.
  + Notable Changes:
  - avahi-autoipd: Initial IP selection based on MAC previously
    ignored first octet - this will cause all hosts to select a
    different link-local IP than previous versions based on the
    same MAC address
  - avahi-daemon: Delay sending results on an object for 10ms in
    an attempt to give clients enough time to subscribe to
    signals from the new object after receiving it's path in
    response so the New call. See "API Changes" for more info
  + Bug Fixes:
  - avahi-python: Various Python 3 enhancements including
    encoding unicode strings as UTF-8
  - avahi-common: avahi_string_list_to_string will now escape
    embedded quotes, backslashes and control characters.
  - avahi-daemon: Fix a crash when txt records have an empty
    value in .xml service files
  - avahi-daemon: reflector: do not incorrectly cache responses
    on outgoing interfaces. Previously we would incorrectly cache
    responses reflected from one interface on the outgoing
    interface. These responses were later sent to clients on that
    network even if the original client had disappeared and could
    cause those clients to have a hostname conflict with
    themselves on restart. We no longer incorrectly cache such
    traffic.
  + Security Fixes:
  - Drop legacy unicast queries from address not on local link
    which can lead to UDP traffic amplification attacks
    (CVE-2017-6519)
  + API Changes: The avahi-core API and D-Bus API have implemented
    a new API where a call to the "New" method can now be split
    into a "Prepare" and then "Start" method for some objects. The
    previous "New" API is still fully supported and there is no
    intention to deprecate it.
    This change affects the the following objects:
    AsyncAddressResolver, AsyncHostNameResolver,
    AsyncServiceResolver, DomainBrowser, RecordBrowser,
    ServiceBrowser, ServiceTypeBrowser
    This is because the D-Bus implementation in some languages
    would only bind to signals of an object after it was created
    and had received the new object's path. This led to such
    languages missing the initial results sent between the time the
    object was created and it had setup a filter to receive it's
    signals.
    This primarily occured in languages that create dynamic
    bindings for D-Bus objects using introspection such as Python.
    The avahi-client C api was not affected as it globally binds to
    all avahi signals without specifying individual object paths
    and still makes use of the V1 API.
    The v2 Prepare/Start API is available under the new
    org.freedesktop.Avahi.Server2 D-Bus interface and also has
    corresponding avahi_s_* calls for users of the embedded
    avahi-core library.
    The old org.freedesktop.Avahi.Server interface is still
    supported and there is no intention to remove this API.
    Additionally this problem has also been solved for old clients
    by adding a very small 10ms delay before we start sending
    results to give the client time to bind to the signals which
    should silently fix the issue in most cases without introducing
    a noticable or impactful delay.
    Clients implementing the new org.freedesktop.Avahi.Server2
    D-Bus interface will not work with older Avahi daemons. It is
    suggested that clients may wish to either check for and
    fallback to the older API version, or continue to use the OLD
    API and rely on the 10ms timer to resolve the issue.
  - This release is backwards compatible with Avahi 0.6.x and 0.7.
- Add qt5 bindings in a separate package
- Add patch to add IT_PROG_INTLTOOL to configure.ac so intltoolize
  can be used:
  * add-IT_PROG_INTLTOOL.patch
- Add file missing from the tarball:
  * build-db
- Rebase patch:
  * avahi-desktop.patch
- Drop patches already included by upstream:
  * avahi-0.7-dbm.patch
  * avahi-0.7-encode-strings-as-utf8.patch
  * avahi-0.7-python3-bookmarks.patch
  * CVE-2018-1000845.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Use sover variables all over the spec file</changelog>
  <changelog author="code@bnavigator.de" date="1612094400">- Build python bindings subpackages for all flavors
  * use the python-rpm-macros singlespec system: The macro
    %python_subpackages together with %python_subpackage_only
    creates the pythonXY-avahi bindings package for all python
    flavors on Tumbleweed (currently python36, python38)
  * Put the avahi-bookmarks command under updates-alternatives
    control to avoid package conflicts between flavors
  * outside of build_core, the build continues to use but not
    install everything in the primary python3 flavor.
  * For distros without multiple python3 flavors and/or older
    python-rpm-macros, the status quo is unchanged.</changelog>
  <changelog author="jengelh@inai.de" date="1612958400">- Drop configure --libexecdir variable as it does not appear
  to be used by the source archive.</changelog>
  <changelog author="mgorse@suse.com" date="1613476800">- Update avahi-daemon-check-dns.sh from Debian. Our previous
  version relied on ifconfig, route, and init.d.
- Rebase avahi-daemon-check-dns-suse.patch, and drop privileges
  when invoking avahi-daemon-check-dns.sh (boo#1180827
  CVE-2021-26720).
- Add sudo to requires: used to drop privileges.</changelog>
  <changelog author="mgorse@suse.com" date="1618920000">- Add avahi-CVE-2021-3468.patch: avoid infinite loop by handling
  HUP event in client_work (boo#1184521 CVE-2021-3468).
  https://github.com/lathiat/avahi/pull/330</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix libavahi-devel requirements. The devel package installs
  libavahi-libevent.so but didn't require the library it's
  pointing to.</changelog>
  <changelog author="mgorse@suse.com" date="1625227200">- Add avahi-CVE-2021-3502.patch: fix NULL pointer crashes
  (boo#1184846 CVE-2021-3502).</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Obsolete the same version of mDNSResponder-lib and mDNSResponder
  in baselib.conf and spec.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1634644800">- Add rpmlintrc: Filter shlib-policy-name-error for libdns_sd
  (boo#1191750).</changelog>
  <changelog author="yfjiang@suse.com" date="1635163200">- Change %python38_version_nodots to %suse_version which is
  compatible with Leap and SLE. See also:
  https://github.com/openSUSE/python-rpm-macros/issues/107</changelog>
  <changelog author="mgorse@suse.com" date="1641988800">- Move sftp-ssh and ssh services to the doc directory. They allow
  a host's up/down status to be easily discovered and should not
  be enabled by default (boo#1179060).</changelog>
  <changelog author="mgorse@suse.com" date="1642420800">- Reinstate avahi-0.6.31-systemd-order.patch (boo#1194561).
  This can probably go away if/when gh#lathiat/avahi#118 is fixed.
- Drop avahi-0.6.32-suppress-resolv-conf-warning.patch: we should
  no longer need this given the above patch.
- Add several patches from git:
  0001-man-fix-reference-to-avahi-autoipd.action-8-in-avahi.patch
  0005-avahi-dnsconfd.service-Drop-Also-avahi-daemon.socket.patch
  0006-man-add-missing-bshell.1-symlink.patch
  0007-Ship-avahi-discover-1-bssh-1-and-bvnc-1-also-for-GTK.patch
  0009-fix-bytestring-decoding-for-proper-display.patch 0010-avahi_dns_packet_consume_uint32-fix-potential-undefi.patch
- Build manpages with xmltoman. Currently needed for bssh.
- Minor spec file clean-up.
- Require python-rpm-macros for all builds (boo#1194744 boo#1194745).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1642766400">- Change to systemd-sysusers</changelog>
  <changelog author="mgorse@suse.com" date="1645012800">- Replace avahi-0.6.31-systemd-order.patch with
  avahi-add-resolv-conf-to-inotify.patch: re-read configuration
  when resolv.conf changes, per discussion on the bug
  (boo#1194561).</changelog>
  <changelog author="dmueller@suse.com" date="1645099200">- remove avahi-mono* subspecfiles, they are no longer required
  by anything. this makes the spec file slightly more readable.</changelog>
  <changelog author="dmueller@suse.com" date="1645617600">- switch to use _multibuild
- delete _avahi_spec-prepare.sh, pre_checkin.sh: obsolete
- use https urls</changelog>
  <changelog author="mgorse@suse.com" date="1681214400">- Add avahi-CVE-2023-1981.patch: emit error if requested service
  is not found (boo#1210328 CVE-2023-1981).</changelog>
</package>
<package pkgid="7ede034f7054833dd4ee5a35e4aff3c7c79b255d95180c3913dff72b808da426" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="d997fd2ba6b1ae8f4957ae90ff70397189a93b728e746e320267185706f45455" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="bc0541c4b5b99be7571611f35adecbf7e76d920abc50d3b41923d75468e88809" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="5465af3c60639635ab3d7018a2250b1f8461e3ca03be80e40de73d5a30f39886" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="970e511c178eb90f952f871be930c7222bea562300fed8d5e6a0ffd1606b188f" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="c153b8f0264e4f501394912a3565c7a42b53d728179fd008fda2e304ffd2bd2f" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="159e60fdf8112e5a8d6d429c59d842d30f41c3d76fd3bc47acabf35483bd7f5d" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="2d87d949815c20af9774622c72686ed18aa03ec4891adeafd413b6b87192bc60" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="5b3cd83d9bd1cacd3fc15e99ec849a19833da6e81e9c7e3dd3a6a86ef98a6e65" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="c23c7f87978e5bea7381189cb0a37cf28dc23a4da3a55fecc3b0afae2787594a" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="d8e1376a6cf7d87366e68267d27ba3c4cbe472f7fe97bf29d8d53896afc7a35e" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="986cc0be1a318a7c2af3fb095b3ca0e1d42b12fdfaf2c4a9b9022d0870a76ac2" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="250b8390e15456b6947853779716f7a8fcfd2855e7926127599230e69b0a2530" name="libblkid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="b2ac86c82ceec2b9af608148a24238c1ace51d3fb7260c8ad6c918cef8000f5b" name="libblkid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="20d35398fd827ebbe0e5e150368c1a867a3c78f9921510c024d3e5d4e09af5e8" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="5cd89dd07e2057417ba6372686b28c0095368c6c07124a74d11d234cbb06cbef" name="libblogger2" arch="aarch64">
  <version epoch="0" ver="2.26" rel="150300.4.6.1"/>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
  <changelog author="jengelh@inai.de" date="1555761600">- Implement shared library packaging guideline.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567166400">- Add blog-Remove-unused-header.patch: Fix build with new glibc
  (gh#bitstreamout/showconsole#3).</changelog>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Add patch blog.dif
  * Fix big endian cast problems to be able to read commands
    and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="dc0b0e29d4b5d1e04bd1f3a512cd3cedc72dd694db5d0a32456b2e1412638917" name="libblogger2" arch="s390x">
  <version epoch="0" ver="2.26" rel="150300.4.6.1"/>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
  <changelog author="jengelh@inai.de" date="1555761600">- Implement shared library packaging guideline.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567166400">- Add blog-Remove-unused-header.patch: Fix build with new glibc
  (gh#bitstreamout/showconsole#3).</changelog>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Add patch blog.dif
  * Fix big endian cast problems to be able to read commands
    and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="70fa06f86e715bacc85b3db09602cfc8583c48d1ecba60d323fd24717ff37aa1" name="libblogger2" arch="x86_64">
  <version epoch="0" ver="2.26" rel="150300.4.6.1"/>
  <changelog author="olaf@aepfle.de" date="1470916800">- Install binaries with read permissions (bnc#990837)</changelog>
  <changelog author="werner@suse.de" date="1485345600">- Use https://github.com/bitstreamout/showconsole as URL</changelog>
  <changelog author="werner@suse.de" date="1485345601">- Use github source from tagged version</changelog>
  <changelog author="werner@suse.de" date="1493294400">- Add coreutils as required by post scriptlet (boo#1036436)</changelog>
  <changelog author="werner@suse.de" date="1509969600">- Change description of blog-plymouth in same manner as used by
  the release notes</changelog>
  <changelog author="pmladek@suse.com" date="1513080000">- hardening of the console list generation (bsc#1071568):
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- sysmacros.patch: Include &lt;sys/sysmacros.h&gt; for makedev</changelog>
  <changelog author="werner@suse.de" date="1533211200">- Update to version 2.19 which integrates the patches now removed:
  * sysmacros.patch
  * libconsole-Really-allow-to-use-dev-console-as-a-fall.patch
  * libconsole-never-return-empty-list-from-getconsoles.patch
  * showconsole-2.18.tar.gz
  * libconsole-Add-console-into-the-list-only-when-succe.patch
  * libconsole-Correctly-ignore-early-consoles.patch
  as well as the changes
  * Correct wants directory for systemd-ask-password-blog.service
  * Sort input files for reproducible builds</changelog>
  <changelog author="jengelh@inai.de" date="1555761600">- Implement shared library packaging guideline.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567166400">- Add blog-Remove-unused-header.patch: Fix build with new glibc
  (gh#bitstreamout/showconsole#3).</changelog>
  <changelog author="werner@suse.de" date="1578571200">- Update to version 2.20
  * Silent some gcc warnings, also avoid common variable (boo#1160385)
  * Include &lt;sys/sysmacros.h&gt; for makedev
  * sort input files (boo#1041090)
  * libconsole: never return empty list from getconsoles()
  * libconsole: Really allow to use /dev/console as a fallback in showconsole
  * libconsole: Add console into the list only when successfully allocated
  * libconsole: Correctly ignore early consoles
- Remove obsolate patch blog-Remove-unused-header.patch</changelog>
  <changelog author="werner@suse.de" date="1617969600">- Fix package split done for shared library packaging guideline (bsc#1184479).</changelog>
  <changelog author="werner@suse.de" date="1617969601">- Update to version 2.21
  * Merge pull request #4 from samueldr/fix/makefile
    Fixup Makefile for better build system support
  * Silent new gcc compiler</changelog>
  <changelog author="werner@suse.de" date="1633003200">- Move to /usr for UsrMerge (boo#1191057)</changelog>
  <changelog author="werner@suse.de" date="1638446400">- Update to version 2.22
  * Avoid KillMode=none for newer systemd version as well as rework
    the systemd unit files of blog (boo#1186506)</changelog>
  <changelog author="werner@suse.de" date="1638446401">- Update to version 2.24
  * Avoid install errror due missed directory</changelog>
  <changelog author="werner@suse.de" date="1638446402">- Add upstream patch fcb9e0c2.patch
  * On s390/x and PPC64 gcc misses unused arg0</changelog>
  <changelog author="werner@suse.de" date="1638532800">- Update to version 2.26
  * On s390/x and PPC64 gcc misses unused arg0
- Remove patch fcb9e0c2.patch as now part of tar ball</changelog>
  <changelog author="werner@suse.de" date="1688990400">- Add patch blog.dif
  * Fix big endian cast problems to be able to read commands
    and ansers (blogctl) as well as passphrases (blogd)</changelog>
</package>
<package pkgid="91074ec6180a60c9a30a9188a762f5cdae3abaf8b223ab2516d50e80af60e3df" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="630a81b883e6fe613850288f44c4992e11c0dd81039222b17a1f51484313d566" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="a42cd2b8f385bb1d2a14fbff96b56e6982e7303952d496f0290f1eb709a31880" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.13.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
</package>
<package pkgid="5b361b37e1c6b48fa018a85fecf03ce9a56c577a8b6b2120f5120b8f97bf0d2f" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.16.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- Add sdpd-Fix-leaking-buffers-stored-in-cstates-cache.patch
  sdpd: Fix leaking buffers stored in cstates cache
  (bsc#1192760)(CVE-2021-41229)</changelog>
</package>
<package pkgid="d9c9edde53e8ee3d19740dc43c272e46ff953feeb7d5576a358af402ad040dfb" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.16.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- Add sdpd-Fix-leaking-buffers-stored-in-cstates-cache.patch
  sdpd: Fix leaking buffers stored in cstates cache
  (bsc#1192760)(CVE-2021-41229)</changelog>
</package>
<package pkgid="435d6cd6802c8c45ce2e8ee251d1aa6a64053d0855a24f095691fd4601fe5318" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.16.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- Add sdpd-Fix-leaking-buffers-stored-in-cstates-cache.patch
  sdpd: Fix leaking buffers stored in cstates cache
  (bsc#1192760)(CVE-2021-41229)</changelog>
</package>
<package pkgid="20930832ac03e91e9bcdb2aa000e97d94ec18f4218755cace0bca7f22047b3bb" name="libbluetooth3" arch="aarch64">
  <version epoch="0" ver="5.62" rel="150400.4.19.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- Add sdpd-Fix-leaking-buffers-stored-in-cstates-cache.patch
  sdpd: Fix leaking buffers stored in cstates cache
  (bsc#1192760)(CVE-2021-41229)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="146b7b649d78612fc208a0dbfeace57c8a80d9c5f3a4fff59c5f9211b5fa7f5d" name="libbluetooth3" arch="s390x">
  <version epoch="0" ver="5.62" rel="150400.4.19.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- Add sdpd-Fix-leaking-buffers-stored-in-cstates-cache.patch
  sdpd: Fix leaking buffers stored in cstates cache
  (bsc#1192760)(CVE-2021-41229)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="7b9762179227c143d6ee124f5080b72296a2ff9aa89f26a103e5e810dfe9e188" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.62" rel="150400.4.19.1"/>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
  <changelog author="acho@suse.com" date="1544184000">- Add hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch
  to replace
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  (PATCH-FIX-UPSTREAM)(bsc#1013721)(CVE-2016-9800)
  Add hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  to fix global buffer overflow (PATCH-FIX-UPSTREAM)
  (bsc#1013732)(CVE-2016-9801)
- Fix %ifarch range.</changelog>
  <changelog author="acho@suse.com" date="1548331200">- Add:btmon: multiple memory management vulnerabilities fixed
  Multiple different memory management vulnerabilities were discovered
  in btmon while fuzzing it with American Fuzzy Lop. Purpose of this
  fuzzing effort was to find some bugs in btmon, analyse and fix them
  but also try to exploit them. Also goal was to prove that fuzzing is
  low effort way to find bugs that could end up being severe ones.
  Most common weakness appeared to be buffer over-read which was
  usually caused by missing boundary checks before accessing array.
  Integer underflows were also quite common. Most interesting bug was
  simple buffer overflow that was actually discovered already couple
  years ago by op7ic:
  https://www.spinics.net/lists/linux-bluetooth/msg68898.html
  but it was still not fixed. This particular vulnerability ended up
  being quite easily exploitable if certain mitigation technics were
  disabled.(bsc#1015173)(CVE-2016-9918)(bsc#1013893)(CVE-2016-9802)
  0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  0005-btmon-fix-stack-buffer-overflow.patch
  0006-btmon-fix-multiple-segfaults.patch
  0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  0012-btmon-fix-segfault-caused-by-buffer-over-read.patch</changelog>
  <changelog author="acho@suse.com" date="1556193600">- Add
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch
  * amp_assoc_dump() didn't check the length of amp assoc struct.
  (bsc#1013712)(CVE-2016-9798)(bsc#1013708)(CVE-2016-9797)
  Add hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Do not allow to read more than allocated data buffer size.
  (bsc#1015171)(CVE-2016-9917)
- Refresh patches:
  patches/bluez-cups-libexec.patch
  patches/bluez-5.45-disable-broken-tests.diff
- fix bluez.changes:
  add (bsc#1013893)(CVE-2016-9802) tag for last log.</changelog>
  <changelog author="acho@suse.com" date="1571140800">- Add
  hcidump-Fixed-malformed-segment-frame-length.patch
  * Ensure the L2CAP SDUs whose length field match the actual frame
  length.(bsc#1013712)(CVE-2016-9798)
- Modify bluez.changes:
  Remove (bsc#1013712)(CVE-2016-9798) tag from patch
  hcidump-Add-assoc-dump-function-assoc-date-length-ch.patch</changelog>
  <changelog author="acho@suse.com" date="1575547200">- Add tools-Fix-build-after-y2038-changes-in-glibc.patch
  * The 32-bit SIOCGSTAMP has been deprecated. Use the deprecated
  name to fix the build.(bsc#1156544)</changelog>
  <changelog author="acho@suse.com" date="1600171200">- update to 5.55:
  * Fix issue with handling security level for HoG.
  * Fix issue with handling HIDSDPDisable attribute.
  * Fix issue with handling HID virtual cable unplug.
  * Fix issue with handling HID channel disconnect order.
  * Fix issue with handling AVDTP delay reporting states.
  * Fix issue with handling AVRCP notification events.
  * Fix issue with handling AVRCP list player attributes.
  * Fix issue with handling AVRCP category 1 player settings.
  * Fix issue with handling AVRCP media player passthrough bitmask.
  * Fix issue with handling HFP 1.7 default features.
  * Fix issue with handling GATT disconnecting handling.
  * Fix issue with handling GATT database hash.
  * Fix issue with handling service changed characteristic.
  * Fix issue with handling read of multiple characteristic values.
  * Fix issue with handling Just-Works auto-accept pairing.
  * Fix issue with handling authentication of bonded devices.
  * Fix issue with handling L2CAP streaming mode for AVDTP.
  * Fix issue with handling SysEx parser for MIDI support.
  * Fix issue with handling configured scan parameter values.
  * Fix issue with handling temporary devices removal.
  * Fix issue with handling advertising flags.
- update to bluez-5.54:
  * Fix issue with HOGP to accept data only from bonded devices.
  * Fix issue with A2DP sessions being connected at the same time.
  * Fix issue with class UUID matches before connecting profile.
  * Add support for handling MTU auto-tuning option for AVDTP.
  * Add support for new policy for Just-Works repairing.
  * Add support for Enhanced ATT bearer (EATT).
- update to bluez-5.53:
  * Fix issue with handling unregistration for advertisment.
  * Fix issue with A2DP and handling recovering process.
  * Fix issue with udpating input device information.
  * Add support for loading blocked keys.
- update to version 5.52:
  * Fix issue with AVDTP session disconnect timeout handling.
  * Mark media endpoint APIs as stable interfaces.
- update to version 5.51:
  * Fix issue with first agent not being registered as default.
  * Fix issue with loading devices without Service Changed CCC.
  * Fix issue with GATT client and extended property reading.
  * Fix issue with handling GATT client invalid read behavior.
  * Fix issue with handling GATT disconnect handler removal.
  * Fix issue with missing GATT/GAP service records for SDP.
  * Fix issue with checking SDP continuation state length.
  * Fix issue with HID device removal on HoG disconnect.
  * Fix issue with AVDTP and session destroy handling.
  * Fix issue with AVCTP and output MTU accounting.
  * Fix issue with AVRCP and creating media items.
  * Add support for GATT database caching feature.
  * Add experimental support for Bluetooth Mesh Profile.
- update to version 5.50:
  - Fix issue with GATT and reading long values.
  - Fix issue with GATT and reading multiple includes.
  - Fix issue with GATT and service changes when offline.
  - Fix issue with handling secondary service discovery.
  - Fix issue with handling persistency of CCC values.
  - Fix issue with handling Mesh session on disconnection.
  - Fix issue with handling Mesh proxy PDU SAR message length.
  - Fix issue with handling Mesh default heartbeat TTL value.
  - Add support for Mesh node-reset operation handling.
  - Add support for GATT authorization request handling.
  - Add support for GATT minimum key size requirements.
  - Add support for GATT server and included services.
  - Add support for handling additional advertising data.
  - Add support for handling separate discoverable state.
  - Add support for enabling HFP version 1.7 features.
  - Add support for dedicated Bluetooth logging daemon.
- update to version 5.49:
  This is mostly a bug fix release, with fixes to features such as
  AVCTP, OBEX, GATT and Mesh. There are however some notable new
  features also, such as improved heartbeat management support in
  meshctl as well as a new experimental ConnectDevice D-Bus method
  on the Adapter interface, which can be used for quick device
  object creation for testing purpose or when information about the
  device has been received over some Out-of-Band channel.
- Add --enable-external-ell to actually make use of pkgconfig(ell).
- remove obsolete upstreamed patches:
  * 0001-obexd-use-AM_LDFLAGS-for-linking.patch
  * 0001-core-Fixes-order-InterfaceAdded.patch
  * tools-Fix-build-after-y2038-changes-in-glibc.patch
  * hcidump-Fix-set_ext_ctrl-global-buffer-overflow.patch
  * 0001-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0002-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0003-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0004-btmon-Fix-crash-caused-by-integer-underflow.patch
  * 0005-btmon-fix-stack-buffer-overflow.patch
  * 0006-btmon-fix-multiple-segfaults.patch
  * 0007-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0008-btmon-fix-segfault-caused-by-integer-undeflow.patch
  * 0009-btmon-fix-segfault-caused-by-buffer-over-read.patch
  * 0010-btmon-fix-segfault-caused-by-buffer-overflow.patch
  * 0011-btmon-fix-segfault-caused-by-integer-underflow.patch
  * 0012-btmon-fix-segfault-caused-by-buffer-over-read.patch
- use autopatch, spec-cleaner
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1623412800">- Add
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  * Fix not properly checking for secure flags
  (bsc#1186463 CVE-2021-0129 CVE-2020-26558)</changelog>
  <changelog author="acho@suse.com" date="1626264000">- Add gatt-Fix-potential-buffer-out-of-bound.patch
  * When client features is read check if the offset is within the cli_feat
    bounds. (bsc#1187165 CVE-2021-3588)
- Add shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  * This enables user to inform if an attribute has a fixed length so it can
    automatically perform bounds checking. (bsc#1187165 CVE-2021-3588)
- Add gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  * This makes use of gatt_db_attribute_set_fixed_length so the database is
    aware of the length of the values and perform bounds checking.
  (bsc#1187165 CVE-2021-3588)</changelog>
  <changelog author="acho@suse.com" date="1627646400">- update to 5.60 (JIRA-SLE-18497):
  * Fix issue with reading from RFKILL device node.
  * Fix issue with AVDTP and parsing capabilities.
  * Fix issue with UnregisterApplication handling.
  * Fix issue with RegisterProfile if UUID already exists.
  * Fix issue with GATT client attribute read with offset.
  * Fix issue with non-discoverable device and advertising monitor.
- update to 5.59:
  * Fix issue with string to UUID-32 conversion.
  * Fix issue with connect request if SDP search failed.
  * Fix issue with accepting invalid AVDTP capabilities.
  * Fix issue with unregister handling of AVRCP player.
  * new tool: mesh-cfgtest
  * new manpages: btmon.1, bluetooth-meshd.8
- update to 5.58:
  * Fix issue with usage of deprecated GLib functions.
- version 5.57:
  * Fix issue with handling GATT notification PDU parsing.
  * Fix issue with registering DIS without a valid source.
  * Fix issue with removing remote SEPs when loading from cache.
- update to 5.56:
  * Fix issue with setting AVDTP disconnect timer.
  * Fix issue with AVDTP not sending GetCapabilities.
  * Fix issue with AVDTP connecting using streaming mode.
  * Fix issue with handling A2DP and remote SEP disappearing.
  * Fix issue with handling session of A2DP channels.
  * Fix issue with GATT and handling device removal.
  * Fix issue with GATT not accepting multiple requests.
  * Fix issue with HID report value callback registration.
  * Add support for new advertising management command.
  * Add support for battery D-Bus interface.
  * removed obsolete bccmd
- remove obsolete upstreamed patches:
  shared-gatt-server-Fix-not-properly-checking-for-sec.patch
  (bsc#1186463 CVE-2021-0129)
  gatt-Fix-potential-buffer-out-of-bound.patch
  (bsc#1187165 CVE-2021-3588)
  shared-gatt-db-Introduce-gatt_db_attribute_set_fixed.patch
  (bsc#1187165 CVE-2021-3588)
  gatt-Make-use-of-gatt_db_attribute_set_fixed_length.patch
  (bsc#1187165 CVE-2021-3588)
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1634040000">- update to version 5.61 (JIRA-SLE-18497):
  * Fix issue with A2DP while waiting for command response.
  * Fix issue with A2DP when SetConfiguration fails.
  * Fix issue with device removal handling.
  * Fix issue with storing discoverable setting.
  * Add support for Central Address Resolution characteristic.
  * Add support for admin policy plugin.
- fix bluez-auto-enable-devices subpackage (boo#1177845)
- add bluez-test-2to3.diff to get rid of python2 dependency
- remove notification message from bluez-deprecated package.
  also boo#1188660
- refresh other patches</changelog>
  <changelog author="acho@suse.com" date="1635336000">- update to version 5.62 (JIRA-SLE-18497):
  * Fix issue with handling truncation when loading LTKs.
  * Fix issue with accepting Exchange MTU on EATT bearer.
  * Fix issue with clearing DeviceLost timers on power down.
  * Fix issue with AVCTP browsing channel and missing ERTM.
  * Fix issue with AVDTP and local SEID pool for each adapter.
  * Add support for BR/EDR and LE connection failure reasons.
- refresh patch
  hcidump-fixed-hci-frame-dump-stack-buffer-overflow.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="jlee@suse.com" date="1662552000">- Add shared-gatt-server-Fix-heap-overflow-when-appending-.patch
  - The code shall check if the prepare writes would append more the
    allowed maximum attribute length. (bsc#1194704 CVE-2022-0204)</changelog>
  <changelog author="jlee@suse.com" date="1674043200">- Add mgmt-tester-Fix-null-dereference-issue-reported-by-s.patch
  - This patch fixes the null dereference reported by the scan-build.
  (bsc#1204426)(CVE-2022-3563)</changelog>
  <changelog author="jlee@suse.com" date="1686657600">- Add avrcp-Fix-crash-while-handling-unsupported-events.patch
  avrcp: Fix crash while handling unsupported events
  (bsc#1210398)(CVE-2023-27349)</changelog>
  <changelog author="jlee@suse.com" date="1690977600">- Add sdpd-Fix-leaking-buffers-stored-in-cstates-cache.patch
  sdpd: Fix leaking buffers stored in cstates cache
  (bsc#1192760)(CVE-2021-41229)</changelog>
  <changelog author="jlee@suse.com" date="1705406400">- Add pbap-Fix-not-checking-Primary-Secundary-Counter-leng.patch
  pbap: Fix not checking Primary/Secundary Counter length
  (bsc#1218301)(CVE-2023-50230)(bsc#1218300)(CVE-2023-50229)</changelog>
</package>
<package pkgid="758e4ad4ca2866fa1e73285174bceaffb758ecd46810c71585f027d6a05f670e" name="libbtrfs0" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.5.3.1"/>
  <changelog author="dsterba@suse.cz" date="1581854400">- Update to 5.4.1
  * build: fix docbook5 build
  * check: do extra verification of extent items, inode items and chunks
  * qgroup: return ENOTCONN if quotas not running (needs updated kernel)
  * other: various test fixups</changelog>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
</package>
<package pkgid="8e88045c9deac24f3d9678cbf5abce1359c03b1c5675d523a10d148c11e4029e" name="libbtrfs0" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.5.3.1"/>
  <changelog author="dsterba@suse.cz" date="1581854400">- Update to 5.4.1
  * build: fix docbook5 build
  * check: do extra verification of extent items, inode items and chunks
  * qgroup: return ENOTCONN if quotas not running (needs updated kernel)
  * other: various test fixups</changelog>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
</package>
<package pkgid="f47e48dca902c28c24b736aac9adc4c3ac9e7047c6cbf473b44182b7f5e62a05" name="libbtrfs0" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.5.3.1"/>
  <changelog author="dsterba@suse.cz" date="1581854400">- Update to 5.4.1
  * build: fix docbook5 build
  * check: do extra verification of extent items, inode items and chunks
  * qgroup: return ENOTCONN if quotas not running (needs updated kernel)
  * other: various test fixups</changelog>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
</package>
<package pkgid="4962c7bb48d48c495c1bee502101774afcb3bc203321b8239867dd49fcf78265" name="libbtrfs0" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.5.6.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="6b6c77e64afddf8cf5e2a85766c8403ced0994f7ffcff30c719a2996d7b43024" name="libbtrfs0" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.5.6.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="b8e728d8f288e659e65cb5646d228faae9dddcb2cd7c04b8cf319e174a69a285" name="libbtrfs0" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.5.6.1"/>
  <changelog author="info@paolostivanin.com" date="1586174400">- Update to 5.6:
  * inspect logical-resolve: support LOGICAL_INO_V2 as new option '-o',
    helps advanced dedupe tools
  * inspect: user larger buffer (64K) for results
  * subvol delete: support deletion by id (requires kernel 5.7+)
  * dump-tree: new option --hide-names, replace any names
    (file, directory, subvolume, xattr) in the output with stubs
  * various fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1588161600">- Fix content of _dracutmodulesdir variable: this definitively does
  not belong to libexecdir.</changelog>
  <changelog author="dsterba@suse.cz" date="1589371200">- Update to 5.6.1:
  * print warning when multiple block group profiles exist, update 'fi usage'
    summary, add docs to maual page explaining the situation
  * build: optional support for libgcrypt or libsodium, providing hash
    implementations
  * updated docs</changelog>
  <changelog author="dsterba@suse.cz" date="1594036800">- Update to 5.7:
  * mkfs:
  * new option to enable features otherwise enabled at runtime, now
    implemented for quotas, 'mkfs.btrfs -R quota'
  * fix space accounting for small image, DUP and --rootdir
  * option -A removed
  * check: detect ranges with overlapping csum items
  * fi usage: report correct numbers when plain RAID56 profiles are used
  * convert: ensure the data chunks size never exceed device size
  * libbtrfsutil: update documentation regarding subvolume deletion
  * build: support libkcapi as implementation backend for cryptographic
    primitives
  * core: global options for verbosity (-v, -q), subcommands -v or -q are
    aliases and will continue to work but are considered deprecated,
    current command output is preserved to keep scripts working
  * other:
  * build warning fixes
  * btrfs-debugfs ported to python 3</changelog>
  <changelog author="dsterba@suse.cz" date="1603627200">- Update to 5.9:
  * mkfs:
  * switch default to single profile for multi-device filesystem, up to
    now it was raid0 that may not be simple to convert to some other profile
    as raid0 needs a workspace on all device for that
  * new option -R for run-time options (eg. mount time enabled), now
    understands free-space-tree
  * subvolume delete:
  * refuse to delete the default subvolume (kernel will not allow that but
    the error reason is not obvious)
  * warn on EPERM, eg. if send is on progress on the subvolume
  * convert:
  * fix 32bit overflows on large filesystems
  * improved error handling and error messages
  * check free space taking fragmentation into account
  * check:
  * detect and repair wrong inode generation
  * minor improvement in error reporting on roots
  * libbtrfsutils: follow main package versioning (5.9)
  * add pkg-config file definitions
  * python-btrfsutil: follow main package versioning (5.9)
  * inspect tree-stats: print node counts for each level, fanout
  * other:
  * docs:
  * remove obsolete mount options (alloc_start, subvolrootid)
  * deleting default subvolume is not permitted
  * updated or fixed tests
  * .editorconfig updates
  * move files to kernel-shared/
  * CI:
  * updated to use zstd 1.4.5
  * fix reiserfs build
  * more builds with asan, ubsan
  * sb-mod updates
  * build:
  * print .so versions of libraries in configure summary</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dsterba@suse.cz" date="1615118400">- Update to 5.11
  * fix device path canonicalization for device mapper devices
  * receive: remove workaround for setting capabilities, all stable kernels
    have been patched
  * receive: fix duplicate mount path detection
  * rescue: new subcommand create-control-device
  * device stats: minor fix for plain text format output
  * build: detect if e2fsprogs support 64bit timestamps
  * build: drop libmount, required functionality has been reimplemented
  * mkfs: warn when raid56 is used
  * balance convert: warn when raid56 is used
  * other
  * new and updated tests
  * documentation updates
  * seeding device
  * raid56 status
  * CI updates
  * docker images for various distros
- Update to 5.10.1
  * static build works again
  * other:
  * add a way to test static binaries with the testsuite
  * clarify scrub docs
  * update dependencies, minimum version for libmount is 2.24, this may
    change in the future
- Update to 5.10
  * scrub status:
  * print percentage of progress
  * add size unit options
  * fi usage: also print free space from statfs
  * convert: copy full 64 bit timestamp from ext4 if availalble
  * check:
  * add ability to repair extent item generation
  * new option to remove leftovers from inode number cache (-o inode_cache)
  * check for already running exclusive operation (balance, device add/...)
    when starting one
  * preliminary json output support for 'device stats'
  * fixes:
  * subvolume set-default: id 0 correctly falls back to toplevel
  * receive: align internal buffer to allow fast CRC calculation
  * logical-resolve: distinguish -o subvol and bind mounts
  * build: new dependency libmount
  * other
  * doc fixes and updates
  * new tests
  * ci on gitlab temporarily disabled
  * debugging output enhancements</changelog>
  <changelog author="dsterba@suse.cz" date="1620561600">- Update to 5.12
  * libbtrfsutil: relicensed to LGPL v2.1+
  * mkfs: zoned mode support (kernel 5.12+)
  * fi df: show zone_unusable per profile type in zoned mode
  * fi usage: show total amount of zone_unusable
  * fi resize: fix message for exact size
  * image: fix warning and enlarge output file if necessary
  * core
  * refactor chunk allocator for more modes
  * implement zoned mode support: allocation and writes, sb log
  * crypto/hash refactoring and cleanups
  * refactoring and cleanups
  * other
  * test updates
  * CI updates
  * travis-ci integration disabled
  * docker images updated, more coverage
  * incomplete build support for Android removed
  * doc updates
  * chattr mode m for 'NOCOMPRESS"
  * swapfile used from fstab
  * how to add a new export to libbtrfsutil
  * update status of mount options since 5.9
- Update to 5.11.1
  * properly format checksums when a mismatch is reported
  * check: fix false alert on tree block crossing 64K page boundary
  * convert:
  * refuse to convert filesystem with 'needs_recovery'
  * update documentation to require fsck before conversion
  * balance convert: fix raid56 warning when converting other profiles
  * fi resize: improved summary
  * other
  * build: fix checks and autoconf defines
  * fix symlink paths for CI support scripts
  * updated tests</changelog>
  <changelog author="dsterba@suse.cz" date="1620820800">- Update to 5.12.1
  * build: fix missing symbols in libbtrfs
  * mkfs: check for minimal number of zones
  * check: fix warning about cache generation when free space tree is enabled
  * fix superblock write in zoned mode on 16K pages</changelog>
  <changelog author="camspam@redhyena.net" date="1623758400">- Fix build for leap
  * --disable-zstd if leap &lt; 42.3
  * --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1623758401">- revert previous change, unintentionally disables zstd on tumbleweed</changelog>
  <changelog author="camspam@redhyena.net" date="1623844800">- Add --disable-zoned for leap</changelog>
  <changelog author="dsterba@suse.cz" date="1626091200">- Update to 5.13
  * restore: remove loop checks for extent count and directory scan
  * inspect dump-tree: new options to print node (--csum-headers) and data
    checksums (--csum-items)
  * fi usage:
  * print stripe count for striped profiles
  * print zoned information: size, total unusable
  * mkfs: print note about sha256 accelerated module loading issue
  * check: ability to reset dev_item::bytes_used
  * fixes
  * detect zoned kernel support at run time too
  * exclusive op running check return value
  * fi resize: support cancel (kernel 5.14)
  * device remove: support cancel (kernel 5.14)
  * documentation about general topics
  * compression
  * zoned mode
  * storage model
  * hardware considerations
  * other
  * libbtrfsutil API overview
  * help text fixes and updates
  * hash speedtest measure time, cycles using perf and print throughput</changelog>
  <changelog author="rgoldwyn@suse.com" date="1628596800">- Update to 5.13.1
  * build: fix build on musl libc due to missing definition of NAME_MAX
  * check:
  * batch more work into one transaction when clearing v1 free space inodes
  * detect directoris with wrong number of links
  * libbtrfsutil: fix race between subvolume iterator and deletion
  * mkfs: be more specific about supported profiles for zoned device
  * other:
  * documentation updates</changelog>
  <changelog author="dsterba@suse.cz" date="1631448000">- Update to 5.14
  * convert:
  * new option --uuid to copy, generate or set a given uuid
  * improve output
  * mkfs:
  * allow to create degenerate raid0 (on 1 device) and raid10 (on 2 devices)
  * image:
  * improved error messages
  * fix some alignment of restored image
  * subvol delete: allow to delete by id when path is not resolvable
  * check:
  * require alignment of nodesize for 64k page systems
  * detect and fix invalid block groups
  * libbtrfs (deprecated):
  * remove most exported symbols, leave only a few that are used by snapper
  * no version change (still 0.1)
  * remove btrfs-list.h, btrfsck.h
  * fixes:
  * reset generation of space v1 if v2 is used
  * fi us: don't wrongly report missing device size when partition is not readable
  * other:
  * build: experimental features
  * build: better detection of 64bit timestamp support for ext4
  * corrupt-block: block group items
  * new and updated tests
  * refactoring
  * experimental features:
  * new image dump format, with data</changelog>
  <changelog author="rgoldwyn@suse.com" date="1632744000">- Deleted upstreamed patches for upgrade:
  - fate#325871
  * 0001-btrfs-progs-Add-support-for-metadata_uuid-field.patch
  * 0002-btrfs-progs-btrfstune-Add-support-for-changing-the-u.patch
  * 0003-btrfs-progs-Remove-fsid-metdata_uuid-fields-from-fs_.patch
  * 0004-btrfs-progs-Remove-btrfs_fs_info-new_fsid.patch
  * 0005-btrfs-progs-Directly-pass-root-to-change_devices_uui.patch
  - btrfs-progs: check: fixup_extent_flags needs to deal with non-skinny
  metadata (bsc#1131334).
  * btrfs-progs-check-fixup_extent_flags-needs-to-deal-with-non-skinny-metadata.patch
  - btrfs-progs: check: fix segfault with -Q (bsc#1158560)
  * btrfs-progs-check-initialize-qgroup_item_count-in-ea.patch
  - Enqueue feature to wait for exclusive operation to finish (JSC#SLE-15234)
  * 0001-btrfs-progs-add-get_fsid_fd-for-getting-fsid-using-f.patch
  * 0002-btrfs-progs-add-sysfs-file-reading-helpers.patch
  * 0003-btrfs-progs-add-helpers-for-parsing-filesystem-exclu.patch
  * 0004-btrfs-progs-check-for-exclusive-operation-before-iss.patch
  * 0005-btrfs-progs-add-helper-to-check-or-wait-for-exclusiv.patch
  * 0006-btrfs-progs-add-enqueue-parameter-for-exclusive-ops.patch
  - Correct check_running_fs_exclop() return value (bsc#1184481)
  * btrfs-progs-Correct-check_running_fs_exclop-return-v.patch</changelog>
  <changelog author="nborisov@suse.com" date="1638360000">- Ignore multipath devices when probing devices for a btrfs filesystem (bsc#1192983)
  * 0001-btrfs-progs-Add-optional-dependency-on-libudev.patch
  * 0002-btrfs-progs-Ignore-devices-representing-paths-in-mul.patch
  * 0003-btrfs-progs-Add-fallback-code-for-path-device-ignore.patch</changelog>
  <changelog author="dmueller@suse.com" date="1642593600">- add python-rpm-macros (bsc#1194748)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1690372800">- keep fd open during until all devices are open (bsc#1207225)
  * btrfs-progs-mkfs-keep-file-descriptors-open-during-whole-time.patch
  * btrfs-progs-mkfs-run-device-preparation-in-parallel.patch</changelog>
  <changelog author="tabraham@suse.com" date="1702987200">- btrfs-progs: fix defrag -c option parsing (bsc#1218029)
  * btrfs-progs-fix-defrag-c-option-parsing.patch</changelog>
</package>
<package pkgid="63743e7b68d59d00fe04f7bef9dd37782745e40eadc85a3e276e90c76d32a9d6" name="libcairo-gobject2" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="c2d9556a0c19774b44a9dcc35e7c25be69291ac88a9458c6034e7619942864c8" name="libcairo-gobject2" arch="s390x">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="bcfcd06f65d21371df6aa28b230527a0eda2839c05fe6b19cc43cc6fda1ebbee" name="libcairo-gobject2" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="1097b6c583af4b3ae3735595c23e54ef585333c0793cdc39e55a495ac0073f6a" name="libcairo2" arch="aarch64">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="2abc0b0334d88dc61fb3f974e6643cd9f6b85e6cd7e4a63f6465fdb64cb5a78b" name="libcairo2" arch="s390x">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="1dbc7e69e28e0a268cc016fffe2d9f4f76015bd18a3c11fa0b0776026d82ba01" name="libcairo2" arch="x86_64">
  <version epoch="0" ver="1.16.0" rel="150400.11.3.1"/>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523534400">- Update to version 1.15.12:
  + The main focus for this release is the addition of Variable
    Font support. Variable fonts are single font files with various
    typography characteristics, such as weight or slant, that users
    of the font can adjust between two points. Effectively this
    enables a single font to behave as multiple fonts.
  + The Skia backend is disabled in this release, due to severe
    bitrot, and will be removed in future releases. Contact the
    cairo team if you have a need of this backend.
  + Features and Enhancements:
  - Variable font support.
  - Skia backend is disabled.
  + API Changes: cairo_font_options_get_variations() and
    cairo_font_options_set_variations() are added.
  + Bugs fixed:
  - Fix errors in csi-trace --help and --version options.
  - Fix a 'memory leak' in the image compositor, with
    pixman_glyph_cache_t.
  - Fix access of uninitialized memory found by valgrind
    (fdo#91271).
  - Fix improper initialization of memory in
    _cairo_ft_font_face_create_for_pattern() (fdo#105084).
  - Fix multi-monitor virtual desktop with negative coords on
    Win32 (fdo#100793).
  - Fix issues occuring with older FreeType versions.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1524571200">- Add cairo-fix-assertion-failure-in-freetype-backend.patch: Fix
  assertion failure in the freetype backend (fdo#105746).</changelog>
  <changelog author="qzheng@suse.com" date="1529496000">- Add cairo-CVE-2017-9814.patch: Replace malloc with _cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1538740800">- Update to version 1.15.14:
  + Features and Enhancements:
  - Add more FreeeType font color conversions to support
    COLR/CPAL.
  - Update test reference images against current pixman.
  + Bugs fixed:
  - Fix crash when rendering Microsoft's Segoe UI Emoji Regular
    font.
  - Fix build breakage with glesv3 enabled due to non-existant
    glesv3.pc.
  - Fix memory leaks found by Coverity.
  - Fix incorrect null ptr handling found by Coverity.
  - Fix test compilation when font-config is disabled.
  - Use _cairo_malloc instead of malloc
    (fdo#101547, CVE-2017-9814).
  - Fix assertion failure in the freetype backend (fdo#105746).
- Drop upstream fixed patches:
  + cairo-fix-assertion-failure-in-freetype-backend.patch.
  + cairo-CVE-2017-9814.patch.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1540123200">- Update to version 1.16.0:
  + test: Free resources in pdf2png.
  + Drop skia backend.
  + Revert "Correctly decode Adobe CMYK JPEGs in PDF export".</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567598400">- Add 2 upstream bug fix patches:
  + cairo-Use-FT_Done_MM_Var-instead-of-free-when-available.patch:
    ft: Use FT_Done_MM_Var instead of free when available in
    cairo_ft_apply_variations. Fixes a crash when using freetype
    &gt;= 2.9
  + cairo-composite_color_glyphs.patch: Fix a thinko in
    composite_color_glyphs. We can't just move around the contents
    of the passed-in string, we need to make a copy. This was
    showing up as memory corruption in pango.</changelog>
  <changelog author="mwilck@suse.com" date="1582459200">- Add an upstream bug fix
  + cairo-pdf-add-missing-flush.patch: Fixes PDF generation
    see https://gitlab.freedesktop.org/cairo/cairo/issues/342</changelog>
  <changelog author="rpm@fthiessen.de" date="1634904000">- Add upstream patch
  + cairo-do-not-override-explicitly-requested-grayscale-aa.patch
    Do not replace explicitly set applications settings by user
    settings for font antialiasing.
    See: https://gitlab.freedesktop.org/cairo/cairo/-/merge_requests/114</changelog>
  <changelog author="mgorse@suse.com" date="1714996800">- Add cairo-fix-infinite-loop-bsc1122321-CVE-2019-6462.patch: This
  fixes a potentially infinite loop (bsc#1122321, CVE-2019-6462,
  glfo#cairo/cairo#155).</changelog>
</package>
<package pkgid="ed81003abf4f913570e102f0bc2c55f020f97c53ef25826e0f224481a6347c44" name="libcap" arch="src">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="2c7f2cc5f2329b3a1f50a53a7289412a03c53c25af4d3d02c0ce68b8ad4c9174" name="libcap2" arch="aarch64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="e070eb3639ea777eac72b15a740574f8f066e6233bcc21d262222fff2b9f94be" name="libcap2" arch="s390x">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="cfcf0ea8c227094723bd85e5332fb8285af94e7d61d8ecc6e5b455f0900327db" name="libcap2" arch="x86_64">
  <version epoch="0" ver="2.63" rel="150400.3.3.1"/>
  <changelog author="mpluskal@suse.com" date="1578571200">- Update to version 2.30 (jsc#SLE-17092, jsc#ECO-3460):
  * BUGFIX: arm and i386 fixes C and Go setgroups choice - used
    wrong syscall in 2.29.
  * cleaned up make clean and make install to actually work as
    intended
  * updated Gentoo libpsx.pc file from Lars Wendler
  * refactored the way libpsx linkage with libcap performed mutual
    discovery.
  * Previously (2.28) libpsx had an API call overridden by libcap
    using weak linkage function in libpsx. In 2.30 this is reversed,
    namely libpsx provides the stronger function and libcap has a
    weak "no-op" version.
  * a bit more consistency in handling the 'all' sets in libcap
    (C) and libcap/cap (Go). Namely, they both dynamically discover
    the number of capabilities named by the kernel and use this as
    the definition of 'all' for the current runtime.
    + libcap (C) exports cap_max_bit() to export the number of
    supported capabilities
    + libcap/cap (Go) exports cap.MaxBits() for this same value.
- For changes for older releases see:
  * https://sites.google.com/site/fullycapable/release-notes-for-libcap
- Add glibc-static-devel as build requirement as tests need it
- Install libpsx.a as it seems to be needed in some cases:
  * https://bugs.gentoo.org/703912</changelog>
  <changelog author="mpluskal@suse.com" date="1578916800">- Build using -ffat-lto-objects for static library</changelog>
  <changelog author="tiwai@suse.de" date="1580212800">- Update to version 2.31:
  * primarily a documentation update
  * fix libpam.pc to not require libpsx.pc
  * changed the text format of the default output of getpcap</changelog>
  <changelog author="tiwai@suse.de" date="1581768000">- Update to version 2.32:
  * Bug fix for fakeroot incompatibility (boo#1162014)
  * Slight perf improvement for cap_get_bound().
  * C++ support for psx header inclusion.
  * Some new testing features for capsh</changelog>
  <changelog author="info@paolostivanin.com" date="1596715200">- Update to version 2.42:
  * Closed a potential issue with "libcap/psx" Go package and errno
  * Documentation updates
  * Minor optimization for cap_to_text() and (*cap.Set).String()
  * Discovered and added a missing function (*cap.Set).SetNSOwner() to achieve parity with libcap
  * Multiple fixes
  * Support Go module abstraction
  * A new kernel capability: CAP_BPF
  * Better support for cross-compilation
  * pam_cap now honors PAM_REINITIALIZE_CRED
  * implements cap_launch functionality</changelog>
  <changelog author="dmueller@suse.com" date="1599048000">- update to 2.43
  * Linus' kernel tree defines CAP_CHECKPOINT_RESTORE (40) so support it.
  * Fix the creation of the $(FAKEROOT)$(LIBDIR) for split install targets
  * Clean up a binary from the distribution
  * Added some more release time checks for non-git tracked files.
  * Fix a deadlock in libpsx that surfaced with a set of compiler optimizations by removing the psx wrapping harder.</changelog>
  <changelog author="dmueller@suse.com" date="1605355200">- update to 2.44:
  Generally, this is a release to help package builders: no functional change
  to any of the generated code just documentation and make related fixes.</changelog>
  <changelog author="dmueller@suse.com" date="1609761600">- update to 2.46:
  * The bulk of this release concerns fixes and improvements to libpsx
  * Fix the capsh == argument handling and add a test case
  * Added build support for systems that do not support libpthread
  * Added build support for not building shared libraries</changelog>
  <changelog author="dmueller@suse.com" date="1611748800">- update to 2.47:
  * Restructured gowns to default to uid base of getuid().
  * Augment NOPRIV libcap mode with the sticky NO_NEW_PRIVS prctl bit.
  * Improve the usage and diagnostic message for setcap
  * Documentation fixes, license declarations, example updates</changelog>
  <changelog author="dmueller@suse.com" date="1612872000">- update to 2.48:
  * More uniform use of $(MAKE) in Makefiles
  * No longer include symlinks in the git tree
  * Provide support for make GOLANG=no ...
  * Provide support for pointing at a specific build of the go binary
  * camelCase the contrib/seccomp/explore.go program
  * A number of documentation fixes to man pages and source code comments
  * Last use of GO major version 0</changelog>
  <changelog author="dmueller@suse.com" date="1616414400">- update to 2.49:
  * Implement cap_func_launcher() and cap.FuncLauncher().
  * More robust "psx" redirection for nocgo compilation - the documentation for
    the cgo implementation is now included in the nocgo one because the go.dev
    automated documentation builds the docs from the nocgo version.
  * Lots of documentation cleanups and added a few man pages: for IAB and
    Launching.
  * Some general no-op License changes that might cause folk to notice but only
    for formatting reasons. These were initially inspired by some lawyerly
    interactions, but I ended up rolling back half of them because they
    confused automated software infrastructure.</changelog>
  <changelog author="tiwai@suse.de" date="1618574400">- Add explicit dependency on libcap2 with version to libcap-progs
  (bsc#1184690)</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix a broken symlink. libcap-devel installs libpsx.so but
  didn't install the library it's pointing to.</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 2.51:
  * Fix capsh installation
  * Add an autoauth module flag to pam_cap.so
  * Unified libcap/cap (Go) and libcap (C) default generation of external format binary data
  * API enhancement cap_fill() and (*cap.Set).Fill() - to permit copying one
    capability flag to another.
  * --explain=cap_foo: describe what cap_foo does
  * --suggest=phrase: search all the cap descriptions and describe those that match the phrase
  * Add "keepcaps" module argument support to pam_cap.so (reported by Zoltan Fridrich. Bug 212945)
  * extend libcap to include cap_prctl() and cap_prctlw() functions to regain
    feature parity with Go "cap" package. These are only needed when linking
    against -lpsx for keepcaps POSIX semantics.
  * this likely requires substantial application changes to make Ambient
    capability support usable in general, but doing our part for the admin.
  * Add a test case for recent kernel fix
  * Go pragma fix for convenience functions in "cap" module</changelog>
  <changelog author="info@paolostivanin.com" date="1632830400">- update to 2.59:
  * Fixed a potential libcap memory leak by adding a destructor
  * Major improvement is that there is a path for Linux-PAM compliant
    applications to support setting Ambient vector Capabilities via pam_cap.so now
  * Added libcap cap_proc_root() API function
  * Added color support to captree
  * Fixed contrib/sucap/su to correctly handle the Inheritable flag
  * capsh enhancements
  * getcap -r / now generates readable output
  * The shared library objects: pam_cap.so, libcap.so and libpsx.so, are all now
    runnable as standalone binaries
  * The module pam_cap.so now contains support for a default=&lt;IAB&gt; module argument
  * Enhanced capsh --suggest to also compare against the capability value names
    and not just their descriptions
  * Added capsh --current support
  * Added a contrib/sucap/su.c pure-capabilities PAM implementation of su
  * Fix for a corner case infinite loop handling long strings
  * Added libcap cap_iab_compare() and cap_iab_get_pid() APIs
  * Added a Go utility, captree, to display the process (and thread) graph along with
    the POSIX.1e and IAB capabilities of each PID{TID} tree.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637496000">- libcap 2.61:
  * Better error handling of the numerical arguments for capsh and
    setcap
  * Fix executable mode for all of the .so files. There were two
    situations where this was failing (with a hard to debug SIGSEGV
    inside libc)
  * Added an example of a shared library object with its own file
    capability
  * Fix the top-level include for Make.Rules in the contrib/sucap
    example application
  * Add support for running constructors at libcap.so start up time
    when running as stand alone binary.
- includes changes from 2.60:
  * Some build, code linting fixes, the addition of the
    cap_fill_flag() API and a memory latency optimization
  * General improvement in thread safety for libcap and cap package
  * Minor API change replacing libcap:cap_launch_*() void returning
    functions with int + errno status returns.
  * Added a cap_iab_dup(), and (*cap.IAB).Dup() to API
  * New features for capsh: --quiet, -+ and =+ arguments
- add upstream signing key and verify source signature</changelog>
  <changelog author="dmueller@suse.com" date="1640865600">- update to 2.62:
  * Bug fix for Go package "cap" and launching
  * Build cleanups
  * Documentation updates: cap_max_bits has a man page entry
  * Recognize default securebits as a libcap mode: HYBRID</changelog>
  <changelog author="dmueller@suse.com" date="1643630400">- update to 2.63:
  * restore errno to zero by the time main() is executed
  * Consistent psx handling (a panic) for syscalls that return thread dependent
    status Inconsistend behavior noticed by Lorenz Bauer
  * Add a test case for a deadlock under investigation in golang
  * Trim some of the #include file use to make the tree compile more
    efficiently</changelog>
  <changelog author="meissner@suse.com" date="1645790400">- Use "or" in the license tag to avoid confusion (bsc#1180073)</changelog>
  <changelog author="abergmann@suse.com" date="1684238400">- Fixed improper memory release in libcap/psx/psx.c:__wrap_pthread_create()
  (bsc#1211418 / CVE-2023-2602) CVE-2023-2602.patch
- Fixed integer overflow or wraparound in libcap/cap_alloc.c:_libcap_strdup()
  (bsc#1211419 / CVE-2023-2603) CVE-2023-2603.patch</changelog>
</package>
<package pkgid="b36bcdc929b110141e1de47100b5299c5ce3a10e4dab37020efd09c416cc0a96" name="libcares2" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="b9975188055a6a5eaa289c1aa142c2f6564644f74c92fdb4749642eb73da49cf" name="libcares2" arch="s390x">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="6d36384bb2347feb6e1a36c5ecb794ffa36c47e915e335a4c11899c738ea4fda" name="libcares2" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.23.1"/>
  <changelog author="adam.majer@suse.de" date="1550059200">- Version update to 1.15.0:
  * Add ares_init_options() configurability for path to resolv.conf file
  * Ability to exclude building of tools (adig, ahost, acountry) in CMake
  * Report ARES_ENOTFOUND for .onion domain names as per RFC7686
    (bsc#1125306)
  * Apply the IPv6 server blacklist to all nameserver sources
  * Prevent changing name servers while queries are outstanding
  * ares_set_servers_csv() on failure should not leave channel in a
    bad state
- enable unit tests
- disable-live-tests.patch: disable tests to live servers
- onion-crash.patch: backport fix for a crash affecting .onion TLD</changelog>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
</package>
<package pkgid="b4ece0caea3c1c59b38dac3407ff62980ae08ad77cbeb2637296a6dea1a6391c" name="libcares2" arch="aarch64">
  <version epoch="0" ver="1.19.1" rel="150000.3.26.1"/>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- CVE-2024-25629.patch: fix out of bounds read in ares__read_line()
  (bsc#1220279, CVE-2024-25629)</changelog>
</package>
<package pkgid="57dad7cb1f1170c3c0459ef3464a3a5f50e78da2d43e8b214b015203892c2c0c" name="libcares2" arch="s390x">
  <version epoch="0" ver="1.19.1" rel="150000.3.26.1"/>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- CVE-2024-25629.patch: fix out of bounds read in ares__read_line()
  (bsc#1220279, CVE-2024-25629)</changelog>
</package>
<package pkgid="f8875fb258482a710bcd87f5321b259eda728d49b9e96858b16ba8cb47bd8474" name="libcares2" arch="x86_64">
  <version epoch="0" ver="1.19.1" rel="150000.3.26.1"/>
  <changelog author="mrostecki@opensuse.org" date="1571832000">- Add upstream patches with the ares_getaddrinfo function:
  * 0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  * 0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  * 0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  * 0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  * 0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  * 0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  * 0007-getaddrinfo-enhancements-257.patch
  * 0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  * 0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
- Add a patch which disables test failing on OBS (but passing in
  local environment):
  * 0010-Disable-failing-test.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1573214400">- Update to upstream snapshot 20191108
  * getaddrinfo - avoid infinite loop in case of NXDOMAIN
  * ares_getenv - return NULL in all cases
  * implement ares_getaddrinfo
- onion-crash.patch: removed, upstreamed.
- removed upstream patches that are part of the snapshot:
  0001-Add-initial-implementation-for-ares_getaddrinfo-112.patch
  0002-Remaining-queries-counter-fix-additional-unit-tests-.patch
  0003-Bugfix-for-ares_getaddrinfo-and-additional-unit-test.patch
  0004-Add-ares__sortaddrinfo-to-support-getaddrinfo-sorted.patch
  0005-getaddrinfo-avoid-infinite-loop-in-case-of-NXDOMAIN-.patch
  0006-getaddrinfo-callback-must-be-called-on-bad-domain-24.patch
  0007-getaddrinfo-enhancements-257.patch
  0008-Add-missing-limits.h-include-from-ares_getaddrinfo.c.patch
  0009-Increase-portability-of-ares-test-mock-ai.cc-235.patch
  0010-Disable-failing-test.patch
- disable-live-tests.patch - updated</changelog>
  <changelog author="tchvatal@suse.com" date="1573819200">- Fix version number of the snapshot to not be downgrade:
  bsc#1156601</changelog>
  <changelog author="toddrme2178@gmail.com" date="1578312000">- Switch to cmake-based build.
  Some packages need the cmake build files.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1580212800">- Add netcfg as the build requirement and runtime requirement.
  ares_getaddrinfo function uses the getservbyport_r function which
  requires the /etc/services file to function properly. That config
  file is provided by the netcfg package. Unit tests rely on it
  too, hence it has to be a build dependency as well.</changelog>
  <changelog author="adam.majer@suse.de" date="1580731200">- Upgrade to latest snapshot from 2020-01-17
- disable-live-tests.patch: refreshed
- regression.patch: fix a regression in DNS results that contain
  both A and AAAA answers.</changelog>
  <changelog author="elimat@opensuse.org" date="1594209600">- Version update to 1.16.1
  Security:
  * Prevent possible use-after-free and double-free in ares_getaddrinfo() if
    ares_destroy() is called prior to ares_getaddrinfo() completing.
  Reported by Jann Horn at Google Project Zero.
  Changes:
  * Allow TXT records on CHAOS qclass. Used for retriving things like
    version.bind, version.server, authoris.bind, hostname.bind, and id.server. [3]
  Bug fixes:
  * Fix Windows Unicode incompatibilities with ares_getaddrinfo() [1]
  * Silence false cast-align compiler warnings due to valid casts of struct
    sockaddr to struct sockaddr_in and struct sockaddr_in6.
  * MacOS should use libresolv for retrieving DNS servers, like iOS
  * CMake build system should populate the INCLUDE_DIRECTORIES property of
    installed targets [2]
  * Correct macros in use for the ares_getaddrinfo.3 man page
- Changes in version 1.16.0
  Changes:
  * Introduction of ares_getaddrinfo() API which provides similar output
    (including proper sorting as per RFC 6724) to the system native API, but
  utilizes different data structures in order to provide additional
  information such as TTLs and all aliases. Please reference the respective
  man pages for usage details.
  * Parse SOA records from ns_t_any response
  * CMake: Provide c-ares version in package export file
  * CMake: Add CPACK functionality for DEB and RPM
  * CMake: Generate PDB files during build
  * CMake: Support manpage installation
  Bug fixes:
  * Fix bad expectation in IPv6 localhost test.
  * AutoTools: use XC_CHECK_BUILD_FLAGS instead of XC_CHECK_USER_FLAGS to
    prevent complaints about CPPFLAGS in CFLAGS.
  * Fix .onion handling
  * Command line usage was out of date for adig and ahost.
  * Typos in manpages
  * If ares_getenv is defined, it must return a value on all platforms
  * If /etc/resolv.conf has invalid lookup values, use the defaults.
  * Tests: Separate live tests from SetServers* tests as only live tests
    should require internet access.
  * ares_gethostbyname() should return ENODATA if no valid A or AAAA record
    is found, but a CNAME was found.
  * CMake: Rework library function checking to prevent unintended linking
    with system libraries that aren't needed.
  * Due to use of inet_addr() it was not possible to return 255.255.255.255
    from ares_gethostbyname().
  * CMake: Fix building of tests on Windows
- Drop regression.patch which have been fixed upstream
- Refresh disable-live-tests.patch
- Remove static lib since its required when doing tests and we dont want it
  included in package
- Run spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1599739200">- Implement multibuild specfile to split out tests into its own
  flavor; this way we can build and run tests, which require
  static lib, as well as avoid packaging the latter without issues
  with the installed cmake file..</changelog>
  <changelog author="tchvatal@suse.com" date="1599825600">- simplify conditions bit to make it tad more readable</changelog>
  <changelog author="adam.majer@suse.de" date="1605614400">- Version update to 1.17.0
  Security:
  * avoid read-heap-buffer-overflow in ares_parse_soa_reply found during
    fuzzing
  * Avoid theoretical buffer overflow in RC4 loop comparison
  * Empty hquery-&gt;name could lead to invalid memory access
  * ares_parse_{a,aaaa}_reply() could return a larger *naddrttls than was
    passed in (bsc#1178882, CVE-2020-8277)
  Changes:
  * Update help information for adig, acountry, and ahost
  * Test Suite now uses dynamic system-assigned ports rather than hardcoded
    ports to prevent failures in containers
  * Detect remote DNS server does not support EDNS using rules from RFC 6891
  * Source tree has been reorganized to use a more modern layout
  * Allow parsing of CAA Resource Record
  Bug fixes:
  * readaddrinfo bad sizeof()
  * Test cases should honor HAVE_WRITEV flag, not depend on WIN32
  * FQDN with trailing period should be queried first
  * ares_getaddrinfo() was returning members of the struct as garbage values if
    unset, and was not honoring ai_socktype and ai_protocol hints.
  * ares_gethostbyname() with AF_UNSPEC and an ip address would fail
  * Properly document ares_set_local_ip4() uses host byte order
  For details, see https://c-ares.haxx.se/changelog.html
- add missing upstream sources, to be removed for next release
- remove unnecessary BuildRequires
- fix building on SLE12 systems</changelog>
  <changelog author="adam.majer@suse.de" date="1605787200">- ares_dns.h, missing_header.patch: re-add missing header in last release</changelog>
  <changelog author="mrueckert@suse.de" date="1605960000">- add BR for pkg-config to get the provides in the devel package</changelog>
  <changelog author="dmueller@suse.com" date="1610798400">- update to 1.17.1:
    Travis: add iOS target built with CMake (#378)
    Issue #377 suggested that CMake builds for iOS with c-ares were broken. This PR adds an automatic Travis build for iOS CMake.
  - fix build
    External projects were using non-public header ares_dns.h, make public again (#376)
    It appears some outside projects were relying on macros in ares_dns.h, even
    though it doesn't appear that header was ever meant to be public.  That said,
    we don't want to break external integrators so we should distribute this header
    again.
  - note that so versioning has moved to configure.ac
  - note about 1.17.1
  - fix sed gone wrong
    autotools cleanup (#372)
  * buildconf: remove custom logic with autoreconf
- remove missing_header.patch (upstream)</changelog>
  <changelog author="adam.majer@suse.de" date="1628769600">- update to 1.17.2:
  Security:
  * When building c-ares with CMake, the RANDOM_FILE would not be set
    and therefore downgrade to the less secure random number generator
  * If ares_getaddrinfo() was terminated by an ares_destroy(),
    it would cause a crash
  * Crash in sortaddrinfo() if the list size equals 0 due to
    an unexpected DNS response
  * Expand number of escaped characters in DNS replies as per
    RFC1035 5.1 to prevent spoofing follow-up
    (bsc#1188881, CVE-2021-3672)
  * Perform validation on hostnames to prevent possible XSS
    due to applications not performing valiation themselves
  Changes:
  * ares_malloc(0) is now defined behavior (returns NULL) rather than system-specific to catch edge cases
  Bug fixes:
  * Building tests should not force building of static libraries except on Windows
  * Relative headers must use double quotes to prevent pulling in a system library
  for details see,
  https://c-ares.haxx.se/changelog.html#1_17_2</changelog>
  <changelog author="adam.majer@suse.de" date="1631102400">- 5c995d5.patch: augment input validation on hostnames to allow _
  as part of DNS response (bsc#1190225)</changelog>
  <changelog author="adam.majer@suse.de" date="1631188800">- new upstream website
- drop multibuild - tests do not require static library anymore
- spec file cleanup
- drop sources that were re-added to upstream distibution
  (c-ares-config.cmake.in ares_dns.h libcares.pc.cmake)</changelog>
  <changelog author="adam.majer@suse.de" date="1638878400">- update to 1.18.1. Changes since 1.17.2:
  * Allow '/' as a valid character for a returned name for
    CNAME in-addr.arpa delegation
  * no longer forwards requests for localhost resolution per RFC6761
  * During a domain search, treat ARES_ENODATA as ARES_NXDOMAIN so
    that the search process will continue to the next domain
    in the search.
  * Provide ares_nameser.h as a public interface as needed by NodeJS
  * Add support for URI(Uniform Resource Identifier) records via
    ares_parse_uri_reply()
- disable unit tests for SLE12 since GCC compiler too old to build
  unit tests
- 5c995d5.patch: upstreamed
- disable-live-tests.patch: refreshed</changelog>
  <changelog author="mardnh@gmx.de" date="1674993600">- Update to version 1.19.0
  Security:
  * Low. Stack overflow in ares_set_sortlist() which is used
    during c-ares initialization and typically provided by an
    administrator and not an end user.
    (bsc#1208067, CVE-2022-4904)
  Changes:
  * Add ARES_OPT_HOSTS_FILE similar to ARES_OPT_RESOLVCONF for
    specifying a custom hosts file location.
  Bug fixes:
  * Fix memory leak in reading /etc/hosts when using localhost
    fallback.
  * Fix chain building c-ares when libresolv is already included by
    another project.
  * File lookup should not immediately abort as there may be other
    tries due to search criteria.
  * Asterisks should be allowed in host validation as CNAMEs may
    reference wildcard domains.
  * AutoTools build system referenced bad STDC_HEADERS macro.
  * Even if one address class returns a failure for
    ares_getaddrinfo() we should still return the results we have.
  * Fix ares_getaddrinfo() numerical address resolution with
    AF_UNSPEC
  * Fix tools and help information.
  * Various documentation fixes and cleanups.
  * Add include guards to ares_data.h
  * c-ares could try to exceed maximum number of iovec entries
    supported by system.
  * The RFC6761 6.3 states localhost subdomains must be offline too</changelog>
  <changelog author="adam.majer@suse.de" date="1684756800">- Update to version 1.19.1
  Security:
  * CVE-2023-32067. High. 0-byte UDP payload causes Denial of Service
    (bsc#1211604)
  * CVE-2023-31147 Moderate. Insufficient randomness in generation
    of DNS query IDs (bsc#1211605)
  * CVE-2023-31130. Moderate. Buffer Underwrite in
    ares_inet_net_pton() (bsc#1211606)
  * CVE-2023-31124. Low. AutoTools does not set CARES_RANDOM_FILE
    during cross compilation (bsc#1211607)
  Bug fixes:
  * Fix uninitialized memory warning in test
  * ares_getaddrinfo() should allow a port of 0
  * Fix memory leak in ares_send() on error
  * Fix comment style in ares_data.h
  * Fix typo in ares_init_options.3
  * Sync ax_pthread.m4 with upstream
  * Sync ax_cxx_compile_stdcxx_11.m4 with upstream to fix uclibc support</changelog>
  <changelog author="adam.majer@suse.de" date="1708948800">- CVE-2024-25629.patch: fix out of bounds read in ares__read_line()
  (bsc#1220279, CVE-2024-25629)</changelog>
</package>
<package pkgid="17e395dc9818c6fd009c243bcf1788baa44aa396cb57dfeacd9d82888229b4dc" name="libcom_err2" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="7e7ac04e24f329c81b0b748f9cb02ce9bcaf2a9de3a49d45ed83b12877e8c8da" name="libcom_err2" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="e2b6057c5b447c9bd3fd0501e3884cc4619d771d592bdbaf06cb30b9b85d8bdb" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="2146367b5f08e489691d8d5f7edea790459223d4a1e08c1d54fbafd5d9bc3a68" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="20230214" rel="150400.3.11.1"/>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606400">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
</package>
<package pkgid="84ddb6cdb2a1a8e363054f5fd8bdb538eebe16e26a91fd46af76f3a2e582cb7e" name="libcontainers-common" arch="src">
  <version epoch="0" ver="20230214" rel="150400.3.11.1"/>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
  <changelog author="danish.prakash@suse.com" date="1694606400">- Require libcontainers-sles-mounts for *all* SLE products,
  and not just SLES. (bsc#1215291)</changelog>
</package>
<package pkgid="b3e39c66f8b1a8fcb84e7e3d6230214e74b671745879b7bd144a42d786e6ec3d" name="libcontainers-common" arch="noarch">
  <version epoch="0" ver="20230214" rel="150400.3.8.1"/>
  <changelog author="lubos.kocman@suse.com" date="1654516800">- Add registry.suse.com as agreed on oSC22
  Let's advertise usage of BCI images in general</changelog>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
</package>
<package pkgid="83876ee2d32f3d5189565bfeb17d66ca78b581ec4e54e00295d4f457303a8d28" name="libcontainers-common" arch="src">
  <version epoch="0" ver="20230214" rel="150400.3.8.1"/>
  <changelog author="lubos.kocman@suse.com" date="1654516800">- Add registry.suse.com as agreed on oSC22
  Let's advertise usage of BCI images in general</changelog>
  <changelog author="rbrown@suse.com" date="1654689600">- Add missing comma to previous change</changelog>
  <changelog author="dcermak@suse.com" date="1655208000">- Add missing Requires(post): sed, fixes boo#1200524
- Make %post compatible with dash</changelog>
  <changelog author="fvogt@suse.com" date="1655294400">- Use $() again in %post, but with a space for POSIX compliance</changelog>
  <changelog author="fcrozat@suse.com" date="1659528000">- Resync containers.conf / storage.conf with Fedora
- Create /etc/containers/registries.conf.d and
  add 000-shortnames.conf to it.</changelog>
  <changelog author="fvogt@suse.com" date="1660046400">- Fix obvious typo in containers.conf</changelog>
  <changelog author="dmueller@suse.com" date="1666699200">- set detached sigstore attachments for the SUSE controlled registries</changelog>
  <changelog author="dmueller@suse.com" date="1668081600">- postinstall script: slight cleanup, no functional change</changelog>
  <changelog author="dmueller@suse.com" date="1668686400">- add container-storage-driver.sh (bsc#1197093)</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- Update bundled common to 0.50.1
- Update bundled image to 5.23.1
- Update bundled storage to 1.44.0
- Drop bundled podman
- Bump version to 20221122
- Install container-storage-driver.sh in /etc/ on Leap &amp; SLE</changelog>
  <changelog author="dmueller@suse.com" date="1669636800">- add requires on util-linux-systemd for findmnt in profile script
- only set storage_driver env when no libpod exists
- avoid quoting issue</changelog>
  <changelog author="dcermak@suse.com" date="1670241600">- Remove registry.suse.com from search unqualified-search-registries:
  registry.suse.com responds very slowly to pagination repository listings
  (https://docs.docker.com/registry/spec/api/#pagination) and thereby causes
  every `podman search` to take over 90s. We have to remove it until this
  regression is fixed.</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- storage.conf: Unset 'driver' and set 'driver_priority' to
  allow podman to use 'btrfs' if available and fallback to
  'overlay' if not.
- .spec: rm %post script to set 'btrfs' as storage driver
  in storage.conf</changelog>
  <changelog author="danish.prakash@suse.com" date="1674648000">- Reverts https://build.opensuse.org/request/show/1060361
  Changes introduced to c/storage's storage.conf which adds
  a driver_priority attribute would break consumers of libcontainer-common
  as long as those packages are vendoring an older c/storage version.
  Instead of patching every consumer, we're reverting this change, until
  those packages have been updated downstream. [boo#1207509]</changelog>
  <changelog author="dcermak@suse.com" date="1676376000">- New upstream release 20230214
- bump c/storage to 1.45.3
- bump c/image to 5.24.1
- bump c/common to 0.51.0
- containers.conf:
  * add commented out options containers.read_only,
    engine.platform_to_oci_runtime, engine.events_container_create_inspect_data,
    network.volume_plugin_timeout, engine.runtimes.youki, machine.provider
  * remove deprecated setting containers.userns_size
  * add youki to engine.runtime_supports_json
- shortnames.conf: pull in latest upstream version
- storage.conf: add commented out option storage.transient_store
- correct license to APACHE-2.0 only (there's no GPLv3 code to be found)
- add source URLs to spec
- drop pointless copyright year</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add registry.suse.com to the unqualified-search-registries</changelog>
  <changelog author="dcermak@suse.com" date="1678881600">- Remove obsolete Requires(post): util-linux-systemd</changelog>
  <changelog author="dcermak@suse.com" date="1678881601">- Remove container-storage-driver.sh, we want to default to the overlay driver
  instead of btrfs.
  The btrfs driver is not really supported upstream (see
  e.g. https://github.com/containers/podman/issues/16882), there is no real
  development anymore and it appears to have subtle bugs (e.g. the one linked
  previously).
  To prevent further such issues, we will from now on default to the overlay
  driver.</changelog>
  <changelog author="fcrozat@suse.com" date="1682510400">- Own /etc/containers/systemd and /usr/share/containers/systemd,
  useful for podman quadlet.</changelog>
  <changelog author="danish.prakash@suse.com" date="1684238400">- Introduce new subpackage that adds SLE-specific mounts only
  on SLE systems (if sles-release) hence avoiding superfluous
  warnings on non-SLE systems while running podman commands.
  (bsc#1211124)</changelog>
</package>
<package pkgid="ea4cde5f8256aada1128cdea9efe989e4e172d6df2ffee47986c9590cc8f57e2" name="libcpupower0" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="becdfb293e945f7b121aac29c1f01f01251e3fd0378ac53719a82f8f14759bb2" name="libcpupower0" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="777b62b4db8322e40ff75a07dab149322a66fac0ffca19bf43853b82f8848a8b" name="libcpupower0" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.3.3.1"/>
  <changelog author="trenn@suse.de" date="1515499200">- Add x86_energy_perf_bias tool
  This is a tool which is, same as turbostat, located in kernel sources here:
  tools/power/x86/
  A x86_energy_perf_policy-17.05.11.tar.bz2
  A x86_perf_fix_man_permissions.patch
  A x86_perf_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1515672000">- Update cpupower to latest kernel version (version name 4.15, but
  checked out against latest kernel tag 4.15-rc7. There will not
  be important changes any more, maybe a fix).
- cpu online/offline fixes
- This is the first cpupower package (with updated version) which
  includes x86_energy_perf_policy binary.
  This is important for later package dependencies, namely tuned.
  A cpupower_exclude_kernel_Makefile.patch</changelog>
  <changelog author="trenn@suse.de" date="1538395200">- Updating to latest 4.19(-rc6) kernel sources
  Turbostat is increased to version 18.07.27 by this
  Patches which got deleted because they are now mainline:
  D    turbostat_decode_MSR_IA32_MISC_ENABLE_only_on_Intel.patch
  D    turbostat_fix_man_perm.patch
  D    x86_perf_fix_man_permissions.patch</changelog>
  <changelog author="trenn@suse.de" date="1539691200">- Fix static compilation and sysfs_read_file mess
  A cpupower_fix_compilation_and_sysfs_read_file_mess.patch</changelog>
  <changelog author="trenn@suse.de" date="1543924800">- Add bash completion for cpupower command (from mainline submit)
  A cpupower_bash-completion_for_cpupower_tool.patch</changelog>
  <changelog author="idonmez@suse.com" date="1544097600">- Run spec-cleaner
- Don't disable as-needed, it works now.</changelog>
  <changelog author="jengelh@inai.de" date="1544097601">- Description updates.</changelog>
  <changelog author="trenn@suse.de" date="1554724800">- Update to latest kernel HEAD sources
  (5.1-rc4, 15ade5d2e7775667cf191cf2f94327a4889f8b9d)
  Patches included mainline:
  D cpupower_fix_compilation_and_sysfs_read_file_mess.patch
  D cpupower_bash-completion_for_cpupower_tool.patch
  Adjusted patches:
  M turbostat_makefile_fix_asm_header.patch
  M x86_perf_makefile_fix_asm_header.patch
  M rapl_monitor.patch
  M cpupower_rapl.patch</changelog>
  <changelog author="trenn@suse.de" date="1559736000">- jira#5244 Turbostat for Ice Lake
- Remove very old cpufrequtils provides and requires (predecessor)
- Update libcpupower description
- Sidenote about fate#321274 - This feature is on the kernel side
  and got wrongly mentioned in cpupower in a released product.</changelog>
  <changelog author="trenn@suse.de" date="1563364800">- Add intel-speed-select tool (jsc#SLE-5364)
  A intel-speed-select-1.0.tar.bz2
  A intel-speed-select_remove_DATE_TIME.patch
- Fix missing governors when running cpupower frequency-info (bsc#1117709)
  M rapl_monitor.patch</changelog>
  <changelog author="trenn@suse.de" date="1572350400">- Update turbostat to latest version 19.08.31</changelog>
  <changelog author="trenn@suse.de" date="1574942400">- Update intel-speed-select to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit b3abfd778bf1dbdd
- Update cpupower to latest 5.5-rc1 kernel version
  latest mainline commit:
  commit 4611a4fb0cce3
  Fixes aperf/mperf monitoring on latest AMD Rome CPUs (bsc#1152967)
- Fix library API breakage (bsc#1154240)
  A libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch</changelog>
  <changelog author="trenn@suse.de" date="1580385600">- Add mainline patch with proper patch header and filename:
  D libcpupower_fix_api_cpufreq_get_frequencies_breakage.patch
  A cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
- Fix manpage (bsc#1162142)
  A Correction-to-manpage-of-cpupower.patch</changelog>
  <changelog author="trenn@suse.de" date="1583409600">- Do not show 0 boost states if boost states are supported, but could
  not be read from PCI registers.
  bsc#1165712, bsc#1164983
  A amd_do_not_show_amount_of_boost_states_if_zero.patch</changelog>
  <changelog author="trenn@suse.de" date="1589889600">- Update to latest:
  turbostat 20.03.20
  intel-speed-select 1.3  (bsc#1171810)
  verions
- Adjust needed kernel and userspace requirements in:
  cpupower_export_tarball_from_git.sh
  and
  BuildRequires: libcap-devel
  A remove_bits_h.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1592395200">- Add -fcommon to allow building against GCC10</changelog>
  <changelog author="trenn@suse.de" date="1602763200">- Update intel-speed-select to version 1.6 (jsc#SLE-13334)</changelog>
  <changelog author="trenn@suse.de" date="1605182400">- Add AMD Fam 19h support (bsc#1177394)
- Update turbostat to latest version 20.09.30 including:
  * jsc#SLE-13412, jsc#SLE-13174 (rocket lake support)
  * jsc#SLE-13448 (Alder Lake support)
  * jsc#SLE-13348, jsc#SLE-13171 (Sapphire Rapid support)
  * Support AMD Fam 19h
- Touched patches:
  Deleted mainline integrated patches:
  D    Correction-to-manpage-of-cpupower.patch
  D    cpupower-Revert-library-ABI-changes-from-commit-ae2917093fb60bdc1ed3e.patch
  Patches refreshed:
  M    rapl_monitor.patch
  M    turbostat_makefile_fix_asm_header.patch</changelog>
  <changelog author="trenn@suse.de" date="1626696000">- Update (jsc#SLE-18392, jsc#SLE-18906, jsc#SLE-18393, jsc#SLE-18410):
  * turbostat          to    21.05.04
  * intel speed select to    1.10
  * cpupower           to    5.14-rcX (kernel sources state)
- Already upstream and included in the update:
  D intel-speed-select_remove_DATE_TIME.patch
- SLE patches for jsc#SLE-17797 dropped (in fact never been applied to factory),
  due to inclusion in upstream version:
  cpupower-Add-CPUPOWER_CAP_AMD_HW_PSTATE-cpuid-caps-flag.patch
  cpupower-Condense-pstate-enabled-bit-checks-in-decode_pstates.patch
  cpupower-Update-family-checks-when-decoding-HW-pstates.patch
  cpupower-Remove-family-arg-to-decode_pstates.patch
  cpupower-Correct-macro-name-for-CPB-caps-flag.patch
  cpupower-Update-msr_pstate-union-struct-naming.patch
  cpupower-Add-cpuid-cap-flag-for-MSR_AMD_HWCR-support.patch
  cpupower-Remove-unused-pscur-variable.patch</changelog>
  <changelog author="trenn@suse.de" date="1674129600">- Originally by aabdallah@suse.com:
  Don't exist if perf is unavailable.
  * Fix for SG#64023, bsc#1202890:
  A turbostat-Dont-exist-if-perf-is-unavailable.patch:</changelog>
</package>
<package pkgid="24ba9ff8c3f4628c0c6529f0213bfe7007e6fd67a3a740d16489f86f9424295c" name="libcrypt1" arch="aarch64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="b6b1afcbf0f8f81ced3471c2c5f4975926d1bb01840aea1eacda83eb0ec1c306" name="libcrypt1" arch="s390x">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="4ad93fb0cd888b9ebe695cc906ee787eca9aabcb69c9530885f6032fbbcf2c3d" name="libcrypt1" arch="x86_64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="ffd7846041eabbae4ab1a0da99709a06520d99a2db520bbd30732c8c511a1698" name="libcryptsetup12" arch="aarch64">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="848363d6dbbe3755f2e1e8598ca36d132728db555d926d9c1ae221b8db47fbc5" name="libcryptsetup12" arch="s390x">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="41c4c39717fe10fafa7761a1e4858e9234dad49fc246e89b1804ad1ddbc6e64a" name="libcryptsetup12" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="2cd666744a09e65d3d43cceb4cab99b1a50f41577cc5aaa7757c811985c5bf79" name="libcryptsetup12-hmac" arch="aarch64">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="b506c296117a8b362277f5f29e569d507384d6033abdce9c1f27f038016186fc" name="libcryptsetup12-hmac" arch="s390x">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="484b79bdd430621a3cd40b53407a38f5e36c35f010859213b5967b02cdb299ad" name="libcryptsetup12-hmac" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="150400.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1550232000">- New version 2.1.0
  * The default size of the LUKS2 header is increased to 16 MB.
    It includes metadata and the area used for binary keyslots;
    it means that LUKS header backup is now 16MB in size.
  * Cryptsetup now doubles LUKS default key size if XTS mode is used
    (XTS mode uses two internal keys). This does not apply if key size
    is explicitly specified on the command line and it does not apply
    for the plain mode.
    This fixes a confusion with AES and 256bit key in XTS mode where
    code used AES128 and not AES256 as often expected.
  * Default cryptographic backend used for LUKS header processing is now
    OpenSSL. For years, OpenSSL provided better performance for PBKDF.
  * The Python bindings are no longer supported and the code was removed
    from cryptsetup distribution. Please use the libblockdev project
    that already covers most of the libcryptsetup functionality
    including LUKS2.
  * Cryptsetup now allows using --offset option also for luksFormat.
  * Cryptsetup now supports new refresh action (that is the alias for
    "open --refresh").
  * Integritysetup now supports mode with detached data device through
    new --data-device option.
- 2.1.0 would use LUKS2 as default, we stay with LUKS1 for now until
  someone has time to evaluate the fallout from switching to LUKS2.</changelog>
  <changelog author="jengelh@inai.de" date="1550232001">- Use noun phrase in summary.</changelog>
  <changelog author="vcizek@suse.com" date="1571313600">- Create a weak dependency cycle between libcryptsetup and
  libcryptsetup-hmac to make sure they are installed together
  (bsc#1090768)</changelog>
  <changelog author="info@paolostivanin.com" date="1580817600">- Update to 2.3.0 (include release notes for 2.2.0)
  * BITLK (Windows BitLocker compatible) device access
  * Veritysetup now supports activation with additional PKCS7 signature
    of root hash through --root-hash-signature option.
  * Integritysetup now calculates hash integrity size according to algorithm
    instead of requiring an explicit tag size.
  * Integritysetup now supports fixed padding for dm-integrity devices.
  * A lot of fixes to online LUKS2 reecryption.
  * Add crypt_resume_by_volume_key() function to libcryptsetup.
    If a user has a volume key available, the LUKS device can be resumed
    directly using the provided volume key.
    No keyslot derivation is needed, only the key digest is checked.
  * Implement active device suspend info.
    Add CRYPT_ACTIVATE_SUSPENDED bit to crypt_get_active_device() flags
    that informs the caller that device is suspended (luksSuspend).
  * Allow --test-passphrase for a detached header.
    Before this fix, we required a data device specified on the command
    line even though it was not necessary for the passphrase check.
  * Allow --key-file option in legacy offline encryption.
    The option was ignored for LUKS1 encryption initialization.
  * Export memory safe functions.
    To make developing of some extensions simpler, we now export
    functions to handle memory with proper wipe on deallocation.
  * Fail crypt_keyslot_get_pbkdf for inactive LUKS1 keyslot.
  * Add optional global serialization lock for memory hard PBKDF.
  * Abort conversion to LUKS1 with incompatible sector size that is
    not supported in LUKS1.
  * Report error (-ENOENT) if no LUKS keyslots are available. User can now
    distinguish between a wrong passphrase and no keyslot available.
  * Fix a possible segfault in detached header handling (double free).
  * Add integritysetup support for bitmap mode introduced in Linux kernel 5.2.
  * The libcryptsetup now keeps all file descriptors to underlying device
    open during the whole lifetime of crypt device context to avoid excessive
    scanning in udev (udev run scan on every descriptor close).
  * The luksDump command now prints more info for reencryption keyslot
    (when a device is in-reencryption).
  * New --device-size parameter is supported for LUKS2 reencryption.
  * New --resume-only parameter is supported for LUKS2 reencryption.
  * The repair command now tries LUKS2 reencryption recovery if needed.
  * If reencryption device is a file image, an interactive dialog now
    asks if reencryption should be run safely in offline mode
    (if autodetection of active devices failed).
  * Fix activation through a token where dm-crypt volume key was not
    set through keyring (but using old device-mapper table parameter mode).
  * Online reencryption can now retain all keyslots (if all passphrases
    are provided). Note that keyslot numbers will change in this case.
  * Allow volume key file to be used if no LUKS2 keyslots are present.
  * Print a warning if online reencrypt is called over LUKS1 (not supported).
  * Fix TCRYPT KDF failure in FIPS mode.
  * Remove FIPS mode restriction for crypt_volume_key_get.
  * Reduce keyslots area size in luksFormat when the header device is too small.
  * Make resize action accept --device-size parameter (supports units suffix).</changelog>
  <changelog author="lnussel@suse.de" date="1585828800">- Split translations to -lang package
- New version to 2.3.1
  * Support VeraCrypt 128 bytes passwords.
    VeraCrypt now allows passwords of maximal length 128 bytes
    (compared to legacy TrueCrypt where it was limited by 64 bytes).
  * Strip extra newline from BitLocker recovery keys
    There might be a trailing newline added by the text editor when
    the recovery passphrase was passed using the --key-file option.
  * Detect separate libiconv library.
    It should fix compilation issues on distributions with iconv
    implemented in a separate library.
  * Various fixes and workarounds to build on old Linux distributions.
  * Split lines with hexadecimal digest printing for large key-sizes.
  * Do not wipe the device with no integrity profile.
    With --integrity none we performed useless full device wipe.
  * Workaround for dm-integrity kernel table bug.
    Some kernels show an invalid dm-integrity mapping table
    if superblock contains the "recalculate" bit. This causes
    integritysetup to not recognize the dm-integrity device.
    Integritysetup now specifies kernel options such a way that
    even on unpatched kernels mapping table is correct.
  * Print error message if LUKS1 keyslot cannot be processed.
    If the crypto backend is missing support for hash algorithms
    used in PBKDF2, the error message was not visible.
  * Properly align LUKS2 keyslots area on conversion.
    If the LUKS1 payload offset (data offset) is not aligned
    to 4 KiB boundary, new LUKS2 keyslots area in now aligned properly.
  * Validate LUKS2 earlier on conversion to not corrupt the device
    if binary keyslots areas metadata are not correct.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1590667200">- Update to 2.3.3:
  * Fix BitLocker compatible device access that uses native 4kB
    sectors
  * Support large IV count (--iv-large-sectors) cryptsetup option
    for plain device mapping
  * Fix a memory leak in BitLocker compatible handling
  * Allow EBOIV (Initialization Vector algorithm) use
  * LUKS2: Require both keyslot cipher and key size option, do
    not fail silently
- includes changes from 2.3.2:
  * Add option to dump content of LUKS2 unbound keyslot
  * Add support for discards (TRIM) for standalone dm-integrity
    devices (Kernel 5.7) via --allow-discards, not for LUKS2
  * Fix cryptsetup-reencrypt to work on devices that do not allow
    direct-io device access.
  * Fix a crash in the BitLocker-compatible code error path
  * Fix Veracrypt compatible support for longer (&gt;64 bytes)
    passphrases</changelog>
  <changelog author="lnussel@suse.de" date="1599220800">- Update to 2.3.4:
  * Fix a possible out-of-bounds memory write while validating LUKS2 data
    segments metadata (CVE-2020-14382, boo#1176128).
  * Ignore reported optimal IO size if not aligned to minimal page size.
  * Added support for new no_read/write_wrokqueue dm-crypt options (kernel 5.9).
  * Added support panic_on_corruption option for dm-verity devices (kernel 5.9).
  * Support --master-key-file option for online LUKS2 reencryption
  * Always return EEXIST error code if a device already exists.
  * Fix a problem in integritysetup if a hash algorithm has dash in the name.
  * Fix crypto backend to properly handle ECB mode.
  * TrueCrypt/VeraCrypt compatible mode now supports the activation of devices
    with a larger sector.
  * LUKS2: Do not create excessively large headers.
  * Fix unspecified sector size for BitLocker compatible mode.
  * Fix reading key data size in metadata for BitLocker compatible mode.</changelog>
  <changelog author="lnussel@suse.de" date="1604491200">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="lnussel@suse.de" date="1607428800">- SLE marker: implements jsc#SLE-5911, bsc#1165580, jsc#SLE-145149</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615636800">- cryptsetup 2.3.5:
  * Fix partial reads of passphrase from an interactive terminal
  * Fix maximum length of password entered through a terminal
  * integritysetup: support new dm-integrity HMAC recalculation
    options
  * integritysetup: display of recalculating sector in dump command
  * veritysetup: fix verity FEC if stored in the same image with
    hashes
  * veritysetup: run FEC repair check even if root hash fails
  * veritysetup: do not process hash image if hash area is empty
  * veritysetup: store verity hash algorithm in superblock in
    lowercase
  * bitlk: fix a crash if the device disappears during BitLocker
    scan
  * bitlk: show a better error when trying to open an NTFS device
  * bitlk: add support for startup key protected VMKs
  * Fix LUKS1 repair code (regression since version 1.7.x)
  * Fix luksKeyChange for LUKS2 with assigned tokens
  * Fix cryptsetup resize using LUKS2 tokens
  * Print a visible error if device resize is not supported
  * Add error message when suspending wrong non-LUKS device
  * Fix default XTS mode key size in reencryption
  * Rephrase missing locking directory warning and move it to
    debug level
  * Many fixes for the use of cipher_null (empty debug cipher)
  * Fixes for libpasswdqc 2.0.x (optional passphrase quality check)
  * Fixes for problems discovered by various tools for code
    analysis
  * Various fixes to man pages
- silence hmac packaging warnings</changelog>
  <changelog author="lnussel@suse.de" date="1625140800">- cryptsetup 2.3.6:
  * integritysetup: Fix possible dm-integrity mapping table truncation.
  * cryptsetup: Backup header can be used to activate TCRYPT device.
    Use --header option to specify the header.
  * cryptsetup: Avoid LUKS2 decryption without detached header.
    This feature will be added later and is currently not supported.
  * Additional fixes and workarounds for common warnings produced
    by some static analysis tools (like gcc-11 analyzer) and additional
    code hardening.
  * Fix standalone libintl detection for compiled tests.
  * Add Blake2b and Blake2s hash support for crypto backends.
    Kernel and gcrypt crypto backend support all variants.
    OpenSSL supports only Blake2b-512 and Blake2s-256.
    Crypto backend supports kernel notation e.g. "blake2b-512".</changelog>
  <changelog author="fvogt@suse.com" date="1627905600">- Use LUKS2 as default format on Tumbleweed.
  It provides some additional features which other tools
  (e.g. systemd-cryptenroll) rely on. GRUB 2.06 supports unlocking
  LUKS2 volumes meanwhile.</changelog>
  <changelog author="lnussel@suse.de" date="1627905601">- cryptsetup 2.4.0 (jsc#SLE-20275)
  * External LUKS token plugins
  * Experimental SSH token
  * Default LUKS2 PBKDF is now Argon2id
  * Increase minimal memory cost for Argon2 benchmark to 64MiB.
  * Autodetect optimal encryption sector size on LUKS2 format.
  * Use VeraCrypt option by default and add --disable-veracrypt option.
  * Support --hash and --cipher to limit opening time for TCRYPT type
  * Fixed default OpenSSL crypt backend support for OpenSSL3.
  * integritysetup: add integrity-recalculate-reset flag.
  * cryptsetup: retains keyslot number in luksChangeKey for LUKS2.
  * Fix cryptsetup resize using LUKS2 tokens.
  * Add close --deferred and --cancel-deferred options.
  * Rewritten command-line option parsing to avoid libpopt arguments
    memory leaks.
  * Add --test-args option.</changelog>
  <changelog author="lnussel@suse.de" date="1627992000">- need to use PBKDF2 by default for LUKS2 as grub can't decrypt when
  using Argon.</changelog>
  <changelog author="lnussel@suse.de" date="1629892800">- As YaST passes necessary parameters to cryptsetup anyway, we do
  not necessarily need to take grub into consideration. So back to
  Argon2 to see how it goes.</changelog>
  <changelog author="lnussel@suse.de" date="1631793600">- cryptsetup 2.4.1
  * Fix compilation for libc implementations without dlvsym().
  * Fix compilation and tests on systems with non-standard libraries
  * Try to workaround some issues on systems without udev support.
  * Fixes for OpenSSL3 crypto backend (including FIPS mode).
  * Print error message when assigning a token to an inactive keyslot.
  * Fix offset bug in LUKS2 encryption code if --offset option was used.
  * Do not allow LUKS2 decryption for devices with data offset.
  * Fix LUKS1 cryptsetup repair command for some specific problems.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1637236800">- cryptsetup 2.4.2:
  * Fix possible large memory allocation if LUKS2 header size is
    invalid.
  * Fix memory corruption in debug message printing LUKS2
    checksum.
  * veritysetup: remove link to the UUID library for the static
    build.
  * Remove link to pwquality library for integritysetup and
    veritysetup. These tools do not read passphrases.
  * OpenSSL3 backend: avoid remaining deprecated calls in API.
    Crypto backend no longer use API deprecated in OpenSSL 3.0
  * Check if kernel device-mapper create device failed in an early
    phase. This happens when a concurrent creation of device-mapper
    devices meets in the very early state.
  * Do not set compiler optimization flag for Argon2 KDF if the
    memory wipe is implemented in libc.
  * Do not attempt to unload LUKS2 tokens if external tokens are
    disabled. This allows building a static binary with
  - -disable-external-tokens.
  * LUKS convert: also check sysfs for device activity.
    If udev symlink is missing, code fallbacks to sysfs scan to
    prevent data corruption for the active device.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1642161600">- cryptsetup 2.4.3:
  * Fix possible attacks against data confidentiality through
    LUKS2 online reencryption extension crash recovery
    CVE-2021-4122, boo#1194469
  * Add configure option --disable-luks2-reencryption to completely
    disable LUKS2 reencryption code.
  * Improve internal metadata validation code for reencryption
    metadata
  * Add updated documentation for LUKS2 On-Disk Format
    Specification version 1.1.0
  * Fix support for bitlk (BitLocker compatible) startup key with
    new  metadata entry introduced in Windows 11
  * Fix space restriction for LUKS2 reencryption with data shift</changelog>
  <changelog author="pmonreal@suse.com" date="1689249600">- luksFormat: Handle system with low memory and no swap space [bsc#1211079]
  * Check for physical memory available also in PBKDF benchmark.
  * Try to avoid OOM killer on low-memory systems without swap.
  * Use only half of detected free memory on systems without swap.
  * Add patches:
  - cryptsetup-Check-for-physical-memory-available-also-in-PBKDF-be.patch
  - cryptsetup-Try-to-avoid-OOM-killer-on-low-memory-systems-withou.patch
  - cryptsetup-Use-only-half-of-detected-free-memory-on-systems-wit.patch</changelog>
</package>
<package pkgid="d52105a97c3df76d9e2368371d9c48a4212affe4c5fcaee21f0db615997a27f7" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="bee2fb4c6dfa30c58e2d79e4810229a5081e410de7fffb19398f88b5606d53a9" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="52107b8f76a0db6a33611457f2e08a15b3559e6fc9e2ab4d7ab3c7284899b138" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.43.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
</package>
<package pkgid="3b5aca13d4fee017a71a0d697f9626cc8be2624a86f5993157e9bf9a3f01c029" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="e283fe31aa231f0475ee66c01de149fa0f7bcc9fbf3a3637a2c58ee4bba064fd" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="565b915bfe1afd29709909b5f8ef360c2ddcdbb74b586f6549d4f97d43012dc8" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.46.1"/>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
</package>
<package pkgid="cabf433a58c2f8b915542fe52c89e140d5fc92937f5d9d68ef504599087cd101" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="2cc39b42ba89bf48cfe4f5cc3677e4adc812112e6a5f4dbc430cf381fafa09c0" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="1a68aff3becd9341eb7bfe420f5e548336542ae3d94616edf9fe9052b5dad535" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.51.2"/>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
</package>
<package pkgid="fb1edc2fde8cce97dd015ece7efefe9bed823639f9284e00dad4db5902879a8c" name="libcups2" arch="aarch64">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="6b01924633aeef719007deb62d3343ae2800c9cc272926937c4f0389fb01e103" name="libcups2" arch="s390x">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="59ac86d13c3c83026a8e3b4a395042e3bd158a8ca43a1f5bc4806b08ca5db82a" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="150000.3.54.1"/>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
  <changelog author="jsmeix@suse.de" date="1543838400">- cups-2.2.7-CVE-2018-4700.patch fixes CVE-2018-4700: session
  cookie is extremely predictable, effectively breaking the
  CSRF protection of the CUPS web interface (bsc#1115750)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1550750400">- Add issue5509-fix-utf-8-validation-issue.patch (bsc#1118118)
  Fixes https://github.com/apple/cups/issues/5509</changelog>
  <changelog author="jsmeix@suse.de" date="1573646400">- cups-2.2.7-CVE-2019-8675.CVE-2019-8696.patch fixes
  CVE-2019-8675 and CVE-2019-8696 (bsc#1146358 and bsc#1146359)
  and some other security/disclosure issues
  https://github.com/apple/cups/commit/f24e6cf6a39300ad0c3726a41a4aab51ad54c109
  (Apple's internal issues rdar://51685251, rdar://50035411,
  rdar://51373853, rdar://51373929)</changelog>
  <changelog author="jsmeix@suse.de" date="1586174400">- cups-2.2.7-CVE-2020-3898.patch fixes CVE-2020-3898 (bsc#1168422)
  heap-buffer-overflow in libcups ppdFindOption() function</changelog>
  <changelog author="jsmeix@suse.de" date="1610366400">- cups-2.2.7-CVE-2020-10001.patch fixes CVE-2020-10001
  access to uninitialized buffer in ipp.c (bsc#1180520)
- cups-2.2.7-CVE-2019-8842.patch fixes CVE-2019-8842 (bsc#1170671)
  the ippReadIO function may under-read an extension field</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- cups-2.2.7-web-ui-kerberos-authentication.patch (bsc#1175960)
  Fix web UI kerberos authentication</changelog>
  <changelog author="jsmeix@suse.de" date="1618228800">- When cupsd creates directories with specific owner group
  and permissions (usually owner is 'root' and group matches
  "configure --with-cups-group=lp") specify same owner group and
  permissions in the RPM spec file to ensure those directories
  are installed by RPM with the right settings because if those
  directories were installed by RPM with different settings then
  cupsd would use them as is and not adjust its specific owner
  group and permissions which could lead to privilege escalation
  from 'lp' user to 'root' via symlink attacks e.g. if owner is
  falsely 'lp' instead of 'root' CVE-2021-25317 (bsc#1184161)</changelog>
  <changelog author="jsmeix@suse.de" date="1649160000">- SUSE_bsc_1189517.patch is
  https://github.com/apple/cups/commit/821b3cc956d46b811facd50986acc9f24f0e1c79
  which belongs to https://github.com/apple/cups/issues/5288
  that fixes bsc#1189517
  "cups printservice takes much longer than before
  with a big number of printers"
  see in particular
  https://github.com/apple/cups/issues/5288#issuecomment-921626381
- SUSE_bsc_1195115.patch is
  https://github.com/apple/cups/commit/ba9d68cc7467a7a47ef219071902b9e9eb6dbc44
  which belongs to https://github.com/apple/cups/issues/5538
  that fixes bsc#1195115
  "CUPS PreserveJobHistory doesn't work with seconds"</changelog>
  <changelog author="jsmeix@suse.de" date="1653048000">- cups-2.2.7-CVE-2022-26691.patch fixes CVE-2022-26691
  cups: authentication bypass and code execution (bsc#1199474)</changelog>
  <changelog author="vliaskovitis@suse.com" date="1659700800">- cups-branch-2.2-commit-3e4dd41459dabc5d18edbe06eb5b81291885204b.diff
  is 'git show 3e4dd41459dabc5d18edbe06eb5b81291885204b' for
  https://github.com/apple/cups/commit/3e4dd41459dabc5d18edbe06eb5b81291885204b
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes handling of MaxJobTime 0 (Issue #5438) in the CUPS 2.2 branch
  bsc#1201511:
  Stuck print jobs being cancelled immediately, despite MaxJobTime being set to 0</changelog>
  <changelog author="vliaskovitis@suse.com" date="1677758400">- cups-branch-2.2-commit-876fdc1c90a885a58644c8757bc1283c9fd5bcb7.diff
  is https://github.com/OpenPrinting/cups/commit/876fdc1c90a885a58644c8757bc1283c9fd5bcb7
  which belongs to https://github.com/OpenPrinting/cups/issues/308
  that fixes bsc#1191525, bsc#1203446:
  "Print jobs on cups.sock return with EAGAIN (Resource temporarily unavailable)"
  "/usr/bin/lpr: Error - The printer or class does not exist."</changelog>
  <changelog author="jsmeix@suse.com" date="1678363200">- 0001-cups-dests.c-cupsGetNamedDest-set-IPP_STATUS_ERROR_N.patch
  improves logging on 'IPP_STATUS_ERROR_NOT_FOUND' error
  that fixes bsc#1191467, bsc#1198932:
  "lpr reports 'No such file or directory' for missing catalogue files"
  "/usr/bin/lpr: No such file or directory"
- after-network_target-sssd_service.patch
  is derived from https://github.com/apple/cups/issues/5550 with its
  https://github.com/apple/cups/commit/aaebca5660fdd7f7b6f30461f0788d91ef6e2fee
  and SUSE PTF:24471 cups.SUSE_SLE-15_Update cups-2.2.7-wait-for-network.patch
  to add "After=network.target sssd.service" to the systemd unit
  source files cupsd.service.in and cups.cups-lpdAT.service.in
  to fix bsc#1201234, bsc#1200321:
  "Missing network dependency in systemd unit for cups-2.2.7"
  "CUPS may not always start if sssd is in use"</changelog>
  <changelog author="jsmeix@suse.com" date="1684929600">- cups-2.2.7-CVE-2023-32324.patch fixes CVE-2023-32324
  "Heap buffer overflow in cupsd"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-cxc6-w2g7-69p7
  bsc#1211643</changelog>
  <changelog author="jsmeix@suse.com" date="1686571200">- cups-2.2.7-CVE-2023-34241.patch fixes CVE-2023-34241
  "use-after-free in cupsdAcceptClient()"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-qjgh-5hcq-5f25
  bsc#1212230</changelog>
  <changelog author="jsmeix@suse.com" date="1694001600">- cups-2.2.7-CVE-2023-32360.patch fixes CVE-2023-32360
  "Information leak through Cups-Get-Document operation"
  by requiring authentication for CUPS-Get-Document in cupsd.conf
  https://github.com/OpenPrinting/cups/commit/a0c8b9c9556882f00c68b9727a95a1b6d1452913
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-7pv4-hx8c-gr4g
  bsc#1214254
- cups-2.2.7-additional_policies.patch is an updated version
  of cups-2.0.3-additional_policies.patch that replaces it
  to add the 'allowallforanybody' policy to cupsd.conf
  after cups-2.2.7-CVE-2023-32360.patch was applied</changelog>
  <changelog author="jsmeix@suse.com" date="1694520000">- cups-2.2.7-CVE-2023-4504.patch fixes CVE-2023-4504
  "CUPS PostScript Parsing Heap Overflow"
  https://github.com/OpenPrinting/cups/security/advisories/GHSA-pf5r-86w9-678h
  bsc#1215204</changelog>
  <changelog author="jsmeix@suse.com" date="1713528000">- Remove '--enable-debug-printfs' from configure options, see
  https://github.com/OpenPrinting/cups/issues/875
  (bsc#1217119).</changelog>
</package>
<package pkgid="f2eadc1832aaf797377c18f7cc795c543a1409c76dfc4ff1ac6221e8cdac19e1" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="083083b811a02da47886e400618876296e4b181cdea7c7f8711f53684045c4fc" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="d85d1f769699983521df183cacc1e5db735a091b71e91401685b245eeaa9fd14" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.23.1"/>
  <changelog author="dmueller@suse.com" date="1658664000">- add tests-for-32bit.patch to fix testsuite on 32bit platforms</changelog>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
</package>
<package pkgid="32dee8e5faf0576db6db2c93c5aafc022de5c1d7c2035eee4067bc56008d9cf2" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="953b722cbfb66d87a986f1737342b2a8ddc95dbd1b6d4578528c37dccc2909ee" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="25880aecf9cdf7d8d4c40af793eea5dffcbd60ab112152a01bf587ea27ee71ac" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.26.1"/>
  <changelog author="pmonreal@suse.com" date="1661169600">- Security fix: [bsc#1202593, CVE-2022-35252]
  * Control codes in cookie denial of service
  * Add curl-CVE-2022-35252.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
</package>
<package pkgid="fb0ffb31ee14542baf85085ab0d8e549a087f1b2b45c886b3e5b30d16f6d603f" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.29.1"/>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
</package>
<package pkgid="8164bd7aae2b6e220b76cf0ae5bf1c97b53878f17abd25a5cde7836d5e0cac44" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.29.1"/>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
</package>
<package pkgid="373f0cf0b4d988f732c70c0ab00ceca36d66a407e5e1cc704e98dff86f16a868" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.29.1"/>
  <changelog author="pmonreal@suse.com" date="1661947200">- Update to 7.85.0:
  * Security fixes: [bsc#1202593, CVE-2022-35252]
  - control code in cookie denial of service
  * Changes:
  - quic: add support via wolfSSL
  - schannel: Add TLS 1.3 support
  - setopt: add CURLOPT_PROTOCOLS_STR and CURLOPT_REDIR_PROTOCOLS_STR
  * Bugfixes:
  - asyn-thread: fix socket leak on OOM
  - asyn-thread: make getaddrinfo_complete return CURLcode
  - base64: base64url encoding has no padding
  - configure: fix broken m4 syntax in TLS options
  - configure: if asked to use TLS, fail if no TLS lib was detected
  - connect: add quic connection information
  - connect: set socktype/protocol correctly
  - cookie: reject cookies with "control bytes"
  - cookie: treat a blank domain in Set-Cookie: as non-existing
  - curl: output warning when a cookie is dropped due to size
  - Curl_close: call Curl_resolver_cancel to avoid memory-leak
  - digest: fix memory leak, fix not quoted 'opaque'
  - digest: fix missing increment of 'nc' value for auth-int
  - digest: pass over leading spaces in qop values
  - digest: reject broken header with session protocol but without qop
  - doh: use https protocol by default
  - easy_lock.h: include sched.h if available to fix build
  - easy_lock.h: use __asm__ instead of asm to fix build
  - easy_lock: switch to using atomic_int instead of bool
  - ftp: use a correct expire ID for timer expiry
  - h2h3: fix overriding the 'TE: Trailers' header
  - hostip: resolve *.localhost to 127.0.0.1/::1
  - HTTP3.md: update to msh3 v0.4.0
  - hyper: use wakers for curl pause/resume
  - lib3026: reduce the number of threads to 100
  - libssh2: make atime/mtime date overflow return error
  - libssh2: provide symlink name in SFTP dir listing
  - multi: have curl_multi_remove_handle close CONNECT_ONLY transfer
  - multi: use larger dns hash table for multi interface
  - multi_wait: fix skipping to populate revents for extra_fds
  - netrc: Use the password from lines without login
  - ngtcp2: Fix build error due to change in nghttp3 prototypes
  - ngtcp2: fix stall or busy loop on STOP_SENDING with upload data
  - ngtcp2: implement cb_h3_stop_sending and cb_h3_reset_stream callbacks
  - openssl: add 'CURL_BORINGSSL_VERSION' to identify BoringSSL
  - openssl: add cert path in error message
  - openssl: add details to "unable to set client certificate" error
  - openssl: fix BoringSSL symbol conflicts with LDAP and Schannel
  - select: do not return fatal error on EINTR from poll()
  - sendf: fix paused header writes since after the header API
  - sendf: skip storing HTTP headers if HTTP disabled
  - url: really use the user provided in the url when netrc entry exists
  - url: reject URLs with hostnames longer than 65535 bytes
  - url: treat missing usernames in netrc as empty
  - urldata: reduce size of several struct fields
  - vtls: make Curl_ssl_backend() return the enum type curl_sslbackend
  * Remove tests-for-32bit.patch fixed in the update
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
</package>
<package pkgid="c0b0b5e64bc9555dfc00f4a6459deb6e5f7e0585f05ce39aba551ce6b7827152" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="72363230c782bc8139584f7b6c661a07fe42554b441b17656d70a47370691c15" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="14901f528d8e28d37214ef02b72883fdd6f281abfc3a1ef7fe8d9c14b71c5ca9" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.32.1"/>
  <changelog author="pmonreal@suse.com" date="1664539200">- Change the deprecated configure option --enable-hidden-symbols
  to the new --enable-symbol-hiding.</changelog>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
</package>
<package pkgid="71db41ebef7432590a2f1d4624ca9471b50371e64fad86acc7acfca993b4bd44" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="74c40c2b85b963bfdb4de6b1f3f83cc47c84c9b2191b3a5d802327bdd3ffa4a3" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="6266ce13ccbf934b0197b6c2a1123c0a4e3ff5dd9da7650092cc2b1907b1c548" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.36.1"/>
  <changelog author="vasily.ulyanov@suse.com" date="1665230400">- Update connection info when using UNIX socket as endpoint
  connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
</package>
<package pkgid="34aed315e2e826cae93ca8afc8463f239fa29c6ff59599a04ab927d99c87cdd2" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="7e332dc9c9ce473eba03c8cf3afa124ef5bac24afbd951bbea87fadb9c51a74a" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="739698a835ffdfa39d586ec201b656f8eef67fe752b426b27e499d2c04b6e7ac" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.41.1"/>
  <changelog author="pmonreal@suse.com" date="1666008000">- Security Fix: [bsc#1204383, CVE-2022-32221]
  * POST following PUT confusion
  * Add curl-CVE-2022-32221.patch
- Security Fix: [bsc#1204386, CVE-2022-42916]
  * HSTS bypass via IDN
  * Add curl-CVE-2022-42916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666785600">- Update to 7.86.0:
  * Security fixes:
  - POST following PUT confusion [bsc#1204383, CVE-2022-32221]
  - .netrc parser out-of-bounds access [bsc#1204384, CVE-2022-35260]
  - HTTP proxy double-free [bsc#1204385, CVE-2022-42915]
  - HSTS bypass via IDN [bsc#1204386, CVE-2022-42916]
  * Changes:
  - NPN: remove support for and use of
  - Websockets: initial support
  * Bugfixes:
  - altsvc: reject bad port numbers
  - autotools: reduce brute-force when detecting recv/send arg list
  - aws_sigv4: fix header computation
  - cli tool: do not use disabled protocols
  - connect: change verbose IPv6 address:port to [address]:port
  - connect: fix builds without AF_INET6
  - connect: fix Curl_updateconninfo for TRNSPRT_UNIX
  - connect: fix the wrong error message on connect failures
  - content_encoding: use writer struct subclasses for different encodings
  - cookie: reject cookie names or content with TAB characters
  - curl/add_file_name_to_url: use the libcurl URL parser
  - curl/get_url_file_name: use libcurl URL parser
  - curl: warn for --ssl use, considered insecure
  - docs/libcurl/symbols-in-versions: add several missing symbols
  - ftp: ignore a 550 response to MDTM
  - functypes: provide the recv and send arg and return types
  - getparameter: return PARAM_MANUAL_REQUESTED for -M even when disabled
  - header: define public API functions as extern c
  - headers: reset the requests counter at transfer start
  - hostip: guard PF_INET6 use
  - hostip: lazily wait to figure out if IPv6 works until needed
  - http, vauth: always provide Curl_allow_auth_to_host() functionality
  - http2: make nghttp2 less picky about field whitespace
  - http: try parsing Retry-After: as a number first
  - http_proxy: restore the protocol pointer on error
  - lib: add missing limits.h includes
  - lib: prepare the incoming of additional protocols
  - lib: sanitize conditional exclusion around MIME
  - libssh: if sftp_init fails, don't get the sftp error code
  - mprintf: reject two kinds of precision for the same argument
  - mqtt: return error for too long topic
  - netrc: compare user name case sensitively
  - netrc: replace fgets with Curl_get_line
  - netrc: use the URL-decoded user
  - ngtcp2: fix build errors due to changes in ngtcp2 library
  - noproxy: support proxies specified using cidr notation
  - openssl: make certinfo available for QUIC
  - resolve: make forced IPv4 resolve only use A queries
  - schannel: ban server ALPN change during recv renegotiation
  - schannel: don't reset recv/send function pointers on renegotiation
  - schannel: when importing PFX, disable key persistence
  - setopt: use the handler table for protocol name to number conversions
  - setopt: when POST is set, reset the 'upload' field
  - single_transfer: use the libcurl URL parser when appending query parts
  - smb: replace CURL_WIN32 with WIN32
  - tool: avoid generating ambiguous escaped characters in --libcurl
  - tool_main: exit at once if out of file descriptors
  - tool_operate: more transfer cleanup after parallel transfer fail
  - tool_operate: prevent over-queuing in parallel mode
  - tool_paramhelp: asserts verify maximum sizes for string loading
  - tool_xattr: save the original URL, not the final redirected one
  - url: a zero-length userinfo part in the URL is still a (blank) user
  - url: allow non-HTTPS HSTS-matching for debug builds
  - url: rename function due to name-clash in Watt-32
  - url: use IDN decoded names for HSTS checks
  - urlapi: detect scheme better when not guessing
  - urlapi: fix parsing URL without slash with CURLU_URLENCODE
  - urlapi: reject more bad characters from the host name field
  * Remove patch upstream:
  - connect-fix-Curl_updateconninfo-for-TRNSPRT_UNIX.patch</changelog>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
</package>
<package pkgid="68cb589fe9c8145b12d670bbcabc3b885ed971d4eff481ab5e463b8f2850f548" name="libcurl4" arch="aarch64">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="9fccab7cd56f5254ee3cabc40172ba5a56a41f38ea915e85821b05a4b4c3b014" name="libcurl4" arch="s390x">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="87a2607221ede31575fcdb17774ee1d41acb37a539a548a12d8aad4d535eefc7" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="8.0.1" rel="150400.5.44.1"/>
  <changelog author="luc14n0@opensuse.org" date="1668600000">- Add 1.50.0 as the minimum libnghttp2 build requirement version as
  a bandaid. Curl's 7.86.0 release introduces the use of
  nghttp2_option_set_no_rfc9113_leading_and_trailing_ws_validation,
  introduced by nghttp2 1.50.0 release, without introducing a check
  for the function/right version in their build scripts. This will
  make Zypper/cURL unusable in some corner cases where users
  installing something that requires libcurl4 before doing full
  system upgrade, thus updating the cURL stack, but not
  libnghttp2's. Background: boo#1204983, Factory mailing list
  threadd:
  "? broken dependency in curl and/or *zyp* ?", and forums thread:
  Curl-is-broken-after-an-update-which-subsequently-breaks-zypper.</changelog>
  <changelog author="pmonreal@suse.com" date="1670846400">- Security Fix: [bsc#1206308, CVE-2022-43551]
  * Fix Another HSTS bypass via IDN
  * Add curl-CVE-2022-43551.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1670846401">- Security Fix: [bsc#1206309, CVE-2022-43552]
  * HTTP Proxy deny use-after-free
  * Add curl-CVE-2022-43552.patch</changelog>
  <changelog author="david.anes@suse.com" date="1671624000">- Update to 7.87.0:
  * Security fixes:
  - CVE-2022-43551, bsc#1206308: another HSTS bypass via IDN
  - CVE-2022-43552, bsc#1206309: HTTP Proxy deny use-after-free
  * Changes
  - curl: add --url-query
  - CURLOPT_QUICK_EXIT: don't wait for DNS thread on exit
  - lib: add CURL_WRITEFUNC_ERROR to signal write callback error
  - openssl: reduce CA certificate bundle reparsing by caching
  - version: add a feature names array to curl_version_info_data
  * Bugfixes
  - altsvc: fix rejection of negative port numbers
  - aws_sigv4: consult x-%s-content-sha256 for payload hash
  - aws_sigv4: fix typos in aws_sigv4.c
  - base64: better alloc size
  - base64: encode without using snprintf
  - base64: faster base64 decoding
  - build: assume assert.h is always available
  - build: assume errno.h is always available
  - c-hyper: CONNECT respones are not server responses
  - c-hyper: fix multi-request mechanism
  - CI: Change FreeBSD image from 12.3 to 12.4
  - CI: LGTM.com will be shut down in December 2022
  - ci: Remove zuul fuzzing job as it's superseded by CIFuzz
  - cmake: check for cross-compile, not for toolchain
  - CMake: fix build with `CURL_USE_GSSAPI`
  - cmake: really enable warnings with clang
  - cmake: set the soname on the shared library
  - cmdline-opts/gen.pl: fix the linkifier
  - cmdline-opts/page-footer: remove long option nroff formatting
  - config-mac: define HAVE_SYS_IOCTL_H
  - config-mac: fix typo: size_T -&gt; size_t
  - config-mac: remove HAVE_SYS_SELECT_H
  - config-win32: fix SIZEOF_OFF_T for MSVC and old MinGW
  - configure: require fork for NTLM-WB
  - contributors.sh: actually use $CURLWWW instead of just setting it
  - cookie: compare cookie prefixes case insensitively
  - cookie: expire cookies at once when max-age is negative
  - cookie: open cookie jar as a binary file
  - curl-openssl.m4: do not add $prefix/include/openssl to CPPFLAGS
  - curl-rustls.m4: on macOS, rustls also needs the Security framework
  - curl.h: include &lt;sys/select.h&gt; on SerenityOS
  - curl.h: name all public function parameters
  - curl.h: reword comment to not use deprecated option
  - curl: override the numeric locale and set "C" by force
  - curl: timeout in the read callback
  - curl_endian: remove Curl_write64_le from header
  - curl_get_line: allow last line without newline char
  - curl_path: do not add '/' if homedir ends with one
  - curl_url_get.3: remove spurious backtick
  - curl_url_set.3: document CURLU_DISALLOW_USER
  - curl_url_set.3: fix typo
  - CURLMOPT_SOCKETFUNCTION.3: clarify CURL_POLL_REMOVE
  - CURLOPT_COOKIEFILE.3: advice =&gt; advise
  - CURLOPT_DEBUGFUNCTION.3: do not assume nul-termination in example
  - CURLOPT_DEBUGFUNCTION.3: emphasize that incoming data is "raw"
  - CURLOPT_POST.3: Explain setting to 0 changes request type
  - docs/curl_ws_send: Fixed typo in websocket docs
  - docs/EARLY-RELEASE.md: how to determine an early release
  - docs/examples: spell correction ('Retrieve')
  - docs/INSTALL.md: expand on static builds
  - docs/WEBSOCKET.md: explain the URL use
  - docs: add missing parameters for --retry flag
  - docs: add more "SEE ALSO" links to CA related pages
  - docs: explain the noproxy CIDR notation support
  - docs: extend the dump-header documentation
  - docs: remove performance note in CURLOPT_SSL_VERIFYPEER
  - examples/10-at-a-time: fix possible skipped final transfers
  - examples: update descriptions
  - ftp: support growing files with CURLOPT_IGNORE_CONTENT_LENGTH
  - gen.pl: do not generate CURLHELP bitmask lines &gt; 79 characters
  - GHA: clarify workflows permissions, set least possible privilege
  - GHA: NSS use clang instead of clang-9
  - gnutls: use common gnutls init and verify code for ngtcp2
  - headers: add endif comments
  - HTTP-COOKIES.md: mention that http://localhost is a secure context
  - HTTP-COOKIES.md: update the 6265bis link to draft-11
  - http: do not send PROXY more than once
  - http: fix the ::1 comparison for IPv6 localhost for cookies
  - http: set 'this_is_a_follow' in the Location: logic
  - http: use the IDN decoded name in HSTS checks
  - hyper: classify headers as CONNECT and 1XX
  - hyper: fix handling of hyper_task's when reusing the same address
  - idn: remove Curl_win32_ascii_to_idn
  - INSTALL: update operating systems and CPU archs
  - KNOWN_BUGS: remove eight entries
  - lib1560: add some basic IDN host name tests
  - lib: connection filters (cfilter) addition to curl:
  - lib: feature deprecation warnings in gcc &gt;= 4.3
  - lib: fix some type mismatches and remove unneeded typecasts
  - lib: parse numbers with fixed known base 10
  - lib: remove bad set.opt_no_body assignments
  - lib: rewind BEFORE request instead of AFTER previous
  - lib: sync guard for Curl_getaddrinfo_ex() definition and use
  - lib: use size_t or int etc instead of longs
  - libcurl-errors.3: remove duplicate word
  - libssh2: return error when ssh_hostkeyfunc returns error
  - limit-rate.d: see also --rate
  - log2changes.pl: wrap long lines at 80 columns
  - Makefile.mk: address minor issues
  - Makefile.mk: improve a GNU Make hack
  - Makefile.mk: portable Makefile.m32
  - maketgz: set the right version in lib/libcurl.plist
  - mime: relax easy/mime structures binding
  - misc: Fix incorrect spelling
  - misc: remove duplicated include files
  - misc: typo and grammar fixes
  - negtelnetserver.py: have it call its close() method
  - netrc.d: provide mutext info
  - netware: remove leftover traces
  - noproxy: also match with adjacent comma
  - noproxy: guard against empty hostnames in noproxy check
  - noproxy: tailmatch like in 7.85.0 and earlier
  - nroff-scan.pl: detect double highlights
  - ntlm: improve comment for encrypt_des
  - ntlm: silence ubsan warning about copying from null target_info pointer
  - openssl/mbedtls: use %d for outputing port with failf (int)
  - openssl: prefix errors with '[lib]/[version]: '
  - os400: use platform socklen_t in Curl_getnameinfo_a
  - page-header: grammar improvement (display transfer rate)
  - proxy: refactor haproxy protocol handling as connection filter
  - README.md: remove badges and xmas-tree garnish
  - rtsp: fix RTSP auth
  - runtests: --no-debuginfod now disables DEBUGINFOD_URLS
  - runtests: do CRLF replacements per section only
  - scripts/checksrc.pl: detect duplicated include files
  - sendf: change Curl_read_plain to wrap Curl_recv_plain
  - sendf: remove unnecessary if condition
  - setup: do not require __MRC__ defined for Mac OS 9 builds
  - smb/telnet: do not free the protocol struct in *_done()
  - socks: fix username max size is 255 (0xFF)
  - spellcheck.words: remove 'github' as an accepted word
  - ssl-reqd.d: clarify that this is for upgrading connections only
  - strcase: use curl_str(n)equal for case insensitive matches
  - styled-output.d: this option does not work on Windows
  - system.h: fix socklen_t, curl_off_t, long long for Classic Mac OS
  - system.h: support 64-bit curl_off_t for NonStop 32-bit
  - test1421: fix typo
  - test3026: reduce runtime in legacy mingw builds
  - tests/sshserver.pl: re-enable ssh-rsa while using openssh 8.8+
  - tests: add authorityInfoAccess to generated certs
  - tests: add HTTP/3 test case, custom location for proper nghttpx
  - tls: backends use connection filters for IO, enabling HTTPS-proxy
  - tool: determine the correct fopen option for -D
  - tool_cfgable: free the ssl_ec_curves on exit
  - tool_cfgable: make socks5_gssapi_nec a boolean
  - tool_formparse: avoid clobbering on function params
  - tool_getparam: make --no-get work as the opposite of --get
  - tool_operate: provide better errmsg for -G with bad URL
  - tool_operate: when aborting, make sure there is a non-NULL error buffer
  - tool_paramhlp: free the proto strings on exit
  - url: move back the IDN conversion of proxy names
  - urlapi: reject more bad letters from the host name: &amp;+()
  - urldata: change port num storage to int and unsigned short
  - vms: remove SIZEOF_SHORT
  - vtls: fix build without proxy support
  - vtls: localization of state data in filters
  - WEBSOCKET.md: fix broken link
  - Websocket: fixes for partial frames and buffer updates
  - websockets: fix handling of partial frames
  - windows: fail early with a missing windres in autotools
  - windows: fix linking .rc to shared curl with autotools
  - winidn: drop WANT_IDN_PROTOTYPES
  - ws: if no connection is around, return error
  - ws: return CURLE_NOT_BUILT_IN when websockets not built in
  - x509asn1: avoid freeing unallocated pointers</changelog>
  <changelog author="pmonreal@suse.com" date="1675771200">- Security Fixes:
  * HSTS ignored on multiple requests [bsc#1207990, CVE-2023-23914]
  * HSTS amnesia with --parallel [bsc#1207991, CVE-2023-23915]
  * Add curl-CVE-2023-23914-23915.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1675771201">- Security Fix: [bsc#1207992, CVE-2023-23916]
  * HTTP multi-header compression denial of service
  * Add curl-CVE-2023-23916.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676462400">- Update to 7.88.0: [bsc#1207990, CVE-2023-23914]
  [bsc#1207991, CVE-2023-23915] [bsc#1207992, CVE-2023-23916]
  * Security fixes:
  - CVE-2023-23914: HSTS ignored on multiple requests
  - CVE-2023-23915: HSTS amnesia with --parallel
  - CVE-2023-23916: HTTP multi-header compression denial of service
  * Changes:
  - curl.h: add CURL_HTTP_VERSION_3ONLY
  - share: add sharing of HSTS cache among handles
  - src: add --http3-only
  - tool_operate: share HSTS between handles
  - urlapi: add CURLU_PUNYCODE
  - writeout: add %{certs} and %{num_certs}
  * Bugfixes:
  - cf-socket: keep sockaddr local in the socket filters
  - cfilters:Curl_conn_get_select_socks: use the first non-connected filter
  - curl.h: allow up to 10M buffer size
  - curl.h: mark CURLSSLBACKEND_MESALINK as deprecated
  - curl/websockets.h: extend the websocket frame struct
  - curl: output warning at --verbose output for debug-enabled version
  - curl_free.3: fix return type of `curl_free`
  - curl_log: for failf/infof and debug logging implementations
  - dict: URL decode the entire path always
  - docs/DEPRECATE.md: deprecate gskit
  - easyoptions: fix header printing in generation script
  - haxproxy: send before TLS handhshake
  - hsts.d: explain hsts more
  - hsts: handle adding the same host name again
  - HTTP/[23]: continue upload when state.drain is set
  - http: decode transfer encoding first
  - http_aws_sigv4: remove typecasts from HMAC_SHA256 macro
  - http_proxy: do not assign data-&gt;req.p.http use local copy
  - lib: connect/h2/h3 refactor
  - libssh2: try sha2 algos for hostkey methods
  - md4: fix build with GnuTLS + OpenSSL v1
  - ngtcp2: replace removed define and stop using removed function
  - noproxy: support for space-separated names is deprecated
  - nss: implement data_pending method
  - openldap: fix missing sasl symbols at build in specific configs
  - openssl: adapt to boringssl's error code type
  - openssl: don't ignore CA paths when using Windows CA store (redux)
  - openssl: don't log raw record headers
  - openssl: make the BIO_METHOD a local variable in the connection filter
  - openssl: only use CA_BLOB if verifying peer
  - openssl: remove attached easy handles from SSL instances
  - openssl: store the CA after first send (ClientHello)
  - setopt: use &gt;, not &gt;=, when checking if uarg is larger than uint-max
  - smb: return error on upload without size
  - socketpair: allow localhost MITM sniffers
  - strdup: name it Curl_strdup
  - tool_getparam: fix hiding of command line secrets
  - tool_operate: fix error codes on bad URL &amp; OOM
  - tool_operate: repair --rate
  - transfer: break the read loop when RECV is cleared
  - typecheck: accept expressions for option/info parameters
  - urlapi: avoid Curl_dyn_addf() for hex outputs
  - urlapi: skip path checks if path is just "/"
  - urlapi: skip the extra dedotdot alloc if no dot in path
  - urldata: cease storing TLS auth type
  - urldata: make 'ftp_create_missing_dirs' depend on FTP || SFTP
  - urldata: make set.http200aliases conditional on HTTP being present
  - urldata: move the cookefilelist to the 'set' struct
  - urldata: remove unused struct fields, made more conditional
  - vquic: stabilization and improvements
  - vtls: fix hostname handling in filters
  - vtls: manage current easy handle in nested cfilter calls
  - vtls: use ALPN HTTP/1.0 when HTTP/1.0 is used
  * Rebase libcurl-ocloexec.patch
  * Fix regression tests: f1d09231adfc695d15995b9ef2c8c6e568c28091
  - runtests: fix "uninitialized value $port"
  - Add curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1676894400">- Update to 7.88.1:
  * Bugfix release
- Drop upstreamed patch:
  * curl-fix-uninitialized-value-in-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678708800">- Security fixes:
  * [bsc#1209209, CVE-2023-27533] TELNET option IAC injection
    Add curl-CVE-2023-27533-no-sscanf.patch curl-CVE-2023-27533.patch
  * [bsc#1209210, CVE-2023-27534] SFTP path ~ resolving discrepancy
    Add curl-CVE-2023-27534.patch
  * [bsc#1209211, CVE-2023-27535] FTP too eager connection reuse
    Add curl-CVE-2023-27535.patch
  * [bsc#1209212, CVE-2023-27536] GSS delegation too eager connection re-use
    Add curl-CVE-2023-27536.patch
  * [bsc#1209214, CVE-2023-27538] SSH connection too eager reuse still
    Add curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679313600">- Update to 8.0.0:
  * Security fixes:
  - TELNET option IAC injection [bsc#1209209, CVE-2023-27533]
  - SFTP path ~ resolving discrepancy [bsc#1209210, CVE-2023-27534]
  - FTP too eager connection reuse [bsc#1209211, CVE-2023-27535]
  - GSS delegation too eager connection re-use [bsc#1209212, CVE-2023-27536]
  - HSTS double-free [bsc#1209213, CVE-2023-27537]
  - SSH connection too eager reuse still [bsc#1209214, CVE-2023-27538]
  * Changes:
  - build: remove support for curl_off_t &lt; 8 bytes
  * Bugfixes:
  - aws_sigv4: fall back to UNSIGNED-PAYLOAD for sign_as_s3
  - BINDINGS: add Fortran binding
  - cf-socket: use port 80 when resolving name for local bind
  - cookie: don't load cookies again when flushing
  - curl_path: create the new path with dynbuf
  - CURLSHOPT_SHARE.3: HSTS sharing is not thread-safe
  - DYNBUF.md: note Curl_dyn_add* calls Curl_dyn_free on failure
  - ftp: active mode with SSL, add the filter
  - hostip: avoid sscanf and extra buffer copies
  - http2: fix for http2-prior-knowledge when reusing connections
  - http2: fix handling of RST and GOAWAY to recognize partial transfers
  - http: don't send 100-continue for short PUT requests
  - http: fix unix domain socket use in https connects
  - libssh: use dynbuf instead of realloc
  - ngtcp2-gnutls.yml: bump to gnutls 3.8.0
  - sectransp: make read_cert() use a dynbuf when loading
  - telnet: only accept option arguments in ascii
  - telnet: parse telnet options without sscanf
  - url: fix the SSH connection reuse check
  - url: only reuse connections with same GSS delegation
  - urlapi: '%' is illegal in host names
  - ws: keep the socket non-blocking
  * Rebase libcurl-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1679400000">- Update to 8.0.1:
  * Bugfixes:
  - fix crash in curl_easy_cleanup</changelog>
  <changelog author="pmonreal@suse.com" date="1681732800">- Update to 8.0.1: [jsc#PED-2580]
  * Rebase curl-secure-getenv.patch
  * Remove patches fixed in the update:
  - curl-CVE-2022-22576.patch curl-CVE-2022-27776.patch
  - curl-CVE-2022-27781.patch curl-CVE-2022-27782.patch
  - curl-CVE-2022-32206.patch curl-CVE-2022-32208.patch
  - curl-CVE-2022-32221.patch curl-CVE-2022-35252.patch
  - curl-CVE-2022-43552.patch curl-CVE-2023-23916.patch
  - curl-CVE-2022-27774.patch curl-CVE-2022-27774-2.patch
  - curl-CVE-2022-27774-disabletest-1568.patch
  - curl-CVE-2022-27775.patch curl-CVE-2022-32205.patch
  - curl-CVE-2022-32207.patch curl-CVE-2022-42916.patch
  - curl-CVE-2022-43551.patch curl-CVE-2023-23914-23915.patch
  - curl-CVE-2023-27533.patch curl-CVE-2023-27533-no-sscanf.patch
  - curl-CVE-2023-27534.patch curl-CVE-2023-27535.patch
  - curl-CVE-2023-27536.patch curl-CVE-2023-27538.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1683633600">- Security fixes:
  * [bsc#1211230, CVE-2023-28319] use-after-free in SSH sha256
    fingerprint check.
  - Add curl-CVE-2023-28319.patch
  * [bsc#1211231, CVE-2023-28320] siglongjmp race condition
  - Add curl-CVE-2023-28320.patch
  * [bsc#1211232, CVE-2023-28321] IDN wildcard matching
  - Add curl-CVE-2023-28321.patch
  * [bsc#1211233, CVE-2023-28322] POST-after-PUT confusion
  - Add curl-CVE-2023-28322.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689163200">- Security fix: [bsc#1213237, CVE-2023-32001]
  * fopen race condition: libcurl can be told to save cookie,
    HSTS and/or alt-svc data to files. When doing this, it
    called 'stat()' followed by 'fopen()' in a way that made
    it vulnerable to a TOCTOU race condition problem.
  * Add curl-CVE-2023-32001.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1694001600">- Security fix: [bsc#1215026, CVE-2023-38039]
  * http: return error when receiving too large header
  * Add curl-CVE-2023-38039.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1696334400">- Security fixes:
  * [bsc#1215888, CVE-2023-38545] SOCKS5 heap buffer overflow
  * [bsc#1215889, CVE-2023-38546] Cookie injection with none file
  * Add curl-CVE-2023-38545.patch curl-CVE-2023-38546.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701172800">- Security fixes:
  * [bsc#1217573, CVE-2023-46218] cookie mixed case PSL bypass
  * [bsc#1217574, CVE-2023-46219] HSTS long file name clears contents
  * Add curl-CVE-2023-46218.patch curl-CVE-2023-46219.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1701950400">- Fix: libssh: Implement SFTP packet size limit (bsc#1216987)
  * Add curl-libssh_Implement_SFTP_packet_size_limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711022400">- Security fix: [bsc#1221667, CVE-2024-2398]
  * curl: HTTP/2 push headers memory-leak
  * Add curl-CVE-2024-2398.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1711108800">- Security fix: [bsc#1221665, CVE-2024-2004]
  * Usage of disabled protocol
  * Add curl-CVE-2024-2004.patch</changelog>
</package>
<package pkgid="39a594a06b62757ec56784ed1845e33bafb4768846640d77fa1675216d346820" name="libdb-4_8" arch="aarch64">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="5cda334744ea80ee84a904383201801e8c8f6483ff95277600be081b68c7501f" name="libdb-4_8" arch="s390x">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="baa3140bf0b37d7393c723b1a7a979e172e0cec96e5e75b6b251d0fb0affd91f" name="libdb-4_8" arch="src">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="prusnak@opensuse.org" date="1317124800">- enable C++ bindings
- spec cleanup</changelog>
  <changelog author="adrian@suse.de" date="1317211200">- fix arm build</changelog>
  <changelog author="coolo@suse.com" date="1324382400">- add autoconf as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1324555200">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="aj@suse.de" date="1326110400">- Do not use build date as version string.</changelog>
  <changelog author="ro@suse.de" date="1353153600">- fix check-build.sh for kernel &gt; 3.0</changelog>
  <changelog author="jengelh@inai.de" date="1371124800">- Rename db_ binaries to db48_ to make room for libdb-6_0
- Add conflict markers against libdb-4_5 (overlapping files)</changelog>
  <changelog author="werner@suse.de" date="1371556800">- Try to change baselibs.conf to fit coolo's comment hopefully</changelog>
  <changelog author="werner@suse.de" date="1371643200">- Explicit add a conflict to other providers of /usr/lib/libdb.so
  and /usr/lib/libdb-4.so</changelog>
  <changelog author="coolo@suse.com" date="1374580800">- readd the provides of db-*, we're not going to switch to db 6.0
  too eagerly: http://lwn.net/Articles/557487/</changelog>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="4e363e0920a1ac63db21bd12a8cd023a0c3262c4a6cad566544796e6165d30aa" name="libdb-4_8" arch="x86_64">
  <version epoch="0" ver="4.8.30" rel="150000.7.9.1"/>
  <changelog author="jengelh@inai.de" date="1381233600">- Add update-alternatives rules to db48-utils (bnc#840738)</changelog>
  <changelog author="coolo@suse.com" date="1382356800">- fix update-alternatives usage</changelog>
  <changelog author="schwab@suse.de" date="1399896000">- remove generation of unused tarball
- remove setting of unused variable</changelog>
  <changelog author="tchvatal@suse.com" date="1459425600">- Use upstream tarball
- Cleanup a bit with spec-cleaner
- remove unused script check-build.sh</changelog>
  <changelog author="rguenther@suse.com" date="1520942400">- Add libdb-fix-atomic.patch to fix __atomic_compare_exchange clash
  with GCCs builtin.  Fixes build with GCC8 which now rejects this.</changelog>
  <changelog author="tchvatal@suse.com" date="1545307200">- Fix the license to match up really what is in there</changelog>
  <changelog author="tchvatal@suse.com" date="1566216000">- Remove the getpatches as it does not work at all, oracle
  removed the pages
- Use spec-cleaner
- Fix stripped debuginfo to make sure we can debug with libdb</changelog>
  <changelog author="william.brown@suse.com" date="1566907200">- Add opd deadlock patch as found and documented by Red Hat.
  (bsc#1148244)
  * 0001-OPD-deadlock-RH-BZ-1349779.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668513600">- Security fix: [bsc#1174414, CVE-2019-2708]
  * libdb: Data store execution leads to partial DoS
  * Backport the upsteam commits:
  - Fixed several possible crashes when running db_verify
    on a corrupted database. [#27864]
  - Fixed several possible hangs when running db_verify
    on a corrupted database. [#27864]
  - Added a warning message when attempting to verify a queue
    database which has many extent files. Verification will take
    a long time if there are many extent files. [#27864]
  * Add libdb-4_8-CVE-2019-2708.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1687348800">- Fix incomplete license tag. [bsc#1099695]</changelog>
</package>
<package pkgid="d845b6ff41c0f6cd3f8560481541e3b9bdcd1e85c42f227384f639ef4af2ec2e" name="libdbus-1-3" arch="aarch64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="d0d8e7e1164e22f10000775724bd2ab235836a937474d270b6828882de362c24" name="libdbus-1-3" arch="s390x">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="2f427f6baf98a10fdfb249e2b4ba5423a5134a32692ed7d619e52cf47998843b" name="libdbus-1-3" arch="x86_64">
  <version epoch="0" ver="1.12.2" rel="150400.18.8.1"/>
  <changelog author="sflees@suse.de" date="1499428800">- No need to set --libdir anymore now that prefix is /usr/bin,
  * fixes boo#1047532
- No need to set --bindir, bindir in dbus-1-x11 was incorrect
- Other fixes required to properly change prefix
- Don't pass --with-initscripts we don't use them anymore.</changelog>
  <changelog author="sflees@suse.de" date="1503921600">- boo#1027200 don't generate machine-id in %post systemd will do it
  on first boot.
- swap usage of /bin/false to /usr/bin/false
- Use libexecdir=%{_libdir}/dbus-1 rather then /lib/dbus-1</changelog>
  <changelog author="sflees@suse.de" date="1505131200">- boo#1027201 dbus-daemon not found
- boo#978477 systemd reseting under heavy load
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1510833600">- Update to 1.12.2
  Deprecations:
  • Eavesdropping is officially deprecated in favour of BecomeMonitor.
  See the release notes for spec version 0.31 (in dbus 1.11.14).
  • [Unix] Flag files in /var/run/console/${username} are deprecated.
  See the release notes for 1.11.18.
  New APIs:
  • &lt;allow&gt; and &lt;deny&gt; rules in dbus-daemon configuration can now
  include send_broadcast="true", send_broadcast="false",
  max_unix_fds="N", min_unix_fds="N" (for some integer N).
  See the release notes for 1.11.18.
  • dbus_try_get_local_machine_id() is like
  dbus_get_local_machine_id(), but returns a DBusError.
  • New APIs around DBusMessageIter to simplify cleanup.
  See the release notes for 1.11.16.
  • The message bus daemon now implements the standard Introspectable,
  Peer and Properties interfaces. See the release notes for
  dbus 1.11.14 and spec version 0.31.
  • DTDs for introspection XML and bus configuration are installed.
  • [Unix] A new unix:dir=… address family resembles unix:tmpdir=… but
  never uses Linux abstract sockets, which is advantageous for
  containers. On non-Linux it is equivalent to unix:tmpdir=….
  See the release notes for dbus 1.11.14 and spec version 0.31.
  • [Unix] New option "dbus-launch --exit-with-x11".
  • [Unix] Session managers can create transient .service files in
  $XDG_RUNTIME_DIR/dbus-1/services. See the release notes for 1.11.12.
  • [Unix] A sysusers.d snippet can create the messagebus user on-demand.
  Miscellaneous behaviour changes:
  • [Unix] The session bus now logs to syslog if it was started by
  dbus-launch.
  • [Unix] Internal warnings are logged to syslog if configured.
  • [Unix] Exceeding an anti-DoS limit is logged to syslog if configured,
  or to stderr.
- Enabled "make check test suite"
- Patches removed, fixed upstream
  * fix-upstream-drop-install-sections-from-user-services.patch
  * fix-upstream-increase-backlog.patch
  * fix-upstream-timeout-reset-1.patch
  * fix-upstream-timeout-reset-2.patch</changelog>
  <changelog author="sflees@suse.de" date="1511352000">- use %{_libexecdir}/dbus-1 as libexecdir</changelog>
  <changelog author="sflees@suse.de" date="1511438400">- Fix dbus-daemon-launch-helper to use proper ref to libexecdir</changelog>
  <changelog author="jengelh@inai.de" date="1512907200">- Do not hide errors during useradd.</changelog>
  <changelog author="sflees@suse.de" date="1512993600">- Swap a missed libdir to libexecdir</changelog>
  <changelog author="dimstar@opensuse.org" date="1520510400">- Don't spit out a warning if /usr/bin/dbus-daemon does not exist
  when we run the pre-script.</changelog>
  <changelog author="eich@suse.com" date="1542715200">- Avoid ugly error message from %pre(install) script when installing
  for the first time.</changelog>
  <changelog author="jengelh@inai.de" date="1545220800">- Avoid bashisms in scriptlets.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="alarrosa@suse.com" date="1547553600">- Make libdbus-1-3 own the %{_datadir}/dbus-1/system.d directory</changelog>
  <changelog author="sflees@suse.de" date="1560427200">- Fix CVE-2019-12749 Authentication bypass (CVE-2019-12749 bsc#1137832)
  * added fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1624622400">- Fix CVE-2020-35512 - shared UID's caused issues (CVE-2020-35512 bsc#1187105)
  * fix-upstream-userdb-constpointer.patch
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1626091200">- Fix CVE-2020-12049 truncated messages lead to resource exhaustion
  (CVE-2020-12049, bsc#1172505)
  * fix-upstream-CVE-2020-12049.patch
- Rebased fix-CVE-2019-12749.patch</changelog>
  <changelog author="sflees@suse.de" date="1626350400">- Add missing patch for CVE-2020-12049
  * fix-upstream-CVE-2020-12049_2.patch</changelog>
  <changelog author="dcermak@suse.com" date="1641384000">- Remove pointless %%post scriptlet leveraging non-existent systemd env
  variables
  FIRST_ARG has been used in our systemd macros, but this has now been gone for
  years. Thus the true branch of the if has never been executed for years and is
  only causing warnings when installing dbus.</changelog>
  <changelog author="sflees@suse.de" date="1665662400">- Fix a potential crash that could be triggered by an invalid signature.
  (CVE-2022-42010, bsc#1204111)
  * fix-upstream-CVE-2022-42010.patch
- Fix an out of bounds read caused by a fixed length array (CVE-2022-42011,
  bsc#1204112)
  * fix-upstream-CVE-2022-42011.patch
- A message in non-native endianness with out-of-band Unix file descriptors
  would cause a use-after-free and possible memory corruption CVE-2022-42012,
  bsc#1204113)
  * fix-upstream-CVE-2022-42012.patch
- Disable asserts (bsc#1087072)
- Refreshed patches
  * fix-upstream-CVE-2020-35512.patch</changelog>
  <changelog author="sflees@suse.de" date="1687176000">- Sometimes unprivileged users were able to crash dbus-daemon
  (CVE-2023-34969, bsc#1212126)
  * fix-upstream-CVE-2023-34969.patch</changelog>
</package>
<package pkgid="706c306aa278b75f1d24c0b0df18adf66482ac950c4159f198407e33b73bb29c" name="libdbusmenu-glib4" arch="aarch64">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="5fcca3c49b677ca7839d3bfef174c5f2dc0153e13f9cacf9fa8be9314dfa84d9" name="libdbusmenu-glib4" arch="s390x">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="6e8b09c2c9c914eb8e26e61c9fdc9434830e17a01d0e713fc6ff4dca30e2dad8" name="libdbusmenu-glib4" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="2ed72c78fc5f77ae28be0d481b7da4098caf6bed184974fc9f7ea08834ca9ad4" name="libdbusmenu-gtk2" arch="src">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Init libdbusmenu package</changelog>
  <changelog author="cfarrell@suse.com" date="1394452800">- license update: GPL-3.0 and (LGPL-2.1 or LGPL-3.0)
  Interaction is not aggregation (^and^) but rather option (^or^). Also,
  the GPL-3.0 components are in the separate tools/ subdirectory</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="29f4861c1dc9be4ba13bf4510f3f18538a9586ee8880dbf8ca739eff632de490" name="libdbusmenu-gtk3" arch="src">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Init libdbusmenu package</changelog>
  <changelog author="cfarrell@suse.com" date="1394452800">- license update: GPL-3.0 and (LGPL-2.1 or LGPL-3.0)
  Interaction is not aggregation (^and^) but rather option (^or^). Also,
  the GPL-3.0 components are in the separate tools/ subdirectory</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="640ebe3dbb429c5e2d243d8d0f654482233d0f518b3e11d9d4be29864d577df6" name="libdbusmenu-gtk3-4" arch="aarch64">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="2cc20bf0d58158d10778b8a0bdae67028a0fa1eabfab272fe6f21353ea5a94d2" name="libdbusmenu-gtk3-4" arch="s390x">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="4a4c92cab4c841ff2ce53e5813c0fdfa16a7b305131d77568818d3dc4648088d" name="libdbusmenu-gtk3-4" arch="x86_64">
  <version epoch="0" ver="16.04.0" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.3+14.10.20140610
  + No changelog available</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.3+bzr20150410 (changes since 12.10.3+bzr20140610):
  * Use the configure-generated libtool script instead of
    /usr/bin/libtool, which might not match what we have.
  * Use gi's typelibdir pkgconfig variable and install into this
    directory, now that gi supports multiarch.
  * Parser: don't override the label for stock items if a custom
    one is provided.
- Minor spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1457092800">- Update to 12.10.3+bzr20160223 (changes since 12.10.3+bzr20150410):
  * Disable test-json-instruction, hangs on builds (lp#1429291).
  * gtk: Look for GtkImages on regular GtkMenuItems too (lp#1549021).</changelog>
  <changelog author="dimstar@opensuse.org" date="1473336000">- Use proper libdbusmenu 16.04.0 tarball directly from launchpad:
  + The old tarball's configure.ac happened to still use an old
    version, causing the .pc file to advertise insufficient
    capabilities.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565697600">- Drop superfluous hard pkgconfig(gtk+-2.0) Requires from
  libdebusmenu-glib-devel sub-package.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574078400">- Drop dependency on deprecated gnome-common, just run autoreconf
- Do not include unused tree_index.sgml, fix build with gtk-doc &gt;= 1.32,
  see https://gitlab.gnome.org/GNOME/gtk-doc/issues/103
  * add 0001-Fix-build-with-gtk-doc-1.32-due-to-non-existing-tree.patch
- Fix missing accelerators, add
  0002-genericmenuitem-Make-accelerator-text-appear-again.patch
- Split Gtk2 and Gtk3 build - glib, tools and doc subpackage are created
  from the Gtk2 flavor.
  * Fix building with disabled tests, add 0003-Fix-HAVE_VALGRIND-AM_CONDITIONAL.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1574164800">- Work around OBS idiosyncrasies regarding packages name.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1576065600">- Disable testtools on %arm since Valgrind is broken on armv6/7 atm</changelog>
  <changelog author="dimstar@opensuse.org" date="1584964800">- Require the tyeplib packages from the -devel packages: typelibs
  are shared libraries and consumers of the -devel package have a
  right to assume the libraries are present.</changelog>
</package>
<package pkgid="4e8c657fa65f2d967c4662cd0ca9245c0f2c3a7240b3a3cfea6be3ad05f3e7fc" name="libdevmapper-event1_03" arch="aarch64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="1de8f5cec6331c7863e8fc5f6a9746bddc0dbcd0e92225e68f46a7ee8b1fc715" name="libdevmapper-event1_03" arch="s390x">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="18a3358a83365f1371455aa00c663b11eecfb21a5fd3c75a5a4439e49a108faf" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="93012ec3fa4f0caace8d8a7d760e9b541db65530477f97590ebbb802fc566f05" name="libdevmapper-event1_03" arch="aarch64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="27f18ef2a15b134f157391509ad67b20600c74f2eb8f4dd60a5ad32048852f98" name="libdevmapper-event1_03" arch="s390x">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="5389cfad1e4a999927fc399efcd43029a272a10257e070a5be5495688ba01fde" name="libdevmapper-event1_03" arch="x86_64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="1b3b56ed961b38be886ac7546c9cc5dbc12719d17b8dcb86bc62736c6bfbc9b8" name="libdevmapper1_03" arch="aarch64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="6510929a112eb162fdc186d3cdd0672fddd4297377757f20f2cc9c0b2bb0e8a8" name="libdevmapper1_03" arch="s390x">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="05dddbb8a0c3621b17a027ba2d873e99943bd21ba66dac28f4bdb7c2d1748417" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="2c511e9da8fff2c7c5a9f2867992b3f84eeb88fcfa00e60facd8f62ddd9c6e0b" name="libdevmapper1_03" arch="aarch64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="79d9a71689d549194303273ba8fd683205a0c153bb8f0e604eb16f9fe76fcddb" name="libdevmapper1_03" arch="s390x">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="74dd716410dde78233ca1b8a04978c75e318502e7bbee98aa31b25f0da9fec0e" name="libdevmapper1_03" arch="x86_64">
  <version epoch="0" ver="2.03.05_1.02.163" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="30662160ced050a02b0b8c10efaee7eb01b757f7ce1551ffd9a4c0038bddb0d5" name="libeconf" arch="src">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="e654a112184913261664490d7680499062916ae1789ae220c83e4421decade3f" name="libeconf0" arch="aarch64">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="66220754f9f0aeee71461bc89816488af2562458de36d35ae2eead0f8534128f" name="libeconf0" arch="s390x">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="f740e03a398e1a5684f32e385c61748d73e3f5e0c80627f9b24f3decf10d06cf" name="libeconf0" arch="x86_64">
  <version epoch="0" ver="0.5.2" rel="150400.3.6.1"/>
  <changelog author="rbrown@suse.com" date="1594382400">- Update to version 0.3.8+git20200710.5126fff:
  * Add CMake build scripts, remove autotools support
  * Move C++ ABI compatibility section</changelog>
  <changelog author="lnussel@suse.de" date="1603368000">- explicitly BuildRequire: pkgconfig for /usr/lib/rpm/pkgconfigdeps.sh
  On TW it's pulled in implicitly by libxcrypt-devel which is not the
  case on 15.2</changelog>
  <changelog author="schubi@suse.com" date="1617883200">- Update to version 0.4.0+git20210408.6d33e5e:
  * Man pages libeconf.3 and econftool.8.
  * Handling multiline strings.
  * Added libeconf_ext which returns more information like
    line_nr, comments, path of the configuration file,...
  * Econftool, an command line interface for handling configuration
    files.
  * Generating HTML API documentation with doxygen.
  * Improving error handling and semantic file check.
  * Joining entries with the same key to one single entry if
    env variable ECONF_JOIN_SAME_ENTRIES has been set.</changelog>
  <changelog author="schubi@suse.com" date="1618228800">- Update to version 0.4.0+git20210412.1513a26:
  * Added econftool cat option (#146)
  * new API call: econf_readDirsHistory (showing ALL locations)
  * new API call: econf_getPath (absolute path of the configuration file)</changelog>
  <changelog author="schubi@suse.com" date="1618315200">- Update to version 0.4.0+git20210413.fdb8025:
  * Installing man pages via meson. (#147)</changelog>
  <changelog author="schubi@suse.com" date="1618488000">- Removed doxygen from build requires.</changelog>
  <changelog author="schubi@suse.com" date="1625659200">- Update to version 0.4.0+git20210707.537a8a:
  * Fixed resource leaks found by Iker Pedrosa.</changelog>
  <changelog author="Stefan Schubert schubi@suse.com" date="1625745600">- Update to version 0.4.0+git20210708.6918ea1:
  * Fixed covscan FORWARD_NULL_issues warnings</changelog>
  <changelog author="schubi@localhost" date="1625832000">- Update to version 0.4.1+git20210709.cf671f2:
  * CMake fixes regarding installation of econftool and man pages.</changelog>
  <changelog author="schubi@suse.com" date="1636632000">- Update to version libeconf-0.4.2+git20211111.c7a2c52:
  * CMake fixes regarding document installation.
  * Fixed different issues while writing string values to file.
  * Writing comments to file too.
  * Fixed memory leaks.
  * Fixed crash while merging values.</changelog>
  <changelog author="schubi@suse.com" date="1641297600">- Update to version 0.4.2+git20220104.5dfd69d:
  * Reading numbers with different bases (e.g. oktal) (bsc#1193632) (#157)</changelog>
  <changelog author="schubi@suse.com" date="1641297601">- Update to version 0.4.4+git20220104.962774f:
  * Fixed i586 build (#158)</changelog>
  <changelog author="schubi@suse.com" date="1649246400">- Update to version 0.4.5+git20220406.c9658f2:
  * econftool:
  * * New call "syntax" for checking the configuration files only.
    Returns an error string with line number if an error occurs.
  * * New options "--comment" and "--delimeters"
  * * Parsing one file only if needed.</changelog>
  <changelog author="schubi@suse.com" date="1651060800">- Update to version 0.4.6+git20220427.3016f4e:
  * econftool:
  * * Parsing error: Reporting file and line nr.
  * * --delimeters=spaces Taking all kind of spaces for delimiter
  * libeconf:
    Fixed bsc#1198165: Parsing files correctly which have space characters
    AND none space characters as delimiters.</changelog>
  <changelog author="schubi@suse.com" date="1668427200">- Update to version 0.4.8+git20221114.7ff7704:
  * Parsing files which are containing keys only (#170)
    All delimiters are allowed now : "", " =", " ", "=". But the
    user should use "" in order to be distinct.
  * /usr/etc/shells.d/&lt;file_name&gt; will not be parsed if
    /etc/shells.d/&lt;file_name&gt; is defined too.
  * Lto build fixed (#168)
  * New calls: econf_comment_tag, econf_delimiter_tag, econf_set_comment_tag,
    econf_set_delimiter_tag
  * Checking UID,GroupID, permissions,... of the parsed files (#165)
    New calls: econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks
  * Ignoring Group without brackets; Do not hold brackets in the internal data structure. (#164)
  * Error handling improved for nums and booleans (#163)</changelog>
  <changelog author="schubi@suse.com" date="1669204800">- Update to version 0.4.9:
  * libeconf.h: added missing sys/types.h header (#171)
  * new API calls: econf_readFileWithCallback,
    econf_readDirsWithCallback, econf_readDirsHistoryWithCallback (#172)
  * Checking NULL comment parameter in the parsing functions.</changelog>
  <changelog author="schubi@suse.com" date="1669982400">- Update to version 0.5.0:
  * API calls econf_read*WithCallback supporting a general (void *)
    argument for user defined data with which the callback function is
    called.
  * Tagged following functions deprecated:
    econf_requireOwner, econf_requireGroup, econf_requirePermissions,
    econf_followSymlinks, econf_reset_security_settings
    Use one of the econf_read*WithCallback functions instead.</changelog>
  <changelog author="schubi@suse.com" date="1674129600">- Update to version 0.5.1:
  * Reading files in /usr/_vendor_/_example_._suffix_.d/* regardless
    there is a /etc/_example_._suffix_ file. (#175)</changelog>
  <changelog author="schubi@suse.com" date="1679659200">- Update to version 0.5.2:
  * Fixed build for aarch64 and gcc13.
  * Making the output verbose when a test fails.
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function.
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function.
  * Added new feature: econf_set_conf_dirs (const char **dir_postfix_list)
    Sets a list of directory structures (with order) which describes
    the directories in which the files have to be parsed.
    E.G. with the given list: {"/conf.d/", ".d/", "/", NULL} files in following
    directories will be parsed:
    "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/conf.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;.d/"
    "&lt;default_dirs&gt;/&lt;project_name&gt;/"
    The entry "&lt;default_dirs&gt;/&lt;project_name&gt;.&lt;suffix&gt;.d/" will be added
    automatically.
  * General code cleanup.</changelog>
  <changelog author="schubi@suse.com" date="1694001600">- Additional info for version 0.5.2:
  * Fixed a stack-buffer-overflow vulnerability in "econf_writeFile"
    function. (CVE-2023-30078, CVE-2023-32181, bsc#1211078)
  * Fixed a stack-buffer-overflow vulnerability in "read_file"
    function. (CVE-2023-30079, CVE-2023-22652, bsc#1211078)</changelog>
</package>
<package pkgid="5e0628842724620ae49ecd299ea3189855de1ca6acd76dd694db0239149f8410" name="libefa1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="4f69611bbbb93363bb2bb9d995ece1fb46dcff64c309f440f1908dfa41089733" name="libefa1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="1e4fd9de29100d721cdb9a24e767cfdf2aa49b3b34592e5d792920c387bd2012" name="libefa1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="68a683eff9680126a2e3086164c63f285befee53d5a1a09b2d883bec51f54eb8" name="libekmfweb1" arch="s390x">
  <version epoch="0" ver="2.19.0" rel="150400.7.21.1"/>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
</package>
<package pkgid="ae0fe608ab7515c93b820011417ccf1c5df853d87da5674ea11810a9e96df980" name="libekmfweb1" arch="s390x">
  <version epoch="0" ver="2.19.0" rel="150400.7.24.1"/>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="tabraham@suse.com" date="1696248000">- Applied patch (bsc#1205528)
  - Fixes error 'zgetdump: Trying to seek past file end "/dev/crash"'
  * s390-tools-sles15sp4-zdump-fix-dev-mem-reading.patch</changelog>
</package>
<package pkgid="870037caf635d2019aad2fb7e675ba454d060df63b617d83b247c7146243b007" name="libexpat1" arch="aarch64">
  <version epoch="0" ver="2.4.4" rel="150400.3.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Version update to 2.2.7 (CVE-2018-20843, bsc#1139937)
  * Security fixes:
  - CVE-2018-20843 - Fix extraction of namespace prefixes from
    XML names; XML names with multiple colons could end up in
    the wrong namespace, and take a high amount of RAM and CPU
    resources while processing, opening the door to use for
    denial-of-service attacks
  * Other changes:
  - Autotools/CMake: Utilize -fvisibility=hidden to stop
    exporting non-API symbols
  - Autotools: Add --without-examples and --without-tests
  - Autotools: Modernize configure.ac
  - Autotools: Fix check for -fvisibility=hidden for Clang
  - Autotools: Fix compilation for lack of docbook2x-man
  - CMake: Make libdir of pkgconfig expat.pc support multilib
  - CMake: Build man page in PROJECT_BINARY_DIR not _SOURCE_DIR
  - Remove fallback to bcopy, assume that memmove(3) exists
- Removed expat-2.2.6-fix-make-clean.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
</package>
<package pkgid="8ab613a433bed504a7b7b774f9c202658229a09f200f86cbd85a70d560cd95ca" name="libexpat1" arch="s390x">
  <version epoch="0" ver="2.4.4" rel="150400.3.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Version update to 2.2.7 (CVE-2018-20843, bsc#1139937)
  * Security fixes:
  - CVE-2018-20843 - Fix extraction of namespace prefixes from
    XML names; XML names with multiple colons could end up in
    the wrong namespace, and take a high amount of RAM and CPU
    resources while processing, opening the door to use for
    denial-of-service attacks
  * Other changes:
  - Autotools/CMake: Utilize -fvisibility=hidden to stop
    exporting non-API symbols
  - Autotools: Add --without-examples and --without-tests
  - Autotools: Modernize configure.ac
  - Autotools: Fix check for -fvisibility=hidden for Clang
  - Autotools: Fix compilation for lack of docbook2x-man
  - CMake: Make libdir of pkgconfig expat.pc support multilib
  - CMake: Build man page in PROJECT_BINARY_DIR not _SOURCE_DIR
  - Remove fallback to bcopy, assume that memmove(3) exists
- Removed expat-2.2.6-fix-make-clean.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
</package>
<package pkgid="ed3e9801533256baeee3ec2cd60619c3cf423f87834a4d7acbd47a3b32d3671d" name="libexpat1" arch="x86_64">
  <version epoch="0" ver="2.4.4" rel="150400.3.17.1"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1562068800">- Version update to 2.2.7 (CVE-2018-20843, bsc#1139937)
  * Security fixes:
  - CVE-2018-20843 - Fix extraction of namespace prefixes from
    XML names; XML names with multiple colons could end up in
    the wrong namespace, and take a high amount of RAM and CPU
    resources while processing, opening the door to use for
    denial-of-service attacks
  * Other changes:
  - Autotools/CMake: Utilize -fvisibility=hidden to stop
    exporting non-API symbols
  - Autotools: Add --without-examples and --without-tests
  - Autotools: Modernize configure.ac
  - Autotools: Fix check for -fvisibility=hidden for Clang
  - Autotools: Fix compilation for lack of docbook2x-man
  - CMake: Make libdir of pkgconfig expat.pc support multilib
  - CMake: Build man page in PROJECT_BINARY_DIR not _SOURCE_DIR
  - Remove fallback to bcopy, assume that memmove(3) exists
- Removed expat-2.2.6-fix-make-clean.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1567598400">- Security fix (CVE-2019-15903, bsc#1149429)
  * Crafted XML input results in heap-based buffer over-read by fooling
    the parser into changing from DTD parsing to document parsing
  * Added patches:
  - expat-CVE-2019-15903.patch
  - expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1568635200">- Version update to 2.2.8
  * Security fixes: (CVE-2019-15903, bsc#1149429)
  - CVE-2019-15903 -- Fix heap overflow triggered by XML_GetCurrentLineNumber
    (or XML_GetCurrentColumnNumber), and deny internal entities closing the doctype;
  * Bug fixes:
  - Fix cases where XML_StopParser did not have any effect
    when called from inside of an end element handler
  - xmlwf: Fix exit code for operation without "-d DIRECTORY";
    previously, only "-d DIRECTORY" would give you a proper exit code:
    Now both cases return exit code 2.
  * Other changes:
  - examples: Improve elements.c
  - Autotools: Add argument --enable-xml-attr-info
  - Autotools: Add arguments --with-getrandom --without-getrandom --with-sys-getrandom --without-sys-getrandom
  - Autotools: Fix linking issues with "./configure LD=clang"
  - Autotools: Fix "make run-xmltest" for out-of-source builds
  - CMake: Pull all options from Expat &lt;=2.2.7 into namespace
  - CMake: Add argument -DEXPAT_ATTR_INFO=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_LARGE_SIZE=(ON|OFF), default OFF
  - CMake: Add argument -DEXPAT_MIN_SIZE=(ON|OFF), default OFF
  - CMake: Add arguments -DEXPAT_WITH_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Add arguments -DEXPAT_WITH_SYS_GETRANDOM=(ON|OFF|AUTO), default AUTO
  - CMake: Install expat_config.h to include directory
  - CMake: Generate and install configuration files for future find_package(expat [..] CONFIG [..])
  - CMake: Now produces a summary of applied configuration
  - CMake: Require C++ compiler only when tests are enabled
  - CMake: Fix compilation for 16bit character types, i.e. ex -DXML_UNICODE=ON (and ex -DXML_UNICODE_WCHAR_T=ON)
  - CMake: Port "make run-xmltest" from GNU Autotools to CMake
  - CMake: Integrate OSS-Fuzz fuzzers, option -DEXPAT_BUILD_FUZZERS=(ON|OFF), default OFF
- Removed patches fixed in the update:
  * expat-CVE-2019-15903.patch
  * expat-CVE-2019-15903-tests.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1575028800">- Version update to 2.2.9
  * Other changes:
  - examples: Drop executable bits from elements.c
    [#349]  Windows: Change the name of the Windows DLLs from expat*.dll
    to libexpat*.dll once more (regression from 2.2.8, first
    fixed in 1.95.3, issue #61 on SourceForge today,
    was issue #432456 back then); needs a fix due
    case-insensitive file systems on Windows and the fact that
    Perl's XML::Parser::Expat compiles into Expat.dll.
    [#347]  Windows: Only define _CRT_RAND_S if not defined
    Version info bumped from 7:10:6 to 7:11:6</changelog>
  <changelog author="pmonreal@suse.com" date="1601812800">- Update to 2.2.10:
  * Bug fixes:
  - Fix undefined behavior during parsing caused by pointer
    arithmetic with NULL pointers
  - Fix reading uninitialized variable during parsing
  - xmlwf: Add missing check for malloc NULL return
  * Other changes:
  - xmlwf: Document exit codes in xmlwf manpage and exit with code 3
    (rather than code 1) for output errors when used with "-d DIRECTORY"
  - Autotools: Use -Werror while configure tests the compiler for
    supported compile flags to avoid false positives
  - Autotools: Improve handling of user (C|CPP|CXX|LD)FLAGS, e.g.
    ensure that they have the last word over flags added while
    running ./configure
  - CMake: Create libexpatw.{dll,so} and expatw.pc (with emphasis
    on suffix "w") with -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Detect and deny unsupported build combinations
    involving -DEXPAT_CHAR_TYPE=(ushort|wchar_t)
  - CMake: Install pre-compiled shipped xmlwf.1 manpage in case
    of -DEXPAT_BUILD_DOCS=OFF
  - CMake: Fix use of Expat by means of add_subdirectory
  - CMake: Keep expat target name constant at "expat" (i.e. refrain
    from using the target name to control build artifact filenames)
  - CMake: Expose man page compilation as target "xmlwf-manpage"
  - CMake: Introduce option EXPAT_BUILD_PKGCONFIG to control
    generation of pkg-config file "expat.pc"
  - CMake: Add minimalistic support for building binary packages
    with CMake target "package"; based on CPack
  - CMake: Add option -DEXPAT_OSSFUZZ_BUILD=(ON|OFF) with default
    OFF to build fuzzer code against OSS-Fuzz and related
    environment variable LIB_FUZZING_ENGINE
  - Fix testsuite for -DEXPAT_DTD=OFF and -DEXPAT_NS=OFF
  - Address compiler warnings
  - Address pngcheck warnings with doc/*.png images: Version info
    bumped from 7:11:6 to 7:12:6</changelog>
  <changelog author="dmueller@suse.com" date="1617710400">- update to 2.3.0:
  * When calling XML_ParseBuffer without a prior successful call to
    XML_GetBuffer as a user, no longer trigger undefined behavior
    (by adding an integer to a NULL pointer) but rather return
    XML_STATUS_ERROR and set the error code to (new) code
    XML_ERROR_NO_BUFFER. Found by UBSan (UndefinedBehaviorSanitizer)
    of Clang 11 (but not Clang 9).
  * xmlwf: Exit status 2 was used for both:
  - malformed input files (documented) and
  - invalid command-line arguments (undocumented).
    case of invalid command-line arguments now
    has its own exit status 4, resolving the ambiguity.
  * Other changes</changelog>
  <changelog author="dimstar@opensuse.org" date="1618315200">- Do not BuildRequire cmake: expat is part of the distro bootstrap
  cycle and any additional dependency makes the ring larger. In
  this case here, cmake was even only used to own a directory.</changelog>
  <changelog author="pmonreal@suse.com" date="1621857600">- Update to 2.4.0: [CVE-2013-0340 "Billion Laughs"]
  * Security fixes:
  - CVE-2013-0340/CWE-776 -- Protect against billion laughs attacks
    (denial-of-service; flavors targeting CPU time or RAM or both,
    leveraging general entities or parameter entities or both)
    by tracking and limiting the input amplification factor
    (&lt;amplification&gt; := (&lt;direct&gt; + &lt;indirect&gt;) / &lt;direct&gt;).
    By conservative default, amplification up to a factor of 100.0
    is tolerated and rejection only starts after 8 MiB of output bytes
    (=&lt;direct&gt; + &lt;indirect&gt;) have been processed.
    The fix adds the following to the API:
  - A new error code XML_ERROR_AMPLIFICATION_LIMIT_BREACH to
    signals this specific condition.
  - Two new API functions ..
  - XML_SetBillionLaughsAttackProtectionMaximumAmplification and
  - XML_SetBillionLaughsAttackProtectionActivationThreshold
    .. to further tighten billion laughs protection parameters
    when desired.  Please see file "doc/reference.html" for details.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  - Two new XML_FEATURE_* constants ..
  - that can be queried using the XML_GetFeatureList function, and
  - that are shown in "xmlwf -v" output.
  - Two new environment variable switches ..
  - EXPAT_ACCOUNTING_DEBUG=(0|1|2|3) and
  - EXPAT_ENTITY_DEBUG=(0|1)
    .. for runtime debugging of accounting and entity processing.
    Specific behavior of these values may change in the future.
  - Two new command line arguments "-a FACTOR" and "-b BYTES"
    for xmlwf to further tighten billion laughs protection
    parameters when desired.
    If you ever need to increase the defaults for non-attack XML
    payload, please file a bug report with libexpat.
  * Bug fixes:
  - For (non-default) compilation with -DEXPAT_MIN_SIZE=ON (CMake)
    or CPPFLAGS=-DXML_MIN_SIZE (GNU Autotools): Fix segfault
    for UTF-16 payloads containing CDATA sections.
  - Autotools: Fix generated CMake files for non-64bit and
    non-Linux platforms (e.g. macOS and MinGW in particular)
    that were introduced with release 2.3.0
  * Other changes:
  - xmlwf: Improve help output and the xmlwf man page
  - xmlwf: Improve maintainability through some refactoring
  - xmlwf: Fix man page DocBook validity
  - CMake: Support absolute paths for both CMAKE_INSTALL_LIBDIR
    and CMAKE_INSTALL_INCLUDEDIR
  - CMake: Add support for standard variable BUILD_SHARED_LIBS
  - Unexpose symbol _INTERNAL_trim_to_complete_utf8_characters
  - Resolve macro HAVE_EXPAT_CONFIG_H
  - Delete unused legacy helper file "conftools/PrintPath"
  - doc/reference.html: Fix XHTML validity
  - doc/reference.html: Replace the 90s look by OK.css
  - Version info bumped from 8:0:7 to 9:0:8 due to addition of
    new symbols and error codes; see https://verbump.de/ for
    what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1621857601">- Update to 2.4.1:
  * Bug fixes:
  - Autotools: Fix installed header expat_config.h for multilib
    systems; regression introduced in 2.4.0 by pull request #486
  * Other changes:
  - Version info bumped from 9:0:8 to 9:1:8; see
    https://verbump.de/ for what these numbers do</changelog>
  <changelog author="pmonreal@suse.com" date="1631016000">- Update to 2.4.1 in SLE-15-SP4 [jsc#SLE-21253]
  * Remove expat-CVE-2018-20843.patch upstream</changelog>
  <changelog author="dmueller@suse.com" date="1640606400">- update to 2.4.2:
  * Link againgst libm for function "isnan"
  * Include expat_config.h as early as possible
  * Autotools: Include files with release archives:
  - buildconf.sh
  - fuzz/*.c
  * Autotools: Sync CMake templates
  * docs: Document that function XML_GetBuffer may return NULL
    when asking for a buffer of 0 (zero) bytes size
  * docs: Fix return value docs for both
    XML_SetBillionLaughsAttackProtection* functions
  * Version info bumped from 9:1:8 to 9:2:8</changelog>
  <changelog author="dmueller@suse.com" date="1642420800">- update to 2.4.3 (bsc#1194251, bsc#1194362, bsc#1194474,
    bsc#1194476, bsc#1194477, bsc#1194478, bsc#1194479, bsc#1194480):
  * CVE-2021-45960 -- Fix issues with left shifts by &gt;=29 places
    resulting in
    a) realloc acting as free
    b) realloc allocating too few bytes
    c) undefined behavior
    depending on architecture and precise value
    for XML documents with &gt;=2^27+1 prefixed attributes
    on a single XML tag a la
    "&lt;r xmlns:a='[..]' a:a123='[..]' [..] /&gt;"
    where XML_ParserCreateNS is used to create the parser
    (which needs argument "-n" when running xmlwf).
    Impact is denial of service, or more.
  * CVE-2021-46143 (ZDI-CAN-16157) -- Fix integer overflow
    on variable m_groupSize in function doProlog leading
    to realloc acting as free.
    Impact is denial of service or more.
  * CVE-2022-22822 to CVE-2022-22827 -- Prevent integer overflows
    near memory allocation at multiple places.  Mitre assigned
    a dedicated CVE for each involved internal C function:
  - CVE-2022-22822 for function addBinding
  - CVE-2022-22823 for function build_model
  - CVE-2022-22824 for function defineAttribute
  - CVE-2022-22825 for function lookup
  - CVE-2022-22826 for function nextScaffoldPart
  - CVE-2022-22827 for function storeAtts
    Impact is denial of service or more.</changelog>
  <changelog author="david.anes@suse.com" date="1643630400">- update to 2.4.4 (bsc#1195217, bsc#1195054):
  * Security fixes:
  - CVE-2022-23852 -- Fix signed integer overflow
    (undefined behavior) in function XML_GetBuffer
    that is also called by function XML_Parse internally)
    for when XML_CONTEXT_BYTES is defined to &gt;0 (which is both
    common and default).
    Impact is denial of service or more.
  - CVE-2022-23990 -- Fix unsigned integer overflow in function
    doProlog triggered by large content in element type
    declarations when there is an element declaration handler
    present (from a prior call to XML_SetElementDeclHandler).
    Impact is denial of service or more.
  * Bug fixes:
  - xmlwf: Fix a memory leak on output file opening error
  * Other changes:
  - Version info bumped from 9:3:8 to 9:4:8;
    see https://verbump.de/ for what these numbers do
  * Drop unused file valid-xhtml10.png</changelog>
  <changelog author="david.anes@suse.com" date="1643716800">- Update to latest version 2.4.4 in SLE-15-SP4 [jsc#SLE-21253]</changelog>
  <changelog author="david.anes@suse.com" date="1645444800">- Security fixes:
  * (CVE-2022-25236, bsc#1196025) Expat before 2.4.5 allows
    attackers to insert namespace-separator characters into
    namespace URIs
  - Added expat-CVE-2022-25236.patch
  * (CVE-2022-25235, bsc#1196026) xmltok_impl.c in Expat before
    2.4.5 does not check whether a UTF-8 character is valid in a
    certain context.
  - Added expat-CVE-2022-25235.patch
  * (CVE-2022-25313, bsc#1196168) Stack exhaustion in
    build_model() via uncontrolled recursion
  - Added expat-CVE-2022-25313.patch
  - The fix upstream introduced a regression that was later
    amended in 2.4.6 version
    + Added expat-CVE-2022-25313-fix-regression.patch
  * (CVE-2022-25314, bsc#1196169) Integer overflow in copyString
  - Added expat-CVE-2022-25314.patch
  * (CVE-2022-25315, bsc#1196171) Integer overflow in storeRawNames
  - Added expat-CVE-2022-25315.patch</changelog>
  <changelog author="david.anes@suse.com" date="1646481600">- Security fixes:
  * (CVE-2022-25236, bsc#1196784) [&gt;=2.4.5] Fix to CVE-2022-25236
    breaks biboumi, ClairMeta, jxmlease, libwbxml,
    openleadr-python, rnv, xmltodict
  - Added expat-CVE-2022-25236-relax-fix.patch</changelog>
  <changelog author="david.anes@suse.com" date="1664193600">- Security fix:
  * (CVE-2022-40674, bsc#1203438) use-after-free in the doContent
    function in xmlparse.c
  - Added patch expat-CVE-2022-40674.patch</changelog>
  <changelog author="david.anes@suse.com" date="1666785600">- Security fix:
  * (CVE-2022-43680, bsc#1204708) use-after free caused by overeager
    destruction of a shared DTD in XML_ExternalEntityParserCreate in
    out-of-memory situations
  - Added patch expat-CVE-2022-43680.patch</changelog>
  <changelog author="david.anes@suse.com" date="1708084800">- Security fix:
  * (CVE-2023-52425, bsc#1219559) denial of service (resource
    consumption) caused by processing large tokens.
  - Added patch expat-CVE-2023-52425-1.patch
  - Added patch expat-CVE-2023-52425-2.patch
  - Added patch expat-CVE-2023-52425-backport-parser-changes.patch
  - Added patch expat-CVE-2023-52425-fix-tests.patch</changelog>
  <changelog author="david.anes@suse.com" date="1710763200">- Security fix (boo#1221289, CVE-2024-28757): XML Entity Expansion
  attack when there is isolated use of external parsers.
  * Added expat-CVE-2024-28757.patch</changelog>
</package>
<package pkgid="dce765e2458b71a3f927440bca15c5c1ace834ac7b92970cef1fb3a9a28477ca" name="libext2fs2" arch="aarch64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="7df72acc6351ef9a26f919bef73e1e4f4c8662b0c841a793d9499da8b4f7b31b" name="libext2fs2" arch="s390x">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="315e532c7a06da0b3c9d5f052bc9dcc22f0d963e32da72a2ffb96ece94ae9315" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.46.4" rel="150400.3.6.2"/>
  <changelog author="jack@suse.cz" date="1559304000">- Package e2scrub unit files and separate scrubbing bits into a separate
  subpackage e2fsprogs-scrub</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1563969600">- Fix build with gettext 0.20:
  * Add e2fsprogs-1.45.2-gettext.patch.
  * Exclude in-sources intl/ directory from build.
- Fix install_info_delete usage: It must be called in preun.</changelog>
  <changelog author="jack@suse.cz" date="1565352000">- Update to 1.45.3:
  * Whether or not automatic online scrubbing will be called is now controlled
    in /etc/e2scrub.conf.
  * Fix e2fsck handling of filesystems with large_dir and inline directories
  * Fix e2scrub_all for encrypted LUKS partitions
  * Fix e2scrub_all volume cleanup
  * Regression tests cleanups and improvements
  * Fixed compiler warnings
  * Translation fixes and updates (boo#1170964)</changelog>
  <changelog author="jack@suse.cz" date="1569844800">- Update to 1.45.4:
  * A maliciously corrupted file systems can trigger buffer overruns in the
    quota code used by e2fsck. (Addresses CVE-2019-5094)
  * E2fsck now checks to make sure the casefold flag is only set on
    directories, and only when the casefold feature is enabled
  * E2fsck will not disable the low dtime checks when using a backup superblock
    where the last mount time is zero
  * Scrubbing scripts fixes
  * Update translations</changelog>
  <changelog author="jack@suse.cz" date="1578571200">- Update to 1.45.5:
  * Fix out of bounds write when checking maliciously corrupted filesystem
  * Remove unnecessary sleep in e2scrub
  * Fix spurious emails from e2scrub_all
  * Fix crash in e2fsck when rebuilding very large directories
  * Improve resize2fs minimum fs size estimates when the fs is mounted
  * Fix UBSAN failures when fuzzing filesystem images
  * Fix potential memory leak in read_bitmap() in libext2fs
  * Speedup e2fsck on file systems with a very large number of inodes
  * fuse2fs fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1588420800">- Update to 1.45.6:
  * Debugfs will ignore lines in its command files which start with
    a comment character ("#")
  * Fix a number of potential out of bounds memory accesses caused
    by fuzzed / malicious file systems
  * Fix a spurious complaint from e2fsck when a directory which
    previously had more than 32000 subdirectories has the number
    of subdirectories drops below 32000
  * Fix an ismounted check when an LVM device is renamed while the
    device is mounted
  * Mke2fs -d now correctly sets permission with files where the
    owner permissions are not rwx
  * Improve e2fsck's ability to deal with file systems with very
    large number of directories, such that various data structures
    take more than 2GiB of memory.  Use better structure packing to
    improve the memory efficiency of these data structures.
  * Fix debugfs so it correctly prints inode numbers &gt; 2**31.
  * Filefrag now supports very large files (with &gt; 4 billion
    blocks), as well as block sizes up to 1 GiB.
  * Update and clarify various man pages
  * Reserved the error code EXT2_ET_NO_GDESC (which will be used
    in e2fsprogs v1.46+)
  * Add a thread-safe variant of e2p_feature2string(),
    e2p_feature_to_string() to the libe2p library.
  * Fixed portability problems caused by gcc 10.
  * Synchroniz changes from Android's AOSP e2fsprogs tree
  * Update the Malay translation from the translation project
- add upstream signing key and verify source signature</changelog>
  <changelog author="lnussel@suse.de" date="1603972800">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="kukuk@suse.com" date="1611835200">- Fix usage of info macros on openSUSE, we use file triggers today
- Use file requires for post section</changelog>
  <changelog author="jack@suse.cz" date="1613476800">- Update to 1.46.1:
  * Fix setting extended attributes in libext2fs and debugfs
  * Fix e2fsck to accept large_dir directories greater than 4G
  * Fix fast commit support on big endian architectures
  * Fix mke2fs -d to correctly import a small file stored using inline_data
    feature and which has ACL or extended attribute
  * Various compilation fixes
  * Speedup bitmap loading for large filesystems using multiple threads
  * Speedup mke2fs for bigalloc filesystems
  * E2fsck fixes when rehashing directories
  * Fix e2fsck crashes on maliciously corrupted filesystems
  * Fix e2fsck handling of duplicated case-folded file names
  * Implement hashed directory support in libext2fs
  * Support for fast commit feature
  * Support for combination of casefolding and encryption
  * Support for stable inodes feature
  * Add support for per-inode DAX flag
  * Fix tune2fs to unlock MMP on failure
  * Fix e2fsck buffer overflow when scanning directory blocks
  * Fix resize2fs overflowing block group descriptors with 1k block size
- delete e2fsprogs-1.45.2-gettext.patch - it was merged upstream
- Add autoconf-archive to build requirements
- Fix installation of info files for older distros</changelog>
  <changelog author="jack@suse.cz" date="1613649600">- Remove autoreconf (and resulting dependencies) from the spec file. The
  upstream configure script should be fine.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1615723200">- e2fsprogs 1.46.2:
  * tune2fs -c now takes "random" argument
  * Add support for the FS_NOCOMP_FL flag to chattr and lsattr
  * Fix warnings when resizing small file systems to a super-large
  * Fix the debugfs rdump and ls commands so they will work correctly
    for uid's and gid's =&gt; 65536
  * Fix the debugfs write and symlink commands so they support
    targets which contain a pathname
  * Fix Direct I/O support on block devices where the logical block
    size is greater 1k
  * Fix debugfs's logdump so it works on file systems whose block
    size is greater than 8k
  * Fix a crash when there is error while e2fsck is trying to open
    the file system, and e2fsck calls ext2fs_mmp_stop() before MMP
    has been initialized
  * Improved error checking in the fast commit replay code in e2fsck
  * Fix various compiler and Coverity warnings
  * Update the Spanish translation from the translation project</changelog>
  <changelog author="christophe@krop.fr" date="1622635200">- Fix the %doc files. RELEASE-NOTES is a symlink to
  doc/RelNotes/v%version.</changelog>
  <changelog author="jack@suse.cz" date="1627905600">- Update to 1.46.3:
  * Add -V and -VV options to filefrag
  * Fix fs corruption cause by resize2fs on filesystems with MMP blocks
  * Fast commit portability fixes
  * Fix direct IO support in Unix IO manager
  * Avoid calling EXT2_IOC_[GS]ETFLAGS for block devices
  * Fix mke2fs to not discard blocks beyond end of filesystem
  * Make e2fsck set filetype of '.' and '..' entries
  * Fix QCOW image generation in e2image for very large filesystems
  * Update translations</changelog>
  <changelog author="jsegitz@suse.com" date="1631620800">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_e2scrub@.service.patch
  * harden_e2scrub_all.service.patch
  * harden_e2scrub_fail@.service.patch
  * harden_e2scrub_reap.service.patch</changelog>
  <changelog author="jack@suse.cz" date="1631707200">- Update to 1.46.4:
  * Default to 256-byte inodes for all filesystems, not only larger ones
  * Bigalloc is considered supported now for small cluster sizes
  * E2fsck and e2image fixes for quota feature
  * Fix mke2fs creation of filesystem into non-existent file
- libss-add-newer-libreadline.so.8-to-dlopen-path.patch: libss: add newer
  libreadline.so.8 to dlopen path (bsc#1189453)</changelog>
  <changelog author="jack@suse.cz" date="1633003200">- quota-Add-support-to-version-0-quota-format.patch: quota: Add support to
    version 0 quota format (jsc#SLE-17360)
  quota-Fold-quota_read_all_dquots-into-quota_update_l.patch: quota: Fold
    quota_read_all_dquots() into quota_update_limits() (jsc#SLE-17360)
  quota-Rename-quota_update_limits-to-quota_read_all_d.patch: quota: Rename
    quota_update_limits() to quota_read_all_dquots() (jsc#SLE-17360)
  tune2fs-Fix-conversion-of-quota-files.patch: tune2fs: Fix conversion of quota
    files (jsc#SLE-17360)
  e2fsck-Do-not-trash-user-limits-when-processing-orph.patch: e2fsck: Do not
    trash user limits when processing orphan list (jsc#SLE-17360)
  debugfs-Fix-headers-for-quota-commands.patch: debugfs: Fix headers for quota
    commands (jsc#SLE-17360)
  quota-Drop-dead-code.patch: quota: Drop dead code (jsc#SLE-17360)
- add these not yet released fixes to e2fsprogs package so that SLE15-SP4 ships
  with them</changelog>
  <changelog author="jack@suse.cz" date="1633348800">- Add references from old package:
  Autoreconf removed from the spec file, just without bsc reference
  (bsc#1183791)
  Fix po-remove-unnecessary-buggy-positional-parameter-spe.patch in 1.45.3
  (bsc#1170964)
  Fix e2fsck-clarify-overflow-link-count-error-message.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-update-allocation-info-earlier-in-ext2fs_mkdi.patch in 1.46.0
  (bsc#1160979)
  Fix ext2fs-implement-dir-entry-creation-in-htree-directo.patch in 1.46.0
  (bsc#1160979)
  Fix tests-add-test-to-excercise-indexed-directories-with.patch in 1.46.0
  (bsc#1160979)
  Fix tune2fs-update-dir-checksums-when-clearing-dir_index.patch in 1.46.0
  (bsc#1160979)
  Fix e2fsck-abort-if-there-is-a-corrupted-directory-block.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix e2fsck-don-t-try-to-rehash-a-deleted-directory.patch in 1.45.5
  (bsc#1160571 CVE-2019-5188)
  Fix resize2fs-Make-minimum-size-estimates-more-reliable.patch in 1.45.5
  (bsc#1154295)
  Fix libsupport-add-checks-to-prevent-buffer-overrun-bugs.patch in 1.45.4
  (bsc#1152101 CVE-2019-5094)
  Fix libext2fs-call-fsync-2-to-clear-stale-errors-for-a-n.patch in 1.44.3
  (bsc#1145716)
  Fix e2fsck-check-and-fix-tails-of-all-bitmaps.patch in 1.45.1 (bsc#1128383)
  Fix libext2fs-Fix-fsync-2-detection.patch in 1.44.0 (bsc#1038194)
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1651233600">- libext2fs-add-sanity-check-to-extent-manipulation.patch: libext2fs: add
  sanity check to extent manipulation (bsc#1198446 CVE-2022-1304)</changelog>
  <changelog author="jack@suse.cz" date="1716552000">EA Inode handling fixes:
- ext2fs-avoid-re-reading-inode-multiple-times.patch: ext2fs: avoid re-reading
  inode multiple times (bsc#1223596)
- e2fsck-fix-potential-out-of-bounds-read-in-inc_ea_in.patch: e2fsck: fix
  potential out-of-bounds read in inc_ea_inode_refs() (bsc#1223596)
- e2fsck-add-more-checks-for-ea-inode-consistency.patch: e2fsck: add more
  checks for ea inode consistency (bsc#1223596)
- e2fsck-fix-golden-output-of-several-tests.patch: e2fsck: fix golden output of
  several tests (bsc#1223596)</changelog>
</package>
<package pkgid="a3ec73fc3f4ef27f33581b25333c445259e9a0870e998725d6e810ff6c384c3f" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="2376e584cb5c2d55e2fda099cbb431e6e85cb6e4a2538672bee464ff673cc987" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="6746b29c126d11a5a08622e5d0038aa01a730bc50c98f079d5c0e78667dd1d7a" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="008199a2e43a30103a4f29dfc7e5045f667f900e32c5c8ed371ba1ca6e6a3bef" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="e479a2b0cf06e38d2657f2b4d8851423736deddd13f007156f14f4bed7d1758a" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="b225186ffee2df58b6de1a867d348c2a79d32cd7dcecf49b8aa3f7bb16d15fbe" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="7d2b441091de94b4d37f399b67a65bf422e0deb60d270d0e653de5bbd0e393d1" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="83f7470eb99d79f68d1ef76bfee62b8e44319a3879253f85fbeea4ce83a6d9ce" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="2b20476c1b9d4f2898b84ccf5d3380b41774cfb86cc3a5820e4ddcdc0e9d754e" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="d92f62370d35fd2bb8725b49b3b72c06a27fd8b272f04fa28606799a7fd0919b" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="05a23529a2c2e91d4080a1c8b9d564ab18a06d01c506a6cd29cf8f6af621f8f8" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="fb9d147726de7f180edc56ab78fb7a57f3964854d0802ad18076553937f4fc60" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="b2dcef18e581343f098eb9c20cba5a70450bd92f4c98b005009f055dd6284fbf" name="libfdisk1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="26ae81ef500f1be5c995da1eb62e23dcb9c3b847c6da0b029bc9e5edb00c748e" name="libfdisk1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="6b97332df5596413282494139dfa2e4257266be7fd39a941e6e1e77b8fc414ee" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="39fcd4f0ff1dcc16d07bcfa94fc8657c8745dc1b1b32afbbef1394118acb4c39" name="libfido2-1" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="4d968c470af88d0d46b30ffefe4547857e1864f3f0a691b8033da07b86591c93" name="libfido2-1" arch="s390x">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="e3549cc9533144a279bd5f755a862a4ab4ce7de719ab520e2d24563063f3418f" name="libfido2-1" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="8883d19f48e6c11371b84316c9c075809b2f8510f27d9dd39bc289c6c08334b3" name="libfido2-1" arch="aarch64">
  <version epoch="0" ver="1.13.0" rel="150400.5.6.1"/>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- Use openssl 1.1 still on SLES 15 SP4 to avoid pulling unnecessary
  openssl-3 dependency.  jsc#PED-4521</changelog>
</package>
<package pkgid="2772fcc1edd8ed7104fe710d11b339cbac05efdcb4aea2ecbeacd3ec8bc4f21d" name="libfido2-1" arch="s390x">
  <version epoch="0" ver="1.13.0" rel="150400.5.6.1"/>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- Use openssl 1.1 still on SLES 15 SP4 to avoid pulling unnecessary
  openssl-3 dependency.  jsc#PED-4521</changelog>
</package>
<package pkgid="9e1cde2d8ea4bbc5e2c12296148252c0d16a11431776f982576051a57c321d48" name="libfido2-1" arch="x86_64">
  <version epoch="0" ver="1.13.0" rel="150400.5.6.1"/>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- Use openssl 1.1 still on SLES 15 SP4 to avoid pulling unnecessary
  openssl-3 dependency.  jsc#PED-4521</changelog>
</package>
<package pkgid="78efcf0dd16dd652f30d7585eac241f4c0dc40aa84254ccf098483b7e258f0ee" name="libfido2" arch="src">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="ec71082493d7850dec15a8f716217c29baeef3483b0e594b70d357204c855286" name="libfido2" arch="src">
  <version epoch="0" ver="1.13.0" rel="150400.5.6.1"/>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- Use openssl 1.1 still on SLES 15 SP4 to avoid pulling unnecessary
  openssl-3 dependency.  jsc#PED-4521</changelog>
</package>
<package pkgid="5192e74aafc79fb2161d930446952a8338a4641f0f5def153d503d6f8a1a39a2" name="libfido2-udev" arch="noarch">
  <version epoch="0" ver="1.13.0" rel="150400.5.3.1"/>
  <changelog author="kbabioch@suse.de" date="1559044800">- Version 1.1.0 (released 2019-05-08)
  * EdDSA (Ed25519) support.
  * fido_dev_make_cred: fix order of CBOR map keys.
  * fido_dev_get_assert: plug memory leak when operating on U2F devices.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
</package>
<package pkgid="bf5b304b45732d24d6ab8d5bfb45fa508200a4c00df0f45b8cb78870ddf8df5c" name="libfido2-udev" arch="noarch">
  <version epoch="0" ver="1.13.0" rel="150400.5.6.1"/>
  <changelog author="simmphonie@opensuse.org" date="1568635200">- Version 1.2.0 (released 2019-07-26)
  * Credential management support.
  * New API reflecting FIDO’s 3-state booleans (true, false, absent):
  - fido_assert_set_up;
  - fido_assert_set_uv;
  - fido_cred_set_rk;
  - fido_cred_set_uv.
  * Command-line tools for Windows.
  * Documentation and reliability fixes.
  * fido_{assert,cred}_set_options() are now marked as deprecated.</changelog>
  <changelog author="kbabioch@suse.de" date="1575806400">- Version 1.3.0 (2019-11-28)
  * assert/hmac: encode public key as per spec, gh#60.
  * fido2-cred: fix creation of resident keys.
  * fido2-{assert,cred}: support for hmac-secret extension.
  * hid_osx: detect device removal, gh#56.
  * hid_osx: fix device detection in MacOS Catalina.
  * New API calls:
  - fido_assert_set_authdata_raw;
  - fido_assert_sigcount;
  - fido_cred_set_authdata_raw;
  - fido_dev_cancel.
  * Middleware library for use by OpenSSH.
  * Support for biometric enrollment.
  * Support for OpenBSD.
  * Support for self-attestation.</changelog>
  <changelog author="mrueckert@suse.de" date="1583064000">- Version 1.3.1
  - fix zero-ing of le1 and le2 when talking to a U2F device.
  - dropping sk-libfido2 middleware, please find it in the openssh
    tree.</changelog>
  <changelog author="idonmez@suse.com" date="1590408000">- Update to version 1.4.0
  * hid_hidapi: hidapi backend; enable with -DUSE_HIDAPI=1.
  * Fall back to U2F if the key claims to, but does not support FIDO2.
  * FIDO2 credential protection (credprot) support.
  * New API calls:
    + fido_cbor_info_fwversion;
    + fido_cred_prot;
    + fido_cred_set_prot;
    + fido_dev_set_transport_functions;
    + fido_set_log_handler.
  * Fixed EdDSA and RSA self-attestation.</changelog>
  <changelog author="idonmez@suse.com" date="1593691200">- Don't build with hidapi support to fix issues with Yubikey 5Ci
  https://github.com/Yubico/libfido2/issues/190</changelog>
  <changelog author="idonmez@suse.com" date="1593777600">- Create a udev subpackage and ship the udev rule</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1595592000">- Cleanup udev rules, trying to use the Debian specific plugdev
  group fills up the journal.
- Make the udev rules package noarch, correct Summary</changelog>
  <changelog author="idonmez@suse.com" date="1598961600">- Update to version 1.5.0
  * hid_linux: return FIDO_OK if no devices are found.
  * hid_osx:
    + repair communication with U2F tokens, gh#166;
    + reliability fixes.
  * fido2-{assert,cred}: new options to explicitly toggle UP, UV.
  * Support for configurable report lengths.
  * New API calls:
    + fido_cbor_info_maxcredcntlst
    + fido_cbor_info_maxcredidlen
    + fido_cred_aaguid_len
    + fido_cred_aaguid_ptr
    + fido_dev_get_touch_begin
    + fido_dev_get_touch_status
  * Use COSE_ECDH_ES256 with CTAP_CBOR_CLIENT_PIN; gh#154.
  * Allow CTAP messages up to 2048 bytes; gh#171.
  * Ensure we only list USB devices by default.</changelog>
  <changelog author="idonmez@suse.com" date="1599652800">- Add 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch from upstream
  to fix 32bit compilation issues.</changelog>
  <changelog author="hpj@suse.com" date="1605614400">- Add Conflicts: to supersede version 1.0.0. This is needed for
  a clean upgrade path on SLE.</changelog>
  <changelog author="mpluskal@suse.com" date="1611144000">- Update to version 1.6.0:
  * Fix OpenSSL 1.0 and Cygwin builds.
  * hid_linux: fix build on 32-bit systems.
  * hid_osx: allow reads from spawned threads.
  * Documentation and reliability fixes.
  * New API calls:
    + fido_cred_authdata_raw_len;
    + fido_cred_authdata_raw_ptr;
    + fido_cred_sigcount;
    + fido_dev_get_uv_retry_count;
    + fido_dev_supports_credman.
  * Hardened Windows build.
  * Native FreeBSD and NetBSD support.
  * Use CTAP2 canonical CBOR when combining hmac-secret and credProtect.
- Drop 7a17a4e9127fb6df6278f19396760e7d60a5862c.patch
- Do not build examples as their build fails</changelog>
  <changelog author="rpm@fthiessen.de" date="1618660800">- Update to version 1.7.0:
  * hid_win: detect devices with vendor or product IDs &gt; 0x7fff
  * Support for FIDO 2.1 authenticator configuration.
  * Support for FIDO 2.1 UV token permissions.
  * Support for FIDO 2.1 "credBlobs" and "largeBlobs" extensions.
  * New API calls
  * New fido_init flag to disable fido_dev_open’s U2F fallback
  * Experimental NFC support on Linux.
- Enabled hidapi again, issues related to hidapi are fixed upstream
  * Added fix-cmake-linking.patch to fix linking</changelog>
  <changelog author="paolo.perego@suse.com" date="1631620800">- Update to version 1.8.0:
  * Dropped 'Requires.private' entry from pkg-config file.
  * Better support for FIDO 2.1 authenticators.
  * Support for Windows's native webauthn API.
  * Support for attestation format 'none'.
  * New API calls:
  - fido_assert_set_clientdata;
  - fido_cbor_info_algorithm_cose;
  - fido_cbor_info_algorithm_count;
  - fido_cbor_info_algorithm_type;
  - fido_cbor_info_transports_len;
  - fido_cbor_info_transports_ptr;
  - fido_cred_set_clientdata;
  - fido_cred_set_id;
  - fido_credman_set_dev_rk;
  - fido_dev_is_winhello.
  * fido2-token: new -Sc option to update a resident credential.
  * Documentation and reliability fixes.
  * HID access serialisation on Linux.
- disable fix-cmake-linking.patch, not needed currently</changelog>
  <changelog author="paolo.perego@suse.com" date="1632225600">- Removed fix-cmake-linking.patch because no longer needed</changelog>
  <changelog author="simmphonie@opensuse.org" date="1635768000">- Version 1.9.0 (2021-10-27)
  * Enabled NFC support on Linux.
  * Added OpenSSL 3.0 compatibility.
  * Removed OpenSSL 1.0 compatibility.
  * Support for FIDO 2.1 "minPinLength" extension.
  * Support for COSE_EDDSA, COSE_ES256, and COSE_RS1 attestation.
  * Support for TPM 2.0 attestation.
  * Support for device timeouts; see fido_dev_set_timeout().
  * New API calls:
  - es256_pk_from_EVP_PKEY;
  - fido_cred_attstmt_len;
  - fido_cred_attstmt_ptr;
  - fido_cred_pin_minlen;
  - fido_cred_set_attstmt;
  - fido_cred_set_pin_minlen;
  - fido_dev_set_pin_minlen_rpid;
  - fido_dev_set_timeout;
  - rs256_pk_from_EVP_PKEY.
  * Reliability and portability fixes.
  * Better handling of HID devices without identification strings; gh#381.
  * Fixed detection of Windows’s native webauthn API; gh#382.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1641816000">- Use BuildRequires: openssl-devel instead of forcing 1.1 since 3.x
  is now supported.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1648468800">- Version 1.10.0 (2022-01-17)
  * hid_osx: handle devices with paths &gt; 511 bytes; gh#462.
  * bio: fix CTAP2 canonical CBOR encoding in fido_bio_dev_enroll_*(); gh#480.
  * winhello: fallback to GetTopWindow() if GetForegroundWindow() fails.
  * winhello: fallback to hid_win.c if webauthn.dll isn’t available.
  * New API calls:
  - fido_dev_info_set;
  - fido_dev_io_handle;
  - fido_dev_new_with_info;
  - fido_dev_open_with_info.
  * Cygwin and NetBSD build fixes.
  * Documentation and reliability fixes.
  * Support for TPM 2.0 attestation of COSE_ES256 credentials.</changelog>
  <changelog author="simmphonie@opensuse.org" date="1664971200">- Version 1.12.0 (2022-09-22)
  * Support for COSE_ES384.
  * Support for hidraw(4) on FreeBSD; gh#597.
  * Improved support for FIDO 2.1 authenticators.
  * New API calls:
    + es384_pk_free;
    + es384_pk_from_EC_KEY;
    + es384_pk_from_EVP_PKEY;
    + es384_pk_from_ptr;
    + es384_pk_new;
    + es384_pk_to_EVP_PKEY;
    + fido_cbor_info_certs_len;
    + fido_cbor_info_certs_name_ptr;
    + fido_cbor_info_certs_value_ptr;
    + fido_cbor_info_maxrpid_minpinlen;
    + fido_cbor_info_minpinlen;
    + fido_cbor_info_new_pin_required;
    + fido_cbor_info_rk_remaining;
    + fido_cbor_info_uv_attempts;
    + fido_cbor_info_uv_modality.
  * Documentation and reliability fixes.
- Version 1.11.0 (2022-05-03)
  * Experimental PCSC support; enable with -DUSE_PCSC.
  * Improved OpenSSL 3.0 compatibility.
  * Use RFC1951 raw deflate to compress CTAP 2.1 largeBlobs.
  * winhello: advertise "uv" instead of "clientPin".
  * winhello: support hmac-secret in fido_dev_get_assert().
  * New API calls:
    + fido_cbor_info_maxlargeblob.
  * Documentation and reliability fixes.
  * Separate build and regress targets.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1677240000">- Version 1.13.0 (2023-02-20)
  * Support for linking against OpenSSL on Windows; gh#668.
  * New API calls:
    + fido_assert_empty_allow_list;
    + fido_cred_empty_exclude_list.
  * fido2-token: fix issue when listing large blobs.
  * Improved support for different fuzzing engines.</changelog>
  <changelog author="meissner@suse.com" date="1689336000">- Use openssl 1.1 still on SLES 15 SP4 to avoid pulling unnecessary
  openssl-3 dependency.  jsc#PED-4521</changelog>
</package>
<package pkgid="129b0c07d2f88327d1c8d77524170e2f7354bbe7ab6dac33a9d3dbbd29390241" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="c457d51596668b34aaaf6659be0f1c6e261615d58fcf880c16d95c07cf706b5c" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="9b941048b0ba744d97bbc7c89daf16bef87a2f8bc131e709834f06a01cc2ff17" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="a514d87a7e98a22db3af92ccc6962faeea8ed5f1cde5ad8c855b5ae18a0d64af" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="ab3a13835238a5443b1349d00bf3f508ff55c0f7032b785bc767b90921db8aef" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="149cfaf65f0a214826359faa93e0db7dbc77f703a203525fe00dd1d7f905f9c3" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="fa0809363ac3562a3c72b1152ee7f9837656e3cd0ce8aba91970d2364a5eb816" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="b628c476f53f78236e279ecbeadc084cb6dab4902fffbf96de1c6a5a7d5d749a" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="119fff04cd8b7dc3f21372cc82ec1c807a1f14d2f54a2e2637faa322e70c197d" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="833ec1e496fea1efc92bff735d90b5afe1381e3b88cdd7527c78c91116060cb1" name="libfreebl3" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="fb5754a696a7a3eb257da67fc7386e3a61520dbadb1856a31f2385c298eba85d" name="libfreebl3" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="d905152d8d1e47f2485ca2fd512f64ea9e3bff769471324fc6b15536fb72a515" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="ca4aa6a1cf07685a1aad88eeeecf955da71dc165044c8d6f2c867e4237025618" name="libfreebl3-hmac" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="787a03a80f0d3afa079ede1a55d85461c7fcb7f936b4a2c004986dc3f8f717d6" name="libfreebl3-hmac" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="f35223c7b9d11712aeb485e8a315508587fad446bde2bd8d3007d1f5272f772c" name="libfreebl3-hmac" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="bcdb389c151941b6848d7e904cc419a0676e633d630721069a7a2403080500a9" name="libfreetype6" arch="aarch64">
  <version epoch="0" ver="2.10.4" rel="150000.4.15.1"/>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1589025600">- Update to version 2.10.2
  * Support for WOFF2 fonts, add BR on pkgconfig(libbrotlidec)
  * Function `FT_Get_Var_Axis_Flags' returned random data for Type 1
    MM fonts.
  * Type 1 fonts with non-integer metrics are now supported by the new
    (CFF) engine introduced in FreeType 2.9.
  * Drop support for Python 2 in Freetype's API reference generator
  * Auto-hinter support for Hanifi Rohingya
  * Document the `FT2_KEEP_ALIVE' debugging environment variable.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Update to version 2.10.4
  * Fix a heap buffer overflow has been found  in the handling of
    embedded PNG bitmaps, introduced in FreeType version 2.6
    (CVE-2020-15999 bsc#1177914)
  * Minor improvements to the B/W rasterizer.
  * Auto-hinter support for Medefaidrin script.
  * Fix various  memory leaks (mainly  for CFF) and other  issues that
    might cause crashes in rare circumstances.</changelog>
  <changelog author="fstrba@suse.com" date="1661256000">- Added patches:
  * CVE-2022-27404.patch
    + fixes bsc#1198830, CVE-2022-27404: Buffer Overflow
  * CVE-2022-27405.patch
    + fixes bsc#1198832, CVE-2022-27405: Segmentation Fault
  * CVE-2022-27406.patch
    + fixes bsc#1198823, CVE-2022-27406: Segmentation violation</changelog>
  <changelog author="meissner@suse.com" date="1661947200">- disable brotli linkage / WOFF2 support for now to keep dependencies
  as before.</changelog>
  <changelog author="fstrba@suse.com" date="1692705600">- Added patch:
  * CVE-2023-2004.patch
    + fixes bsc#1210419, CVE-2023-2004: Integer overflow</changelog>
</package>
<package pkgid="9869ca0c054909dc16295f5bcbc0bae861ab96db5be5477e510513b89af41d03" name="libfreetype6" arch="s390x">
  <version epoch="0" ver="2.10.4" rel="150000.4.15.1"/>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1589025600">- Update to version 2.10.2
  * Support for WOFF2 fonts, add BR on pkgconfig(libbrotlidec)
  * Function `FT_Get_Var_Axis_Flags' returned random data for Type 1
    MM fonts.
  * Type 1 fonts with non-integer metrics are now supported by the new
    (CFF) engine introduced in FreeType 2.9.
  * Drop support for Python 2 in Freetype's API reference generator
  * Auto-hinter support for Hanifi Rohingya
  * Document the `FT2_KEEP_ALIVE' debugging environment variable.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Update to version 2.10.4
  * Fix a heap buffer overflow has been found  in the handling of
    embedded PNG bitmaps, introduced in FreeType version 2.6
    (CVE-2020-15999 bsc#1177914)
  * Minor improvements to the B/W rasterizer.
  * Auto-hinter support for Medefaidrin script.
  * Fix various  memory leaks (mainly  for CFF) and other  issues that
    might cause crashes in rare circumstances.</changelog>
  <changelog author="fstrba@suse.com" date="1661256000">- Added patches:
  * CVE-2022-27404.patch
    + fixes bsc#1198830, CVE-2022-27404: Buffer Overflow
  * CVE-2022-27405.patch
    + fixes bsc#1198832, CVE-2022-27405: Segmentation Fault
  * CVE-2022-27406.patch
    + fixes bsc#1198823, CVE-2022-27406: Segmentation violation</changelog>
  <changelog author="meissner@suse.com" date="1661947200">- disable brotli linkage / WOFF2 support for now to keep dependencies
  as before.</changelog>
  <changelog author="fstrba@suse.com" date="1692705600">- Added patch:
  * CVE-2023-2004.patch
    + fixes bsc#1210419, CVE-2023-2004: Integer overflow</changelog>
</package>
<package pkgid="e79314a2e2b131fbec571c36685062d15e191cff0fb9abf327e8f832af3eedd9" name="libfreetype6" arch="x86_64">
  <version epoch="0" ver="2.10.4" rel="150000.4.15.1"/>
  <changelog author="idonmez@suse.com" date="1483272000">- Update to version 2.7.1:
  * IMPORTANT CHANGES
    + Support for the new CFF2 font format as introduced with
    OpenType 1.8 has been contributed by Dave Arnolds from Adobe.
    + Preliminary support for variation fonts as specified in
    OpenType 1.8 (in addition to the already existing support for
    Adobe's MM and Apple's GX formats). Dave Arnolds contributed
    handling of advance width change variation; more will come in
    the next version.
  * IMPORTANT BUG FIXES
    + Handling of raw CID fonts was partially broken (bug introduced
    in 2.6.4).
  * MISCELLANEOUS
    + Some limits for TrueType bytecode execution have been tightened
    to speed up FreeType's handling of malformed fonts, in
    particular to quickly abort endless loops.
    + The number of twilight points can no longer be set to an
    arbitrarily large value.
    + The total number of jump opcode instructions (like JMPR) with
    negative arguments is dynamically restricted; the same holds
    for the total number of iterations in LOOPCALL opcodes.
    + The dynamic limits are based on the number of points in a glyph
    and the number of CVT entries. Please report if you encounter a
    font where the selected values are not adequate.
    + PCF family names are made more `colourful'; they now include the
    foundry and information whether they contain wide characters.
    For example, you no longer get `Fixed' but rather `Sony Fixed'
    or `Misc Fixed Wide'.
    + A new function `FT_Get_Var_Blend_Coordinates' (with its alias
    name `FT_Get_MM_Blend_Coordinates') to retrieve the normalized
    blend coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new function `FT_Get_Var_Design_Coordinates' to retrieve the
    design coordinates of the currently selected variation instance
    has been added to the Multiple Masters interface.
    + A new load flag `FT_LOAD_BITMAP_METRICS_ONLY' to retrieve bitmap
    information without loading the (embedded) bitmap itself.
    + Retrieving advance widths from bitmap strikes (using
    `FT_Get_Advance' and `FT_Get_Advances') have been sped up.
    + The usual round of fuzzer fixes to better reject malformed
    fonts.
- Drop freetype2-bitmap-foundry.patch, merged upstream.</changelog>
  <changelog author="idoenmez@suse.de" date="1494849600">- Update to version 2.8
  * Support for OpenType Variation Fonts is now complete. The last
    missing part was handling the `VVAR' and `MVAR' tables, which is
    available with this release.
  * A new  function `FT_Face_Properties' allows the  control of some
    module  and   library  properties  per  font.    Currently,  the
    following properties can be  handled: stem darkening, LCD filter
    weights, and the random seed for the `random' CFF operator.
  * The PCF change to show more `colourful' family names (introduced
    in version 2.7.1) was too radical; it can now be configured with
    PCF_CONFIG_OPTION_LONG_FAMILY_NAMES   at   compile   time.    If
    activated, it can  be switched off at run time  with the new pcf
    property  `no-long-family-names'.  If  the `FREETYPE_PROPERTIES'
    environment variable is available, you can say
    FREETYPE_PROPERTIES=pcf:no-long-family-names=1
  * Support  for  the  following  scripts  has  been  added  to  the
    auto-hinter.
    Adlam, Avestan, Bamum, Buhid, Carian, Chakma, Coptic, Cypriot,
    Deseret, Glagolitic, Gothic, Kayah, Lisu, N'Ko, Ol Chiki, Old
    Turkic, Osage, Osmanya, Saurashtra, Shavian, Sundanese, Tai
    Viet, Tifinagh, Unified Canadian Syllabics, Vai
  * `Light' auto-hinting  mode no  longer uses TrueType  metrics for
    TrueType  fonts.   This bug  was  introduced  in version  2.4.6,
    causing   horizontal  scaling   also.    Almost  all   GNU/Linux
    distributions (with Fedora as  a notable exception) disabled the
    corresponding patch for good reasons; chances are thus high that
    you won't notice a difference.
  * If a TrueType font gets loaded with FT_LOAD_NO_HINTING, FreeType
    now scales  the font linearly  again (bug introduced  in version
    2.4.6).
  * Fixed CVE-2017-8105,  CVE-2017-8287:  Older   FreeType  versions
    have out-of-bounds  writes  caused  by  heap-based  buffer  overflows
    related to Type 1 fonts. (boo#1035807, boo#1036457)
- See https://sourceforge.net/projects/freetype/files/freetype2/2.8/ for
  the complete changelog.</changelog>
  <changelog author="idonmez@suse.com" date="1505736000">- Update to version 2.8.1
  * B/W  hinting   of  TrueType   fonts  didn't  work   properly  if
    interpreter version 38 or 40 was selected.
  * Some severe  problems within the handling  of TrueType Variation
    Fonts were found and fixed.
  * Function `FT_Set_Var_Design_Coordinates' didn't correctly handle
    the case with less input coordinates than axes.
  * By default,  FreeType  now offers  high  quality  LCD-optimized
    output  without resorting to ClearType techniques of resolution
    tripling and filtering.  In this method,  called Harmony,  each
    color channel is generated separately  after shifting the glyph
    outline,  capitalizing on the fact  that the color grids on LCD
    panels  are  shifted  by  a third  of  a pixel.  This output is
    indistinguishable from ClearType with a light 3-tap filter.
  * Using the  new function `FT_Get_Var_Axis_Flags',  an application
    can access the `flags' field  of a variation axis (introduced in
    OpenType version 1.8.2)
  * FreeType  now synthesizes  a  missing Unicode  cmap for  (older)
    TrueType fonts also if glyph names are available.
  * The warping option  has moved  from `light'  to `normal' hinting
    where  it replaces  the original hinting algorithm.  The `light'
    mode is now always void of any hinting in x-direction.</changelog>
  <changelog author="idonmez@suse.com" date="1515499200">- Update to version 2.9
  * Advance width values of variation fonts were often wrong.
  * More fixes for variation font support; you should update to
    this version if you want to support them.
  * As a GSoC project, Ewald Hew extended the new (Adobe) CFF
    engine to handle Type 1 fonts also, thus greatly improving
    the rendering of this format. This is the new default.
  * A new function, `FT_Set_Named_Instance', can be used to set
    or change the current named instance.
  * Starting with this FreeType version, resetting variation
    coordinates will return to the currently selected named
    instance. Previously, FreeType returned to the base font
    (i.e., no instance set).
  * Some fuzzer fixes to better reject malformed fonts.</changelog>
  <changelog author="idonmez@suse.com" date="1515585600">- Add psaux-flex.patch to fix a regression in Type1 rendering</changelog>
  <changelog author="fstrba@suse.com" date="1518004800">- Added patches:
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
    + Upstream fix for bsc#1079603: Avoid NULL reference in
    src/truetype/ttinterp.c
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch
    + Upstream fix for bsc#1079601: Protection against invalid VF
    data</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Added patch:
  * enable-long-family-names-by-default.patch
    + Define PCF_CONFIG_OPTION_LONG_FAMILY_NAMES to obtain 2.7.1
    behaviour</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520337600">- Refresh spec-file via spec-cleaner.
- Add shell script freetype2.sh in separate package
  freetype2-profile-tti35 in order to be able to set TrueType
  interpreter version 35 (boo#1084085).</changelog>
  <changelog author="kbabioch@suse.com" date="1520510400">- Add bnc1079600.patch: Fix several integer overflow issues in
  truetype/ttinterp.c (bsc#1079600)</changelog>
  <changelog author="idonmez@suse.com" date="1525262400">- Update to version 2.9.1
  * Type 1 fonts containing flex features were not rendered
    correctly (bug introduced in version 2.9).
  * CVE-2018-6942: Older FreeType versions can crash with certain
    malformed variation fonts.
  * Bug fix: Multiple calls to `FT_Get_MM_Var' returned garbage.
  * Emboldening of bitmaps didn't work correctly sometimes, showing
    various artifacts (bug introduced in version 2.8.1).
  * The auto-hinter script ranges have  been updated for Unicode 11.
    No support for new scripts have been added, however,  with the
    exception of Georgian Mtavruli.
- freetype-config is now deprecated by upstream and not enabled
  by default.
- Drop upstreamed patches:
  * bnc1079600.patch
  * psaux-flex.patch
  * 0001-src-truetype-ttinterp.c-Ins_GETVARIATION-Avoid-NULL-.patch
  * 0001-truetype-Better-protection-against-invalid-VF-data.patch</changelog>
  <changelog author="idonmez@suse.com" date="1526299200">- Re-enable freetype-config, there is just too many fallouts.</changelog>
  <changelog author="idonmez@suse.com" date="1540641600">- Remove old ppc64 parts in spec file
- Refresh patches:
  + bugzilla-308961-cmex-workaround.patch
  + don-t-mark-libpng-as-required-library.patch
  + enable-long-family-names-by-default.patch
- Enable subpixel rendering with infinality config:
  + enable-subpixel-rendering.patch
  + enable-infinality-subpixel-hinting.patch</changelog>
  <changelog author="idonmez@suse.com" date="1561377600">- Update to version 2.10.0
  * A bunch of new functions has been added to access and process
    COLR/CPAL data of OpenType fonts with color-layered glyphs.
  * As a GSoC 2018 project, Nikhil Ramakrishnan completely
    overhauled and modernized the API reference.
  * The logic for computing the global ascender, descender, and
    height of OpenType fonts has been slightly adjusted for
    consistency.
  * `TT_Set_MM_Blend' could fail if called repeatedly with the same
    arguments.
  * The precision of handling deltas in Variation Fonts has been
    increased.The problem did only show up with multidimensional
    designspaces.
  * New function `FT_Library_SetLcdGeometry' to set up the geometry
    of LCD subpixels.
  * FreeType now uses the `defaultChar' property of PCF fonts to set
    the  glyph for  the undefined  character  at glyph  index 0  (as
    FreeType already does for all other supported font formats).  As
    a consequence, the order of glyphs of a PCF font if accessed
    with  FreeType can be different now compared to previous
    versions.
    This change doesn't affect PCF font access with cmaps.
  * `FT_Select_Charmap' has been changed to allow  parameter value
    `FT_ENCODING_NONE', which is valid for BDF, PCF, and Windows FNT
    formats to access built-in cmaps that don't have a predefined
    `FT_Encoding' value.
  * A previously reserved field in the `FT_GlyphSlotRec' structure
    now holds the glyph index.
  * The usual round of fuzzer bug fixes to better reject malformed
    fonts.
  * `FT_Outline_New_Internal' and `FT_Outline_Done_Internal' have
    been removed.These two functions were public by oversight only
    and were never documented.
  * A new function `FT_Error_String' returns descriptions of error
    codes if configuration macro FT_CONFIG_OPTION_ERROR_STRINGS is
    defined.
  * `FT_Set_MM_WeightVector' and `FT_Get_MM_WeightVector' are new
    functions limited to Adobe MultiMaster fonts to directly set and
    get the weight vector.</changelog>
  <changelog author="idonmez@suse.com" date="1562068800">- Update to version 2.10.1
  * The bytecode hinting of OpenType variation fonts was flawed, since
    the data in the `CVAR' table wasn't correctly applied.
  * Auto-hinter support for Mongolian.
  * The handling of  the default character in PCF fonts as  introduced
    in version 2.10.0 was partially broken, causing premature abortion
    of charmap iteration for many fonts.
  * If  `FT_Set_Named_Instance' was  called  with  the same  arguments
    twice in a row, the function  returned an incorrect error code the
    second time.
  * Direct   rendering   using  FT_RASTER_FLAG_DIRECT   crashed   (bug
    introduced in version 2.10.0).
  * Increased  precision  while  computing  OpenType  font   variation
    instances.
  * The  flattening  algorithm of  cubic  Bezier  curves was  slightly
    changed to make  it faster.  This can cause  very subtle rendering
    changes, which aren't noticeable by the eye, however.
  * The  auto-hinter  now  disables hinting  if there  are blue  zones
    defined for a `style' (i.e., a certain combination of a script and
    its related typographic features) but the font doesn't contain any
    characters needed to set up at least one blue zone.
- Add tarball signatures and freetype2.keyring</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1570622400">- Use the compiler default C std, since 2012 gcc defaults
  have changed, we now only need to get rid of ANSIFLAGS, override
  that variable instead.</changelog>
  <changelog author="idonmez@suse.com" date="1589025600">- Update to version 2.10.2
  * Support for WOFF2 fonts, add BR on pkgconfig(libbrotlidec)
  * Function `FT_Get_Var_Axis_Flags' returned random data for Type 1
    MM fonts.
  * Type 1 fonts with non-integer metrics are now supported by the new
    (CFF) engine introduced in FreeType 2.9.
  * Drop support for Python 2 in Freetype's API reference generator
  * Auto-hinter support for Hanifi Rohingya
  * Document the `FT2_KEEP_ALIVE' debugging environment variable.</changelog>
  <changelog author="idonmez@suse.com" date="1603195200">- Update to version 2.10.4
  * Fix a heap buffer overflow has been found  in the handling of
    embedded PNG bitmaps, introduced in FreeType version 2.6
    (CVE-2020-15999 bsc#1177914)
  * Minor improvements to the B/W rasterizer.
  * Auto-hinter support for Medefaidrin script.
  * Fix various  memory leaks (mainly  for CFF) and other  issues that
    might cause crashes in rare circumstances.</changelog>
  <changelog author="fstrba@suse.com" date="1661256000">- Added patches:
  * CVE-2022-27404.patch
    + fixes bsc#1198830, CVE-2022-27404: Buffer Overflow
  * CVE-2022-27405.patch
    + fixes bsc#1198832, CVE-2022-27405: Segmentation Fault
  * CVE-2022-27406.patch
    + fixes bsc#1198823, CVE-2022-27406: Segmentation violation</changelog>
  <changelog author="meissner@suse.com" date="1661947200">- disable brotli linkage / WOFF2 support for now to keep dependencies
  as before.</changelog>
  <changelog author="fstrba@suse.com" date="1692705600">- Added patch:
  * CVE-2023-2004.patch
    + fixes bsc#1210419, CVE-2023-2004: Integer overflow</changelog>
</package>
<package pkgid="039376ad4e85952670bf5525f8a25259c35291a5dc6f64947fcfcee0860e4baa" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="70a0a6a372f61785eee95be8d77a9c595076e6644872c5f0857d75bda3def0ca" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="eea10abfaf64e116455d7a85ebb345dbd7f36d1750ffc4fa17dfe06e4432beb8" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="dc60c3449acdec344e9f8f30696d0a8363cefbcd3712b8ff45764381f821143e" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.16.1"/>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
  <changelog author="rguenther@suse.com" date="1692273600">- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
  with variable length stack allocations on aarch64.
  Fixes CVE-2023-4039.  [bsc#1214052]</changelog>
</package>
<package pkgid="8cd773268cf1ad57a3042e296c1d1c85a9679c2ac5e8b1c7c376db74bba712c6" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.16.1"/>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
  <changelog author="rguenther@suse.com" date="1692273600">- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
  with variable length stack allocations on aarch64.
  Fixes CVE-2023-4039.  [bsc#1214052]</changelog>
</package>
<package pkgid="904ecc3adffd946bfdc9d187c0391d6c2ad7169b2725d81f10772e97a504f0be" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.16.1"/>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
  <changelog author="rguenther@suse.com" date="1692273600">- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
  with variable length stack allocations on aarch64.
  Fixes CVE-2023-4039.  [bsc#1214052]</changelog>
</package>
<package pkgid="306cbfaede71db3d1fa6e519253f52f5f5c0128bacb3d227fbb9af45644cf2b4" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="2abf1900bcf0f09242833eb5b1700d90632148464e915f7dbb8c0c9a39c908a1" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="3b5b525e46b769487d743fac4988e8490749360dab266f3f43178d3341d7bf5a" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="17d742be36e9ba140f264d0c5c9668b90098ac1dab8e8f8ce5fddd0dc78c91f9" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="351e1f38cc78a2518687e8aeb04f0767d18a7d12ea7e7ff161d3435b770633e7" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="a2c5137517792f9ce0984fd6c6d5ef83465dbe7453cc095484a249ae2260264d" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="e71a61a37021746dfb7ff7cbeb4e59dd5a2b802c8c7dff5d1c6767724769307c" name="libgcc_s1" arch="aarch64">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="9ea78d1aa8034ac3de1584069d849a882183aadebd6bbc2c563bceb17cccf970" name="libgcc_s1" arch="s390x">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="6db0f31e97f6a32ce8061975f8ac9fa6e30b812c6851d3087097c6b7126c5f6d" name="libgcc_s1" arch="x86_64">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="7db6d9a4645dc12a6f7d56b961503ace54fb3e961f366651f0aa746f84e0c342" name="libgcrypt" arch="src">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="ee0d62001ca3e6b2733a11d817f2bbcdbc0700a6fe024b43a5fe0df77c95c6b3" name="libgcrypt20" arch="aarch64">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="806ad60d5ea88d0f47513e5c065961ff501cad6a60abdb8e8e36a758523f40d3" name="libgcrypt20" arch="s390x">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="b3baf7ef331f97881e854d6edd73923b4dac1b0b3b08705e052772e83358d730" name="libgcrypt20" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="3c786200b6c75eae3734c53c07f4c9fb05e97e192d34a522892c1bbcb29e8d3c" name="libgcrypt20-hmac" arch="aarch64">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="c90f28468fac900feca3ecc4ad8e4bfde8655a3a270cbf203bb82d8925753d52" name="libgcrypt20-hmac" arch="s390x">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="6190cfe0762badc1e6567cc9a024810f47dde6b3569840fcb1108ca3a787c1ad" name="libgcrypt20-hmac" arch="x86_64">
  <version epoch="0" ver="1.9.4" rel="150400.6.8.1"/>
  <changelog author="pmonreal@suse.com" date="1632225600">- FIPS: Enable hardware support also in FIPS mode [bsc#1187110]
  * Add libgcrypt-FIPS-hw-optimizations.patch
  * Upstream task: https://dev.gnupg.org/T5508</changelog>
  <changelog author="pmonreal@suse.com" date="1632225601">- FIPS: Provide a module name/identifier and version that can be
  mapped to the validation records. [bsc#1190706]
  * Add libgcrypt-FIPS-module-version.patch
  * Upstream task: https://dev.gnupg.org/T5600</changelog>
  <changelog author="pmonreal@suse.com" date="1635422400">- FIPS: Fix regression tests in FIPS mode [bsc#1192131]
  * Add libgcrypt-FIPS-fix-regression-tests.patch
  * Upstream task: https://dev.gnupg.org/T5520</changelog>
  <changelog author="pmonreal@suse.com" date="1635854400">- FIPS: PBKDF requirements [bsc#1185137]
  * The PBKDF2 selftests were introduced in libgcrypt version
    1.9.1 in the function selftest_pbkdf2()
  * Upstream task: https://dev.gnupg.org/T5182</changelog>
  <changelog author="pmonreal@suse.com" date="1636372800">- FIPS: Disable 3DES/Triple-DES in FIPS mode [bsc#1185138]
  * Add libgcrypt-FIPS-disable-3DES.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1637928000">- FIPS: RSA KeyGen/SigGen fail with 4096 bit key sizes [bsc#1192240]
  * rsa: Check RSA keylen constraints for key operations.
  * rsa: Fix regression in not returning an error for prime generation.
  * tests: Add 2k RSA key working in FIPS mode.
  * tests: pubkey: Replace RSA key to one of 2k.
  * tests: pkcs1v2: Skip tests with small keys in FIPS.
  * Add patches:
  - libgcrypt-FIPS-RSA-keylen.patch
  - libgcrypt-FIPS-RSA-keylen-tests.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1638273600">- FIPS: Define an entropy source SP800-90B compliant [bsc#1185140]
  * Disable jitter entropy by default in random.conf
  * Disable only-urandom option by default in random.conf</changelog>
  <changelog author="pmonreal@suse.com" date="1638878400">- FIPS: Fix gcry_mpi_sub_ui subtraction [bsc#1193480]
  * gcry_mpi_sub_ui: fix subtracting from negative value
  * Add libgcrypt-FIPS-fix-gcry_mpi_sub_ui.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1642593600">- FIPS: Service level indicator [bsc#1190700]
  * Provide an indicator to check wether the service utilizes an
    approved cryptographic algorithm or not.
  * Add patches:
  - libgcrypt-FIPS-service-indicators.patch
  - libgcrypt-FIPS-verify-unsupported-KDF-test.patch
  - libgcrypt-FIPS-HMAC-short-keylen.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1643716800">- FIPS: Disable DSA in FIPS mode [bsc#1195385]
  * Upstream task: https://dev.gnupg.org/T5710
  * Add libgcrypt-FIPS-disable-DSA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1647950400">- FIPS: Implement a service indicator for asymmetric ciphers [bsc#1190700]
  * Mark RSA public key encryption and private key decryption with
    padding (e.g. OAEP, PKCS) as non-approved since RSA-OAEP lacks
    peer key assurance validation requirements per SP800-56Brev2.
  * Mark ECC as approved only for NIST curves P-224, P-256, P-384
    and P-521 with check for common NIST names and aliases.
  * Mark DSA, ELG, EDDSA, ECDSA and ECDH as non-approved.
  * Add libgcrypt-FIPS-SLI-pk.patch
  * Rebase libgcrypt-FIPS-service-indicators.patch
- Run the regression tests also in FIPS mode.
  * Disable tests for non-FIPS approved algos.
  * Rebase: libgcrypt-FIPS-verify-unsupported-KDF-test.patch</changelog>
  <changelog author="dennis.knorr@suse.com" date="1649937600">- FIPS: extend the service indicator [bsc#1190700]
  * introduced a pk indicator function
  * adapted the approved and non approved ciphersuites
  * Add libgcrypt_indicators_changes.patch
  * Add libgcrypt-indicate-shake.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port libgcrypt to use jitterentropy [bsc#1202117, jsc#SLE-24941]
  * Enable the jitter based entropy generator by default in random.conf
  - Add libgcrypt-jitterentropy-3.3.0.patch
  * Update the internal jitterentropy to version 3.4.0
  - Add libgcrypt-jitterentropy-3.4.0.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1661256000">- FIPS: gpg/gpg2 gets out of core handler in FIPS mode while
  typing Tab key to Auto-Completion. [bsc#1182983]
  * Add libgcrypt-out-of-core-handler.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662552000">- FIPS: Zeroize buffer and digest in check_binary_integrity()
  * Add libgcrypt-FIPS-Zeroize-hmac.patch [bsc#1191020]</changelog>
  <changelog author="pmonreal@suse.com" date="1662552001">- FIPS: Check keylength in gcry_fips_indicator_kdf() [bsc#1190700]
  * Consider approved keylength greater or equal to 112 bits.
  * Add libgcrypt-FIPS-kdf-leylength.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662638400">- FIPS: Get most of the entropy from rndjent_poll [bsc#1202117]
  * Add libgcrypt-FIPS-rndjent_poll.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677931200">- FIPS: PBKDF2: Add additional checks for the minimum key length,
  salt length, iteration count and passphrase length to the kdf
  fips indicator in _gcry_fips_indicator_kdf() [bsc#1208926]
  * Add libgcrypt-FIPS-pkdf2-Additional-checks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104000">- FIPS: ECDSA: Avoid no-keytest in ECDSA keygen [bsc#1208924]
  * Add libgcrypt-FIPS-ECC-disallow-skip-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678104001">- FIPS: ECC: Transition to error-state if PCT fail [bsc#1208925]
  * Add libgcrypt-FIPS-ECC-PCT-Add-transition-to-error.patch</changelog>
</package>
<package pkgid="7f41925399009332e8e9bb97828ecc903327f0d58681dae9ad8b5d2709e8c35c" name="libgio-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="9a0c425c8ea72d04c53d4e49c78a662f5b67f23b7ca6bd68d898b0f3969c769a" name="libgio-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="8a784c8c4ba3c3b1ada38a61aebd3a1f13a47dcaacb33be17be25eb56bbb833f" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="c52a1d28e971a9f806e9a0fe936c4ee7e7a9e5a14011be87f2d79bf0db09d083" name="libgio-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="29795c9bfbf3994e162fe8cac8c28dbc4ff37ddcaed3179ef4dccd3c6cb6d710" name="libgio-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="347b626d67f3678d71a71edc8b78ca9d9317619833585b810767bf16b49e1926" name="libgio-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="e6961bae753c1fd8847231a60f51955f8249c968ee649e8f95baf54dce66c647" name="libglib-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="415c3473a937cecf81712f466879469d88f87191d182c8d30297badddbaea193" name="libglib-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="2bc119a4c5a45930a6c4ba2a1c1fcd863db9b56102d0e1c5200f3fa10ec1a4b7" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="12ecf16f21c6b11838646b915014528cf49f76e8b80abc12c7b68b20b83e6597" name="libglib-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="80c45fa65914169c3e2c3ebb1f790aebe9019324ef5aab2ede72ecc5ca891a02" name="libglib-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="76e8e0a8ffcc14ef64314a58705390bb4fe033994f353223e24e10c968f266b3" name="libglib-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="30df94de99b8fd95d1fe3a17bd6fb10dd009f9d2029f0bd404f005afe9792d56" name="libgmodule-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="6c4f9c1d635338b1d641f1d6a259eda3d1ce557a852bfc3cfd4965d2d1cddd31" name="libgmodule-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="9b93d4cf2af7d970f97aaece188760fb758749360ce2e0efd775c2dc1c7d5135" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="4229a1daf339e992e039863e372d7b0368ed627b932889d568690487ee13bd5c" name="libgmodule-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="848a940867c105d14aaa124f07fcc1396e2a5046074ae03fb75f6b3878e10e2a" name="libgmodule-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="313fb1095aff70b4101cc5ef8590c5f6e5cb70d466bb3001257bf6c35cd9452f" name="libgmodule-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="b244a4e161d2cc0e30c39440c175e4a4674463dc98fbfc21f9b04072234470ad" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="9471f09dfec0711472e9f26251e94b06beb552805cb06e80e64af0f51049b31f" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="1571f67ff2585cb12db67581facae42e988ae6b78d2fef3a082e2c2675fdc52d" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="333c58c93c60f39036ca2d77a778f9026f6abdc369dc72c52962610149717982" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="e3c94e3a08f39f7fd00f5b1336d0ae227c67dca96d6ff0ae5fe5b55c26cfd27f" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="8a8b4cd5b07448ecce55cf5ff246970fb0754873d5537c43307ac4cfe017eb9f" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="740901af5c93d8905b52bb53a06f6e1db4712cb1c583722086d36b9bb8e50932" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="4433f50f77cc81339f65caf77df5637faf297fbc9cbb457a6a7a21910523ca32" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="ac71e08bb3176660866c52570dfd9fadfd17f18c396c17c7779b0b17465ad941" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="cf9de0d5a52eabd1a4ac16c3868a2bdaae0341d81436489bd062eebfe84f69ae" name="libgnutls30" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="06bda12ba2176e0073e940d71a81cb4d9abb5766580f5b9870641332321d2c02" name="libgnutls30" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="2c04db86002fbabcd3077057366c15d20ed1061805336b0c74108cace732d2bb" name="libgnutls30" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="9b0f6c30c40f842431bcb388356d738eb4bf73cb3a26b190273ba7d766a82c92" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="d9972c9ce4a928486d5ac4503d8628226f4523611fa4dd342c8e2f82a0318a09" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="7e332fdda2ccb3c9164fea17dc42469efda4bd21e429044f0223d4df26a36b0e" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.35.1"/>
  <changelog author="pmonreal@suse.com" date="1648296000">- FIPS: Mark AES-GCM as approved in the TLS context [bsc#1194907]
  * Add gnutls-FIPS-Mark-HKDF-and-AES-GCM-as-approved-when-used-in-TLS.patch
  * Upstream issue: https://gitlab.com/gnutls/gnutls/issues/1311</changelog>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
</package>
<package pkgid="b336378fcbcf834d28bf219b9b4a4380a85167e61287be314ee062ca9a6dc8e0" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="1db88ff1441d008e673cfbf542cb884fcb62d56bcf147fe4eb65b0d24bd8f531" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="cf2152ac120095c3511db02cb21d650c72740c01295dc610eeeb2e31b8001891" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.38.1"/>
  <changelog author="pmonreal@suse.com" date="1652097600">- FIPS: Add missing requirements for the SLI [bsc#1190698]
  * Remove 3DES from FIPS approved algorithms:
  - gnutls-Remove-3DES-from-FIPS-approved-algos.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1570
  * DRBG service (gnutls_rnd) should be considered approved:
  - gnutls-Add-missing-FIPS-service-indicator-transitions.patch
  - gnutls-Add-missing-FIPS-service-indicator-transitions-tests.patch
  - gnutls-pkcs12-tighten-algorithm-checks-under-FIPS.patch
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1569</changelog>
  <changelog author="pmonreal@suse.com" date="1652097601">- FIPS: Make sure zeroization is performed in all API functions
  * Add gnutls-zeroization-API-functions.patch [bsc#1191021]
  * Upsream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1573</changelog>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
</package>
<package pkgid="fca67704d249b35bb0a6c19bd9fcec3e4ca6520341fc32e805f43a4b01485322" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="ba0bfcb6b4deee631f8daefb84ec7e40552bc82461782a54c47cb81cdfa7a3c1" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="6715043f953ba6c8178d1ba204a1dd0562ac33306badb76ebbf25aa3b78a9c4b" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.41.3"/>
  <changelog author="richard.costa@suse.com" date="1656504000">- FIPS:
  * Add gnutls_ECDSA_signing.patch [bsc#1190698]
  - Check minimum keylength for symmetric key generation
  - Only allows ECDSA signature with valid set of hashes
    (SHA2 and SHA3)
  * Add gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - Provides interface for running library self tests on-demand
  - Upstream: https://gitlab.com/gnutls/gnutls/-/merge_requests/1598</changelog>
  <changelog author="richard.costa@suse.com" date="1657281600">- FIPS:
  * Modify gnutls-FIPS-force-self-test.patch [bsc#1198979]
  - gnutls_fips140_run_self_tests now properly releases fips_context</changelog>
  <changelog author="pmonreal@suse.com" date="1659441600">- Security fix: [bsc#1202020, CVE-2022-2509]
  * Fixed double free during verification of pkcs7 signatures
  * Add gnutls-CVE-2022-2509.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
</package>
<package pkgid="d6080d366fae190f1c86e4f4fa5afe40739101a97cb6c870570e4987516eed05" name="libgnutls30-hmac" arch="aarch64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="d1571ebb9ffc92d3ecb77c4ea06f4e76444d23694e90485c8a666a11f31fac12" name="libgnutls30-hmac" arch="s390x">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="27687786ce78846dab57c170a299d75d0b5f7eb998283594b774d5ee2f46feb3" name="libgnutls30-hmac" arch="x86_64">
  <version epoch="0" ver="3.7.3" rel="150400.4.44.1"/>
  <changelog author="pmonreal@suse.com" date="1659960000">- FIPS: Port GnuTLS to use jitterentropy [bsc#1202146, jsc#SLE-24941]
  * Add new dependency on jitterentropy
  * Add gnutls-FIPS-jitterentropy.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465600">- FIPS: Additional modifications to the SLI. [bsc#1190698]
  * Mark CMAC and GMAC and non-approved in gnutls_pbkfd2().
  * Mark HMAC keylength less than 112 bits as non-approved in
    gnutls_pbkfd2().
  * Adapt the pbkdf2 selftest and the regression tests accordingly.
  * Add gnutls-FIPS-SLI-pbkdf2-verify-keylengths-only-SHA.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662465601">- FIPS: Zeroize the calculated hmac and new_hmac in the
  check_binary_integrity() function. [bsc#1191021]
  * Add gnutls-FIPS-Zeroize-check_binary_integrity.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: Make XTS key check failure not fatal [bsc#1203779]
  * Add gnutls-Make-XTS-key-check-failure-not-fatal.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1665144000">- FIPS: Set error state when jent init failed in FIPS mode [bsc#1202146]
  * Add patch gnutls-FIPS-Set-error-state-when-jent-init-failed.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666699200">- Fix AVX CPU feature detection for OSXSAVE [bsc#1203299]
  * Fixes a SIGILL termination at the verzoupper instruction when
    trying to run GnuTLS on a Linux kernel with the noxsave command
    line parameter set. Relevant mostly for virutal systems.
  * Upstream bug: https://gitlab.com/gnutls/gnutls/issues/1282
  * Add gnutls-clear-AVX-bits-if-it-cannot-be-queried-XSAVE.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1673870400">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Add gnutls-FIPS-PCT-DH.patch gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674216000">- FIPS: Change all the 140-2 references to FIPS 140-3 in order to
  account for the new FIPS certification [bsc#1207346]
  * Add gnutls-FIPS-140-3-references.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548800">- Security Fix: [bsc#1208143, CVE-2023-0361]
  * Bleichenbacher oracle in TLS RSA key exchange
  * Add gnutls-CVE-2023-0361.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548801">- FIPS: GnuTLS DH/ECDH PCT public key regeneration [bsc#1207183]
  * Rebase patches with the version submitted upstream.
  * Avoid copying the key material: gnutls-FIPS-PCT-DH.patch
  * Improve logic around memory release: gnutls-FIPS-PCT-ECDH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1676548802">- FIPS: Make the jitterentropy calls thread-safe [bsc#1208146]
  * Add gnutls-FIPS-jitterentropy-threadsafe.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677499200">- FIPS: Fix pct_test() return code in case of error [bsc#1207183]
  * Rebase with the upstream version: gnutls-FIPS-PCT-DH.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1677672000">- libgnutls: Increase the limit of TLS PSK usernames from 128 to
  65535 characters. [bsc#1208237, jsc#PED-1562]
  * Upstream: https://gitlab.com/gnutls/gnutls/commit/f032324a
  * Add gnutls-increase-TLS-PSK-username-limit.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1678190400">- FIPS: PBKDF2 additional requirements [bsc#1209001]
  * Set the minimum output key length to 112 bits (FIPS 140-3 IG D.N)
  * Set the minimum salt length to 128 bits (SP 800-132 sec. 5.1)
  * Set the minimum iterations count to 1000 (SP 800-132 sec 5.2)
  * Set the minimum passlen of 20 characters (SP SP800-132 sec 5)
  * Add regression tests for the new PBKDF2 requirements.
  * Add gnutls-FIPS-pbkdf2-additional-requirements.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1700740800">- Security fix: [bsc#1217277, CVE-2023-5981]
  * Fix timing side-channel inside RSA-PSK key exchange.
  * auth/rsa_psk: side-step potential side-channel
  * Add curl-CVE-2023-5981.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492800">- Security fix: [bsc#1218865, CVE-2024-0553]
  * Incomplete fix for CVE-2023-5981.
  * The response times to malformed ciphertexts in RSA-PSK
    ClientKeyExchange differ from response times of ciphertexts
    with correct PKCS#1 v1.5 padding.
  * Add gnutls-CVE-2024-0553.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1705492801">- Security fix: [bsc#1218862, CVE-2024-0567]
  * gnutls: rejects certificate chain with distributed trust
  * Cockpit (which uses gnuTLS) rejects certificate chain with
    distributed trust.
  * Add gnutls-CVE-2024-0567.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1710936000">- jitterentropy: Release the memory of the entropy collector when
  using jitterentropy with phtreads as there is also a
  pre-intitization done in the main thread. [bsc#1221242]
  * Add gnutls-FIPS-jitterentropy-deinit-threads.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577600">- Security fix: [bsc#1221746, CVE-2024-28834]
  * gnutls: side-channel in the deterministic ECDSA
  * Add gnutls-CVE-2024-28834.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712577601">- Security fix: [bsc#1221747, CVE-2024-28835]
  * gnutls: certtool crash when verifying a certificate chain
  * Add gnutls-CVE-2024-28835.patch</changelog>
</package>
<package pkgid="93f8ed8803db00fa30836f1dd494751536dd181fe0385a3767754e1ec7ff844a" name="libgobject-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="b3b9d69523a97dad06f90a478f655ed554cf9d38f1d765e35bde256a6fdb2096" name="libgobject-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="5d2ef4afe362e009f5ead9130c488c66da901042ad3807d6dd119e67b80151b7" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.11.1"/>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
  <changelog author="mgorse@suse.com" date="1716292800">- Add patches to fix CVE-2024-34397 (boo#1224044):
  glib2-CVE-2024-34397.patch (glgo#GNOME/glib#3268).
  glib2-fix-ibus-regression.patch (glgo#GNOME/glib#3353)</changelog>
</package>
<package pkgid="23ad20843769b45ef75bdfa34ce82278a4c6814db31c8eadf086116a31f96b57" name="libgobject-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="16257a26c720e13656b60ad0e0990577a4e0db5362eccbe0581c3d6795907225" name="libgobject-2_0-0" arch="s390x">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="02e6a39d30930b834c1373177986fcf74ffba73dcc5c232db74ca3925a138c69" name="libgobject-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.70.5" rel="150400.3.8.1"/>
  <changelog author="dimstar@opensuse.org" date="1626350400">- Silence output in libgio-2_0-0 post scriptlet in case the
  ENV-mimeapps.list files do not exist: we are ready to create them
  in this case. An error message is only confusing.</changelog>
  <changelog author="yfjiang@suse.com" date="1627646400">- Drop patches fixed upstream on SLE and Leap 15.4:
  + glib2-add-support-for-slim-timezone-format.patch
  + glib2-fix-6-days-until-the-end-of-the-month.patch
  + glib2-CVE-2021-27218.patch
  + glib2-CVE-2021-27219-add-g_memdup2.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Add 63e7864.patch: Fix build with glibc 2.34: use 3 parameters
  for close_range (boo#1189088).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629460800">- Update to version 2.68.4:
  + Various bugfixes and backports from master.
  + Updated translations.
- Drop 63e7864.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1629720000">- Update to version 2.69.0:
  + Fix a crash in `GKeyFile` when parsing a file which contains
    translations using a `GKeyFile` instance which has loaded
    another file previously.
  + Ensure `dlerror()` is used with locking as it’s not thread-safe
    in some libc implementations.
  + Drop internal libpcre copy in favour of a subproject from
    wrapdb.
  + Optimise grefcount atomic operations.
  + Fix `g_date_time_format()` return value encoding if `LC_TIME`
    is not a UTF-8 locale but other locale settings are.
  + Set app name in freedesktop.org notifications with
    `GNotification`.
  + Add PKCS#11 flags to `GTlsPasswordFlags`.
  - Drop -Dinternal_pcre=false meson parameter: follow upstreams
    build recipe changes.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720001">- Update to version 2.69.1:
  + Support categories in desktop notifications (`GNotification`)
  + Add `GPowerProfileMonitor` for monitoring when to use less
    power (due to being on battery power, electricity being
    expensive or high-carbon, etc.)
  + Allow static names to be set for `GSource`s to avoid
    unnecessary string copies
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1629720002">- Update to version 2.69.2:
  + The `DBUS_SESSION_BUS_ADDRESS` environment variable is once
    more not used if the process is `AT_SECURE`
    (setuid/setgid/setcap); this change was previously applied and
    then reverted because it broke gnome-keyring
  + Add `g_test_fail_printf()`, `g_test_skip_printf()`,
    `g_test_incomplete_printf()` helper functions for printing
    messages when tests end prematurely
  + Add portal implementation of `GPowerProfileMonitor`
  + Various bugs fixed
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1631016000">- Update to version 2.69.3:
  + g_settings_schema_key_range_check() misbehaves for int versus
    bool.
  + Compiling anything with GCC &lt;4.6 spews deprecation warnings.
  + `g_invoke_closure` bindings API break..
  + GPowerProfileMonitorPortal does not notice initial
    power-saver-enabled status.
  + doc: Explicitly said, that no null term. is needed.
  + ci: Use C.UTF-8 locale on FreeBSD 12.
  + gio: Fix conditions in memory-monitor test.
  + Updated translations.</changelog>
  <changelog author="avvissu@yandex.by" date="1631016001">- desktop-file-utils: add Pantheon desktop environment</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.70.0:
  + Bug fixed: ci: Replace FreeBSD 11 with FreeBSD 13.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635422400">- Update to version 2.70.1:
  + Fix network changes not being signalled from NetworkManager.
  + Fix build when building with --fatal-meson-warnings.
  + Bugs fixed: glgo#GNOME/GLib#2505, glgo#GNOME/GLib!2245,
    glgo#GNOME/GLib!2253, glgo#GNOME/GLib!2256,
    glgo#GNOME/GLib!2259, glgo#GNOME/GLib!2262,
    glgo#GNOME/GLib!2271, glgo#GNOME/GLib!2276,
    glgo#GNOME/GLib!2300, glgo#GNOME/GLib!2301,
    glgo#GNOME/GLib!2302, glgo#GNOME/GLib!2304.
- Refresh patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636545600">- Stop passing fam=true to meson and drop gamin-devel
  BuildRequires, following upstream default. Following this, drop
  libgio-fam sub-package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1638532800">- Update to version 2.70.2:
  + Fix use of the default log writer with journald namespaces
  + Fix hang in `dbus-daemon` under `GTestDBus` when
    `G_MESSAGES_DEBUG=all` is set
  + Speed up `g_canonicalize_filename()` to avoid pathogenic cases
    with `..`
  + Fix URI for pcre subproject as it’s moved upstream
  + Fix storing GSettings dictionaries on macOS
  + Speed up ‘remove dot segments’ algorithm in `GUri` to avoid
    pathogenic cases with `..`
  + Fix infinite loops in D-Bus message parsing for truncated
    inputs
  + Improve correctness of version information returned by
    `g_get_os_info()` for Windows 10/Server 2019+
  + Bugs fixed: glgo#GNOME/GLib#2400, glgo#GNOME/GLib#2426,
    glgo#GNOME/GLib#2528, glgo#GNOME/GLib#2530,
    glgo#GNOME/GLib#2537, glgo#GNOME/GLib#2541,
    glgo#GNOME/GLib!2312, glgo#GNOME/GLib!2313,
    glgo#GNOME/GLib!2314, glgo#GNOME/GLib!2316,
    glgo#GNOME/GLib!2320, glgo#GNOME/GLib!2335,
    glgo#GNOME/GLib!2337, glgo#GNOME/GLib!2340,
    glgo#GNOME/GLib!2344, glgo#GNOME/GLib!2356,
    glgo#GNOME/GLib!2359, glgo#GNOME/GLib!2361,
    glgo#GNOME/GLib!2363, glgo#GNOME/GLib!2366,
    glgo#GNOME/GLib!2375, glgo#GNOME/GLib!2383.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643198400">- Update to version 2.70.3:
  + Several important fixes to FD handling in gspawn.
  + Several important fixes to GDBus message and GVariant parsing
    of invalid data.
  + Fix potential data loss due to missing fsync when saving files
    on btrfs.
  + Bugs fixed: glgo#GNOME/GLib#2503, glgo#GNOME/GLib#2506,
    glgo#GNOME/GLib#2557, glgo#GNOME/GLib#2572,
    glgo#GNOME/GLib#2580, glgo#GNOME/GLib!2394,
    glgo#GNOME/GLib!2415, glgo#GNOME/GLib!2437,
    glgo#GNOME/GLib!2444, glgo#GNOME/GLib!2455.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1644580800">- Update to version 2.70.4:
  + Bugs fixed: glgo#GNOME/GLib!2462 “Fix memory leak in
    gio/gdbusauthmechanismsha1.c” to glib-2-70.
  + Updated translations.</changelog>
  <changelog author="dmueller@suse.com" date="1646049600">- Split gtk-docs from -devel package, these are not needed
  during building projects using glib2
- Use _multibuild as the meson buildprocess is very awkward
  regarding the documentation - builds single-jobs only and
  twice (again during %install). This way the rest of distribution
  waiting for glib2-devel to be available is not blocked by this</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.70.5:
  Bugs fixed: glgo#GNOME/GLib#2620, glgo#GNOME/GLib!2537,
  glgo#GNOME/GLib!2555</changelog>
  <changelog author="alynx.zhou@suse.com" date="1680264000">- Add glib2-fix-normal-form-handling-in-gvariant.patch: Backported
  from upstream to fix normal form handling in GVariant.
  (CVE-2023-24593, CVE-2023-25180, bsc#1209714, bsc#1209713,
  glgo#GNOME/glib!3125)</changelog>
  <changelog author="alynx.zhou@suse.com" date="1681819200">- Update glib2-fix-normal-form-handling-in-gvariant.patch:
  Backported from upstream to fix regression on s390x.
  (bsc#1210135, glgo#GNOME/glib!2978)</changelog>
</package>
<package pkgid="5c866d24d60734f639bd7b06d4798e9ecba212958612322e90930d45614f02c5" name="libgstallocators-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="d163978223fdaef36112da9ec00458ab54fb2187a118b261267c24938e1fa220" name="libgstallocators-1_0-0" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="e93b11cd4454d84e758f38a6105e1d013d2fa43dfc5baf74a768ba8c7723dca6" name="libgstallocators-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="73607b80ea0cbe730808f6c3daffa2af130a7d9fe1aed7a9919cf94d389746f1" name="libgstapp-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="10a4f7c52031301ea579a8dbdea2e68df251cb627936e04349fffe58392ff208" name="libgstapp-1_0-0" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="b6276fe477857e171f6f74e3710ce6dc9b0dc87f67e4b068a4b85360e477ee62" name="libgstapp-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="bf9cbcae035e6d9a0fb86891b70bf059f1d97478cad6eb3d272fc632d8d90a5c" name="libgstaudio-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="c6879d3aa935650e92dd7121eb09265e154f2735737ac757ad314e31179b81d5" name="libgstaudio-1_0-0" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="682950756bd726b0272567946b1d45918cb37cbc9191485527f8534654cc03f6" name="libgstaudio-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="f56dede40a06cd3ace2ce6595ab790964d17c3d94cdea474747da9896343de73" name="libgstgl-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="bf08cb958c4123a528192263f331203239eb05065c3f83db60d76473be17c367" name="libgstgl-1_0-0" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="f441b4f4a1588f096959483c73f47e602f679607ffb9cb027a5531f7eab35f2e" name="libgstgl-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="fc7cd96307b853c53b8e7f895a0cfcec835047c41418bc040f0381bb6cab014b" name="libgstpbutils-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="b74636ce6305dcc691931bdc69793edad8d9862f7816710e4578a1ff930b52aa" name="libgstpbutils-1_0-0" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="c896ed114479ad0e301a9a55148472b37f0f34abf0bb5ada0da81ccc43bc7b54" name="libgstpbutils-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="644d391bc90a551ea835c8ed1235a76cfe3409608903ebbdcb09c8ddc211849c" name="libgstriff-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="6b070cbd899298816e4d77b31a1db43c199a93b9e337b9b04aaeb769cd29e115" name="libgstriff-1_0-0" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="f06d2afd05d6f6bc8f5735a735f11cf3b96f0aee3cf63071617e3a261757fae8" name="libgstriff-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="5b60211995cdaa0df01628e8b63ec487747a8424857ce726a19c62c46f78cdea" name="libgsttag-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="c581a38600503ef8d29bdd6192c2171f1cce7a00a5cf14dfacfbcbd64ec342be" name="libgsttag-1_0-0" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="7b450aec9a3764482c3a2a6c41fdb57f23011e169892255a91d0048430570e8a" name="libgsttag-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="e87810a53bdafa193e0d9f3049807b1f378547182869b21daa14cc1f72cd44a9" name="libgstvideo-1_0-0" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="8ee564225af2efac4e5700a1f6b8e0f695365aa7645f1add328b3bad6ac32172" name="libgstvideo-1_0-0" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="eb075b98c6a8af3c69ea3290902cd72204c707863bc178f9b3e35a64881252f6" name="libgstvideo-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1582718400">- Enable meson build conditionally for Tumbleweed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1583496000">- Add gstreamer-plugins-base-gl-deps.patch: Workaround incomplete
  gstreamer-gl.pc file, which is missing the (dynamic) dependency
  on wayland.</changelog>
  <changelog author="mgorse@suse.com" date="1588334400">- Remove is_opensuse conditionals / really enable orc on SLE 15
  (jsc#SLE-12265).</changelog>
  <changelog author="dimstar@opensuse.org" date="1598443200">- Do not recommend PackageKit-gstreamer-plugin: that package
  already supplements the combination of gstreamer-plugins-base
  and packagekit.</changelog>
  <changelog author="alarrosa@suse.com" date="1599048000">- Update to 1.18.0:
  + Highlights:
  - GstTranscoder: new high level API for applications to
    transcode media files from one format to another
  - High Dynamic Range (HDR) video information representation
    and signalling enhancements
  - Instant playback rate change support
  - Active Format Description (AFD) and Bar Data support
  - RTSP server and client implementations gained ONVIF trick
    modes support
  - Hardware-accelerated video decoding on Windows via
    DXVA2/Direct3D11
  - Microsoft Media Foundation plugin for video capture and
    hardware-accelerated video encoding on Windows
  - qmlgloverlay: New overlay element that renders a QtQuick
    scene over the top of an input video stream
  - imagesequencesrc: New element to easily create a video
    stream from a sequence of jpeg or png images
  - dashsink: New sink to produce DASH content
  - dvbsubenc: New DVB Subtitle encoder element
  - MPEG-TS muxing now also supports TV broadcast compliant
    muxing with constant bitrate muxing and SCTE-35 support
  - rtmp2: New RTMP client source and sink element from-scratch
    implementation
  - svthevcenc: New SVT-HEVC-based H.265 video encoder
  - vaapioverlay: New compositor element using VA-API
  - rtpmanager gained support for Google's Transport-Wide
    Congestion Control (twcc) RTP extension
  - splitmuxsink and splitmuxsrc gained support for auxiliary
    video streams
  - webrtcbin now contains some initial support for
    renegotiation involving stream addition and removal
  - RTP support was enhanced with new RTP source and sink
    elements to easily set up RTP streaming via rtp:// URIs
  - avtp: New Audio Video Transport Protocol (AVTP) plugin for
    Time-Sensitive Applications
  - Support for the Video Services Forum's Reliable Internet
    Stream Transport (RIST) TR-06-1 Simple Profile
  - Universal Windows Platform (UWP) support
  - rpicamsrc: New element for capturing from the Raspberry Pi
    camera
  - RTSP Server TCP interleaved backpressure handling
    improvements as well as support for Scale/Speed headers
  - GStreamer Editing Services gained support for nested
    timelines, per-clip speed rate control and the OpenTimelineIO
    format.
  - Autotools build system has been removed in favour of Meson
- Drop patches already included in upstream:
  * gst-base-audioencoder-fix-leak.patch
  * gst-base-fft-update-kiss-version.patch
  * gst-base-playbin-handle-error.patch
- Add patch to add wayland dependencies to tests to fix build:
  * add_wayland_dep_to_tests.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1602590400">- Add patch from gl#gstreamer/gst-plugins-base#221 to support two
  new CEA 608 caption formats:
  * MR-221-video-anc-add-two-new-CEA-608-caption-formats.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1603800000">- Update to 1.18.1:
  + Highlighted bugfixes in 1.18.1
  - important security fixes (bsc#1181255, CVE-2021-3185)
  - bug fixes and memory leak fixes
  - various stability and reliability improvements
  + gst-plugins-base changes:
  - theoradec: Set telemetry options only if they are nonzero
  - glslstage: delete shader on finalize of stage
  - urisourcebin: Fix crash caused by use after free
  - decodebin3: Store stream-start event on output pad before
    exposing it
  - Add some missing nullable annotations
  - typefind/xdgmime: Validate mimetypes to be valid
    GstStructure names before using them
  - uridecodebin3: Forward upstream events to decodebin3 directly
  - video-converter: Add fast paths from v210 to I420/YV12, Y42B,
    UYVY and YUY2
  - videoaggregator: Limit accepted caps by template caps
  - gstrtpbuffer: fix header extension length validation
  - decodebin3: only force streams-selected seqnum after a
    select-streams
  - videodecoder: don't copy interlace-mode from reference state
  - enable abi checks
  - multihandlesink: Don't pass NULL caps to gst_caps_is_equal
  - audio: video: Fix in/outbuf confusion of transform_meta
  - meson: Always wrap "prefix" option with join_paths() to make
    Windows happy
  - videoaggregator: ensure peek_next_sample() uses the correct
    caps
  - meson: Actually build gstgl without implicit include dirs
  - videoaggregator: Don't require any pads to be configured for
    negotiating source pad caps
  - gst-libs: gl: Fix documentation typo and clarify
    gl_memory_texsubimage
  - audioaggregator: Reset offset if the output rate is
    renegotiated
  - video-anc: Implement transform functions for AFD/Bar metas
  - appsrc: Wake up the create() function on caps changes
  - rtpbasepayload: do not forget delayed segment when forwarding
    gaps</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607515200">- Update to version 1.18.2:
  + gl/eagl: internal view resize fixes for glimagesink
  + video-converter: increase the number of cache lines for
    resampling, fixes significant color issues and artefacts with
    "special" resizing parameters in compositor
  + compositor: Don't crash in prepare_frame() if the pad was just
    removed
  + decodebin3: Properly handle caps query with no filter
  + videoaggregator:
  - Guarantee that the output format is supported
  - Fix locking around vagg-&gt;info
  - Fix renegotiation when using convert pad
  - document and fix locking in convert pad
  + gluploadelement:
  - Avoid race condition of base class' context
  - Avoid race condition of inside upload creation
  + gl: Fix prototype of glGetSynciv()
  + tcpserversink: Don't assume g_socket_get_remote_address()
    succeeds
  + audiodecoder, videodecoder: Don't reset max-errors property
    value in reset()
  + audioencoder: Fix incorrect GST_LOG_OBJECT usage
  + pbutils: Fix segfault when using invalid encoding profile
  + g-i: videometa: gir annotate the size of plane array in new API
  + examples/gl/gtk: Add missing dependency on gstgl
  + video: fix doc warning.
- Fix the _service file and spec to really use the tarball
  generated by service.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610798400">- Update to version 1.18.3:
  + audiorate: Make buffer writable before changing its metadata
  + compositor: fix blending of subsampled components
  + decodebin3:
  - When reconfiguring a slot make sure that the ghostpad is
    unlinked
  - Release selection lock when pushing EOS
  + encodebasebin: Ensure that parsers are compatible with selected
    encoders
  + tagdemux: resize and trim buffer in place to fix interaction
    with oggdemux
  + videoaggregator: Pop out old buffers on timeout
  + video-blend: fix blending 8-bit and 16-bit frames together
  + appsrc: fix signal documentation
  + gl: document some GL caps specifics
  + libvisual: workaround clang compiler warning</changelog>
  <changelog author="alarrosa@suse.com" date="1617105600">- Update to version 1.18.4:
  + tag: id3v2: fix frame size check and potential invalid reads
  + audio: Fix gst_audio_buffer_truncate() meta handling for non-interleaved audio
  + audioresample: respect buffer layout when draining
  + audioaggregator: fix input_buffer ownership
  + decodebin3: change stream selection message owner, so that the app sends the stream-selection event to the right element
  + rtspconnection: correct data_size when tunneled mode
  + uridecodebin3: make caps property work
  + video-converter: Don't upsample invalid lines
  + videodecoder: Fix racy critical when pool negotiation occurs during flush
  + video: Convert gst_video_info_to_caps() to take self as const ptr
  + examples: added qt core dependency for qt overlay example</changelog>
  <changelog author="dmueller@suse.com" date="1620475200">- don't own appdata dir - comes from filesystem rpm</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Add 90903917.patch: Fix build with meson &gt;= 0.58.0rc1</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631707200">- Update to version 1.18.5:
  + appsrc: Don't leak buffer list while wrongly unreffing buffer
    on EOS/flushing
  + audioaggregator:
  - Don't overwrite already written samples
  - Resync on the next buffer when dropping a buffer on discont
    resyncing
  + audiobasesink: Fix of double lock release
  + audiobasesrc: Fix divide by zero assertion
  + clockoverlay: Fix broken string formatting by strftime() on
    Windows
  + compositor: Fix NV12 blend operation
  + giosrc: Don't leak scheme string in gst_gio_src_query()
  + giobasesink: Handle incomplete writes in
    gst_gio_base_sink_render()
  + gl/wayland:
  - Use consistent wl_display when creating work queue for proxy
    wrapper
  - Provide a dummy global_remove function
  + gl: Fix build when Meson &gt;= 0.58.0rc1
  + playbin2: fix base_time selection when flush seeking live (such
    as with RTSP)
  + rtspconnection:
  - Add IPv6 support for tunneled mode
  - Consistently translate GIOError to GstRTSPResult (for
    rtspsrc)
  + rawbaseparse: check destination format correctly
  + uridecodebin: Don't force floating reference for future
    reusable decodebin
  + parsebin: Put stream flags in GstStream
  + splitmuxsink: always use factory property when set
  + video-converter: Set up matrix tables only once.
  + videoscale: Performance degradation from 1.16.2 -&gt; 1.18.4
  + videotestsrc: Fix a leak when computing alpha caps
  + audio/video-converter: Plug some minor leaks
  + audio,video-format: Make generate_raw_formats idempotent for
    assertions
  + Don't use volatile to mean atomic (fixes compiler warnings with
    gcc 11)
  + Fix build issue on MinGW64
- Drop 90903917.patch: Fixed upstream.</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1631793601">- Stop building doc sub-package, we will in the future use
  upstreams own standalone doc package. Following this: Drop
  fdupes, gtk-doc and hotdoc BuildRequires, and fdupes call, no
  longer needed nor usefull.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976000">- Update to version 1.18.6:
  + tagdemux: Fix crash when presented with malformed files
    (security fix)
  + videoencoder: make sure the buffer is writable before modifying
    metadata
  + video-converter: Fix for broken gamma remap with high bitdepth
    YUV output
  + sdpmessage: fix mapping single char fmtp params
  + oggdemux: fix a race in push mode when performing the duration
    seek
  + uridecodebin: Fix critical warnings
  + audio-converter: Fix resampling when there's nothing to output
  + tcp: fix build on Solaris
  + uridecodebin3: Nullify current item after all play items are
    freed.
  + audio-resampler: Fix segfault when we can't output any frames
  + urisourcebin: Handle sources with dynamic pads and pads already
    present
  + playbin2/3: autoplug/caps: don't expand caps to ANY
  + uridecodebin3/urisourcebin: Reusability fixes
  + rtspconnection: Only reset timeout when socket is unused
  + gstvideoaggregator.c: fix build with gcc 4.8
- Drop service, use source url, upstream changes in git.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1643976001">- Update to version 1.20.0:
  + Development in GitLab was switched to a single git repository
    containing all the modules
  + GstPlay: new high-level playback library, replaces GstPlayer
  + WebM Alpha decoding support
  + Encoding profiles can now be tweaked with additional
    application-specified element properties
  + Compositor: multi-threaded video conversion and mixing
  + RTP header extensions: unified support in RTP depayloader and
    payloader base classes
  + SMPTE 2022-1 2-D Forward Error Correction support
  + Smart encoding (pass through) support for VP8, VP9, H.265 in
    encodebin and transcodebin
  + Runtime compatibility support for libsoup2 and libsoup3
    (libsoup3 support experimental)
  + Video decoder subframe support
  + Video decoder automatic packet-loss, data corruption, and
    keyframe request handling for RTP / WebRTC / RTSP
  + mp4 and Matroska muxers now support profile/level/resolution
    changes for H.264/H.265 input streams (i.e. codec data changing
    on the fly)
  + mp4 muxing mode that initially creates a fragmented mp4 which
    is converted to a regular mp4 on EOS
  + Audio support for the WebKit Port for Embedded (WPE) web page
    source element
  + CUDA based video color space convert and rescale elements and
    upload/download elements
  + NVIDIA memory:NVMM support for OpenGL glupload and gldownload
    elements
  + Many WebRTC improvements
  + The new VA-API plugin implementation fleshed out with more
    decoders and new postproc elements
  + AppSink API to retrieve events in addition to buffers and
    buffer lists
  + AppSrc gained more configuration options for the internal queue
    (leakiness, limits in buffers and time, getters to read current
    levels)
  + Updated Rust bindings and many new Rust plugins
  + Improved support for custom minimal GStreamer builds
  + Support build against FFmpeg 5.0
  + Linux Stateless CODEC support gained MPEG-2 and VP9
  + Windows Direct3D11/DXVA decoder gained AV1 and MPEG-2 support
  + Lots of new plugins, features, performance improvements and bug
    fixes
- Rebase add_wayland_dep_to_tests.patch.
- Drop gstreamer-plugins-base-gl-deps.patch: Fixed upstream
- Stop using service due to upstreams new mono-repo, just use
  tarballs for now.</changelog>
  <changelog author="alarrosa@suse.com" date="1647604800">- Update to version 1.20.1:
  + typefindfunctions: Fix WebVTT format detection for very short
    files
  + gldisplay: Reorder GST_GL_WINDOW check for egl-device
  + rtpbasepayload: Copy all buffer metadata instead of just
    GstMetas for the input meta buffer
  + codec-utils: Avoid out-of-bounds error
  + navigation: Fix Since markers for mouse scroll events
  + videoaggregator: Fix for unhandled negative rate
  + videoaggregator: Use floor() to calculate current position
  + video-color: Fix for missing clipping in PQ EOTF function
  + gst-play-1.0: Fix trick-mode handling in keyboard shortcut
  + audiovisualizer: shader: Fix out of bound write</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1648296000">- Add 5a074a11f90e3d70b24bf0c535ab0480fad9e701.patch: playsink:
  Complete reconfiguration on pad release.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="alarrosa@suse.com" date="1690891200">- Add patch from upstream to fix FLAC file parsing integer overflow
  remote code execution vulnerability (bsc#1213128,
  CVE-2023-37327):
  * 0001-flacparse-Avoid-integer-overflow-in-available-data-check.patch
- Add patch from upstream to fix PGS file parsing heap-based buffer
  overflow remote code execution vulnerability (bsc#1213131,
  CVE-2023-37328):
  * 0002-subparse-Look-for-the-closing-_-of-a-tag-after-the.patch</changelog>
</package>
<package pkgid="95862cb1ba11e3c83b48b3e7190080422f0e2e1629f24bb0f64d5da7937f838b" name="libgtk-3-0" arch="aarch64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="ba4960e73bd0a4e3e8fd93f378a42737bacfb46ef865d72c90b2ee293ef233b8" name="libgtk-3-0" arch="s390x">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="8a589307a9d0622efe94ab99c6139f6cf95c57b5ff4ea34a359c76aa8053e0b1" name="libgtk-3-0" arch="x86_64">
  <version epoch="0" ver="3.24.34" rel="150400.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1602763200">- Pass --disable-tracker3 to configure: This disables the tracker
  search integration in the file open dialog, but avoids crashes in
  apps loading GTK3 and still using Tracker.</changelog>
  <changelog author="dimstar@opensuse.org" date="1606219200">- Update to version 3.24.23+118:
  + cssnode: Bail out nicely if there is no settings (#2780).
  + gdk/wayland: Add support for primary-selection-unstable-v1
    (#2591).
  + wayland: Emit dummy configure event when resizing while fixed.
  + colorchooser: Backport the new color palette.
  + gdk: Fix parent relative background crash.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1607342400">- Update to version 3.24.24:
  + GtkColorChooser: Update the default color palette.
  + GtkFontChooser: Fix family-only mode to return regular style.
  + GtkTreeView: Don't set focus-on-click for header buttons.
  + Accessibility:
  - Implement scrollSubstringTo.
  - Add a11y support to GtkPlug/GtkSocket.
  + Printing: Allow the lpr backend to print pdf and ps files.
  + Theme:
  - Update gesture graphics.
  - Update HighContrast css.
  + Wayland: Support the primary-selection-unstable-v1 protocol.
  + X11: Fix a crash with parent-relative backgrounds.
  + Broadway: Set modifier state of scroll events.
  + Build: Fix pc file generation on NixOS.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1613131200">- Update to version 3.24.25:
  + Settings: Make cursor aspect ratio setting work.
  + Broadway:
  - Fix touchscreen event handling.
  - Support Android / Chrome on-screen keyboard.
  + Wayland:
  - Avoid crashes with tablet input.
  - Add api to support clients with subsurfaces better.
  + Inspector: Make the inspector available in non-debug builds.
  + Theme:
  - Make scrollbars larger.
  - Disable shadows on maximized, fullscreen and tiled windows.
  + Printing: Support Avahi-discovered printers better.
  + Input:
  - Show preedit for compose sequences.
  - Support long compose sequences.
  - Support compose sequences producing multiple characters.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1614340800">- Update to version 3.24.26:
  + Input:
  - Fix a few oversights in Compose file parsing.
  - Fine-tune Compose preedit display.
  + Theme:
  - Fine-tune scrollbar size and transitions.
  - Reinstate invisible borders for tiled windows.
  + Wayland: Fix a problem with font settings not being found.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1615982400">- Update to version 3.24.27:
  + Input: Ensure preedit-start and preedit-end are emitted
    properly.
  + GtkScrolledWindow: Revert a change that broke touch scrolling.
  + Theme:
  - Fix a problem with size changes in SSD decorations that
    caused mutter crashes
  - Use transparent black for window border in the dark theme.
  + Updated translations.</changelog>
  <changelog author="qkzhu@suse.com" date="1619006400">- Add gtk3-prevent-g_file_get_basename-return-NULL.patch:
  + Fix a possible crash in gtk_show_uri
    (boo#1185082, glgo#GNOME/gtk!3458).</changelog>
  <changelog author="dimstar@opensuse.org" date="1619092800">- Update to version 3.24.28:
  + Input: Improve dead key handling.
  + CSS: Fix rendering of scaled text shadows.
  + Wayland: Fix matching of accelerators with multiple layouts.
  + X11: Trap errors from the COW.
  + Build: Make gtk3-update-icon-cache output reproducible.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1619179200">- Update to version 3.24.29:
  + Input:
  - Look for a Compose file in the right place.
  - Revert some Compose sequence changes (mainly around dead
    acute and apostrophe).
  - Consume all key events during preedit, to avoid unexpected
    interactions.
  - Ignore more modifiers during preedit, to allow using 3rd and
    5th level choosers.
  - Fix handling of cursor positions in non-ASCII preedit text.
  + GtkSpinButton: Interpret localized digits.
  + GtkScale: Fix sporadic criticals.
  + GtkScrolledWindow:
  - Cancel overshoot on size changes.
  - Avoid criticals with non-overlay scrollbars.
  + GtkFileChooser: Handle smb mounts better.
  + GtkListBox: Fix extending multi-selections.
  + Fix a possible crash in gtk_show_uri.
  + Wayland: Improve font settings fallback.
  + X11:
  - Avoid log spam on exit.
  - Don't beep on untrusted displays.
  + Updated translations.
- Drop gtk3-prevent-g_file_get_basename-return-NULL.patch: fixed
  upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1625832000">- Update to version 3.24.30:
  + Input:
  - Ignore NoSymbol key events (happens with some XKB options).
  - Fix incomplete reset in some cases.
  + GtkEmojiChooser:
  - Update data from CLDR 39.
  - Support translated keywords for multiple languages.
  - Allow inserting multiple Emoji with Ctrl.
  - Match keywords for search.
  - Fix a memory leak.
  + GtkFileChooser: Accessibility improvements.
  + GtkTreeView:
  - Fix an accessibility-related memory leak.
  - Fix assertion failures in some cases.
  + Printing: Remove the Google Cloud Print backend, since the
    service was shut down.
  + Wayland: Work with pointer-gestures v1 protocol.
  + Updated translations.</changelog>
  <changelog author="yfjiang@suse.com" date="1627905600">- Drop patch fixed upstream on SLE and Leap 15.4:
  gtk3-x11-fix-menu-touch-by-pointer-emulation.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="dimstar@opensuse.org" date="1640088000">- Update to version 3.24.31:
  + input: Fix a crash with touch on GtkScale.
  + clipboard: Avoid a double-free.
  + css: Avoid a crash with radial gradients.
  + GtkFileChooser: Don't leak search results.
  + GtkTextView: Support css letterspacing.
  + Wayland:
  - Reset position when hiding popups.
  - Ignore globals we did not bind ourselves.
  - Avoid infinite loops when hiding surfaces.
  - Avoid clipboard-related lockups.
  + X11:
  - Trap errors while doing XRANDR calls.
  - Support touchpad gestures with XI 2.4.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646395200">- Update to version 3.24.32:
  + GtkCellRendererProgress: Use tabular figures.
  + GtkFontChooser:
  - Fix the build with older Pango.
  - Fix axis name handling.
  + Theme: Fix border color for tiled windows.
  + Accessibility: Fix cell accessible leak.
  + Wayland:
  - Support new high-contrast setting.
  - Only update scale when on any outputs.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646481600">- Update to version 3.24.33:
  + No changes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1648123200">- Update to version 3.24.33+12:
  + icons: add legacy icons (boo#1197480).
  + Updated translations.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1652961600">- Update to version 3.24.34:
  + Include legacy hicolor icons.
  + Fix the build with gcc 12.
  + X11: Trap errors when getting output properties.
  + Wayland: Ignore empty preedit updates. This fixes a problem
    with textview scrolling.
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1655467200">- Add dependency "python3x-gobject-Gdk if python3x-gobject" to the
  typelib package (boo#1200614).</changelog>
  <changelog author="yfjiang@suse.com" date="1656936000">- Add compatible dependency "python3-gobject-Gdk if python3-gobject"
  to the typelib package for SLE and Leap (boo#1200614).</changelog>
  <changelog author="mwilck@suse.com" date="1685707200">- Fix nautilus crash after entering wrong SMB password (bsc#1211952)
  * add gtk3-gtkmountoperation-avoid-SEGV-after-bad-password-inpu.patch</changelog>
</package>
<package pkgid="93c6e068d7e1d3d7179ba0da4b69b4eac92e3f3a4dc68a3866f1e472fdce95c2" name="libharfbuzz-gobject0" arch="aarch64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="7e60f74ebdb3c1ee7597b8726a1528ac63ad13aa2428c1dd5672e77a221c40bf" name="libharfbuzz-gobject0" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="599907df87599767d39f0ef35a6bb5436e8186a3e1a3012f99d8528d29a1af78" name="libharfbuzz-gobject0" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="c92c23512df2313de55d8db8cc8d16c92c4b78255bf9f3322866d0a97fcb2c64" name="libharfbuzz0" arch="aarch64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="73ceb5906cf7f4ce4efaf1b7f42b5f84a2edb8b8c94e6bc4ca3885bcd4cf0708" name="libharfbuzz0" arch="s390x">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="66c3f4ab064d3e5b9a8c9584c1d7151758acf3280413ee703f19d4eefda02474" name="libharfbuzz0" arch="x86_64">
  <version epoch="0" ver="3.4.0" rel="150400.3.8.1"/>
  <changelog author="andreas.stieger@gmx.de" date="1591185600">- Update to version 2.6.7:
  + Update to Unicode 13.0.0
  + Fix hb_ot_layout_get_ligature_carets for fonts without lcar
    table
- includes fixes from 2.6.6:
  * A fix in AAT kerning for Geeza Pro</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1592913600">- update to 2.6.8:
  + New API to fetch glyph alternates from GSUB table
  + New API +hb_ot_layout_lookup_get_glyph_alternates()
- Drop gpg2 BuildRequires and stop verifying signature during
  build: upstream no longer signs the tarball/signature.</changelog>
  <changelog author="dmueller@suse.com" date="1600344000">- Update to version 2.7.2:
  + Fix a regression in the previous release that caused a crash
    with Kaithi.
  + More OOM fixes.
  + ot-funcs now handles variable empty glyphs better when
    hvar/vvar isn't present.
  + Reverted a GDEF processing regression.
  + A couple of fixes to handle OOM better.
  + Use an implementation for round that always rounds up, some
    minor fluctuations are expected on var font specially when
    hb-ot callback is used.
  + Fix an AAT's `kerx` issue on broken rendering of Devanagari
    Sangam MN.
  + Remove AAT's `lcar` table support from _get_ligature_carets
    API, not even much use on macOS installed fonts (only two
    files). GDEF support is the recommended one and expected to
    work properly after issues fixed two releases ago.
  - Minor memory fixes to handle OOM better specially in hb-ft.
  - Minor .so files versioning scheme change and remove
    stable/unstable scheme differences, was never used in practice
    (always default to stable scheme).
  - We are now suggesting careful packaging of the library using
    meson, https://github.com/harfbuzz/harfbuzz/wiki/Notes-on-migration-to-meson
    for more information.
  - Distribution package URL is changed, either use GitHub
    generated tarballs,
    `https://github.com/harfbuzz/harfbuzz/archive/$pkgver.tar.gz`
    or, even more preferably use commit hash of the release and git
    checkouts like,
    `git+https://github.com/harfbuzz/harfbuzz#commit=$commit`</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1609070400">- Update to version 2.7.4:
  + Fix missing --enable-introspection configure option
- Changes from version 2.7.3:
  + Update USE shaper to 2020-08-13 specification, and other
    improvements
  + Don’t disable liga feature in myanmar shaper, to match
    Uniscribe
  + Improvements to language and script tags handling.
  + Update language system tag registry to OpenType 1.8.4
  + Support for serializing and deserializing Unicode buffers
  + Increase buffer work limits to handle fonts with many complex
    lookups
  + Handle more shaping operations in trace output
  + Memory access fixes
  + More OOM fixes
  + Improved documentation.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1610107200">- Switch to meson buildsystem:
  + Add meson BuildRequires and macros.
  + Replace gcc-c++ for generic c++_compiler BuildRequires.
  + Add meson_test macro in check section, run tests during build.
  + Drop pkgconfig(graphite2) BuildRequires: No longer build
    graphite2 support, following upstream that disables this by
    default.
  + Stop packaging gtk-docs, pass -Ddocs=disabled to meson, this
    way we might avoid a build-cycle and since we did not have a
    explicit docs subpackage, just silently drop them.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Re-enable graphite2 support: TexLive relies on this to be
  present:
  + Pass -Dgraphite=enabled to meson.
  + Add pkgconfig(graphite2) BuildRequires.</changelog>
  <changelog author="christophe@krop.fr" date="1618315200">- Update to version 2.8.0:
  + Shape joining scripts other than Arabic/Syriac using the
    Universal Shaping Engine. Previously these were shaped using
    the generalized Arabic shaper.
  + Fix regression in shaping of U+0B55 ORIYA SIGN OVERLINE.
  + Update language tags.
  + Variations: reduce error: do not round each interpolated delta.
  + Documentation improvements.
  + Subsetter improvements: subsets most, if not all, lookup types
    now.
  + Fuzzer-found fixes and other improvements when memory failures
    happen.
  + Removed most atomic implementations now that we have C++11
    atomic impl.
  + General codebase upkeep; using more C++11 features: constexpr
    constructors, etc.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620302400">- Update to version 2.8.1:
  + Subsetter now fully supports GSUB/GPOS/GDEF tables (including
    variations); as such, layout tables are retained by subsetter
    by default
  + hb-view supports iTerm2 and kitty inline image protocols
    it can also use Chafa for terminal graphics if available
- Add  pkgconfig(chafa): new, optional depdency.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1626264000">- Update to version 2.8.2:
  + Shaping LTR digits for RTL scripts now makes the native
    direction of the digits LTR, applying shaping and positioning
    rules on the same glyph order as Uniscribe
  + Subsetting COLR v1 and CPAL tables is now supported
  + Various fixes and improvements to the subsetter
  + When applying morx table, mark glyph widths should not be zeroed
  + GPOS is preferred over kerx, if GSUB was applied
  + Regional_Indicator pairs are grouped together when clustering</changelog>
  <changelog author="dimstar@opensuse.org" date="1626523200">- Drop pkgconfig(chafa) BuildRequires for now: causes a cycle
  between chafa and harfbuzz, and disable it in meson</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631448000">- harfbuzz 2.9.1:
  + Subsetter API close to stable
  + Various fuzzer-found bug fixes
  + hb_buffer_append() now handles the pre- and post-context which
    previously were left unchanged in the destination buffer
  + hb-view / hb-shape now accept following new arguments:
  - -unicodes: takes a list of hex numbers that represent Unicode
    codepoints.
  + Undeprecated API: hb_set_invert()
- includes changes from 2.9.0:
  + Support multiple variation axes with same tag, aka HOI
  + The coretext testing shaper now passes font variations to
    CoreText
  + hb-shape/hb-view does not break line at new lines unless text
    is read from file
  + hb-view and hb-subset has a --batch now, similar to hb-shape
  + The --batch mode now uses ; as argument separator instead of :
    used previously
  + The --batch in hb-shape does not expect 0th argument anymore.
    That is, the lines read are interpreted as argv[1:], instead
    of argv[0:].
  + The --batch option has been undocumented. We are ready to
    document it; send feedback if you find it useful
  + hb-subset got arguments revamps. Added much-requested
  - -gids-file, --glyphs, --glyphs-file, --unicodes-file,
    supporting ranges in --unicodes.
  + Various bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1631966400">- harfbuzz 3.0.0:
  + Unicode 14.0 support
  + hb-subset API and harfbuzz-subset ABI now declared stable
  + hb-style API is now stable</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1636200000">- harfbuzz 3.1.0:
  * Better offset-overflow handling in the subsetter library
  * Improved Unicode 14 properties in the USE shaper, and various
    other USE shaper fixes
  * MATH and COLR v1 tables subsetting support, and various other
    subsetter fixes
  * Support for Pwo Karen / Ason Chin medial la. (Simon Cozens)
  * Apply GPOS positioning when substituting with morx table, if
    kerx is missing
  * Apply calt and clig features across syllable boundaries in
    Indic shaper
  * Meson option for enabling Graphite 2 has been renamed to
    graphite2
  * Build and documentation fixes
- add harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636459200">- Update to version 3.1.1:
  + Work around GCC cast-align error/warning on some platforms.
  + Documentation improvements.
- Drop patch fixed upstream:
  + harfbuzz-3.1.0-work-around-GCC-cast-align-error-warning.patch</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742400">- Update to 3.1.2:
  + hb-shape / hb-view: revert treating text on the commandline as
    single paragraph (was introduced in 3.0.0); add new
  - -single-par to do that
  + Subsetter bug fixes</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1639742401">- Update to 3.2.0:
  + Fixed shaping of Apple Color Emoji flags in right-to-left context
  + Fixed positioning of CFF fonts in HB_TINY profile
  + OpenType 1.9 language tags update
  + Add HB_NO_VERTICAL config option
  + Add HB_CONFIG_OVERRIDE_H for easier configuration
  + Improved packing of cmap, loca, and Ligature tables
  + Significantly improved overflow-resolution strategy in the repacker</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644235200">- update to 3.3.2:
  + Revert splitting of pair positioning values introduced in 3.3.0
    as it proved problematic
- includes changes from 3.3.1:
  + Fix heap-use-after-free in harfbuzz-subset introduced in
    previous release
- includes changes from 3.3.0:
  + Improved documentation, code cleanup
  + The low 16-bits of face index will be used by hb_face_create()
    to select a face inside a font collection file format, while the
    high 16-bits will be used by hb_font_create() to load the named
    instance
  + Glyph positions and other font metrics now apply synthetic slant
    set by hb_font_set_synthetic_slant(), for improved positioning
    for synthetically slanted fonts
  + Fixed unintentional locale dependency in hb_variation_to_string()
    for decimal point representation
  + When applying pair positioning (kerning) the positioning value
    is split between the two sides of the pair for improved cursor
    positioning between such pairs
  + Introduced new HB_GLYPH_FLAG_UNSAFE_TO_CONCAT, to be used in
    conjunction with HB_GLYPH_FLAG_UNSAFE_TO_BREAK for optimizing
    re-shaping during line breaking. Check the documentation for
    further details
  + Improved handling of macrolanguages when mapping BCP 47 codes
    to OpenType tags</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1644753600">- update to 3.4.0:
  + Perform sanity checks on shaping results is now part of
    “harfbuzz” library and can be enabled by setting the buffer
    flag HB_BUFFER_FLAG_VERIFY
  + Arabic Mark Transient Reordering Algorithm have been updated
    to revision 6
  + ISO 15924 code for mathematical notation, ‘Zmth’, now maps to
    the OpenType ‘math’ tag
  + It is now possible to get at once all math kerning values for a
    given glyph at a given corner
  + Fix locale_t portability issues on systems the typedef’s it to
    a void pointer</changelog>
  <changelog author="mgorse@suse.com" date="1658836800">- Add harfbuzz-CVE-2022-33068.patch: sbix: limit glyph extents
  (boo#1200900 CVE-2022-33068).</changelog>
  <changelog author="mgorse@suse.com" date="1680696000">- Add CVE-2023-25193.patch: limit how far we skip when looking
  back (bsc#1207922 CVE-2023-25193).</changelog>
</package>
<package pkgid="640dc5537f46180fe10441a830a0d37ee0d6aed133909b55c348dc3170358784" name="libhidapi-hidraw0" arch="aarch64">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="7c1a4f1cebe3600c2aaf8e77b25f9156f413080df5f9c4b9bc20d566f7ccd501" name="libhidapi-hidraw0" arch="ppc64le">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="a2f8d85938caba5b11b24866bd2abe5412d2638fd18033be6fa4776712d3b1fe" name="libhidapi-hidraw0" arch="s390x">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="15574cf563aa7c442ba4f7f4d11f7f53e092ed3792de808ad7cb239e0d34fb95" name="libhidapi-hidraw0" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="150300.3.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1390824000">- Initial version</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1394798400">- Add do_not_install_docs.patch: don't let make install docs</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1395662400">- Supply LICENSE files with libraries</changelog>
  <changelog author="luca@z3ntu.xyz" date="1563796800">- Update to 0.9.0
- Switch upstream to libusb/hidapi because the original maintainer is not active anymore</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1563796801">- Use disabled services to follow Factory guidelines.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580731200">- BuildRequire pkgconfig(libudev) instead of libudev-devel: allow
  OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="jgwang@suse.com" date="1610366400">- Update to version 0.10.1
  * Add FreeBSD/macOS/MinGW/Alpine/Arch Linux/Windows CI
  * Add hid_version/hid_version_str API (#192)
  * Add podspec to support releases via cocoapods
  * Add support for HID over I2C and uhid devices (#166)
  * Fix small casting issue
  * Fix race condition on device close (#189)
  * Fix API prototype for gcc flag -Wstrict-prototypes (#207)
  * Fix strict typecast (#206)
  * Fix -Wall -Wextra -pedantic -Werror compilation (#214) ￼…
  * Drop workaround for kernel &lt; 2.6.34
  * Use pkg-config to find libusb on *freebsd
  * Reattach kernel driver in hidapi-libusb
  * Move local variable declaration to the beginning of the function</changelog>
</package>
<package pkgid="3625187d30c7d9d8be04e5f0a8c330bc7f954a52c40fdbea72ee0811d09735f0" name="libhugetlbfs" arch="aarch64">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="848647d3fccf472963f9a760bf901c91c40ede5f7210be8421aa1f345d7896c2" name="libhugetlbfs" arch="s390x">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="99fa0a009a1e86201bb0650a2474fac206e67ac17baed7c8b9d6ccaf79806e02" name="libhugetlbfs" arch="src">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="meissner@novell.com" date="1306670400">- Do not include the 268MB testcase /usr/lib/libhugetlbfs/tests/obj32/linkhuge_rw.</changelog>
  <changelog author="tabraham@novell.com" date="1318420800">- Update to version 2.12
  * libhugetlbfs usages can now be restricted to certain binary names
  * libhugetlbfs now supports static linking
  * hugeadm uses more human readable directory names for mount points
  * Fix segfault if specified user was not in passwd, failuer in
    getpwuid() is now checked
  * Added tests for static linking to testcase
  * Added missing tests to driver script</changelog>
  <changelog author="tabraham@novell.com" date="1334059200">- Update to version 2.13
  * hugeadm can now be used to control Transparent Huge Page tunables
  * New morecore mode to better support THP
  * Check permissions on hugetlbfs mount point before marking it as
    available
  * Fix shm tests to use random address instead of fixed, old address
    failed on ARM</changelog>
  <changelog author="adrian@suse.de" date="1342008000">- Add excludearch for arm due to lacking support</changelog>
  <changelog author="trenn@suse.de" date="1358942400">- Update to version 2.15
  Features:
  * Some System z functionality went into 2.15
  * Updated man pages
  * Added basic events for core_i7 to oprofile_map_events
  Fixes:
  * Disable Unable to verify address range warning when offset &lt; page_size
  * Remove sscanf in library setup to avoid heap allocation before _morecore
  override
  * Revert heap exhaustion patch
  * hugectl no longer clips LD_LIBRARY_PATH variable
  * Fix clean on failure code to avoid closing stdout</changelog>
  <changelog author="trenn@suse.de" date="1363003200">- Update to version 2.16:
  Features:
  * ARM Support
  * s390x Dynamic TASK_SIZE support
  Bug Fixes:
  * find_mounts() now properly NULL terminates mount point names</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1389441600">- Add support of ppc64le with 4 patches
  libhugetlbfs-ppc64le.patch
  libhugetlbfs.ppc64le.step2.patch
  libhugetlbfs.ppc64le.step3.patch
  libhugetlbfs.ppc64le.step4.patch</changelog>
  <changelog author="trenn@suse.de" date="1392033600">- There are no tests installed in s390(x) case, therefore there are no
  files in %{_libdir}/libhugetlbfs
  Remove the directory from the file list to fix package build for s390(x)</changelog>
  <changelog author="trenn@suse.de" date="1392120000">- Tests compile fine for s390(x), also include them in the package, the same
  way it is done for other archs as well.</changelog>
  <changelog author="dmueller@suse.com" date="1395835200">- update to 2.17:
  * PPC segement alignment restrictions can be disabled
  * Added Aarch64 support
  * Allow compiler overrides for 64 and 32 bit builds
  * hugeadm now handles /etc/mtab being a simlink properly
  * ppc64 fixes
- remove libhugetlbfs.ia64-libdir.patch:
  ia64 is no longer supported by openSUSE
- add ignore-perl-modules.diff: do not install perl modules, unused
  and are installed in the wrong place to be found anyway
- add ARM support
- add disable-rw-on-non-ldscripts.diff: Skip rw tests
- Do not install tests anymore</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="99f55413d4e19d3f9610c85e705c9c992523a75ab8d7c8f66c9d94a7b82cba8a" name="libhugetlbfs" arch="x86_64">
  <version epoch="0" ver="2.20" rel="150000.3.8.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1424433600">- update to 2.18
  to solve build failures for ppc/ppc64.
  remove following patches now included in 2.18:
    libhugetlbfs-ppc64le.patch
    libhugetlbfs.ppc64le.step2.patch
    libhugetlbfs.ppc64le.step3.patch
    libhugetlbfs.ppc64le.step4.patch
- Add fix_plt_extrasz_always_returning_0_on_ppc64le.patch
  already upstream.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435060800">- Add libhugelbfs-2.18-restrict-is-a-reserved-word.patch which
  fixes compilation with GCC 5 (and C99/C11 in general).
  * Add libhugetlbfs-2.18-restrict-is-a-reserved-word.patch</changelog>
  <changelog author="fvogt@suse.com" date="1446811200">- Latest version from git next branch</changelog>
  <changelog author="fvogt@suse.com" date="1446811201">- Add zero_filesize_segment.patch to fix testcase on s390x
- Fixes bnc#919680
- Patches already included mainline and now deleted:
  D libhugetlbfs-2.18-restrict-is-a-reserved-word.patch
  D fix_plt_extrasz_always_returning_0_on_ppc64le.patch</changelog>
  <changelog author="fschnizlein@suse.com" date="1489060800">- Update to 2.20
- Bug Fixes:
  * Fix keyword collisions and warnings from GCC 5
  * hugeadm output is parsed for default size in huge_page_setup_helper
  * Testsuite: fallocate tests</changelog>
  <changelog author="jengelh@inai.de" date="1492689600">- Update summary and descriptions a bit
- Move development manpages (*.3) to development subpackage
- Avoid ||/&amp;&amp; in %install because it can leave $? at non-zero
  (unlike if..fi), and %install is run with sh -x.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Run `make install-perlmod` to install/satisfy Perl modules
  required by /usr/bin/cpupcstat, itself installed by just
  `make install` [boo#1057963]</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1619006400">- Hardening: Link as PIE (bsc#1184123).</changelog>
  <changelog author="tabraham@suse.com" date="1698926400">- Add libhugetlbfs-increase-mount-buffer.patch for upstream issue gh#43
  (boo#1216576, bsc#1213639)</changelog>
  <changelog author="aschnell@suse.com" date="1700827200">- Add libhugetlbfs-noexecstack.patch (bsc#1213639)
- Increase buffer size in libhugetlbfs-increase-mount-buffer.patch
  as in the provided fix (bsc#1213639)</changelog>
</package>
<package pkgid="16ad93786e1ffb13893b12a0faaf7524edcb280fc139944890c4f25ad0b878cf" name="libibverbs" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="634b193e61c036ef8af5048079b8b904aeadfed714b38efa3f531e459578c38a" name="libibverbs" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="f2cdd80f49f2b0a31572edbbf0a02ce6ba898eab9f10cfbeb8af90b4ea2903e2" name="libibverbs" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="d560479b5137043bad9efcd71483a2e76f36ca987589ceca8e7da36876a0a469" name="libibverbs1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="d35d40c2458a539413a8fedd1a52df0c0dec7bcb38c4ece304c60fb83ef3e334" name="libibverbs1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="e146fabf3f38d493eb21fd9c2f7d47e9f5b450b09e81b59a56dcc57ea60719ee" name="libibverbs1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="1fdf92787a55035e70e95d736f2126c683109c2c8a44200361b9ba4985c045e7" name="libica" arch="src">
  <version epoch="0" ver="4.2.1" rel="150400.3.11.8"/>
  <changelog author="mpost@suse.com" date="1536667200">- Added "Obsoletes: libica2" to the libica-tools package to fix
  a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1046435, bsc#1104638)</changelog>
  <changelog author="mpost@suse.com" date="1540209600">- Added "Obsoletes: libica-2_3_0" to the libica-tools package to
  fix a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1112655)</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 3.3.3 (Fate#325690)
  * v3.3.3
    [PATCH] Various bug fixes
  * v3.3.2
    [PATCH] Skip ECC tests if required HW is not available
    [PATCH] Update spec file
  * v3.3.1
    [PATCH] Fix configure.ac to honour CFLAGS
  * v3.3.0
    [FEATURE] Add CEX supported elliptic-curve crypto interfaces
    [FEATURE] Add SIMD supported multiple-precision arithmetic interfaces
    [FEATURE] Add interface to enable/disable SW fallbacks
    [FEATURE] Add 'make check' target, test-suite rework
  * v3.2.1
    [FEATURE] Use z14 PRNO-TRNG to seed SHA512-DRBG.
    [PATCH] Various bug fixes.
- Dropped obsolete patch increment-icastats-counter-for-aes-gcm.patch
- Removed COPYING from %files, since it is no longer in the tarball.
- Added Add-non-executable-gnu-stack-markings-in-the-assembl.patch
  (bsc#1103493).
- Made multiple changes to the spec file based on the output of
  spec-cleaner</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 3.4.0 (Fate#325690)
  * v3.4.0
    [FEATURE] Add SHA-512/224 and SHA-512/256 support
- Dropped obsolete patch Add-non-executable-gnu-stack-markings-in-the-assembl.patch
- Made numerous updates to spec file based on spec-cleanup run.</changelog>
  <changelog author="mpluskal@suse.com" date="1563969600">- Run testsuite during build</changelog>
  <changelog author="mpost@suse.com" date="1567166400">- Upgraded to version 3.5.0 (Fate#327840)
  - [FEATURE] Add MSA9 CPACF support for ECDSA sign/verify
- Reworked how libica-tools loads and unloads kernel modules to
  avoid spurious error messages (bsc#1134004):
  * Converted the boot.z90crypt sysV init script to a systemd unit
  file.
  * Removed any references to insserv in the spec file.
  * Updated the z90crypt script itself to properly load and unload
  the kernel modules as they exist today.
  * Eliminated the obsolete libica-SuSE.tar.bz2 archive.
- Updated the README.SUSE file to reflect the change from sysV init
  style script to systemd.
- Made numerous changes to the spec file, based on the output from
  the spec-cleaner command.</changelog>
  <changelog author="mpost@suse.com" date="1571140800">- Upgraded to version 3.6.0 (jsc#SLE-7584)
  * [FEATURE] Add MSA9 CPACF support for Ed25519, Ed448, X25519 and X448</changelog>
  <changelog author="mpost@suse.com" date="1573732800">- Added libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  (bsc#1156768)</changelog>
  <changelog author="mpost@suse.com" date="1586347200">- Added the following patches for FIPS certification.
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
    (bsc#1166071) Although a DES key has only 56 effective bits,
    all 64 bits must be considered, because the parity bits are
    spread over all 8 bytes of the key.
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
    (bsc#1166210) FIPS tests require the output iv to be the iv
    resulting from decrypting the last block with a zero iv as input.
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
    (bsc#1166224) The output from icainfo never shows 'yes' for
    RSA ME, RSA CRT, ECDH, ECDSA sign, ECDSA verify, and ECKGEN,
    due to the missing ICA_FLAG_SW flag in the icaList.</changelog>
  <changelog author="mpost@suse.com" date="1588852800">- Added the following patches for FIPS certification (bsc#1162533)
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-hmac-key.patch
- Added a BuildRequires for the fipscheck package.
- Made a couple of changes to the spec file based upon recommendations
  by spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1600171200">- Fix lack of SHA3 KATs in "make check" processing (bsc#1175277)
  * Added libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  * Added libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
- Fix FIPS hmac check (bsc#1175356).
  * Update FIPS support to upstream
  - Refresh libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
    from upstream.
  - Add libica-sles15sp2-Build-with-pthread-flag.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch
  - Add libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS check should fail when hmac is missing
  - Add libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
  - Create an hmac for the selftest
  - Check that selftest fails without a hmac
  - Hash libica.so.3 rather than libica.so.3.6.0
  * Fix hmac key format. It should be hexadecimal, not ASCII
  - Refresh libica-sles15sp2-FIPS-hmac-key.patch
- Fix Some internal variables used to store sensitive information
  (keys) were not zeroized before returning to the calling application.
  (bsc#1175357)
  * Added libica-sles15sp2-Zeroize-local-variables.patch
- Updated libica-rpmlintrc to eliminate the warning about the HMAC file
  being a hidden file. It is supposed to be hidden.</changelog>
  <changelog author="mpost@suse.com" date="1600430400">- Upgraded to version 3.7.0 (jsc#SLE-13708)
  * Version 3.7.0
  - [FEATURE] FIPS: Add HMAC based library integrity check
  - [PATCH] icainfo: bugfix for RSA and EC related info for software column.
  - [PATCH] FIPS: provide output iv in cbc-cs decrypt as required by FIPS tests
  - [PATCH] FIPS: Fix DES and TDES key length
  - [PATCH] icastats: Fix stats counter format
  * Version 3.6.1
  - [PATCH] Fix x25519 and x448 handling of non-canonical values
- Removed the following obsolete patches
  * libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
  * libica-sles15sp2-Build-with-pthread-flag.patch
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1623067200">- Update to version 3.8.0 (jsc#SLE-18334)
  - [FEATURE] provide libica-cex module to satisfy special security requirements
  - [FEATURE] FIPS: enforce the HMAC check
- Remove upstreamed patches:
  - libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  - libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
  - libica-sles15sp2-Zeroize-local-variables.patch
- Remove patches obsoleted by upstrea developent:
  * FIPS: Find libica from phdrs.
  - libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS: enforce the hmac check
  - libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
- Fix up tests and hmac generation
  + libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
- Remove obsolete attributes from filelists</changelog>
  <changelog author="mpost@suse.com" date="1634644800">- Upgrade to version 3.9.0 (jsc#SLE-18454, jsc#SLE-18564)
  - [FEATURE] Add support for OpenSSL 3.0
  - [FEATURE] icainfo: new parm -c to display available EC curves
- Replaced the obsolete PreReq: %fillup_prereq
  with                  Requires(post): %fillup_prereq
  in the spec file.</changelog>
  <changelog author="mpost@suse.com" date="1662984000">- Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
  v4.0.3
  - [PATCH] Reduce the number of open file descriptors
  - [PATCH] Various bug fixes
  v4.0.2
  - [PATCH] Various bug fixes
  v4.0.1
  - [PATCH] Various bug fixes
  - [PATCH] Compute HMAC from installed library
  v4.0.0
  - [UPDATE] NO_SW_FALLBACKS is now the default for libica.so
    [UPDATE] Removed deprecated API functions including tests
    [UPDATE] Introduced 'const' for some API function parameters
    [FEATURE] icastats: new parm -k to display detailed counters
- Replaced libica-sles15sp2-FIPS-hmac-key.patch with an updated
  version named libica-sles15sp5-FIPS-hmac-key.patch.
- Updated the libica-rpmlintrc file to suppress warnings about the
  libica-cex hmac files being hidden.
- Updated the spec file to properly both obsolete and provide two
  older versions of the package.</changelog>
  <changelog author="mpost@suse.com" date="1665489600">- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
  v4.1.1
  - [PATCH] Fix aes-xts multi-part operations
    [PATCH] Fix make dist
  v4.1.0
  - [FEATURE] FIPS: make libica FIPS 140-3 compliant
    [FEATURE] New API function ica_ecdsa_sign_ex()
    [FEATURE] New icainfo output option -r
  - [PATCH] Various bug fixes
- Removed the following obsolete files:
  baselibs.conf
  icaioctl.h</changelog>
  <changelog author="meissner@suse.com" date="1673870400">- Upgrade to version 4.2.0 (jsc#PED-581, bsc#1202365).
  - [FEATURE] Display build info via icainfo -v
  - [FEATURE] New API function ica_get_build_version()
  - [FEATURE] Display fips indication via icainfo -f
  - [FEATURE] New API function ica_get_fips_indicator()
  - [FEATURE] New API function ica_aes_gcm_initialize_fips()
  - [FEATURE] New API function ica_aes_gcm_kma_get_iv()
  - [FEATURE] New API function ica_get_msa_level()
  - [PATCH] icainfo: check for malloc error when getting functionlist</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Upgrade to version 4.2.1 (jsc#PED-2872)
  - [PATCH] fix regression opening shared memory</changelog>
  <changelog author="otto.hollmann@suse.com" date="1682424000">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Rename the hmac files for the openssl3 flavor [bsc#1207472]
  * Add libica-openssl3.patch
  * Rebase libica-sles15sp5-FIPS-hmac-key.patch</changelog>
</package>
<package pkgid="8fa478bfe707a02ca4368bc297fb0f9566680fc907fb21eb5666e2f7caf80223" name="libica-tools" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="150400.3.11.8"/>
  <changelog author="mpost@suse.com" date="1536667200">- Added "Obsoletes: libica2" to the libica-tools package to fix
  a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1046435, bsc#1104638)</changelog>
  <changelog author="mpost@suse.com" date="1540209600">- Added "Obsoletes: libica-2_3_0" to the libica-tools package to
  fix a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1112655)</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 3.3.3 (Fate#325690)
  * v3.3.3
    [PATCH] Various bug fixes
  * v3.3.2
    [PATCH] Skip ECC tests if required HW is not available
    [PATCH] Update spec file
  * v3.3.1
    [PATCH] Fix configure.ac to honour CFLAGS
  * v3.3.0
    [FEATURE] Add CEX supported elliptic-curve crypto interfaces
    [FEATURE] Add SIMD supported multiple-precision arithmetic interfaces
    [FEATURE] Add interface to enable/disable SW fallbacks
    [FEATURE] Add 'make check' target, test-suite rework
  * v3.2.1
    [FEATURE] Use z14 PRNO-TRNG to seed SHA512-DRBG.
    [PATCH] Various bug fixes.
- Dropped obsolete patch increment-icastats-counter-for-aes-gcm.patch
- Removed COPYING from %files, since it is no longer in the tarball.
- Added Add-non-executable-gnu-stack-markings-in-the-assembl.patch
  (bsc#1103493).
- Made multiple changes to the spec file based on the output of
  spec-cleaner</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 3.4.0 (Fate#325690)
  * v3.4.0
    [FEATURE] Add SHA-512/224 and SHA-512/256 support
- Dropped obsolete patch Add-non-executable-gnu-stack-markings-in-the-assembl.patch
- Made numerous updates to spec file based on spec-cleanup run.</changelog>
  <changelog author="mpluskal@suse.com" date="1563969600">- Run testsuite during build</changelog>
  <changelog author="mpost@suse.com" date="1567166400">- Upgraded to version 3.5.0 (Fate#327840)
  - [FEATURE] Add MSA9 CPACF support for ECDSA sign/verify
- Reworked how libica-tools loads and unloads kernel modules to
  avoid spurious error messages (bsc#1134004):
  * Converted the boot.z90crypt sysV init script to a systemd unit
  file.
  * Removed any references to insserv in the spec file.
  * Updated the z90crypt script itself to properly load and unload
  the kernel modules as they exist today.
  * Eliminated the obsolete libica-SuSE.tar.bz2 archive.
- Updated the README.SUSE file to reflect the change from sysV init
  style script to systemd.
- Made numerous changes to the spec file, based on the output from
  the spec-cleaner command.</changelog>
  <changelog author="mpost@suse.com" date="1571140800">- Upgraded to version 3.6.0 (jsc#SLE-7584)
  * [FEATURE] Add MSA9 CPACF support for Ed25519, Ed448, X25519 and X448</changelog>
  <changelog author="mpost@suse.com" date="1573732800">- Added libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  (bsc#1156768)</changelog>
  <changelog author="mpost@suse.com" date="1586347200">- Added the following patches for FIPS certification.
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
    (bsc#1166071) Although a DES key has only 56 effective bits,
    all 64 bits must be considered, because the parity bits are
    spread over all 8 bytes of the key.
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
    (bsc#1166210) FIPS tests require the output iv to be the iv
    resulting from decrypting the last block with a zero iv as input.
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
    (bsc#1166224) The output from icainfo never shows 'yes' for
    RSA ME, RSA CRT, ECDH, ECDSA sign, ECDSA verify, and ECKGEN,
    due to the missing ICA_FLAG_SW flag in the icaList.</changelog>
  <changelog author="mpost@suse.com" date="1588852800">- Added the following patches for FIPS certification (bsc#1162533)
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-hmac-key.patch
- Added a BuildRequires for the fipscheck package.
- Made a couple of changes to the spec file based upon recommendations
  by spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1600171200">- Fix lack of SHA3 KATs in "make check" processing (bsc#1175277)
  * Added libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  * Added libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
- Fix FIPS hmac check (bsc#1175356).
  * Update FIPS support to upstream
  - Refresh libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
    from upstream.
  - Add libica-sles15sp2-Build-with-pthread-flag.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch
  - Add libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS check should fail when hmac is missing
  - Add libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
  - Create an hmac for the selftest
  - Check that selftest fails without a hmac
  - Hash libica.so.3 rather than libica.so.3.6.0
  * Fix hmac key format. It should be hexadecimal, not ASCII
  - Refresh libica-sles15sp2-FIPS-hmac-key.patch
- Fix Some internal variables used to store sensitive information
  (keys) were not zeroized before returning to the calling application.
  (bsc#1175357)
  * Added libica-sles15sp2-Zeroize-local-variables.patch
- Updated libica-rpmlintrc to eliminate the warning about the HMAC file
  being a hidden file. It is supposed to be hidden.</changelog>
  <changelog author="mpost@suse.com" date="1600430400">- Upgraded to version 3.7.0 (jsc#SLE-13708)
  * Version 3.7.0
  - [FEATURE] FIPS: Add HMAC based library integrity check
  - [PATCH] icainfo: bugfix for RSA and EC related info for software column.
  - [PATCH] FIPS: provide output iv in cbc-cs decrypt as required by FIPS tests
  - [PATCH] FIPS: Fix DES and TDES key length
  - [PATCH] icastats: Fix stats counter format
  * Version 3.6.1
  - [PATCH] Fix x25519 and x448 handling of non-canonical values
- Removed the following obsolete patches
  * libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
  * libica-sles15sp2-Build-with-pthread-flag.patch
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1623067200">- Update to version 3.8.0 (jsc#SLE-18334)
  - [FEATURE] provide libica-cex module to satisfy special security requirements
  - [FEATURE] FIPS: enforce the HMAC check
- Remove upstreamed patches:
  - libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  - libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
  - libica-sles15sp2-Zeroize-local-variables.patch
- Remove patches obsoleted by upstrea developent:
  * FIPS: Find libica from phdrs.
  - libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS: enforce the hmac check
  - libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
- Fix up tests and hmac generation
  + libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
- Remove obsolete attributes from filelists</changelog>
  <changelog author="mpost@suse.com" date="1634644800">- Upgrade to version 3.9.0 (jsc#SLE-18454, jsc#SLE-18564)
  - [FEATURE] Add support for OpenSSL 3.0
  - [FEATURE] icainfo: new parm -c to display available EC curves
- Replaced the obsolete PreReq: %fillup_prereq
  with                  Requires(post): %fillup_prereq
  in the spec file.</changelog>
  <changelog author="mpost@suse.com" date="1662984000">- Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
  v4.0.3
  - [PATCH] Reduce the number of open file descriptors
  - [PATCH] Various bug fixes
  v4.0.2
  - [PATCH] Various bug fixes
  v4.0.1
  - [PATCH] Various bug fixes
  - [PATCH] Compute HMAC from installed library
  v4.0.0
  - [UPDATE] NO_SW_FALLBACKS is now the default for libica.so
    [UPDATE] Removed deprecated API functions including tests
    [UPDATE] Introduced 'const' for some API function parameters
    [FEATURE] icastats: new parm -k to display detailed counters
- Replaced libica-sles15sp2-FIPS-hmac-key.patch with an updated
  version named libica-sles15sp5-FIPS-hmac-key.patch.
- Updated the libica-rpmlintrc file to suppress warnings about the
  libica-cex hmac files being hidden.
- Updated the spec file to properly both obsolete and provide two
  older versions of the package.</changelog>
  <changelog author="mpost@suse.com" date="1665489600">- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
  v4.1.1
  - [PATCH] Fix aes-xts multi-part operations
    [PATCH] Fix make dist
  v4.1.0
  - [FEATURE] FIPS: make libica FIPS 140-3 compliant
    [FEATURE] New API function ica_ecdsa_sign_ex()
    [FEATURE] New icainfo output option -r
  - [PATCH] Various bug fixes
- Removed the following obsolete files:
  baselibs.conf
  icaioctl.h</changelog>
  <changelog author="meissner@suse.com" date="1673870400">- Upgrade to version 4.2.0 (jsc#PED-581, bsc#1202365).
  - [FEATURE] Display build info via icainfo -v
  - [FEATURE] New API function ica_get_build_version()
  - [FEATURE] Display fips indication via icainfo -f
  - [FEATURE] New API function ica_get_fips_indicator()
  - [FEATURE] New API function ica_aes_gcm_initialize_fips()
  - [FEATURE] New API function ica_aes_gcm_kma_get_iv()
  - [FEATURE] New API function ica_get_msa_level()
  - [PATCH] icainfo: check for malloc error when getting functionlist</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Upgrade to version 4.2.1 (jsc#PED-2872)
  - [PATCH] fix regression opening shared memory</changelog>
  <changelog author="otto.hollmann@suse.com" date="1682424000">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Rename the hmac files for the openssl3 flavor [bsc#1207472]
  * Add libica-openssl3.patch
  * Rebase libica-sles15sp5-FIPS-hmac-key.patch</changelog>
</package>
<package pkgid="b3f503267c1c65456e1855047bad1b486695995acea02e41b618e9ae5a07ecbe" name="libica4" arch="s390x">
  <version epoch="0" ver="4.2.1" rel="150400.3.11.8"/>
  <changelog author="mpost@suse.com" date="1536667200">- Added "Obsoletes: libica2" to the libica-tools package to fix
  a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1046435, bsc#1104638)</changelog>
  <changelog author="mpost@suse.com" date="1540209600">- Added "Obsoletes: libica-2_3_0" to the libica-tools package to
  fix a problem with upgrading from SLES12 SP2 to either SLES12
  SP3/SP4, or SLES15. (bsc#1112655)</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 3.3.3 (Fate#325690)
  * v3.3.3
    [PATCH] Various bug fixes
  * v3.3.2
    [PATCH] Skip ECC tests if required HW is not available
    [PATCH] Update spec file
  * v3.3.1
    [PATCH] Fix configure.ac to honour CFLAGS
  * v3.3.0
    [FEATURE] Add CEX supported elliptic-curve crypto interfaces
    [FEATURE] Add SIMD supported multiple-precision arithmetic interfaces
    [FEATURE] Add interface to enable/disable SW fallbacks
    [FEATURE] Add 'make check' target, test-suite rework
  * v3.2.1
    [FEATURE] Use z14 PRNO-TRNG to seed SHA512-DRBG.
    [PATCH] Various bug fixes.
- Dropped obsolete patch increment-icastats-counter-for-aes-gcm.patch
- Removed COPYING from %files, since it is no longer in the tarball.
- Added Add-non-executable-gnu-stack-markings-in-the-assembl.patch
  (bsc#1103493).
- Made multiple changes to the spec file based on the output of
  spec-cleaner</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 3.4.0 (Fate#325690)
  * v3.4.0
    [FEATURE] Add SHA-512/224 and SHA-512/256 support
- Dropped obsolete patch Add-non-executable-gnu-stack-markings-in-the-assembl.patch
- Made numerous updates to spec file based on spec-cleanup run.</changelog>
  <changelog author="mpluskal@suse.com" date="1563969600">- Run testsuite during build</changelog>
  <changelog author="mpost@suse.com" date="1567166400">- Upgraded to version 3.5.0 (Fate#327840)
  - [FEATURE] Add MSA9 CPACF support for ECDSA sign/verify
- Reworked how libica-tools loads and unloads kernel modules to
  avoid spurious error messages (bsc#1134004):
  * Converted the boot.z90crypt sysV init script to a systemd unit
  file.
  * Removed any references to insserv in the spec file.
  * Updated the z90crypt script itself to properly load and unload
  the kernel modules as they exist today.
  * Eliminated the obsolete libica-SuSE.tar.bz2 archive.
- Updated the README.SUSE file to reflect the change from sysV init
  style script to systemd.
- Made numerous changes to the spec file, based on the output from
  the spec-cleaner command.</changelog>
  <changelog author="mpost@suse.com" date="1571140800">- Upgraded to version 3.6.0 (jsc#SLE-7584)
  * [FEATURE] Add MSA9 CPACF support for Ed25519, Ed448, X25519 and X448</changelog>
  <changelog author="mpost@suse.com" date="1573732800">- Added libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  (bsc#1156768)</changelog>
  <changelog author="mpost@suse.com" date="1586347200">- Added the following patches for FIPS certification.
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
    (bsc#1166071) Although a DES key has only 56 effective bits,
    all 64 bits must be considered, because the parity bits are
    spread over all 8 bytes of the key.
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
    (bsc#1166210) FIPS tests require the output iv to be the iv
    resulting from decrypting the last block with a zero iv as input.
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
    (bsc#1166224) The output from icainfo never shows 'yes' for
    RSA ME, RSA CRT, ECDH, ECDSA sign, ECDSA verify, and ECKGEN,
    due to the missing ICA_FLAG_SW flag in the icaList.</changelog>
  <changelog author="mpost@suse.com" date="1588852800">- Added the following patches for FIPS certification (bsc#1162533)
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-hmac-key.patch
- Added a BuildRequires for the fipscheck package.
- Made a couple of changes to the spec file based upon recommendations
  by spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1600171200">- Fix lack of SHA3 KATs in "make check" processing (bsc#1175277)
  * Added libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  * Added libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
- Fix FIPS hmac check (bsc#1175356).
  * Update FIPS support to upstream
  - Refresh libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
    from upstream.
  - Add libica-sles15sp2-Build-with-pthread-flag.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  - Add libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch
  - Add libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS check should fail when hmac is missing
  - Add libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
  - Create an hmac for the selftest
  - Check that selftest fails without a hmac
  - Hash libica.so.3 rather than libica.so.3.6.0
  * Fix hmac key format. It should be hexadecimal, not ASCII
  - Refresh libica-sles15sp2-FIPS-hmac-key.patch
- Fix Some internal variables used to store sensitive information
  (keys) were not zeroized before returning to the calling application.
  (bsc#1175357)
  * Added libica-sles15sp2-Zeroize-local-variables.patch
- Updated libica-rpmlintrc to eliminate the warning about the HMAC file
  being a hidden file. It is supposed to be hidden.</changelog>
  <changelog author="mpost@suse.com" date="1600430400">- Upgraded to version 3.7.0 (jsc#SLE-13708)
  * Version 3.7.0
  - [FEATURE] FIPS: Add HMAC based library integrity check
  - [PATCH] icainfo: bugfix for RSA and EC related info for software column.
  - [PATCH] FIPS: provide output iv in cbc-cs decrypt as required by FIPS tests
  - [PATCH] FIPS: Fix DES and TDES key length
  - [PATCH] icastats: Fix stats counter format
  * Version 3.6.1
  - [PATCH] Fix x25519 and x448 handling of non-canonical values
- Removed the following obsolete patches
  * libica-sles15sp2-x25519-x448-fix-handling-of-non-canonical-values.patch
  * libica-sles15sp2-Fix-DES-and-TDES-key-length.patch
  * libica-sles15sp2-FIPS-provide-output-iv-as-required-by-FIPS-tests.patch
  * libica-sles15sp2-icainfo-bugfix-for-RSA-and-EC-related-info-for-softw.patch
  * libica-sles15sp2-Build-with-pthread-flag.patch
  * libica-sles15sp2-FIPS-introduce-HMAC-based-library-integrity-check.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-addon.patch
  * libica-sles15sp2-FIPS-HMAC-based-library-integrity-check-rename-variables.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1623067200">- Update to version 3.8.0 (jsc#SLE-18334)
  - [FEATURE] provide libica-cex module to satisfy special security requirements
  - [FEATURE] FIPS: enforce the HMAC check
- Remove upstreamed patches:
  - libica-sles15sp2-FIPS-add-SHA3-KATs-to-fips_powerup_tests.patch
  - libica-sles15sp2-FIPS-skip-SHA3-tests-if-running-on-hardware-without-.patch
  - libica-sles15sp2-Zeroize-local-variables.patch
- Remove patches obsoleted by upstrea developent:
  * FIPS: Find libica from phdrs.
  - libica-sles15sp2-FIPS-use-full-library-version-for-hmac-filename.patch
  * FIPS: enforce the hmac check
  - libica-sles15sp2-FIPS-fix-inconsistent-error-handling.patch
- Fix up tests and hmac generation
  + libica-FIPS-make-it-possible-to-specify-fipshmac-binary.patch
- Remove obsolete attributes from filelists</changelog>
  <changelog author="mpost@suse.com" date="1634644800">- Upgrade to version 3.9.0 (jsc#SLE-18454, jsc#SLE-18564)
  - [FEATURE] Add support for OpenSSL 3.0
  - [FEATURE] icainfo: new parm -c to display available EC curves
- Replaced the obsolete PreReq: %fillup_prereq
  with                  Requires(post): %fillup_prereq
  in the spec file.</changelog>
  <changelog author="mpost@suse.com" date="1662984000">- Upgraded to version 4.0.3 (jsc#PED-581, jsc#PED-621, jsc#PED-629)
  v4.0.3
  - [PATCH] Reduce the number of open file descriptors
  - [PATCH] Various bug fixes
  v4.0.2
  - [PATCH] Various bug fixes
  v4.0.1
  - [PATCH] Various bug fixes
  - [PATCH] Compute HMAC from installed library
  v4.0.0
  - [UPDATE] NO_SW_FALLBACKS is now the default for libica.so
    [UPDATE] Removed deprecated API functions including tests
    [UPDATE] Introduced 'const' for some API function parameters
    [FEATURE] icastats: new parm -k to display detailed counters
- Replaced libica-sles15sp2-FIPS-hmac-key.patch with an updated
  version named libica-sles15sp5-FIPS-hmac-key.patch.
- Updated the libica-rpmlintrc file to suppress warnings about the
  libica-cex hmac files being hidden.
- Updated the spec file to properly both obsolete and provide two
  older versions of the package.</changelog>
  <changelog author="mpost@suse.com" date="1665489600">- Upgrade to version 4.1.1 (jsc#PED-581, bsc#1202365).
  v4.1.1
  - [PATCH] Fix aes-xts multi-part operations
    [PATCH] Fix make dist
  v4.1.0
  - [FEATURE] FIPS: make libica FIPS 140-3 compliant
    [FEATURE] New API function ica_ecdsa_sign_ex()
    [FEATURE] New icainfo output option -r
  - [PATCH] Various bug fixes
- Removed the following obsolete files:
  baselibs.conf
  icaioctl.h</changelog>
  <changelog author="meissner@suse.com" date="1673870400">- Upgrade to version 4.2.0 (jsc#PED-581, bsc#1202365).
  - [FEATURE] Display build info via icainfo -v
  - [FEATURE] New API function ica_get_build_version()
  - [FEATURE] Display fips indication via icainfo -f
  - [FEATURE] New API function ica_get_fips_indicator()
  - [FEATURE] New API function ica_aes_gcm_initialize_fips()
  - [FEATURE] New API function ica_aes_gcm_kma_get_iv()
  - [FEATURE] New API function ica_get_msa_level()
  - [PATCH] icainfo: check for malloc error when getting functionlist</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1676980800">- Upgrade to version 4.2.1 (jsc#PED-2872)
  - [PATCH] fix regression opening shared memory</changelog>
  <changelog author="otto.hollmann@suse.com" date="1682424000">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687521600">- Rename the hmac files for the openssl3 flavor [bsc#1207472]
  * Add libica-openssl3.patch
  * Rebase libica-sles15sp5-FIPS-hmac-key.patch</changelog>
</package>
<package pkgid="5c1e9c578b7fe37de06dc288f306777c83febdcfc4a59e9e31b0e8f259b1f650" name="libicu-suse65_1" arch="aarch64">
  <version epoch="0" ver="65.1" rel="150200.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="088b7813a7a42b3d371ce85cc8b7452442aada8f345755d00301c14556653f1c" name="libicu-suse65_1" arch="s390x">
  <version epoch="0" ver="65.1" rel="150200.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="2defe390aaa5b1e82af2e3377967bed57c8bddc8db725be1340f8c416edd4dc8" name="libicu-suse65_1" arch="x86_64">
  <version epoch="0" ver="65.1" rel="150200.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="8f3eb12ed1ed081a61fc5a318ffd3229ece773b831caad12152c69fa13b7e414" name="libicu-suse65_1" arch="aarch64">
  <version epoch="0" ver="65.1" rel="150200.4.8.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="7a8b84314d06263d6d1fce05f25a0c25a1e0f7687937729489aa4f4a1c5247e6" name="libicu-suse65_1" arch="s390x">
  <version epoch="0" ver="65.1" rel="150200.4.8.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="0334f9a5c9979bd299a080044f6eea638de835d8ced9eaab5c43e416903d99c6" name="libicu-suse65_1" arch="x86_64">
  <version epoch="0" ver="65.1" rel="150200.4.8.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="d16fd574ea42fce6aab665b4b63bf641a8d9bd9d3aa3e584335813a872f392a5" name="libicu65_1-bedata" arch="noarch">
  <version epoch="0" ver="65.1" rel="150200.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="7624b112bc68034a9f372ed8bcdc735881ee3d9c09fe802d501ccfd8c5c6c21b" name="libicu65_1-bedata" arch="noarch">
  <version epoch="0" ver="65.1" rel="150200.4.8.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="2e6232df868498df06f6900d6a5a94cddb508597ed0082b67dfe11c1216c0cb0" name="libicu65_1-ledata" arch="noarch">
  <version epoch="0" ver="65.1" rel="150200.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="a74102dc1e83763cd93041c77262f5d26815490641a519794ed58435b7ad6620" name="libicu65_1-ledata" arch="noarch">
  <version epoch="0" ver="65.1" rel="150200.4.8.1"/>
  <changelog author="jengelh@inai.de" date="1458907200">- Update to new upstream release 57.1
  * CLDR 29 support
  * Grapheme/word/line breaking for emoji sequences, based on
  Unicode 9 proposed rules.
  * Four new Unicode emoji properties
  * DateFormat day period formatting of "noon", "at night", etc. via
  new pattern characters b &amp; B, and DateTimePatternGenerator
  support of C for selecting the customary form.
  * RelativeDateTimeFormatter: Simpler formatting API.
  * New simple &amp; fast SimpleFormatter class for a trivial subset of
  MessageFormat as used in CLDR data.</changelog>
  <changelog author="jengelh@inai.de" date="1477051200">- Update to new upstream release 58.1
  * CLDR 30.0.2: For details of the many changes in CLDR, see
  CLDR 30. Some things to note:
  * For some combinations of numbering system (arab, arabext, latn)
  and/or locale (ar, fa, he), there were changes to the
  bidirectional control characters used with certain symbols
  (percent, minus, plus), and changes to number patterns (currency
  and/or percent, including addition of bidirectional control
  characters in some cases).
  * Thhe bidirectional controls used for such purposes include U+061C
  ARABIC LETTER MARK (ALM), which requires use of the bidirectional
  algorithm from Unicode 6.3 or later.
  * The time separator for Norwegian locales (nb, nn) was changed to
  be ':' throughout.
  * Unicode 9.0: Version 9.0 adds exactly 7,500 characters, for a
  total of 128,172 characters. These additions include six new
  scripts, 19 symbols for the new 4K TV standard, and 72 new
  emoji characters.
  * Draft Emoji 4.0 data
  * Emoji updates for word &amp; line breaking
  * UBiDiTransform/BidiTransform API for convenient transformation of
  text between different Bidi layouts.
  * MeasureFormat API for measurement unit display names
  * Most COUNT and LIMIT enum constants have been deprecated
  * SpoofChecker: Handling of "whole script confusables" has been
  removed from ICU, in accordance with its removal from UTS #39
  Version 9.0.0 and the removal of the corresponding Unicode data
  file.
  * Greek uppercasing ("el" locale ID) removes most diacritics.
  * More robust locale data loading across ICU implementation code.
  * Reduced heap memory usage in DateTimePatternGenerator</changelog>
  <changelog author="idonmez@suse.com" date="1481371200">- Update to new upstream release 58.2
  * CLDR 30.0.3:
    + Fix incorrect data for number of Cantonese speakers in China.
    + Hani_Latn transform was not updated with Unihan 9.0 kMandarin
    readings.
  * Time zone database version 2016j
  * #12815 uspoof_getSkeleton sets backwards-incompatible illegal
    argument exception
  * #12825 uspoof_check goes into an "infinite loop" when U+30FB
    is in an input string
  * #12832 GreekUpper::toUpper skips the final character on a
    non-terminated UTF-8 string
  * #12849 u_strToTitle returns incorrect length if destination
    is NULL</changelog>
  <changelog author="jengelh@inai.de" date="1493294400">- Update to new upstream release 59.1
  * Emoji 5.0 data
  * CLDR 31.0.1
  * * GMT and UTC are no longer unified, and CLDR provides
    distinct UTC display names, avoiding confusion with standard
    (winter) time in Britain.
  * New case mapping API (C++ &amp; Java classes CaseMap) supports
    styled text
  * ICU4C now uses and requires C++11 language features and
    libraries.
  * ICU4C has also moved to char16_t as the type for UTF-16. This
    is a breaking change. Please see the detail section below.</changelog>
  <changelog author="rguenther@suse.com" date="1495022400">- Add icu-avoid-x87-excess-precision.diff to avoid
  FixedPrecision::initVisibleDigits failure on i586 with GCC 7.
  (bnc#1030253)</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- xlocale.patch: don't use obsolete &lt;xlocale.h&gt;</changelog>
  <changelog author="jengelh@inai.de" date="1501675200">- refresh icu-avoid-x87-excess-precision.diff with p1</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Update to new upstream release 60.2
  * ICU 60 provides full support for the Unicode 10.0 release
    with many new characters and many property improvements.
    Locale data is updated to CLDR 32, which adds several
    languages and data improvements. A new number formatting API
    has been added.</changelog>
  <changelog author="jengelh@inai.de" date="1514289600">- Drop dangling symlinks /usr/lib64/icu/*.inc</changelog>
  <changelog author="jengelh@inai.de" date="1522843200">- Update to new upstream release 61.1
  * ICU 61 upgrades to CLDR 33 locale data.
- Add icu-number-grouping.diff</changelog>
  <changelog author="jengelh@inai.de" date="1528113600">- Add icu-susevers.diff and disable UTF-8 assumption
  [boo#1095425]</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Update to new upstream release 62.1
  * Unicode 11: 684 new characters, including 7 new scripts,
    Mtavruli Georgian capital letters, 5 new Han characters, and
    66 new emoji characters.
  * CLDR 33.1
  * Under-the-hood overhaul of number parsing. Behavior is mostly
    compatible with previous versions, but there are some known
    differences.
- Remove xlocale.patch (code to patch is gone),
  icu-number-grouping.diff (merged upstream)</changelog>
  <changelog author="idonmez@suse.com" date="1539777600">- Update to new upstream release 63.1
  * CLDR 34
    + Segmentation rules and emoji sort order adjusted for
    Unicode 11
    + Somali and Javanese data now up to moderate level
    (document content)
    + Tongan, Konkani, Maori, Dzongkha, Tatar, Kurdish (ku),
    and Xhosa data now up to basic level
    + Many data additions and corrections in many other
    languages
    + The following languages have been added to ICU: Sindhi,
    Maori, Turkmen, Javanese, Interlingua, Kurdish (ku), Xhosa
  * New currency: Venezuela's Bolívar Soberano (VES)
  * New Japanese calendar era from 2019: CLDR and ICU include
    data for testing that can be enabled.
    (ICU #12973, CLDR #10750)
  * To enable CLDR new Japanese era placeholder name, set
    environment variable (and Java system property for ICU4J)
    ICU_ENABLE_TENTATIVE_ERA=true.
  * New API for number and currency range formatting
    (class NumberRangeFormatter, #11276)
  * Support for additional Unicode properties:
    Indic_Positional_Category &amp; Indic_Syllabic_Category (#8966)
    and Vertical_Orientation (#12850)
  * New API for code point maps and tries, mapping Unicode
    code points (U+0000..U+10FFFF) to integer values. (#13530)
  * Java classes CodePointMap, CodePointTrie, MutableCodePointTrie
  * C types UCPMap, UCPTrie, UMutableCPTrie
  * New API for getting a UnicodeSet per binary property and a code
    point map per enumerated/int-value property. (#20086)
  * Full conformance with UAX #14 Line Breaking
    (required BreakIterator feature work). (#7270)
  * C++ Locale class
    + Additional functions forLanguageTag()/toLanguageTag(),
    and functions that are easier and safer to use by using
    StringPiece and ByteSink rather than raw buffers. (#13417)
    + Move semantics. (#13645)
  * Various Out-Of-Memory (OOM) issues have been fixed.
- Refresh icu-versioning.diff</changelog>
  <changelog author="jengelh@inai.de" date="1554120000">- Update to new upstream release 64.1
  * Updates to Unicode 12 and to CLDR 35 locale data with many
    additions and corrections, and some new languages. ICU adds a
    data filtering/subsetting mechanism, improved formatting API,
    and a C++ LocaleBuilder.
- New python3 dependency to build intermediate file
  test/testdata/rules.mk.</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Update to new upstream release 64.2
  * This maintenance update for ICU 64 includes draft Unicode
    12.1 update, CLDR 35.1 locale data and support for the new
    Japanese era Reiwa (令和). (boo#1112183, bnc#1103893,
    FATE#325570, bnc#1103893, fate#325570, fate#325419)</changelog>
  <changelog author="idonmez@suse.com" date="1557835200">- Add 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch to fix a
  regression with the C.UTF-8 locale
  https://unicode-org.atlassian.net/browse/ICU-20575</changelog>
  <changelog author="kukuk@suse.de" date="1566388800">- Remove old obsoletes/provides for migration from very old
  products, as they break our shared library policy (bsc#1146907).</changelog>
  <changelog author="jengelh@inai.de" date="1570276800">- Update to release 65.1 (jsc#SLE-11118).
  * Updated to CLDR 36 locale data with many additions and
    corrections, and some new measurement units.
  * The Java LocaleMatcher API is improved, and ported to C++.
- Drop 075cefb2e21f57f4cac1bc2868e93dd1b8c077cc.patch
  (merged)</changelog>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="qzhao@suse.com" date="1660305600">- Backport icu-CVE-2020-21913.patch: backport commit 727505bdd
  from upstream, use LocalMemory for cmd to prevent use after free
  (bsc#1193951 CVE-2020-21913).</changelog>
</package>
<package pkgid="c316229be8b619e6a8ec28d2c977efedfea97b1201eb81d4d3f87588521a8e61" name="libicu73_2" arch="aarch64">
  <version epoch="0" ver="73.2" rel="150000.1.3.1"/>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
</package>
<package pkgid="1bb07c28bf20584ebe1440a008f1a6fe65ad211357ca65e7575e928a0b5c51c7" name="libicu73_2" arch="ppc64le">
  <version epoch="0" ver="73.2" rel="150000.1.3.1"/>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
</package>
<package pkgid="2bd2f896340c6dc1741525417fa9eb69a3cc4f4d470d692800e8ad4214ba5bff" name="libicu73_2" arch="s390x">
  <version epoch="0" ver="73.2" rel="150000.1.3.1"/>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
</package>
<package pkgid="ef81df283534a140bff9431c025f599fe82891b7d0cb3f14d0e54a4238a04a6b" name="libicu73_2" arch="x86_64">
  <version epoch="0" ver="73.2" rel="150000.1.3.1"/>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
</package>
<package pkgid="cae8f44e3e52d85a31f998825f688cd615fa00ebde596d3a19b647be385da647" name="libicu73_2" arch="aarch64">
  <version epoch="0" ver="73.2" rel="150000.1.7.1"/>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
  <changelog author="meissner@suse.com" date="1701950400">- icu4c-73_c-ICU-22512-Fix-broken-TestHebrewCalendarInTemporalLeapYear.patch
  Fix testsuite issue in hebrew calendar (bsc#1217479)</changelog>
</package>
<package pkgid="e1f3b3886277d7afadfaccb068ddbee44e2b1c9d0873dd38b50681ecc4f327a0" name="libicu73_2" arch="ppc64le">
  <version epoch="0" ver="73.2" rel="150000.1.7.1"/>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
  <changelog author="meissner@suse.com" date="1701950400">- icu4c-73_c-ICU-22512-Fix-broken-TestHebrewCalendarInTemporalLeapYear.patch
  Fix testsuite issue in hebrew calendar (bsc#1217479)</changelog>
</package>
<package pkgid="bf8401bddcbbd3685bc93a978566635302fd1c82d090bfb5a104e5f240f52750" name="libicu73_2" arch="s390x">
  <version epoch="0" ver="73.2" rel="150000.1.7.1"/>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
  <changelog author="meissner@suse.com" date="1701950400">- icu4c-73_c-ICU-22512-Fix-broken-TestHebrewCalendarInTemporalLeapYear.patch
  Fix testsuite issue in hebrew calendar (bsc#1217479)</changelog>
</package>
<package pkgid="61c5889fea14a0ad31745c41d0f9c3bb0ebfca8c5518cddce9497926a22c6a39" name="libicu73_2" arch="x86_64">
  <version epoch="0" ver="73.2" rel="150000.1.7.1"/>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
  <changelog author="meissner@suse.com" date="1701950400">- icu4c-73_c-ICU-22512-Fix-broken-TestHebrewCalendarInTemporalLeapYear.patch
  Fix testsuite issue in hebrew calendar (bsc#1217479)</changelog>
</package>
<package pkgid="a6dd4a37c87379b596f9922ca172eb2c90fd1c0e4153143365e12524d9af46b9" name="libicu73_2-bedata" arch="noarch">
  <version epoch="0" ver="73.2" rel="150000.1.3.1"/>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
</package>
<package pkgid="fbfa0bf155bd52e2d61dbc30572b1731889edd838bdeb259114ca5d27a825b19" name="libicu73_2-bedata" arch="noarch">
  <version epoch="0" ver="73.2" rel="150000.1.7.1"/>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
  <changelog author="meissner@suse.com" date="1701950400">- icu4c-73_c-ICU-22512-Fix-broken-TestHebrewCalendarInTemporalLeapYear.patch
  Fix testsuite issue in hebrew calendar (bsc#1217479)</changelog>
</package>
<package pkgid="be454746936fb9a5bad21ba6fc9de55eded5863590ab6044d8336c97a1798dca" name="libicu73_2-ledata" arch="noarch">
  <version epoch="0" ver="73.2" rel="150000.1.3.1"/>
  <changelog author="qzhao@suse.com" date="1590926400">- Add the provides for libicu to Make .Net core can install
  successfully. (bsc#1167603, bsc#1161007)</changelog>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
</package>
<package pkgid="b3ccc517dd66eb05649590683997b1294ce0e71f5efc1a347b4af81166be7801" name="libicu73_2-ledata" arch="noarch">
  <version epoch="0" ver="73.2" rel="150000.1.7.1"/>
  <changelog author="jengelh@inai.de" date="1603972800">- Update to release 68.1
  * CLDR 38
  * Measurement unit preferences
  * PluralRules selection for ranges of numbers
  * Locale ID canonicalization now conforms to the CLDR spec
    including edge cases
  * DateIntervalFormat supports output options such as capitalization
  * Measurement units are normalized in skeleton string output
  * Time zone data (tzdata) version 2020d</changelog>
  <changelog author="idonmez@suse.com" date="1604750400">- Add back icu.keyring, see https://unicode-org.atlassian.net/browse/ICU-21361</changelog>
  <changelog author="jengelh@inai.de" date="1608897600">- Update to release 68.2
  * Fix memory problem in FormattedStringBuilder
  * Fix assertion when setKeywordValue w/ long value.
  * Fix UBSan breakage on 8bit of rbbi
  * fix int32_t overflow in listFormat
  * Fix memory handling in MemoryPool::operator=()
  * Fix memory leak in AliasReplacer</changelog>
  <changelog author="mliska@suse.cz" date="1613649600">- Fix pthread dependency issue (boo#1182252).</changelog>
  <changelog author="mliska@suse.cz" date="1614600000">- Drop SUSE_ASNEEDED as the issue was in binutils (boo#1182252).</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1615204800">- Added icu-1618.patch to fix 2 tests on aarch64 [boo#1182645]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1617192000">- Add icu-drop-testTemperature.patch to fix boo#1182645
  The test has been dropped in master branch</changelog>
  <changelog author="schwab@suse.de" date="1618056000">- icu-drop-testTemperature.patch: Remove
- icu-fix-testTemperature.patch: Backport ICU-21366 (bsc#1182645)
- Don't disable testsuite under qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1618056001">- Update to release 69.1
  * CLDR 39
  * For Norwegian, "no" is back to being the canonical code, with
    "nb" treated as equivalent. This aligns handling of Norwegian
    with other macro language codes.
  * Binary prefixes in measurement units (KiB, MiB, etc.)
  * Time zone offsets from local time: New APIs
    BasicTimeZone::getOffsetFromLocal() (C++) and
    ucal_getTimeZoneOffsetFromLocal()
- Drop icu-1618.patch (merged),
  icu-fix-testTemperature.patch (merged)</changelog>
  <changelog author="schwab@suse.de" date="1620820800">- nan-undefined-conversion.patch: ICU-21613 Fix undefined behaviour in
  ComplexUnitsConverter::applyRounder</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636459200">- Update to release 70.1:
  * Unicode 14 (new characters, scripts, emoji, and API constants)
  * CLDR 40 (many additions and corrections)
  * Fixes for measurement unit formatting
  * Can now be built with up to C++20 compilers
- Rebased icu-error-reporting.diff</changelog>
  <changelog author="schwab@suse.de" date="1637582400">- Add fix-ucptrietest-golden-diff.patch: ICU-21793 Fix
  ucptrietest golden diff [boo#1192935]</changelog>
  <changelog author="dmueller@suse.com" date="1649505600">- update to 71.1:
  * updates to CLDR 41 locale data with various additions and corrections.
  * phrase-based line breaking for Japanese. Existing line breaking methods
    follow standards and conventions for body text but do not work well for
    short Japanese text, such as in titles and headings. This new feature is
    optimized for these use cases.
  * support for Hindi written in Latin letters (hi_Latn). The CLDR data for
    this increasingly popular locale has been significantly revised and
    expanded. Note that based on user expectations, hi_Latn incorporates a
    large amount of English, and can also be referred to as “Hinglish”.
  * time zone data updated to version 2022a. Note that pre-1970 data for a
    number of time zones has been removed, as has been the case in the upstream
    tzdata release since 2021b.
- drop fix-ucptrietest-golden-diff.patch (upstream)</changelog>
  <changelog author="mrueckert@suse.de" date="1650888000">- bump library packagename to libicu71 to match the version.</changelog>
  <changelog author="jengelh@inai.de" date="1666180800">- Update to release 72.1
  * Support for Unicode 15, including new characters, scripts,
    emoji, and corresponding API constants.
  * Support for CLDR 42 locale data with various additions and
    corrections.
  * Shift to tzdb 2022e. Pre-1970 data for a number of timezones
    has been removed.</changelog>
  <changelog author="mliska@suse.cz" date="1677758400">- Use -fexcess-precision=fast as GCC 13 will default to
  - fexcess-precision=standard for C++.</changelog>
  <changelog author="jengelh@inai.de" date="1681387200">- Update to release 73.1
  * Improved Japanese and Korean short-text line breaking
  * Reduction of C++ memory use in date formatting</changelog>
  <changelog author="gmbr3@opensuse.org" date="1685016000">- Add icu-UCHAR-uint16t.patch: fixes builds where UCHAR_TYPE is
  re-defined such as libqt5-qtwebengine</changelog>
  <changelog author="jengelh@inai.de" date="1686744000">- Update to release 73.2
  * CLDR extends the support for “short” Chinese sort orders to
    cover some additional, required characters for Level 2. This
    is carried over into ICU collation.
  * ICU has a modified character conversion table, mapping some
    GB18030 characters to Unicode characters that were encoded
    after GB18030-2005.
- Delete icu-UCHAR-uint16t.patch (merged)</changelog>
  <changelog author="meissner@suse.com" date="1701950400">- icu4c-73_c-ICU-22512-Fix-broken-TestHebrewCalendarInTemporalLeapYear.patch
  Fix testsuite issue in hebrew calendar (bsc#1217479)</changelog>
</package>
<package pkgid="0df11cd37df11130995924b90baf37b183c8b97c47bf7b400034003296f49f33" name="libindicator" arch="src">
  <version epoch="0" ver="16.10.0+bzr20171205" rel="150200.3.2.1"/>
  <changelog author="p.drouand@gmail.com" date="1361966400">- Initial release</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1379678400">- Fix System/Libraries group for lib</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Update to 12.10.2+14.04.20140304
  * Latest release available in Ubuntu archives - no changelog provided
- Enable build of GTK-3.0 subpackage
- Added dont-build-debug-tools.patch, tools are used only for tests
  &amp; developing indicators. Also, it pulls libido requirement, which
  does not exists on openSUSE</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.2+14.04.20141007.1
  + No changelog available
- Use download Url as source</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.2+bzr20140922:
  + No changes.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445169600">- fix-compilation.patch: fix "cannot find -lglib-2.0-lm"
  compilation error.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451131200">- Update to 12.10.2+bzr20140922:
  * Add -lm via LDADD to resolve FTBFS in Ubuntu 16.04.
- Remove fix-compilation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Update to version 16.10.0+bzr20171205:
  + Fix build with GNOME 3.28.
- Rebase dont-build-debug-tools.patch.
- Add pkgconfig(libido3-0.1) BuildRequires: new dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Replace dont-build-debug-tools.patch with
  libindicator-disable-werror.patch: no need to avoid Ido.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="yfjiang@suse.com" date="1584705600">- A shared systemd target for user session is shipped with the
  source, pack it up properly.
  https://bazaar.launchpad.net/~indicator-applet-developers/libindicator/trunk.16.10/revision/534</changelog>
</package>
<package pkgid="404027fbf567d317944e5ab88178dbf9fb11335565bde8ac4e0c6692c0854826" name="libindicator3-7" arch="aarch64">
  <version epoch="0" ver="16.10.0+bzr20171205" rel="150200.3.2.1"/>
  <changelog author="johann.luce@wanadoo.fr" date="1379678400">- Fix System/Libraries group for lib</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Update to 12.10.2+14.04.20140304
  * Latest release available in Ubuntu archives - no changelog provided
- Enable build of GTK-3.0 subpackage
- Added dont-build-debug-tools.patch, tools are used only for tests
  &amp; developing indicators. Also, it pulls libido requirement, which
  does not exists on openSUSE</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.2+14.04.20141007.1
  + No changelog available
- Use download Url as source</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.2+bzr20140922:
  + No changes.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445169600">- fix-compilation.patch: fix "cannot find -lglib-2.0-lm"
  compilation error.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451131200">- Update to 12.10.2+bzr20140922:
  * Add -lm via LDADD to resolve FTBFS in Ubuntu 16.04.
- Remove fix-compilation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Update to version 16.10.0+bzr20171205:
  + Fix build with GNOME 3.28.
- Rebase dont-build-debug-tools.patch.
- Add pkgconfig(libido3-0.1) BuildRequires: new dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Replace dont-build-debug-tools.patch with
  libindicator-disable-werror.patch: no need to avoid Ido.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="yfjiang@suse.com" date="1584705600">- A shared systemd target for user session is shipped with the
  source, pack it up properly.
  https://bazaar.launchpad.net/~indicator-applet-developers/libindicator/trunk.16.10/revision/534</changelog>
</package>
<package pkgid="b90f01575fbead0622d1a1ea60a04c41e8b7c8efbd0143327e9713a301510257" name="libindicator3-7" arch="s390x">
  <version epoch="0" ver="16.10.0+bzr20171205" rel="150200.3.2.1"/>
  <changelog author="johann.luce@wanadoo.fr" date="1379678400">- Fix System/Libraries group for lib</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Update to 12.10.2+14.04.20140304
  * Latest release available in Ubuntu archives - no changelog provided
- Enable build of GTK-3.0 subpackage
- Added dont-build-debug-tools.patch, tools are used only for tests
  &amp; developing indicators. Also, it pulls libido requirement, which
  does not exists on openSUSE</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.2+14.04.20141007.1
  + No changelog available
- Use download Url as source</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.2+bzr20140922:
  + No changes.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445169600">- fix-compilation.patch: fix "cannot find -lglib-2.0-lm"
  compilation error.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451131200">- Update to 12.10.2+bzr20140922:
  * Add -lm via LDADD to resolve FTBFS in Ubuntu 16.04.
- Remove fix-compilation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Update to version 16.10.0+bzr20171205:
  + Fix build with GNOME 3.28.
- Rebase dont-build-debug-tools.patch.
- Add pkgconfig(libido3-0.1) BuildRequires: new dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Replace dont-build-debug-tools.patch with
  libindicator-disable-werror.patch: no need to avoid Ido.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="yfjiang@suse.com" date="1584705600">- A shared systemd target for user session is shipped with the
  source, pack it up properly.
  https://bazaar.launchpad.net/~indicator-applet-developers/libindicator/trunk.16.10/revision/534</changelog>
</package>
<package pkgid="d61f51060c1f40684279eb0caf6856795785e3ca5743829ab6917125f3e38ecb" name="libindicator3-7" arch="x86_64">
  <version epoch="0" ver="16.10.0+bzr20171205" rel="150200.3.2.1"/>
  <changelog author="johann.luce@wanadoo.fr" date="1379678400">- Fix System/Libraries group for lib</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1394193600">- Update to 12.10.2+14.04.20140304
  * Latest release available in Ubuntu archives - no changelog provided
- Enable build of GTK-3.0 subpackage
- Added dont-build-debug-tools.patch, tools are used only for tests
  &amp; developing indicators. Also, it pulls libido requirement, which
  does not exists on openSUSE</changelog>
  <changelog author="p.drouand@gmail.com" date="1414324800">- Update to version 12.10.2+14.04.20141007.1
  + No changelog available
- Use download Url as source</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1430827200">- Update to 12.10.2+bzr20140922:
  + No changes.
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445169600">- fix-compilation.patch: fix "cannot find -lglib-2.0-lm"
  compilation error.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451131200">- Update to 12.10.2+bzr20140922:
  * Add -lm via LDADD to resolve FTBFS in Ubuntu 16.04.
- Remove fix-compilation.patch: fixed upstream.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- Update to version 16.10.0+bzr20171205:
  + Fix build with GNOME 3.28.
- Rebase dont-build-debug-tools.patch.
- Add pkgconfig(libido3-0.1) BuildRequires: new dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520856000">- Replace dont-build-debug-tools.patch with
  libindicator-disable-werror.patch: no need to avoid Ido.</changelog>
  <changelog author="dimstar@opensuse.org" date="1571227200">- Inject -Wno-error into CFLAGS. It's kinda ridiculous for code
  that is not maintained upstream to pass -Werror by default and
  then not catching up. So for now we accept warnings.</changelog>
  <changelog author="yfjiang@suse.com" date="1584705600">- A shared systemd target for user session is shipped with the
  source, pack it up properly.
  https://bazaar.launchpad.net/~indicator-applet-developers/libindicator/trunk.16.10/revision/534</changelog>
</package>
<package pkgid="db40f6143c379448448761cbad388c41b329c6fa2e49a6c1c1a4c11ff3455c86" name="libipset13" arch="aarch64">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="81b21f4bd26e41f070af1b16119f8daf1d52dceca4e97dcd361560e0f8b3f225" name="libipset13" arch="s390x">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="0712667ef5644c9a3712e4996c401bd81d35fadda0e23a7b51abb2d116e0e5e7" name="libipset13" arch="x86_64">
  <version epoch="0" ver="7.15" rel="150400.12.6.4"/>
  <changelog author="jengelh@inai.de" date="1506168000">- Update to new upstream release 6.34
  * Reset state after a command failed, when multiple ones
    are issued.
  * Handle padding attribute properly in userspace.
  * Test to check the fix to add an IPv4 range containing more
    than 2^31 addresses.
- Remove ipset-6.33-export-func.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1515240000">- Update to new upstream release 6.35
  * Userspace revision handling is reworked
  * Backport patch: netfilter: ipset: use nfnl_mutex_is_locked
  * Missing nfnl_lock()/nfnl_unlock() is added to
    ip_set_net_exit()
  * netfilter: ipset: add resched points during set listing
  * Fix "don't update counters" mode when counters used at the
    matching
  * netfilter: ipset: Fix race between dump and swap</changelog>
  <changelog author="jengelh@inai.de" date="1516622400">- Add 0001-build-do-install-libipset-args.h.patch [boo#1077037].</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 6.36
  * Adding a IPv4 range x.x.x.x–255.255.255.255 could lead to
    memory exhaustion, which has been fixed.
- Drop 0001-build-do-install-libipset-args.h.patch (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1523361600">- Update to new upstream release 6.38
  * Fix parsing service names for ports.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Update to new upstream release 7.0
  * A new internal protocol version between the kernel and
    userspace is used. This is required in order to support two
    new functions and the extendend LIST operation, which makes
    possible to run ipset in every case entirely over netlink,
    without the need to use getsockopt().
  * The userspace library was reworked so it can be embedded
    without calling the binary.</changelog>
  <changelog author="suse+build@de-korte.org" date="1542715200">- Add ipset-file.diff [boo#1116432].</changelog>
  <changelog author="jengelh@inai.de" date="1544529600">- Update to new upstream release 7.1
  * Correct the manpage about the sort option
  * Implement sorting for hash types in the ipset tool
  * Fix to list/save into file specified by option
- Remove ipset-file.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1560168000">- Update to new upstream release 7.2
  * ipset: Fix memory accounting for hash types on resize</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 7.3
  * Fix rename concurrency with listing, which can result broken
    list/save results.
  * ipset: Copy the right MAC address in bitmap:ip,mac and
    hash:ip,mac sets.
  * ipset: Actually allow destination MAC address for hash:ip,mac
    sets too.</changelog>
  <changelog author="jengelh@inai.de" date="1572609600">- Update to release 7.4
  * Wildcard support for the "hash:net,iface" type.</changelog>
  <changelog author="jengelh@inai.de" date="1578657600">- Update to release 7.5
  * netfilter: ipset: avoid null deref when IPSET_ATTR_LINENO
    is present.
  * netfilter: xt_set: Do not restrict --map-set to the
    mangle table.</changelog>
  <changelog author="jengelh@inai.de" date="1582545600">- Update to release 7.6
  * Add checking system_power_efficient_wq in the source tree.</changelog>
  <changelog author="jengelh@inai.de" date="1605787200">- Update to release 7.9
  * Enable memory accounting for ipset allocations
  * Expose the initval hash parameter to userspace
  * Add bucketsize parameter to all hash types
  * Support the -exist flag with the destroy command</changelog>
  <changelog author="jengelh@inai.de" date="1608465600">- Update to release 7.10
  * Fix shift-out-of-bounds in htable_bits()</changelog>
  <changelog author="jengelh@inai.de" date="1613736000">- Update to release 7.11
  * Argument parsing buffer overflow in ipset_parse_argv fixed</changelog>
  <changelog author="jengelh@inai.de" date="1627473600">- Update to release 7.14
  * Allow specifying protocols by number
  * Limit the maximum range of consecutive elements to add/delete</changelog>
  <changelog author="info@paolostivanin.com" date="1628078400">- Update to release 7.15
  * netfilter: ipset: Fix maximal range check in
    hash_ipportnet4_uadt()</changelog>
  <changelog author="danilo.spinella@suse.com" date="1667563200">- Tumbleweed is not affected by the following SLE issues:
  bsc#1122853</changelog>
  <changelog author="danilo.spinella@suse.com" date="1714737600">- Fix build with latest kernel, bsc#1223370
  * bsc1223370.patch</changelog>
</package>
<package pkgid="552c68090ea787e7b7b0ed1a462b27b460260e3bd8d0f8f58b9ab0cdf4ae7773" name="libjansson" arch="src">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="27018e0819d4a9f1633d2f8a67cf284175d8b7a0da333616c30e63f172f42448" name="libjansson" arch="src">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="84b58c2b91fd59a828cca70a3987ba4f8bc01956278c354ca074671f4c3e4e7a" name="libjansson4" arch="aarch64">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="71f80b8ef224453ac706429a72de522fcca676e59c5c672d5d0570aef60549fd" name="libjansson4" arch="s390x">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="35363333982837d88078996a0e6b3b410821c8fa405a5870ffb5396ed0277ae1" name="libjansson4" arch="x86_64">
  <version epoch="0" ver="2.14" rel="150000.3.3.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="15f833d12c22bfbd27df45e7c38615fc451f193122f0a70a8fe165432e00c80b" name="libjansson4" arch="aarch64">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="450e7dde21198dd98567392eb47d0978b07f3fd0587f24ba443d3bd1a0bafdc8" name="libjansson4" arch="s390x">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="5e65fa2322926fe8510b580444a13157ba356b1523563e0c83708d0f1bbdce54" name="libjansson4" arch="x86_64">
  <version epoch="0" ver="2.14" rel="150000.3.5.1"/>
  <changelog author="fcastelli@suse.com" date="1318852800">- Create initial package (v2.2.1)</changelog>
  <changelog author="jengelh@medozas.de" date="1319198400">- Remove redundant tags/sections (cf. specfile guidelines)
- Centralize the shlib package name</changelog>
  <changelog author="jengelh@medozas.de" date="1328011200">- Provide pkgconfig symbols</changelog>
  <changelog author="jengelh@inai.de" date="1336824000">- Update to new upstream release 2.3.1
  * Add support for optional object keys with the "{s?o}" syntax
  in json_unpack and the like
  * Add json_object_update_existing() and json_object_update_missing()
  for updating only existing keys or only adding missing keys to an
  object.
  * Add json_object_foreach() for more convenient iteration over
  objects.
  * When decoding JSON, write the number of bytes that were read from
  input to "error.position" also on success. This is handy with
  JSON_DISABLE_EOF_CHECK.
  * Add support for decoding any JSON value, not just arrays or
  objects. The support is enabled with the new "JSON_DECODE_ANY"
  flag.
  * Avoid problems with object's serial number growing too big.
  * Remove "+" and leading zeros from exponents in the encoder.
  * Decoding functions now return NULL if the first argument is NULL.</changelog>
  <changelog author="sbrabec@suse.cz" date="1354104000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1405857600">- Update to new upstream release 2.6
  * Fixed CVE-2013-6401: avoid bad performance in large JSON objects
  * The json_pack et al functions recognize the specifiers "s#", "+"
  and "+#"
  * Add the "JSON_DECODE_INT_AS_REAL" flag
  * Add "json_array_foreach()" function
  * Add the "json_boolean()" macro that returns the JSON true or
  false value based on its argument
  * Add "json_load_callback()" that calls a callback function
  repeatedly to read the JSON input.
  * Add JSON_ESCAPE_SLASH encoding flag to escape all occurences of
  '/' with '\/'.
- Drop defunct gpg-offline and use local source_validator instead</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1410436800">- Add baselibs.conf</changelog>
  <changelog author="efimovov@gmail.com" date="1415188800">- Update to new upstream release 2.7
  * The json_pack et al functions recognize the specifiers "s%", "+%"
  and "+#"
  * Add length-aware string constructors "json_stringn()" and
  "json_stringn_nocheck()", length-aware string mutators
  "json_string_setn()" and "json_string_setn_nocheck()",
  and a function for getting string's length "json_string_length()"
  * Support ""\u0000"" escapes in the decoder. The support can be
  enabled by using the ""JSON_ALLOW_NUL"" decoding flag
  * Add "json_boolean_value()" as an alias for "json_is_true()"
  * Add JSON_REAL_PRECISION encoding flag/macro for controlling real
  number precision
  * Define the maximum indentation as JSON_MAX_INDENT.
  * Fix cases when some malformed ""\uNNNN"" escapes could crash
  the decoder with an assertion failure
  * Avoid integer overflows with very long strings in UTF-8 decoder
  and hashtable
  * Check for *NULL* key in "json_object_get()"
  and "json_object_del()"
  * "json_unpack()": Allow mixing JSON_STRICT with optional keys.
  * Fix int/int32 mismatch
  * Parse subnormal numbers correctly</changelog>
  <changelog author="coolo@suse.com" date="1488369600">- update to new upstream release 2.9
  * New features:
    Add json_auto_t to automatically decref a value that goes out of scope.
    Available only on GCC and Clang. (#301)
  * Small documentation fixes.
- changelog from 2.8
  * New features:
  - Always preserve insertion order of object items. json_object_iter()
    and friends, json_object_foreach() and json_dumps() and friends now
    always work in the insertion order of object items (#293).
  - Add json_object_foreach_safe() macro that allows json_object_del()
    calls during iteration (#230).
  - Add json_get_alloc_funcs() to allow reading the allocation functions
    set by json_set_alloc_funcs() (#262, #264).
  - Add json_pack() format specifiers s?, o? and O? for values that can
    be null (#261, #270).
  * Bug fixes:
  - Fix a crash when parsing inputs consisting of very deeply nested
    arrays or objects (#282, #284).
  - Never convert numbers to integers in the parser when
    JSON_DECODE_INT_AS_REAL is set.
  - Fix a use-after-free in json_pack() error handling.
  - Fix subnormal number parsing on mingw32.
  - Handle out-of-memory situations gracefully in the hashtable
    implementation</changelog>
  <changelog author="pstivanin@suse.com" date="1675684800">- Update to 2.14 (boo#1201817):
  * New Features:
    + Add `json_object_getn`, `json_object_setn`, `json_object_deln`, and the
    corresponding `nocheck` functions.
    + Add jansson_version_str() and jansson_version_cmp() for runtime
    version checking
    + Add json_object_update_new(), json_object_update_existing_new()
    and json_object_update_missing_new() functions
    + Add json_object_update_recursive()
    + Add `json_pack()` format specifiers s*, o* and O* for values
    that can be omitted if null (#339).
    + Add `json_error_code()` to retrieve numeric error codes
    (#365, #380, #381).
    + Enable thread safety for `json_dump()` on all systems.
    Enable thread safe `json_decref()` and `json_incref()` for
    modern compilers (#389).
    + Add `json_sprintf()` and `json_vsprintf()` (#393).
  * Fixes:
    + Handle `sprintf` corner cases.
    + Add infinite loop check in json_deep_copy()
    + Enhance JANSSON_ATTRS macro to support earlier C standard(C89)
    + Update version detection for sphinx-build
    + Fix error message in `json_pack()` for NULL object (#409).
    + Avoid invalid memory read in `json_pack()` (#421).
    + Call va_end after va_copy in `json_vsprintf()` (#427).
    + Improve handling of formats with '?' and '*' in `json_pack()`
    (#438).
    + Remove inappropriate `jsonp_free()` which caused
    segmentation fault in error handling (#444).
    + Fix incorrect report of success from `json_dump_file()` when
    an error is returned by `fclose()` (#359).
    + Make json_equal() const-correct (#344).
    + Fix incomplete stealing of references by `json_pack()` (#374)
- Use GitHub as source URLs: Release hasn't been uploaded to digip.org.
- Add check section.</changelog>
</package>
<package pkgid="0dcc40112291b6520768918b362d1429c8cbc360b780a6477fe5b913912158d3" name="libjbig2" arch="aarch64">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="f8fb923c5d1ec7cbe3ed163b7624cc6d8b32c5e07dc19005fd85360f65804662" name="libjbig2" arch="s390x">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="0daf1ccf387730c39cf914239d06e147ddb46b97597d2f8171a00bfae4caf24d" name="libjbig2" arch="x86_64">
  <version epoch="0" ver="2.1" rel="150000.3.5.1"/>
  <changelog author="brian@aljex.com" date="1334059200">- Initial SUSE package.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1339156800">- build -32bit packages to make libtiff5-32bit installable</changelog>
  <changelog author="coolo@suse.com" date="1339588800">- fix baselibs.conf</changelog>
  <changelog author="mmeister@suse.com" date="1364472000">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="schwab@linux-m68k.org" date="1374235200">- Don't strip binaries</changelog>
  <changelog author="brian@aljex.com" date="1397563200">- v2.1
-Fixes bnc#870855
-Fixes CVE-2013-6369</changelog>
  <changelog author="pgajdos@suse.com" date="1702987200">- security update
- added patches
  fix CVE-2022-1210 [bsc#1198146], Malicious file leads to a denial of service in TIFF File Handler
  + jbigkit-CVE-2022-1210.patch</changelog>
</package>
<package pkgid="fa6e61d5e16085890313983c3cf445ca06d42c86c0c932e15785160af55c2f8a" name="libkmipclient1" arch="s390x">
  <version epoch="0" ver="2.19.0" rel="150400.7.21.1"/>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
</package>
<package pkgid="1669d68f789ce06f2cc9c11db425b9b59ad8678e78d976c1cf7f226e939085d2" name="libkmipclient1" arch="s390x">
  <version epoch="0" ver="2.19.0" rel="150400.7.24.1"/>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="tabraham@suse.com" date="1696248000">- Applied patch (bsc#1205528)
  - Fixes error 'zgetdump: Trying to seek past file end "/dev/crash"'
  * s390-tools-sles15sp4-zdump-fix-dev-mem-reading.patch</changelog>
</package>
<package pkgid="f72e13e15de34609442a4bbede5f2b3cc06da9daa2d1cc41cc9755267b7f1c02" name="libldap-2_4-2" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="5c39e355d6aaf6e70b238779f36845916638546f099fe1f462645c797073ce9f" name="libldap-2_4-2" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="e65f3bdd8cd68295e244024aec80a7d49343c651c24fa8985394b62902b3af19" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="7b863f2951781bc3332d8fc1cbdb84c8f22f732d7536fd2e478f7b07500a5b77" name="libldap-2_4-2" arch="aarch64">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="ae9939b1efb1fabd51019f9540b2f6740436b4eff65d4ad2b623446262a05180" name="libldap-2_4-2" arch="s390x">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="5a26d335b5c2ac31fa988cca2e5e80f9987a1dd994b6fd8157b6ad006753b80e" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="1c1f6e5f07d78dde0216b6e0cf5d1f1d1c39e8c58045a758e8537461a99d0da8" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="b62990fc54b48e6e90462cff7d2424394a7317cea0935be64b5dd4a30dc4a4e5" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="efa716839c15e079dea543d10aae8bf4eace6a6b27794b566bb80271b4f439c2" name="liblldp_clif1" arch="aarch64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove obsolete insserv calls</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="34c8112a6d7fa999ac8d8ec8e86f57b48414ba6c6819e9a038b559c7970309a2" name="liblldp_clif1" arch="s390x">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove obsolete insserv calls</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="776c290bc446b10d641a45d90a11e6c80df5d27cb21ebf61815d5c16ba2f73f6" name="liblldp_clif1" arch="x86_64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove obsolete insserv calls</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="e33a8373998ed94d923c4aeef7eba9ab4964ae660190b5782ab5c45754b2c9e5" name="libltdl7" arch="x86_64">
  <version epoch="0" ver="2.4.6" rel="150000.3.6.2"/>
  <changelog author="foss@grueninger.de" date="1415016000">- Drop patch config-guess-sub-update.patch for libltdl/config as the
  folder no longer exists.
- Drop patch libtool-ppc64le.patch for ppc handling as it is already
  part of v2.4.3
- Update to libtool 2.4.3
  * * New features:
  - Moved to gnulib release infrastructure.
  - M4 is now used for scanning the M4 macros in your configure.ac that
  'libtoolize' looks at to determine what files you want, and where you
  would like them installed.  This means that you can compose your
  version number or any other argument that Libtoolize needs to know at
  M4 time using git-version-gen from gnulib, for example.
  - Invoking 'libtoolize --ltdl' no longer maintains a separate autoconf
  macro directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever macro
  directory is declared by the parent project. (Note: if you were
  already sharing a macro directory with AC_CONFIG_MACRO_DIR(ltdl/m4)
  or similar, that still works as does any other directory choice).
  - Invoking 'libtoolize --ltdl' no longer maintains a separate auxiliary
  scripts directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever auxiliary
  scripts directory is declared by the parent project. (Note: if you
  were already sharing an auxiliary directory with subproject libltdl
  using AC_CONFIG_AUX_DIR(ltdl/config) or similar, that still works as
  does any other directory choice).
  - The legacy tests have all been migrated to the Autotest harness.
  - The Autotest testsuite can be run without the especially time consuming
  tests with:
    make check-local TESTSUITEFLAGS='-k "!expensive"'
  * * Bug fixes:
  - Fix a long-standing latent bug in autom4te include path for autotests
  with VPATH builds.
  - Fix a long-standing latent bug in libtoolize that could delete lines
  from libltdl/Makefile.am in recursive mode due to underquoting in a
  sed script.
  - Fix a long-standing bug in libtoolize, by outputting the 'putting
  auxiliary files in' header with 'libtoolize --ltdl --subproject'.
  - Fix a long-standing bug in libtoolize subproject installation, by not
  installing a set of autoconf macro files into the parent project if
  there is no configure.ac present to use them.
  - The libtoolize subproject mode selector is now named '--subproject'
  and is equivalent to the implied '--subproject' mode when no other
  mode is selected; '--standalone' never worked, and is no longer
  accepted.
  - Libtool and libtoolize no longer choke on paths with a comma in them.
  - In the case where $SHELL does not have the same enhanced features
  (e.g. the ability to parse 'var+=append') as $CONFIG_SHELL, libtool
  will now correctly fallback to using only vanilla shell features
  instead of failing with a parse at startup.
  - Correctly recognize import libraries when Microsoft dumpbin is used
  as the name lister and extend the dumpbin wrapper to find symbols
  in import libraries using the -headers option of dumpbin. Also fix a
  bug in the dumpbin wrapper that could lead to broken symbol listings
  in some corner cases.
  - Use the improved Microsoft dumpbin support to mend preloading of
  import libraries for Microsoft Visual C/C++.
  - No longer mangle module-definition (.def) files when feeding them to
  the Microsoft Visual C/C++ linker via the -export-symbols argument to
  the libtool script, thus matching how .def files are handled when
  using GNU tools.
  - Recognize more variants (e.g. those starting with a LIBRARY statement)
  of module-definitions (.def) files when using them instead of a raw
  list of symbols to export.
  - Fix a long-standing bug when using libtoolize without automake; we
  no longer remove install-sh with --force, since it's not a file
  libtoolize will reinstall without --install..
  * * Important incompatible changes:
  - GNU M4 is required to run libtoolize in a directory with a
  'configure.ac' (or 'configure.in') that needs tracing to determine
  what modes and directories have been specified.
  - The use of the idiosyncratically named 'Makefile.inc' in nonrecursive
  libltdl builds is deprecated, although it will be supported for one
  more year or until the next release, whichever takes longer.  Please
  upgrade to the more standard naming of 'ltdl.mk' in keeping with other
  GNU projects.
  - libtoolize now behaves consistenty in respect of multiple directory
  arguments to ACLOCAL_AMFLAGS and multiple invocations of AC_CONFIG-
  _MACRO_DIRS, where the first directory is always selected.  Previous
  releases took the first ACLOCAL_AMFLAGS argument, but the last
  invocation of AC_CONFIG_MACRO_DIRS.
  - The libtoolize program now advises use of the new Autoconf
  AC_CONFIG_MACRO_DIRS declaration.  If you follow that advice, all
  your developers will need at least autoconf-2.70 and automake-1.13
  to rebootstrap your probject.  If you still need to support
  bootstrap with older Autotools, then you should add the following
  to your configure.ac file:
    m4_ifndef([AC_CONFIG_MACRO_DIRS],
    [m4_define([AC_CONFIG_MACRO_DIRS],
    m4_defn([AC_CONFIG_MACRO_DIR]))])
  - Overhead of probing for a non-backslash crippled echo equivalent
  during initialization of every script has been removed in favor of
  trusting that "printf %s\n" works out of the box on all non-museum
  host architectures.  Manually setting ECHO appropriately in the
  build environment will be necessary on some ancient architectures.
  * * Changes in supported systems or compilers:
  - Support for bitrig (*-*-bitrig*).
  - Solaris 7 and earlier requires ECHO=/usr/ucb/echo in the build
  environment, to build and use libtool.</changelog>
  <changelog author="pth@suse.de" date="1416571200">- Add libtool-dont_delete_gnulib_files.patch that prevents deletion
  of files from gnulib to be deleted by libtoolize.
- BuildRequire help2man.
- Remove unneeded clean section.
- Use rpm macros where possible.
- Pass V=1 to make to make compilation verbose.</changelog>
  <changelog author="foss@grueninger.de" date="1417262400">-</changelog>
  <changelog author="foss@grueninger.de" date="1417262401">- Drop patch libtool-dont_delete_gnulib_files.patch which is
  included in 2.4.4
- Update to libtool 2.4.4
  * * New features:
  - Libltdl maintains its own fork of argz, with macros and files in
    the LT_ and lt__ namespaces (resp.) where they cannot clash with
    client projects' use of gnulib argz.
  * * Bug fixes:
  - Installation of 'libtoolize' once again obeys '--program-prefix',
    '--program-suffix' and '--program-transform-name' configure options.
  - `libtoolize` doesn't remove any files that it can't reinstall,
    including old versions of the snippet directory, and gnulib's
    version of the argz module and supporting files.
  - LT_FUNC_DLYSM_USCORE now works correctly on systems that don't
    support self dlopen()ing.
  * * Important incompatible changes:
  - LT_LIB_DLLOAD no longer prepends -ldl or -ldld to LIBS, causing
    duplicate occurrences in libltdl link lines.  If you need to
    add a library for dlopen() or shl_load() in your Makefile, then
    use $(LIBADD_DLOPEN) or $(LIBADD_SHL_LOAD) respectively.  If you
    are using libltdl, this all happens automatically, and the only
    difference you'll see is no more duplicated library names in the
    verbose link line.
  * * Changes in supported systems or compilers:
  - Preliminary support for tcc on linux*.  Although it already worked
    sometimes in previous releases, making sure to set LD correctly now
    avoids mis-matching GNU ld with tcc:
    ./configure CC=tcc LD=tcc
  - Added -os2dllname option to work around 8 character base name
    limit on OS/2.  The option has no effect on other systems.
  - Support for DLL versioning, -export-symbols and -export-symbols-regex
    on OS/2.
  - Support filename-based shared library versioning on AIX. See manual
    for details.</changelog>
  <changelog author="foss@grueninger.de" date="1417867200">- Require M4 as libtool's libtoolize requires it since 2.4.3</changelog>
  <changelog author="foss@grueninger.de" date="1421928000">- Update to libtool 2.4.5
  New features:
  - Libtoolize searches for the best available M4 on the user PATH at
    runtime, rather than settling for the first one found.
  - Support munging sys_lib_dlsearch_path_spec with LT_SYS_LIBRARY_PATH
    environment variable.
  Bug fixes:
  - Bail out at configure time if the installed M4 is not sufficient
    for the purposes of libtoolize.
  - freebsd-elf library versioning was upgraded incorrectly in 2.4.4,
    but now works properly again.
  - Fix a 2.4.4 regression so that libltdl subprojects do not warn
    about missing libltdl/libltdl directory as in prior releases.
  - When using Sun C++ on Solaris or GNU/Linux we used to set libtool's
    postdeps permanently, based on the contents of $CXX and $CXXFLAGS at
    configure time, which was brittle and error-prone.  Now, we no
    longer check for a SunCC ABI at configure time, but augment the
    postdeps at libtool time based on the current invocation flags on
    each call.
  Changes in supported systems or compilers:
  - /usr/local prefixed rpaths are now added to the link-line on
    ia64-hp-hpux*, because the default system runtime loader path does
    not contain them.
  - Previously, when using Sun C++ on Solaris or GNU/Linux, `-Cstd -Crun`
    flags were added to $postdeps unless CXX or CXXFLAGS contained
    `-library=stlport4`.  Newer releases have added other compiler flags
    that are also incompatible with `-Cstd -Crun`, so now we don't add
    them if any of `-std=c++[0-9][0-9]`, `-library=stdcxx4` or
    `-compat=g` were found in CXX or CXXFLAGS when the Sun C++ compiler
    is detected.</changelog>
  <changelog author="pth@suse.de" date="1423483200">- Add libtool-no_host_name.patch to remove the host name from
  generated scripts (bnc#916268).</changelog>
  <changelog author="pth@suse.de" date="1429272000">- Update to 2.4.6:
  Noteworthy changes in release 2.4.6 (2015-02-15) [stable]
  * New features:
  - LT_SYS_LIBRARY_PATH can be set in config.site, or at configure time
    and persists correctly in the generated libtool script.
  * Bug fixes:
  - Fix a race condition in ltdl dryrun test that would cause spurious
    random failures of that test.
  - LT_SYS_DLSEARCH_PATH is munged correctly.
- Add tarball signature.</changelog>
  <changelog author="mpluskal@suse.com" date="1429444800">- Use url for signature
- Add keyring file for automatic verification of signature
- Cleanup spec file with spec-cleaner
- Remove old ppc/ppc64 obsolete/provides
- Update info pre/post requires and replace postun with preun</changelog>
  <changelog author="pth@suse.de" date="1429531200">- Remove empty entry.</changelog>
  <changelog author="pth@suse.de" date="1430740800">- Fix call of install_info.</changelog>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
</package>
<package pkgid="e3ec7c613b19d2d3db427544be2bcf891b5c501db65a4803f99a0c2fbe0855a8" name="liblvm2cmd2_03" arch="aarch64">
  <version epoch="0" ver="2.03.05" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="9f173df32197ac5503543f8aab16740479e7d0c12479e031e5fa4148a4f5f1cf" name="liblvm2cmd2_03" arch="s390x">
  <version epoch="0" ver="2.03.05" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="51e7a8928b7b90e72600d6bd9939e1314e4d305c7cd69dcbd3f18ce6f4f4e743" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.05" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="10382f91f01fa98ec930f8eeff4bf6e55e78184677c5534f381209b8389bbed4" name="liblvm2cmd2_03" arch="aarch64">
  <version epoch="0" ver="2.03.05" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="86cd0e52f4c2fad5e3eb6c4be01b897415374a6462223c087d5aabb816c44279" name="liblvm2cmd2_03" arch="s390x">
  <version epoch="0" ver="2.03.05" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="0ed5b7862321aef92635be3e87311a5b85e89ce7c7937d821f98af4e26ca10a5" name="liblvm2cmd2_03" arch="x86_64">
  <version epoch="0" ver="2.03.05" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="ba5ccee693d278c786900ae96d391c1625a5d2c1dc0dac2be88e2002802e9343" name="libmicrohttpd" arch="src">
  <version epoch="0" ver="0.9.57" rel="150000.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1436788800">- fix build for SLES11:
  * update disable-stalling-test.patch: Instead of disabling testcase
  in Makefile disable testcases in code, this could be even better
  we can disable only broken test but not the whole testcase.
  * add libmicrohttpd_test_session.patch: Disable test relying on
  available libcurl version
  (see https://gnunet.org/bugs/view.php?id=3893 for details)
  * wrap libmicrosdpy into macro to disable building on
  systems with openssl &lt; 1.0.1
- update to 0.9.42:
  * fix off-by-one in MHD_start_daemon_va() error handling logic
  * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1436961600">- fux build for SLES11:
  * explicitly require libgnutls-devel in -devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1442664000">- Update to 0.9.43
  * Call resume_suspended_connections() when the user is running
    its own mainloop and calls MHD_run_from_select() to support
    resuming connections with external select. -FC
  * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
    is allowed. -CG
  * Reimplement monotonic clock functions for better
    support various platforms.
    Print more information during configure. -EG
  * Export MHD_get_reason_phrase_for() symbol. -CG
  * Added checks for overflows and buffer overruns, fixed
    possible buffer overrun. Updated md5 implementation.
    Fixed many compiler warning (mostly for VC compiler). -EG
  * Fix failure to properly clean up timed out connections
    if running in external select mode without listen socket,
    which caused busy waiting until new connections arrived.
    (Fixes #3924, thanks to slimp for reporting and testcase). -CG
  * Ignore close() errors on sockets except for EBADF,
    fixes #3926. -CG
  * Make sure to decrement connection counter before
    calling connection notifier so that
    MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
    present stale information (relevant if this is
    used for termination detection of a daemon
    stopped via MHD_quiesce_daemon()). Thanks to
    Markus Doppelbauer for reporting. -CG
  * Fix (automatic) handling of HEAD requests with
    MHD_create_response_from_callback() and HTTP/1.1
    connection keep-alives. Thanks to Cristian Klein
    for reporting. -CG
  * Add new functions MHD_create_response_from_fd64() and
    MHD_create_response_from_fd_at_offset64(). -EG
  * Fixing memory leak in digest authentication. -AW
  * Add deprecation compiler messages for deprecated functions
    and macros. -EG
  * Fixing digest authentication when used in combination
    with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing
- Drop libmicrohttpd_test_session.patch as it is fixed now</changelog>
  <changelog author="mpluskal@suse.com" date="1443787200">- Update to 0.9.44
  * Various fixes for W32 VS project files.
  * Fix digest authentication with URL arguments where value-less
    keys are given before the last argument.
  * Do not use shutdown() on listen socket if
    MHD_USE_PIPE_FOR_SHUTDOWN is set.</changelog>
  <changelog author="mpluskal@suse.com" date="1446379200">- Update to 0.9.45
  * Rework deprecation maros: fix errors with old GCC versions,
  improved support for old clang and new GCC. -EG
  * Return correct header kind in MHD_get_connection_values()
    even if a bitmask is used for the "kind" argument. -FC/CG
  * Fixing transient resource leak affecting long-lived
    connections with many keep-alives and HTTP request
    pipelining under certain circumstances (which reduced
    the receive window).
  * Fixed assertion failure triggered by a race in
    thread-per-connection mode on shutdown in rare
    circumstances. -CG
  * Deduplicate code between digestauth and connection
    parsing logic for URI arguments, shared code moved
    to new MHD_parse_arguments_ function in internal.c. -CG</changelog>
  <changelog author="mpluskal@suse.com" date="1447156800">- Update to 0.9.46
  * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the
  original code was counter-intuitive but correct, and the new
  code does break pipelining. Ignore empty lines at the beginning
  of an HTTP request (more tolerant implementation).</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Update to 0.9.47
  * Reworked VS project files. Used x64 build tools by
  efault, many optimizations, fixes.
  dded project files for VS 2015. -EG
  * SPDY is dead, killing experimental libmicrospdy. -CG
  * New logic for controlling socket buffer modes.
  Eliminated delay before last packet in response and before
  "100 Continue" response on all platforms. Also response
  header are pushed to client without waiting for response
  body. -EG
  * Remove 200ms delay observable with keep-alive on Darwin
  and *BSD platfroms. -EG
  * Fix issue with shutdown if connection was resumed just
  before shutdown. -FC
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.9.48
  * Improved compatibility with VS2010 and other older compilers.
  * Default backlog size for listen socket was changed from 32 to
  SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to
  override default backlog size.
  * If not all connections can be handled by MHD_select() than at
  least some of connections will be processed instead of failing
  without any processing.
  * Fixed redefenition of FD_SETSIZE on W32 so select() will work
  with 2000 connections instead of 64.
  * Better handled redefenition of FD_SETSIZE on all platforms.
  * Close sockets more aggressively in multi-threaded mode
  (possibly relevant for idle servers).
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1460635200">- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1464955200">- Update to version 0.9.50:
  * See provided Changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1481544000">- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 0.9.54:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1494849600">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1677672000">- Apply patch for bsc#1208745 CVE-2023-27371
  fix parser bug that could be used to crash servers using the MHD_PostProcessor
  * fix-parser-bug-MHD_PostProcessor.patch</changelog>
</package>
<package pkgid="dcb54646950cbdf935ccf8f4e85b64dc9ea39e96d08a6ab36ee08200c0997833" name="libmicrohttpd12" arch="aarch64">
  <version epoch="0" ver="0.9.57" rel="150000.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1436788800">- fix build for SLES11:
  * update disable-stalling-test.patch: Instead of disabling testcase
  in Makefile disable testcases in code, this could be even better
  we can disable only broken test but not the whole testcase.
  * add libmicrohttpd_test_session.patch: Disable test relying on
  available libcurl version
  (see https://gnunet.org/bugs/view.php?id=3893 for details)
  * wrap libmicrosdpy into macro to disable building on
  systems with openssl &lt; 1.0.1
- update to 0.9.42:
  * fix off-by-one in MHD_start_daemon_va() error handling logic
  * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1436961600">- fux build for SLES11:
  * explicitly require libgnutls-devel in -devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1442664000">- Update to 0.9.43
  * Call resume_suspended_connections() when the user is running
    its own mainloop and calls MHD_run_from_select() to support
    resuming connections with external select. -FC
  * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
    is allowed. -CG
  * Reimplement monotonic clock functions for better
    support various platforms.
    Print more information during configure. -EG
  * Export MHD_get_reason_phrase_for() symbol. -CG
  * Added checks for overflows and buffer overruns, fixed
    possible buffer overrun. Updated md5 implementation.
    Fixed many compiler warning (mostly for VC compiler). -EG
  * Fix failure to properly clean up timed out connections
    if running in external select mode without listen socket,
    which caused busy waiting until new connections arrived.
    (Fixes #3924, thanks to slimp for reporting and testcase). -CG
  * Ignore close() errors on sockets except for EBADF,
    fixes #3926. -CG
  * Make sure to decrement connection counter before
    calling connection notifier so that
    MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
    present stale information (relevant if this is
    used for termination detection of a daemon
    stopped via MHD_quiesce_daemon()). Thanks to
    Markus Doppelbauer for reporting. -CG
  * Fix (automatic) handling of HEAD requests with
    MHD_create_response_from_callback() and HTTP/1.1
    connection keep-alives. Thanks to Cristian Klein
    for reporting. -CG
  * Add new functions MHD_create_response_from_fd64() and
    MHD_create_response_from_fd_at_offset64(). -EG
  * Fixing memory leak in digest authentication. -AW
  * Add deprecation compiler messages for deprecated functions
    and macros. -EG
  * Fixing digest authentication when used in combination
    with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing
- Drop libmicrohttpd_test_session.patch as it is fixed now</changelog>
  <changelog author="mpluskal@suse.com" date="1443787200">- Update to 0.9.44
  * Various fixes for W32 VS project files.
  * Fix digest authentication with URL arguments where value-less
    keys are given before the last argument.
  * Do not use shutdown() on listen socket if
    MHD_USE_PIPE_FOR_SHUTDOWN is set.</changelog>
  <changelog author="mpluskal@suse.com" date="1446379200">- Update to 0.9.45
  * Rework deprecation maros: fix errors with old GCC versions,
  improved support for old clang and new GCC. -EG
  * Return correct header kind in MHD_get_connection_values()
    even if a bitmask is used for the "kind" argument. -FC/CG
  * Fixing transient resource leak affecting long-lived
    connections with many keep-alives and HTTP request
    pipelining under certain circumstances (which reduced
    the receive window).
  * Fixed assertion failure triggered by a race in
    thread-per-connection mode on shutdown in rare
    circumstances. -CG
  * Deduplicate code between digestauth and connection
    parsing logic for URI arguments, shared code moved
    to new MHD_parse_arguments_ function in internal.c. -CG</changelog>
  <changelog author="mpluskal@suse.com" date="1447156800">- Update to 0.9.46
  * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the
  original code was counter-intuitive but correct, and the new
  code does break pipelining. Ignore empty lines at the beginning
  of an HTTP request (more tolerant implementation).</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Update to 0.9.47
  * Reworked VS project files. Used x64 build tools by
  efault, many optimizations, fixes.
  dded project files for VS 2015. -EG
  * SPDY is dead, killing experimental libmicrospdy. -CG
  * New logic for controlling socket buffer modes.
  Eliminated delay before last packet in response and before
  "100 Continue" response on all platforms. Also response
  header are pushed to client without waiting for response
  body. -EG
  * Remove 200ms delay observable with keep-alive on Darwin
  and *BSD platfroms. -EG
  * Fix issue with shutdown if connection was resumed just
  before shutdown. -FC
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.9.48
  * Improved compatibility with VS2010 and other older compilers.
  * Default backlog size for listen socket was changed from 32 to
  SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to
  override default backlog size.
  * If not all connections can be handled by MHD_select() than at
  least some of connections will be processed instead of failing
  without any processing.
  * Fixed redefenition of FD_SETSIZE on W32 so select() will work
  with 2000 connections instead of 64.
  * Better handled redefenition of FD_SETSIZE on all platforms.
  * Close sockets more aggressively in multi-threaded mode
  (possibly relevant for idle servers).
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1460635200">- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1464955200">- Update to version 0.9.50:
  * See provided Changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1481544000">- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 0.9.54:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1494849600">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1677672000">- Apply patch for bsc#1208745 CVE-2023-27371
  fix parser bug that could be used to crash servers using the MHD_PostProcessor
  * fix-parser-bug-MHD_PostProcessor.patch</changelog>
</package>
<package pkgid="e91fb740d1007eb45f5925b6fee108bea251c4bbfbd1181b9c10cfd87117b908" name="libmicrohttpd12" arch="s390x">
  <version epoch="0" ver="0.9.57" rel="150000.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1436788800">- fix build for SLES11:
  * update disable-stalling-test.patch: Instead of disabling testcase
  in Makefile disable testcases in code, this could be even better
  we can disable only broken test but not the whole testcase.
  * add libmicrohttpd_test_session.patch: Disable test relying on
  available libcurl version
  (see https://gnunet.org/bugs/view.php?id=3893 for details)
  * wrap libmicrosdpy into macro to disable building on
  systems with openssl &lt; 1.0.1
- update to 0.9.42:
  * fix off-by-one in MHD_start_daemon_va() error handling logic
  * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1436961600">- fux build for SLES11:
  * explicitly require libgnutls-devel in -devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1442664000">- Update to 0.9.43
  * Call resume_suspended_connections() when the user is running
    its own mainloop and calls MHD_run_from_select() to support
    resuming connections with external select. -FC
  * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
    is allowed. -CG
  * Reimplement monotonic clock functions for better
    support various platforms.
    Print more information during configure. -EG
  * Export MHD_get_reason_phrase_for() symbol. -CG
  * Added checks for overflows and buffer overruns, fixed
    possible buffer overrun. Updated md5 implementation.
    Fixed many compiler warning (mostly for VC compiler). -EG
  * Fix failure to properly clean up timed out connections
    if running in external select mode without listen socket,
    which caused busy waiting until new connections arrived.
    (Fixes #3924, thanks to slimp for reporting and testcase). -CG
  * Ignore close() errors on sockets except for EBADF,
    fixes #3926. -CG
  * Make sure to decrement connection counter before
    calling connection notifier so that
    MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
    present stale information (relevant if this is
    used for termination detection of a daemon
    stopped via MHD_quiesce_daemon()). Thanks to
    Markus Doppelbauer for reporting. -CG
  * Fix (automatic) handling of HEAD requests with
    MHD_create_response_from_callback() and HTTP/1.1
    connection keep-alives. Thanks to Cristian Klein
    for reporting. -CG
  * Add new functions MHD_create_response_from_fd64() and
    MHD_create_response_from_fd_at_offset64(). -EG
  * Fixing memory leak in digest authentication. -AW
  * Add deprecation compiler messages for deprecated functions
    and macros. -EG
  * Fixing digest authentication when used in combination
    with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing
- Drop libmicrohttpd_test_session.patch as it is fixed now</changelog>
  <changelog author="mpluskal@suse.com" date="1443787200">- Update to 0.9.44
  * Various fixes for W32 VS project files.
  * Fix digest authentication with URL arguments where value-less
    keys are given before the last argument.
  * Do not use shutdown() on listen socket if
    MHD_USE_PIPE_FOR_SHUTDOWN is set.</changelog>
  <changelog author="mpluskal@suse.com" date="1446379200">- Update to 0.9.45
  * Rework deprecation maros: fix errors with old GCC versions,
  improved support for old clang and new GCC. -EG
  * Return correct header kind in MHD_get_connection_values()
    even if a bitmask is used for the "kind" argument. -FC/CG
  * Fixing transient resource leak affecting long-lived
    connections with many keep-alives and HTTP request
    pipelining under certain circumstances (which reduced
    the receive window).
  * Fixed assertion failure triggered by a race in
    thread-per-connection mode on shutdown in rare
    circumstances. -CG
  * Deduplicate code between digestauth and connection
    parsing logic for URI arguments, shared code moved
    to new MHD_parse_arguments_ function in internal.c. -CG</changelog>
  <changelog author="mpluskal@suse.com" date="1447156800">- Update to 0.9.46
  * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the
  original code was counter-intuitive but correct, and the new
  code does break pipelining. Ignore empty lines at the beginning
  of an HTTP request (more tolerant implementation).</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Update to 0.9.47
  * Reworked VS project files. Used x64 build tools by
  efault, many optimizations, fixes.
  dded project files for VS 2015. -EG
  * SPDY is dead, killing experimental libmicrospdy. -CG
  * New logic for controlling socket buffer modes.
  Eliminated delay before last packet in response and before
  "100 Continue" response on all platforms. Also response
  header are pushed to client without waiting for response
  body. -EG
  * Remove 200ms delay observable with keep-alive on Darwin
  and *BSD platfroms. -EG
  * Fix issue with shutdown if connection was resumed just
  before shutdown. -FC
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.9.48
  * Improved compatibility with VS2010 and other older compilers.
  * Default backlog size for listen socket was changed from 32 to
  SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to
  override default backlog size.
  * If not all connections can be handled by MHD_select() than at
  least some of connections will be processed instead of failing
  without any processing.
  * Fixed redefenition of FD_SETSIZE on W32 so select() will work
  with 2000 connections instead of 64.
  * Better handled redefenition of FD_SETSIZE on all platforms.
  * Close sockets more aggressively in multi-threaded mode
  (possibly relevant for idle servers).
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1460635200">- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1464955200">- Update to version 0.9.50:
  * See provided Changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1481544000">- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 0.9.54:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1494849600">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1677672000">- Apply patch for bsc#1208745 CVE-2023-27371
  fix parser bug that could be used to crash servers using the MHD_PostProcessor
  * fix-parser-bug-MHD_PostProcessor.patch</changelog>
</package>
<package pkgid="e4ab5c2a7a7a2ed4022c25803182a54a9bd97403a726f7add8690d4f664854ae" name="libmicrohttpd12" arch="x86_64">
  <version epoch="0" ver="0.9.57" rel="150000.3.3.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1436788800">- fix build for SLES11:
  * update disable-stalling-test.patch: Instead of disabling testcase
  in Makefile disable testcases in code, this could be even better
  we can disable only broken test but not the whole testcase.
  * add libmicrohttpd_test_session.patch: Disable test relying on
  available libcurl version
  (see https://gnunet.org/bugs/view.php?id=3893 for details)
  * wrap libmicrosdpy into macro to disable building on
  systems with openssl &lt; 1.0.1
- update to 0.9.42:
  * fix off-by-one in MHD_start_daemon_va() error handling logic
  * fix #3784: actually implement MHD_CONNECTION_INFO_SOCKET_CONTEXT</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1436961600">- fux build for SLES11:
  * explicitly require libgnutls-devel in -devel package</changelog>
  <changelog author="mpluskal@suse.com" date="1442664000">- Update to 0.9.43
  * Call resume_suspended_connections() when the user is running
    its own mainloop and calls MHD_run_from_select() to support
    resuming connections with external select. -FC
  * Correct documentation as to when MHD_USE_EPOLL_LINUX_ONLY
    is allowed. -CG
  * Reimplement monotonic clock functions for better
    support various platforms.
    Print more information during configure. -EG
  * Export MHD_get_reason_phrase_for() symbol. -CG
  * Added checks for overflows and buffer overruns, fixed
    possible buffer overrun. Updated md5 implementation.
    Fixed many compiler warning (mostly for VC compiler). -EG
  * Fix failure to properly clean up timed out connections
    if running in external select mode without listen socket,
    which caused busy waiting until new connections arrived.
    (Fixes #3924, thanks to slimp for reporting and testcase). -CG
  * Ignore close() errors on sockets except for EBADF,
    fixes #3926. -CG
  * Make sure to decrement connection counter before
    calling connection notifier so that
    MHD_DAEMON_INFO_CURRENT_CONNECTIONS does not
    present stale information (relevant if this is
    used for termination detection of a daemon
    stopped via MHD_quiesce_daemon()). Thanks to
    Markus Doppelbauer for reporting. -CG
  * Fix (automatic) handling of HEAD requests with
    MHD_create_response_from_callback() and HTTP/1.1
    connection keep-alives. Thanks to Cristian Klein
    for reporting. -CG
  * Add new functions MHD_create_response_from_fd64() and
    MHD_create_response_from_fd_at_offset64(). -EG
  * Fixing memory leak in digest authentication. -AW
  * Add deprecation compiler messages for deprecated functions
    and macros. -EG
  * Fixing digest authentication when used in combination
    with escaped characters in URLs. -CG/AW
- Disable spdy support for now as spdylay is missing
- Drop libmicrohttpd_test_session.patch as it is fixed now</changelog>
  <changelog author="mpluskal@suse.com" date="1443787200">- Update to 0.9.44
  * Various fixes for W32 VS project files.
  * Fix digest authentication with URL arguments where value-less
    keys are given before the last argument.
  * Do not use shutdown() on listen socket if
    MHD_USE_PIPE_FOR_SHUTDOWN is set.</changelog>
  <changelog author="mpluskal@suse.com" date="1446379200">- Update to 0.9.45
  * Rework deprecation maros: fix errors with old GCC versions,
  improved support for old clang and new GCC. -EG
  * Return correct header kind in MHD_get_connection_values()
    even if a bitmask is used for the "kind" argument. -FC/CG
  * Fixing transient resource leak affecting long-lived
    connections with many keep-alives and HTTP request
    pipelining under certain circumstances (which reduced
    the receive window).
  * Fixed assertion failure triggered by a race in
    thread-per-connection mode on shutdown in rare
    circumstances. -CG
  * Deduplicate code between digestauth and connection
    parsing logic for URI arguments, shared code moved
    to new MHD_parse_arguments_ function in internal.c. -CG</changelog>
  <changelog author="mpluskal@suse.com" date="1447156800">- Update to 0.9.46
  * Undoing change from Sun Oct 25 15:29:23 CET 2015 as the
  original code was counter-intuitive but correct, and the new
  code does break pipelining. Ignore empty lines at the beginning
  of an HTTP request (more tolerant implementation).</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Enable http2/spdy
- Don't build examples as we don't ship them anyway
- Disable tests as linking fails for them with spdy enabled</changelog>
  <changelog author="mpluskal@suse.com" date="1449316800">- Update to 0.9.47
  * Reworked VS project files. Used x64 build tools by
  efault, many optimizations, fixes.
  dded project files for VS 2015. -EG
  * SPDY is dead, killing experimental libmicrospdy. -CG
  * New logic for controlling socket buffer modes.
  Eliminated delay before last packet in response and before
  "100 Continue" response on all platforms. Also response
  header are pushed to client without waiting for response
  body. -EG
  * Remove 200ms delay observable with keep-alive on Darwin
  and *BSD platfroms. -EG
  * Fix issue with shutdown if connection was resumed just
  before shutdown. -FC
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1450612800">- Update to 0.9.48
  * Improved compatibility with VS2010 and other older compilers.
  * Default backlog size for listen socket was changed from 32 to
  SOMAXCONN, added new option MHD_OPTION_LISTEN_BACKLOG_SIZE to
  override default backlog size.
  * If not all connections can be handled by MHD_select() than at
  least some of connections will be processed instead of failing
  without any processing.
  * Fixed redefenition of FD_SETSIZE on W32 so select() will work
  with 2000 connections instead of 64.
  * Better handled redefenition of FD_SETSIZE on all platforms.
  * Close sockets more aggressively in multi-threaded mode
  (possibly relevant for idle servers).
- Update dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1460635200">- Update to 0.9.49
  * See provided Changelog for details
- Fix typo in previous changelog entry
- Refresh patches
- Use pkgconfig style dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1464955200">- Update to version 0.9.50:
  * See provided Changelog for details</changelog>
  <changelog author="tchvatal@suse.com" date="1481544000">- Version update to 0.9.52:
  * See provided Changelog for details
- Refresh patch:
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Do not abort on failing tests, as they randomly fail quite a lot
  bsc#1012840</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 0.9.53:
  * See provided Changelog for details
- Refresh patch:
  * libmicrohttpd_test_data.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1494504000">- Update to version 0.9.54:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1494849600">- Update licensing information</changelog>
  <changelog author="tchvatal@suse.com" date="1496059200">- Version update to 0.9.55 bsc#1041216:
  * See provided Changelog for details</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 0.9.57:
  * See provided Changelog for details
- Drop no longer needed patches:
  * libmicrohttpd_test_data.patch
  * disable-stalling-test.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Install copying</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1677672000">- Apply patch for bsc#1208745 CVE-2023-27371
  fix parser bug that could be used to crash servers using the MHD_PostProcessor
  * fix-parser-bug-MHD_PostProcessor.patch</changelog>
</package>
<package pkgid="ab7d1f29b59295a8a4cc4da6d0188b4cb93e846261292e78546aaca82e620d94" name="libmlx4-1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="3649abc2a0b53c98f952044f4b2729574ce56d00615c873a80c7bc1c0341cf02" name="libmlx4-1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="45c41b627c9aba6381a52a5657dd41805bf1fcd27aec4d3b637fdc386fe08286" name="libmlx4-1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="3e1b3d3a3fe45e879edcf1221ab01f402f00d48d90002d6e7c3c6eccd4146e63" name="libmlx5-1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="eab5067cf9de6ac403f5d6d9b3996669e05e8c25d4aedb8fe0c23343ea45658c" name="libmlx5-1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="e2e040b122ce438ecd9d6c23fbe334290024438dae38dcfb139bd5598d8d2309" name="libmlx5-1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="0fb3200e228f5b8a7b21f28534ef11277f4fee9e197e030e1264730413bc8dc0" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="cc080494128dfd8f344efdeed7a577968eb574146387ad11fe9c24509e832c03" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="10935d901b2194c5f9cf5e584e161996a5fb5faddd0d696c788384f6f277194a" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="baaa56c941f69493ee0c3932bc84143ab4de61f5caa2cb278d4630e25f51f393" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="de5d1321dc20bd9b7f894a767464e36486699a026ad1274ad9b031dce151a089" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="542eb7365f86ebe69491d3b2cd6337fcadcb0814b27bc1e188d4569afd9f7dd1" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="7468cdc9e185daf0fa89e2f2487ecd5beaded27710fe1f6158bb15b383b084dc" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="9d5ebf5c5a316c064f3f1f1b7b6a63556519c749568a2dc1dfa36fdf0e3c8692" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="b09ab10188a2ccab37c925d9de7db57d692d106860034e7668a5213612c49b42" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="0d2dfde73e998f453374a2f445e3c9417894cce87c7056a1f59767864773e8a3" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="e33ed52d723cce2cc24d04b2ba0d749511fa1e68f8b8d4d3cbe996b9640dd021" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="17440285e6b8e29adeb35a3022fe508031b22d27c6b81f425207e7ac81a745fb" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="351a3a0a4f3cef70f8fb9a13a62130602aaa1009432184250e98a81d38d41564" name="libmount1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="f485d4ccb5c586afbdaf9dc92e68bbece5b0f8de7f8961e57c6108914c4ea124" name="libmount1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="da806dae3ac2f1cb822e38b595a002b4b8953cb4ab7e2d537ba80b7a42f955d2" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="5ec21dcb654618a5cac2cff083f9c7093f5b0cb699edc8b8c5bcf423e9f5dff8" name="libmpath0" arch="aarch64">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="088fd5a0fd06a0d67f7953c82884114a69ac9aa3ae0e177fbe769b2a533a0c90" name="libmpath0" arch="s390x">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="2c3aed4d7d516b7a8a240aa40bb6bd35b3354e86ba527806f3740ac331251346" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="ecf32a6a3de63b95a081232df6080ea1f90af018dc5ae34a375d5af32fd8d0da" name="libmpath0" arch="aarch64">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="fd800b58051cacd1ba57975c005ca886ad487ba7fb38d8ab269b721b17e648c8" name="libmpath0" arch="s390x">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="3dc90fbf2a37fe968c6c2c4f5b38455fed31106e9d361c62c87165bed77a1f0c" name="libmpath0" arch="x86_64">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="e7481ba479168581ee9ef01db890e9432638afa966b00adb27e1639384071a6d" name="libncurses6" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="05261a2b6fcf23a2c936fb7f5b0136731fefc7d2b7befaa24344cc86bb515ae2" name="libncurses6" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="c5e0a1cf0273432fdd42b6e59b4da3370d8a520f8aa0925bf2a820ff8ac58f33" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="e899f54706dec122505b3fff52596d818f53ce4ba45128c9068e086574f2fd3d" name="libncurses6" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="be76d861790671d4af781d109c43597cb7c02d95275a5273a4d787706858d329" name="libncurses6" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="82c089cffb45d74dbb0ef918523e989d4970a349d95299f198301325abb04f71" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="29288828b3c02563f81cfb6ceee821e35a28e9b1a097f2f83308d9d4d40fe73c" name="libncurses6" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="8b659e4ee70c66e21dd24d0ddb48f5b0cef716643015a77ac0df021bb795c439" name="libncurses6" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="def2dc5f5f98f9f455f95ed59eddf78a52f9d441cf84e3541ae31e7e21a70ef8" name="libncurses6" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="460995863d452e0bd9278f42e83cd6bb29cfa1be5ee80e71f4e5613111d53306" name="libndctl6" arch="x86_64">
  <version epoch="0" ver="71.1" rel="150400.10.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565956800">- ndctl/list: Introduce region capability objects (bsc#1145772 ltc#178159).
  + ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1566216000">- ndctl: Use the same align value as original namespace on reconfigure (bsc#1145577 ltc#178224).
  + ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- ndctl/lib: Fix duplicate bus detection (bsc#1145573 ltc#180249).
  + ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1566216001">- ndctl/namespace: Handle 'create-namespace' in label-less mode (bsc#1145471 ltc#179886).
  + ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1566388800">- Refresh patches with upstream status:
  ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch
  ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch
  ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1571400000">- Refresh patches with upstream status:
  ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
  ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1573214400">- ndctl/dimm: Fix init-labels success reporting (bsc#1156308 ltc#181441).
  + ndctl-dimm-Fix-init-labels-success-reporting.patch
- Refresh patches with upstream status:
  ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
  ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1583236800">- ndctl/test: Relax dax_pmem_compat requirement (bsc#1159523)
  + ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Add -fcommon flag on Tumbleweed (boo#1160286).
- Fix 'ndctl enable-namespace all' fails trying to enable idle namespaces
  (bsc#1165509 ltc#182068).
  + ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1585915200">- ndctl/namespace: Skip zero namespaces when processing all namespaces
  (bsc#1167861, bsc#1165509, ltc#182068).
  + ndctl-namespace-skip-zero-namespaces-when-processing.patch
- Refresh patch to upstream version:
  ndctl-test-Relax-dax_pmem_compat-requirement.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1589544000">- Update to v68:
  * zero-labels: display an error if regions are active
  * destroy-namespace: fix seed namespace accounting
  * list: drop named list objects from verbose listing
  * *-namespace: emit better errors on failure
  * read-infoblock: new command to read an infoblock
  * write-infoblock: new command to create and write an infoblock
  * create-namespace: add --continue option
  * daxctl-reconfigure-device: add --no-movable option
  * daxctl-reconfigure-device: display movable state in listings
  * daxctl-reconfigure-device: detect races in memory onlining
  * security: support for 'security frozen' attribute
  * daxctl-reconfigure-device: new command for device mode management
  * daxctl-{on,off}line-memory: new commands for devices in system-ram mode
  * monitor: logging improvements, allow sending to background
  * inject-error: refuse to operate on activew BTT namespaces
  * *-labels: improvements to minimize data transfer
  * create-namespace: usability improvements around region search
- Removed ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- Removed ndctl-dimm-Fix-init-labels-success-reporting.patch
- Removed ndctl-list-Introduce-region-capability-objects.patch
- Removed ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch
- Removed ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch
- Removed ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch
- Removed ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Removed ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1594728000">- Clarify documentation about filtering options (bsc#1173861)
  + ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1597060800">- Update to v69 (jsc#SLE-13824, jsc#SLE-12770, jsc#SLE-15065, jsc#SLE-15484,
    jsc#SLE-15485, bsc#1175052, ltc#186863, bsc#1174969, ltc#185845):
  * infoblock: Set the default alignment to the platform alignment
  * libndctl/papr_scm: Add support for reporting "life_used_percentage" metric
  * Skip region filtering if numa_node attribute is not present
  * libndctl,papr_scm: Implement support for PAPR_PDSM_HEALTH
  * miscellaneous bugfixes
- Removed ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1598616000">- Suppress ENXIO when processing all namespaces (jsc#SLE-13321, bsc#1175851, ltc#187867).
  + ndctl-namespace-Suppress-ENXIO-when-processing-all-n.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1603281600">- Update to upstream v70.1 (jsc#SLE-13338).
  Adds firmware activation support.</changelog>
  <changelog author="msuchanek@suse.de" date="1609416000">- Update to upstream v71 (jsc#SLE-14344, bsc#1170384).
  - support for the new device-dax subdivision functionality added in Linux in
    v5.10, including ways to create smaller devdax devices using
    daxctl/libdaxctl, as well as creating, listing, and restoring from a config
    dump, 'mappings' on these devices.
  - miscellaneous bugfixes
- Fix documentation and license packaging</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 71.1:
  * ndctl/dimm: Attempt an abort upon firmware-update-busy status
  * ndctl/dimm: Fix submit_abort_firmware()</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1611316800">- Enable aarch64 build (bsc#1188502).</changelog>
  <changelog author="jsegitz@suse.com" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_ndctl-monitor.service.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf file to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="msuchanek@suse.com" date="1646654400">- Add support for reporting dirty shutdown count (jsc#SLE-18196).
  + 0016-libndctl-papr-Add-support-for-reporting-shutdown-cou.patch
  + 0009-libndctl-papr-Fix-probe-for-papr-scm-compatible-nvdi.patch
  + 0003-libndctl-Unify-adding-dimms-for-papr-and-nfit-famili.patch
- Merge fixes that went into v72 and v73
  - Documentation updates
    + 0015-ndctl-docs-Clarify-update-firwmware-activation-overf.patch
    + 0014-Documentation-ndctl-fix-self-reference-of-ndctl-disa.patch
    + 0013-daxctl-Add-Soft-Reservation-theory-of-operation.patch
    + 0008-ndctl-Update-nvdimm-mailing-list-address.patch
  - Label index block calculation fix
    + 0012-ndctl-dimm-Fix-label-index-block-calculations.patch
    + 0002-Expose-ndctl_bus_nfit_translate_spa-as-a-public-func.patch
  - Scrub fix
    + 0011-ndctl-scrub-Reread-scrub-engine-status-at-start.patch
    + 0010-ndctl-scrub-Stop-translating-return-values.patch
  - Add memblock count to JSON
    + 0007-daxctl-emit-counts-of-total-and-online-memblocks.patch
  - DAX disable fix
    + 0006-libndctl-check-for-active-system-ram-before-disablin.patch
    + 0005-libdaxctl-add-an-API-to-check-if-a-device-is-active.patch
    + 0001-ndctl-namespace-Fix-disable-namespace-accounting-rel.patch
  - DAX reconfigure fix
    + 0004-daxctl-fail-reconfigure-device-based-on-kernel-onlin.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1677067200">- Fix parsing NDCTL_TIMEOUT (bsc#1208548 ltc#199892)
    + ndctl-Fix-the-NDCTL_TIMEOUT-environment-variable-par.patch</changelog>
</package>
<package pkgid="5f952ee707e2162adf1ff5b1220687decc56af0b8a1ac280c3b5640465c4019b" name="libnetcontrol0" arch="aarch64">
  <version epoch="0" ver="0.3.2" rel="150200.10.8.1"/>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1689940800">- Fix EOF handling in xml-reader to avoid `virsh iface-*` commands
  hang on aarch64 (bsc#1213349)
  [+ 0001-xml-reader-fix-xml_getc-and-xml_ungetc.patch,
  + 0002-xml-reader-allow-uppercase-for-lt-gt-and-amp-expansi.patch]</changelog>
</package>
<package pkgid="7ae664469cd6b766e0c76c4e5d268303c9d732219b2edb875bbe18b7dc2b285a" name="libnetcontrol0" arch="s390x">
  <version epoch="0" ver="0.3.2" rel="150200.10.8.1"/>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1689940800">- Fix EOF handling in xml-reader to avoid `virsh iface-*` commands
  hang on aarch64 (bsc#1213349)
  [+ 0001-xml-reader-fix-xml_getc-and-xml_ungetc.patch,
  + 0002-xml-reader-allow-uppercase-for-lt-gt-and-amp-expansi.patch]</changelog>
</package>
<package pkgid="f9672ebb3666c6ca26d8896f38c093ad5c02888fe1e1c5384f2a63575de258d4" name="libnetcontrol0" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="150200.10.8.1"/>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1689940800">- Fix EOF handling in xml-reader to avoid `virsh iface-*` commands
  hang on aarch64 (bsc#1213349)
  [+ 0001-xml-reader-fix-xml_getc-and-xml_ungetc.patch,
  + 0002-xml-reader-allow-uppercase-for-lt-gt-and-amp-expansi.patch]</changelog>
</package>
<package pkgid="09838658f95b66ab176cd4900faa7ef1fc3cb9b8e2dc48ab42a6ed5659a07008" name="libnftables1" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="014df8691a3e05f138e4f259dfb00de724a7d3e8ed5aee5f4cdf329e677e2c61" name="libnftables1" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="3ba96ba0f04dd8efe5758b40f89acd301ca992870ab3d817b592560f5a14e0e9" name="libnftables1" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="79da6d7cfe92b47cf3ce19cbdb5569357621dc8213d498d10b3ee9e88db31c1b" name="libnftables1" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="f008eeb961f36d3f2d1dc2b12a53ed01bdf4293731ab8463b0b01c0bef9c6bab" name="libnftables1" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="7e7a1828d3bc15963cb283eb829878f3752ba0ebe0ac1acb07f189a0b96af6ec" name="libnftables1" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="9fa4d108db22e8d288e0dcb12ab14713f39c024258c10f435557b8c94a925a42" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="e1a8df7b3ff89df83cb20ad50618c53e82016a8962f203e267a7f406dc61b87b" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="6625e233bc93d47e048dfc9d7a6df96a473a542f95815dae87f5c0db80dd532c" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="690cf798acd4397a1c9ab64a4e13ddd0311951837de5919b29253ef44389d058" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="150200.17.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="8cc389527070ef5af61d9fc69d02f3b730b3b16ddb3a7905c6dcf2e08e19af38" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="150200.17.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="ae091822d9b6f339909ea933f78d3077efccdc65a4868a8c14a23c3b2e7dd7a5" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150200.17.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="b05ed6aeeddea15d818d13f733f8f9b67b2342608460f021cb3eea0d8802e83d" name="libnghttp2-14" arch="aarch64">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="412ca9a7dd0421ac72ca85359edc606782c9545efce85a35284f3631d3474f0e" name="libnghttp2-14" arch="s390x">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="f0cc94cda0cf8f7b3964eee020fd9e9afd5e9f8ee00f3e97a240c75b2bf8e572" name="libnghttp2-14" arch="x86_64">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="8567a65b1bf5f9b97d5bd62a76ac602f36dc22ee0f57bf38b54b961e27b7709d" name="libnm0" arch="aarch64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="ae92278da05bc576f502edd8280e36573f4248ba5147b5745e9a4786894419f7" name="libnm0" arch="s390x">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="63b02e38a2fa5d305ac6d66b094fd08a6e2561d92cf4313f903081fa2172dc0b" name="libnm0" arch="x86_64">
  <version epoch="0" ver="1.38.2" rel="150400.3.3.1"/>
  <changelog author="bjorn.lie@gmail.com" date="1629374400">- Update to version 1.32.10:
  + core: fix the order of IPv6 addresses changing on service
    restart.
  + initrd: add command line option to configure link
    autonegotiation and speed.
  + ifcfg-rh:
  - fix crash when parsing invalid DNS address.
  - extend ifup/ifdown scripts to work with connection profile
    names.
  + udev: also react to "move" (and "change") udev actions in our
    rules.
- Changes from version 1.32.8:
  + firewalld: configure zones on "Reloaded" signal.
  + core: fix wrong MTU for bridge interfaces.
  + cloud-setup: fix gateway address for Aliyun cloud.</changelog>
  <changelog author="sbrabec@suse.com" date="1631620800">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).</changelog>
  <changelog author="songchuan.kang@suse.com" date="1632312000">- Drop nm-add-CAP_CHOWN-capability.patch: This solution was denied
  by upstream maintainers.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632312001">- Update to version 1.32.12:
  + Fix wrong order of addresses when restarting NetworkManager.
  + Preserve the IPv6 ff00::/8 route added by kernel in the local
    table, necessary for multicast communication.
  + Fix emitting the signal for changed metered status of devices.
  + Fix applying the ethtool autonegotiation and speed settings.
  + initrd: fix crash parsing plain '=' without key.
  + cloud-setup: use suppress_prefixlength rule to honor
    non-default-routes in the main table.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1642161600">- Update to version 1.34.0:
  + initrd: wait for both IPv4 and IPv6 with "ip=dhcp,dhcp6"
  + core: better handle sd-resolved errors when resolving hostnames
  + nmcli: fix import WireGuard profile with DNS domain and address
    family disabled
  + ndisc: send router solicitations before expiry
  + policy: send earlier the ip configs to the DNS manager
  + core: support linking with LLD 13
  + wireguard: importing wg-quick configuration files with nmcli
    no longer sets a negative, exclusive "dns-priority". This plays
    better with common split DNS setups that use systemd-resolved.
    Adjust the "dns-priority" to your liking after import yourself.
  + NetworkManager no longer listens for netlink events for traffic
    control objects (qdiscs and filters).
  + core: add internal nm-priv-helper service for separating
    privileges and have a way to drop capabilities from
    NetworkManager daemon.
  + bond: add support for setting queue-id of bond port.
  + dns: support configuring DNS over TLS (DoT) with
    systemd-resolved.
  + nmtui: add support for WireGuard profiles.
  + nmcli: add aliases `nmcli device up|down` beside
    connect|disconnect.
  + conscious language: Deprecate 'Device.Slaves' D-Bus property in
    favor of new 'Device.Ports' property. Depracate
    'nm_device_*_get_slaves()' in favor of 'nm_device_get_ports()'
    in libnm.
  + nmcli: invoking nmcli command without arguments will now show
    'default' instead of null address in route4 or route6 section.
- Refresh patches with quilt.
- Replace addFilter("suse-branding-unversioned-requires*") from
  rpmlintrc, with the current branding-requires-unversioned.
- Update our Supplements to current standard.
- Add the new internal nm-priv-helper.service to pre(un)/post(un)
  handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1642680000">- Split out NetworkManager-pppoe, needed to configure regular PPPoE
  connections (Not very common, as most users have PPPoE routers
  for the DSL connections).</changelog>
  <changelog author="luc14n0@opensuse.org" date="1643198400">- Packaging additions with Autotools replacement:
  + Add Meson build requirement and replace Automake macros with
    Meson equivalent ones as autotools will be deprecated in the
    future.
  + Options passed to Meson to mimmic our default preferences:
    systemdsystemunitdir=%{_unitdir}, udev_dir=%{_udevdir},
    dbus_conf_dir=%{_dbusconfdir}, iptables=%{_sbindir}/iptables,
    dnsmasq=%{_sbindir}/dnsmasq, dnssec_trigger=%{_libexecdir}\
    /dnssec-trigger-script, dist_version=%{version},
    polkit_agent_helper_1=%{_libexecdir}/polkit-1\
    /polkit-agent-helper-1, hostname_persist=suse, switchable
    libaudit=%{libaudit_meson_opt}, iwd=true, pppd=%{_sbindir}\
    /pppd, pppd_plugin_dir=%{_pppddir}, nm_cloud_setup=true,
    bluez5_dun=true, netconfig=%{_sbindir}/netconfig,
    dhclient=%{_sbindir}/dhclient, docs=true, switchable
    tests=%{tests_meson_opt}, more_asserts=0, more_logging=false,
    qt=false, and switchable teamdctl=true (teamctl is about to be
    deprecated).
  + Add conditionalized audit pkgconfig module build requirement to
    allow easier feature testing, and pass
    'yes-disabled-by-default' to 'libaudit' Meson option. As an
    observation: Meson defaults passing 'yes' to this feature.
  + Add explicit c++_compiler build requirement to avoid build
    abortion.
  + Add explicit libselinux pkgconfig module build requirement
    checked by Meson and was already being pulled in by some other
    package.
  + Add polkit-gobject-1 pkgconfig module build requirement checked
    by Meson and needed for user auth-polkit support.
  + Add mobile-broadband-provider-info pkgconfig module build
    requirement checked by Meson and needed for ModemManager1
    interface support.
  + Add sed command to fix server.conf config file location from
    defaultdocdir/NetworkManager/examples to
    defaultdocdir/NetworkManager.
  + Add useful %{_pppddir} and %{_dbusconfdir} macros to spec file,
    while dropping no longed needed pppddir shell variable
    definition and 'test -n "$pppddir" || exit 1' construct.
  + Add "&lt; 1.21" version to libnm-glib-vpn1, libnm-glib4, and
    libnm-util2 &lt; 1.21 to main package's Obsoletes tags, following
    packaging good practices to avoid future unwated behavior
    regarding versioning schemes.
  + Replace %version macro with hardcoded "0.9.1" version to the
    devel subpackage's %name-doc Obsoletes tag following packaging
    good practices to avoid future unwanted behaviors regarding
    versioning schemes (the doc subpackage was merged with the
    devel one in the 0.9.0 release).
  + Pass "%{?no_lang_C}" to %find_lang macro to avoid stripping
    any English translations (the default language) from main
    package.
- Packaging deletions with Autotools replacement:
  + Remove data/server.conf from %doc macro in files section as it
    no longer works with Meson.
  + Remove "rm" command on server.conf file following sed command
    addition to fix the right location of the file.
  + Remove no longer useful conditional build abortion depending
    whether or not netconfig support was found
    'grep "with_netconfig='no'" config.log' since this file isn't
    generated by Meson.
  + Remove no longer needed "find" command for GNU Libtool LA files
    deletion.
  + Drop no longer needed libtool build requirement as Meson does
    not use it.
  + Drop redundant sysconfig-netconfig build requirement as it does
    not add anything to the build anymore.
  + Drop comment about suse-release build requirement not being
    needed anymore, it's been deprecated for almost a decade now.
  + Drop setBadness for 'dbus-file-unauthorized' in the rpmlintrc:
    the new dbus file has been whitelisted already (bsc#1194799).</changelog>
  <changelog author="gmbr3@opensuse.org" date="1645185600">- Use meson LTO setup as NM makes changes to CFLAGS</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645444800">- Add upstream bug fix patches:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch: glib-aux: fix
    nm_ref_string_equal_str() Fix comparison with a NULL string
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-setting"
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch: libnm/tests:
    fix maybe-uninitialized warning in "test-libnmc-setting"
  + 471e987add98b36520ece72ee493176fc7bc863c.patch: device:
    initialize nm_auto variable in _ethtool_features_reset()
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch: glib-aux:
    workaround maybe-uninitialized warning with LTO in
    nm_uuid_generate_from_string_str()</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645704000">- Update to version 1.36.0:
  + The handling of Layer 3 configurations has been substantially
    reworked. While this is mostly internal change, it results in
    more robust behavior when addressing information from multiple
    sources (DHCP, manually configured, VPN) need to be applied
    simultaneously. Overall performance and memory use have also
    slightly improved.
  + Manually configured addresses can no longer expire even if the
    same addresses are also obtained dynamically.
  + Code for systemd-based DHCP and DHCPv6 clients has been updated
    from upstream.
  + NTP servers obtained via DHCPv6 are now exposed on the DBus
    API, visible in nmcli and available for use by dispatcher
    scripts.
  + 5G NR (New Radio) modems are now supported.
  + The "rd.znet_ifnames" kernel command line option is now honored
    on network bootups on an IBM s390 platform.
  + Wi-Fi P2P support does now work with the IWD backend, in
    addition to wpa_supplicant backend.
  + Support for special route types have been added: "prohibit",
    "blackhole" and "unreachable".
  + Routes managed by routing daemons are now ignored. This is done
    to address a performance bottleneck on specialized routers.
  + Handling of IP addressing and routing information is now
    slightly more efficient and uses less memory. This is apparent
    on systems with large amount of IP configuration information.
  + It is now possible to start NetworkManager without root user
    privileges. This is experimental doesn't necessarily result in
    a working daemon. NetworkManager service already drops many of
    capabilities available to the root user.
  + WPA3 Wi-FI network security have been improved by enabling new
    H2E (hash to element) method for generating SAE password
    element.
  + It is now possible to select the default Wi-Fi backend
    (wpa_supplicant or IWD) at build-time.
  + Replies from broken DHCP servers that send duplicate address or
    mask options are now handled gracefully.
  + Bridge support has gained the possibility of turning off MAC
    ageing.
  + "configure-and-quit" mode and nm-iface-helper have been
    removed.
  + A number of bugs that could cause NetworkManager to crash in
    rare conditions have been fixed.
- Drop pkgconfig(libteam) BuildRequires and stop passing
  teamdctl=true to meson: No longer build teamdctl support.
- Drop patches fixed upstream:
  + 4685651e7671e064b911a3a05f096908e5ef0580.patch
  + 471e987add98b36520ece72ee493176fc7bc863c.patch
  + 6329f1db5ac75ee3b7d2f7ce062e951a598625fe.patch
  + 634e023e72d4729788a022ea1fae665af28d1b0f.patch
  + aadf0fb64f491f94b2771058621dc140c562b62b.patch
- Drop nm-dhcp-use-valid-lease-on-timeout.patch: Patch was rejected
  upstream.
- Rebase patches with quilt.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1646654400">- Update to version 1.36.2:
  + When the list of plugins is not specified via "main.plugins" in
    NetworkManager.conf and no build-time default is set with
    "--with-config-plugins-default" configure argument, now all
    known plugins found in the plugin directory are loaded (and the
    built-in "keyfile" plugin is preferred over others).
  + Preserve external ports during checkpoint rollback.
  + Fix removal of ovsdb entry when an OVS interface goes away.
  + Fix DNS configuration for WWAN connections.</changelog>
  <changelog author="fcrozat@suse.com" date="1647432000">- Do not requires dhcp-client, NM is using its internal client
  by default for a long time now.
- Convert iproute2 and iputils requires to recommends, they
  should not be hard requires.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647950400">- Update to version 1.36.4:
  + The internal DHCPv4 client now discards NAKs packets coming
    from servers different from the one that sent the offer.
  + Fix activation of PPPoE connections with "pppoe.parent" unset.
  + Fix potential libnm crash when the client object initialization
    gets canceled.
  + Other various fixes and improvements.</changelog>
  <changelog author="kukuk@suse.com" date="1648814400">- Install nfs dispatcher script in /usr/lib/NetworkManager, not /etc</changelog>
  <changelog author="songchuan.kang@suse.com" date="1649937600">- Modify NetworkManager.spec: Split into a few small subpackages
  (bsc#1198128).</changelog>
  <changelog author="dimstar@opensuse.org" date="1652702400">- Update to version 1.38.0:
  + Add support for route type "throw".
  + Fix bug setting priority for IP addresses.
  + Static IPv6 addresses from "ipv6.addresses" are now preferred
    over addresses from DHCPv6, which are preferred over addresses
    from autoconf. This affects IPv6 source address selection, if
    the rules from RFC 6724, section 5 don't give a exhaustive
    match.
  + Static IPv6 addresses from "ipv6.addresses" are now interpreted
    with first address being preferred. Their order got inverted.
    This is now consistent with IPv4.
  + Wi-Fi hotspots will use a (stable) random channel number unless
    one is chosen manually.
  + Don't use unsupported SAE/WPA3 mode for AP mode.
  + NetworkManager will no longer advertise frequencies as
    supported when they're disallowed in configured regulatory
    domain.
  + Attempt to connect to WEP-encrypted Wi-Fi network will now fail
    gracefully with a recent version of wpa_supplicant when built
    without WEP support. As long as wpa_supplicant supports WEP,
    NetworkManager will continue to work.
  + Disable WPA3 transition mode for wifi.key-mgmt=wpa-psk if the
    NIC does not support PMF. This is known to cause problems in
    some setups. It is still possible to explicitly configure
    wifi.key-mgmt=sae for WPA3.
  + Add new dummy crypto backend "null" that does nothing.
    NetworkManager uses the crypto library when handling
    certificates for 802.1x profiles.
  + Veth devices with name "eth*" are now managed by default via
    the udev rule. This is to support managing the network in LXD
    containers.
  + The hostname received from DHCP is now shortened to the first
    dot (or to 64 characters, whatever comes first) if it's too
    long.
  + As the insecure WEP encryption for Wi-Fi network is phased out,
    nmcli now discourages its use when activating or modifying a
    profile.
  + Fix connectivity checks in case the check endpoint address
    resolves to multiple addresses.
  + Workaround libcurl blocking NetworkManager while resolving DNS
    names.
  + nmcli: indicate missing Wi-Fi hardware when showing rfkill
    setting.
  + nmcli: add connection migrate command to move a profile to a
    specified settings plugin. This allows to convert profiles in
    the deprecated ifcfg-rh format to keyfile.
  + Set "src" attribute for routes from DHCPv4 to the leased
    address. This helps with source address selection.
  + Various bugfixes and internal improvements.
  + Updated translations.
- Recommend NetworkNanager-wifi from the main package: after the
  split, there is currently nothing pulling in NM-wifi. Preferably
  this would happen based on wifi chips prsence, but that is not
  yet done (boo#1199550).</changelog>
  <changelog author="dimstar@opensuse.org" date="1653393600">- Fold NetworkManager-wifi back into the main package: The dep
  chain is not really different and it causes too many problems for
  users having that split. Not worth the pain (boo#1199710,
  boo#1199706).
- As a consequence, also drop the recommends fro the main package
  to -wifi.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1655467200">- Update to version 1.38.2:
  + Fix race condition with pppd that caused failures when
    activating PPPoE connections.
  + Unbreak DHCPv6 over PPP.
  + Don't ignore IPv6 DNS servers received from PPP.
  + Fix crash while checking WEP capability of Wi-Fi interfaces.
  + Ensure DHCP is restarted every time the link goes up.
  + Fix struct alignment issues seen on some architectures.
  + Various other bugfixes and improvements.</changelog>
  <changelog author="yfjiang@suse.com" date="1656072000">- Bring back /sbin/netconfig as build option since the netconfig
  in SLE is not ready for usrmerge.</changelog>
  <changelog author="fcrozat@suse.com" date="1659009600">- Create /etc/NetworkManager/conf.d by default, allowing easy
  override for NetworkManager.conf file with drop-in.
- Move default config file to
  /usr/lib/NetworkManager/NetworkManager.conf, as part of main
  package.
- Branding upstream package is now just a config drop-in to
  disable conncheck.
- Ensure /usr/lib/NetworkManager/conf.d is part of the package.</changelog>
</package>
<package pkgid="997cd6796a90ff44344dcc6b6abad243f3f36c5231005e3046e3732fe84ee695" name="libnvme" arch="src">
  <version epoch="0" ver="1.0+32.gb30ab4c96c2d" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="389f8dcef227349065f38f17cc08ffc1f8e4cc9bfbdf1b8422c62436bf2ba281" name="libnvme" arch="src">
  <version epoch="0" ver="1.0+48.g707b7a" rel="150400.3.24.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.0+48.g64a3e9:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Scan all subsystems (bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
- Update IP address compare code (git-fixes)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
- Update Get Log Page code (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command
  * fabrics: check genctr after getting discovery entries
  * fabrics: Do not ignore one char whitespace when string sanitizing
  * fabrics: Avoid buffer overrun in strchomp
  * fabrics: Always sanitize discovery log entries
  * fabrics: Add nvmf_get_discovery_wargs()
  * ioctl: Set file descriptor in nvme_get_log_page()
  * ioctl: fix log page offset
  * ioctl: Move nvme_get_log_page() to ioctl.h</changelog>
</package>
<package pkgid="7ce2da17a01439955c1eaf37bc34529dde78ce8d5061a5f82f473ef99053c3c1" name="libnvme1" arch="aarch64">
  <version epoch="0" ver="1.0+32.gb30ab4c96c2d" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="0e2718a024a3827ac271f87e6d25e29658558e0015fd7644192be94ff0e63ef2" name="libnvme1" arch="s390x">
  <version epoch="0" ver="1.0+32.gb30ab4c96c2d" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="a4a1b9ef6ebc20593ed3444e16e3084f7faaf05ef1270c0d708cd458f1ba9fa4" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.0+32.gb30ab4c96c2d" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Initial package creation for libnvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="2b7f6d739dbd442a8992ea3532086dfb1ef80ec5e6e7541fa23510b5dbd23fd5" name="libnvme1" arch="aarch64">
  <version epoch="0" ver="1.0+48.g707b7a" rel="150400.3.24.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.0+48.g64a3e9:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Scan all subsystems (bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
- Update IP address compare code (git-fixes)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
- Update Get Log Page code (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command
  * fabrics: check genctr after getting discovery entries
  * fabrics: Do not ignore one char whitespace when string sanitizing
  * fabrics: Avoid buffer overrun in strchomp
  * fabrics: Always sanitize discovery log entries
  * fabrics: Add nvmf_get_discovery_wargs()
  * ioctl: Set file descriptor in nvme_get_log_page()
  * ioctl: fix log page offset
  * ioctl: Move nvme_get_log_page() to ioctl.h</changelog>
</package>
<package pkgid="544f718cb8b5e8d5d512b425696520dc4d7391deecdcf8101f4d2e7b9d97083b" name="libnvme1" arch="s390x">
  <version epoch="0" ver="1.0+48.g707b7a" rel="150400.3.24.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.0+48.g64a3e9:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Scan all subsystems (bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
- Update IP address compare code (git-fixes)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
- Update Get Log Page code (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command
  * fabrics: check genctr after getting discovery entries
  * fabrics: Do not ignore one char whitespace when string sanitizing
  * fabrics: Avoid buffer overrun in strchomp
  * fabrics: Always sanitize discovery log entries
  * fabrics: Add nvmf_get_discovery_wargs()
  * ioctl: Set file descriptor in nvme_get_log_page()
  * ioctl: fix log page offset
  * ioctl: Move nvme_get_log_page() to ioctl.h</changelog>
</package>
<package pkgid="08e656fc8cd4129230b4bc70c734af082abdb3d8fbb9cd032f6522630940f34c" name="libnvme1" arch="x86_64">
  <version epoch="0" ver="1.0+48.g707b7a" rel="150400.3.24.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Fix Source URL</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507201">- Use osc_scm to manage upstream input source.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Remove Provide for python package.
- Remove explicit tar file name for setup step.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 1.0~2:
  * Add fabrics config option 'tls'
  * Logging infrastructure reworked (API break)
  * Changed argument structs layout (API break)
  * Changed scan API (API break)
  * Fixed ctrl_loss_tmo handling concerning values of '-1'
  * Various build fixes</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v1.0-rc3:
  * Properly create manuals/documentation
  * Fix memleaks in __nvme_free_ns() and nvme_scan_subsystem()
  * nvme: get log domain id included in Log Specific Identifier
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
  * ioctl: Add identify ioctl for CNS 09h, 0Ah
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * tree: do not set dhchap_key to 'none'
  * tree: restart controller lookup
  * tree: fixup memory leak in nvme_scan_ctrl()
  * Rename nvme_path_get_subsystem()
  * Remove nvme_reset_topology()
- Use precompiled documentation instead regenerating it</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 1.0-rc4:
  * fabrics: add default port number for NVMe/TCP I/O controllers
  * linux: Update size when telemetry controller initiated data is unavailable
  * add cdw13 for set_feature_args structure
  * Add support for TP8010
  * Documentation cleanups</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 1.0-rc5:
  * ioctl: Set lsp to action in nvme_get_log_persistent_event (bsc#1196121)
  * tree: Ignore traddr case in nvme_lookup_ctrl() (bsc#1194025)
  * fabrics: Do not swap bytes for system uuid (bsc#1196565)
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646740800">- Update License information. The library is released under
  LGPL-2.1-or-later and not LGPL-2.1-only.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 1.0-rc6:
  * tree: add nvme_ctrl_get_ana_state() (bsc#1195938)
  * tree: link paths to namespaces in nvme_subsystem_scan_namespace() (bsc#1195938)
  * ioctl.h: ns list bug fix (wrong cns value)
  * types.h: Key Value Command Set Identifier added (NVME_CSI_KV)
  * types: fix status code type bug (wrong masking)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 1.0-rc7:
  * linux: fixup log page offset in nvme_get_log_page()
  * tree: Add support for default trsvcid for all controllers (bsc#1195858)
  * tree: fixup coredump during nvme discover</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 1.0-rc8:
  * types: Add support for get log - MI Command Supported
  * types: Add new Identify constant
  * types: Update persistent event entry struct added new fields
  * types: Add Host Initiated Data Gen Number to telemetry log struct
  * tree: always allocate config file in nvme_read_config()
  * tree: rework nvme_scan_subsystem()
  * tree: make subsystem name mandatory in nvme_scan_ctrl()
  * tree: move nvme_init_subsystem() into nvme_lookup_subsystem()
  * tree: do not return error when filtering out subsystems
  * tree: add debugging messages during scanning
  * tree: Handle NULL subsysname in nvme_scan_ctrl()
  * tree: Fix subsystem initialization in nvme_scan_ctrl()
  * tree: Fix leaking 'name' in nvme_subsystem_lookup_namespace()
  * tree: Avoid dereferencing nvme_subsystem_t before its check for NULL
  * tree: Clarify NULL return values from nvme_get_attr()
  * fabrics: Invoke nvmf_dim() with provided tas argument
  * fabrics: add 'nvmf_update_config()'
  * fabrics: Avoid out of bounds string chomping
  * fabrics: Free old traddr in nvmf_add_ctrl
  * fabrics: update log level for write failures
  * fabrics: Streamlining documentation
  * fabrics: Fix leaking ctrl in nvmf_connect_disc_entry()
  * fabrics: Add missing break in a switch
  * ioctl: Remove attribute packed and alignedof for args structs
  * ioctl: Align arguments indentation with braces
  * json: fix endless loop scanning for controllers
  * Remove nvme_init_id_ns
  * Add lbstm support for create-ns
  * documentation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 1.0:
  * tree: Remove default port setting for TCP and RDMA ports
  * tree: add 'f_args' argument to pass user data to the filter function
  * tree: remove 'ctrl_get_ana_state()'
  * tree: add namespace path iterators
  * tree: filter out namespaces
  * tree: update nvme_scan_filter_t usage</changelog>
  <changelog author="dwagner@suse.de" date="1654257600">- Reduce log noise and export error codes (bsc#1199994 bsc#1199503)
  * add 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * add 0002-fabrics-Remove-double-connection-error-logging.patch
  * add 0003-fabrics-Introduce-connection-connect-error-mapping.patch
- Apply configuration from JSON file (bsc#1199503)
  * add 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * add 0005-tree-Factor-lookup-code-for-controller.patch
  * add 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Fixes for controller authentication (bsc#1201501 bsc#1201700 bsc#1201701 bsc#1201717)
  * add 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * add 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * add 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * add 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * add 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * add 0012-Parse-dhchap_host_key-on-controller-level.patch
  * add 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * add 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * add 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
- Subsystem scanning logic fixes
  * add 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * add 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * add 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
- Fix PowerPC build warnings
  * add 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
- Fabrics fixes
  * add 0020-fabrics-sanitize-dump-config-output.patch
  * add 0021-fabrics-Fix-build_options-return-values.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- fabrics: Duplicate strings when merging configs (bsc#1205019)
  * add 0022-fabrics-Duplicate-strings-when-merging-configs.patch
- remove unused patch (duplicated of patch #0013)
  * remove 0022-json-schema-add-dhchap_key-details-to-host-section.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- export nvme_ctrl_is_peristent() (bsc#1205657)
  * add 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch</changelog>
  <changelog author="mwilck@suse.com" date="1674648000">- Fix import error in python-libnvme (bsc#1207159)
  * add 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- spec file: add %check target</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Lower-log-level-in-__nvmf_add_ctrl.patch
  * remove 0002-fabrics-Remove-double-connection-error-logging.patch
  * remove 0003-fabrics-Introduce-connection-connect-error-mapping.patch
  * remove 0004-libnvme-Export-nvme_ctrl_get_config.patch
  * remove 0005-tree-Factor-lookup-code-for-controller.patch
  * remove 0006-fabrics-Consider-config-from-file-when-adding-new-co.patch
  * remove 0007-python-add-missing-ctrl-attrs-to-Python-bindings.patch
  * remove 0008-libnvme-accessors-for-dhchap_key-variables.patch
  * remove 0009-fabrics-Update-controller-authentication-in-nvmf_add.patch
  * remove 0010-json-fixup-dhchap_ctrl_key-definitions.patch
  * remove 0011-tree-rename-controller-dhchap_key-to-dhchap_ctrl_key.patch
  * remove 0012-Parse-dhchap_host_key-on-controller-level.patch
  * remove 0013-json-schema-add-dhchap_key-details-to-host-section.patch
  * remove 0014-nvme-tree-avoid-segfault-if-auth-keys-are-unavailabl.patch
  * remove 0015-fabrics-restructrure-nvmf_get_discovery_log.patch
  * remove 0016-tree-simplifiy-nvme_subsystem_lookup_namespace.patch
  * remove 0017-tree-make-nvme_subsystem_scan_namespace-idempotent.patch
  * remove 0018-tree-make-nvme_ctrl_scan_namespace-idempotent.patch
  * remove 0019-Fix-llx-lx-build-warnings-on-powerpc.patch
  * remove 0020-fabrics-sanitize-dump-config-output.patch
  * remove 0021-fabrics-Fix-build_options-return-values.patch
  * remove 0022-fabrics-Duplicate-strings-when-merging-configs.patch
  * remove 0023-libnvme.map-add-nvme_ctrl_is_persistent.patch
  * remove 0024-libnvme.map-export-nvme_ctrl_-get-set-_dhchap_host_k.patch
- Always sanitize traddr and trsvcid entries (bsc#1207435)
  * fabrics: Always sanitize discovery log entries
  * util: Add ECONNECTREFUSED to enum nvme_connect_err
- Print controller name for dis/connect command (git-fixes)
  * fabrics: Add nqn to connect/disconnect log entry
- Allow tracking unique discover controllers (bsc#1186689)
  * tree: Add unique discovery controller flag
- Build documentation because shipped version is outdate</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix GC in Python binding (bsc#1209905 bsc#1209131)
  * python test: Check there is no SIGSEGV during garbage collection
  * python: Return PyObject* from __str__() instead of a static char[]
  * python: Fix segmentation fault during garbage collection
  * Python: Fix crash during garbage collection
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 1.0+48.g64a3e9:
  * tree: Add getter for subsystem iopolicy (bsc#1124564)
  * nvme-tree: avoid warning in 'list-subsys' (bsc#1212598)
  * tree: Scan all subsystems (bsc#1212598)
  * tree: Don't open nvme devices until it's absolutely required
    (bsc#1213527 bsc#1213686)
- Update IP address compare code (git-fixes)
  * tree: Use nvme_ipaddrs_eq() to compare IP addresses
  * util: rename ipaddrs_eq() to nvme_ipaddrs_eq() and make public.
  * util: Add ipaddrs_eq() to check whether two IP addresses are equal
- Update Get Log Page code (bsc#1213618)
  * ioctl: fix RAE bit on last Get Log Page command
  * fabrics: check genctr after getting discovery entries
  * fabrics: Do not ignore one char whitespace when string sanitizing
  * fabrics: Avoid buffer overrun in strchomp
  * fabrics: Always sanitize discovery log entries
  * fabrics: Add nvmf_get_discovery_wargs()
  * ioctl: Set file descriptor in nvme_get_log_page()
  * ioctl: fix log page offset
  * ioctl: Move nvme_get_log_page() to ioctl.h</changelog>
</package>
<package pkgid="9b9e3759e7bcfd69129d4e6ea7903e4d716db46533a8c9998b5e2d2ebd86bf1a" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="7d4bafc1f9eb61e6fd765f7158874d406659c192a8d7d8ca12a3f65bf2a9faca" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="90e8f5b37e0cff4405d02a01105551eb627da93e0b40ed60202bd1c2da625664" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="caccb60072f0952007decc98cdd6385a314b45277a40581681db58afd28c7d56" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="1f514403f9eba9fc4e9354c17f540915e55ec526dd95bd55fa140a69ad862b28" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="7034f72a80d96bf996118d5b7a34d8508fb74532e4698c16e46230e4259a8d2c" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="9727897be2cd9d5a17fe9765f29adbdf2d8035f15b81b9611e726e0db4d35327" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="0b27e2a3c42c7c020a653e9b6e370250b8171a8d885ab18be721b0d25a804a0b" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="293665dbdf9329a00e710f81cde0dca62897dfa784978e65be7adcdc8cbc26bc" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="367a31d064efffc7189136f6511d757ec7c4d27aadeb89cdffb7f1e4625f5c9d" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="4d1557b3989b5a76b21b6ffb976ac08fae3a5fff6b97776daeb956e137ff37ca" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="7050f48271acfab6b4ea87f501eac4d407dc0f9bdaf776d1390ffbcd3a0daf27" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="a710bde7ed2b7847a294f55f55d00935d10037fd22d3cf35ca3eb5dc7fdb5625" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="067237226a48a615f2585d2231710fab99b41536dcd925d6e1f4526facb14d54" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="a232c0eceabdfacb5e7e1fcccd9fa36f40d13e84fddd1a82dd3dba83f6fe65f6" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="96f595d975cce44e317f1d270b9c0961b41621f6f85993ec6cbba1366174e74d" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="d49e637d9f8456fb9cdb06ef3d4eb8036063a56d83ab1a69f197e679e898e9f9" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="6ad97adc5d4ff7d5aea6331fd18987045f2bcf860a787780b9d3e74ceff1b41b" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="59603ba2d071a63e8b05507e67c0d169f9f8ad835a351b18035c4f243cfb7a3d" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="ba35eb147ba317e254bb05676fa07c909b5495db944486d7c8e642f0decb215a" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="1d92a98c7a2bfccd4bcb5a186c90c8e3bf38dc80f1bc51d11b2056aa2f515c7e" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="fb7946ef277dda63d24e6b6c4a189e1db47c0052a28a52ceb1a1d442c15be25a" name="libopenssl-1_1-devel" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="68b70d7532031dee58ac15085eaf90fe1f787d19bcacb6513c28384d87971f2d" name="libopenssl-1_1-devel" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="8cb9cdc4542a641cde3e07593a3536bae9d8c3e32447b85ee2eec41b47eebbbc" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="d80022850a91b27a147cab7b140f950c6a75f4b00c3e2688f6c8a70c37edea0d" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="a9946a90a5c844376ae9e7a8a81b3c7efde3882b619899ce70d05d0e9a541b27" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="f4eac11a9cd180c96ca03c757f12caedbeaeffc33a123739b364c1fe76db9cb8" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="db0c930cb81da0537f5127befefad025eae1253f46c541e9da031467bb38dbf9" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="196fdda5718e2690a0159a126e51d80da0c0aa0cd2a40e32fd76a6a13bc9b8e9" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="280471205e2f7a43fbcb47c6aeb723ec69410f8307a5c6af8e83e9fdc54f5f14" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="f6004750fb090494d9727acc42b15aef583dc7fc7027a63440271350381024b9" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="804bdd72f90f9529475a60ea171c95cd9e8d2088ae09cae4a2e017d4849bc472" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="f258d3dad8c9896481c0258f70f69639f5201f896318ccedcc89b23a6f0ae618" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="f79de56b6b5bd356edbe06adbe937b00c3d9be4115a204b6f1e523bf6c2f58b2" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="a5c381501dc5ac88b36c1f0240e62c2dcd4d80974de5534a28fa7ae4768f7123" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="f9fa375f338a5e5ed67fcd100a61dccea838d887786d27afd2f64832a7b0555e" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="25e50bb1cd14e5bbfcf1d17269d1db405f1c237ceae67fb777e935a664f17799" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="2489d78e04faed4b620a6c3a56da1c5596d214ce67e77401bf48d894055a4ef1" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="07ab3d6899722551d41c7c23b678c7c12eaba62dcf61386533ee95e7ba4b7a63" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="06b447f7cafac7b5effcb387c8a53e41776fdac2934006fdb6882254fd49e122" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="fbb371fa249c271074255a39bb79437fcfa08fe22410481708c36c9888e8c5df" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="0baf2b31424dd40acc7539276c2c61d8372a9bf01687ec8638f66b96902c1174" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="bb49c3cd6f642ea6c08da0be9407a5cc0ae903d6a0ec185978f3ec44496aa976" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="e049ff250e205e51c53d0933ce50521c891504d82dcbc7629cadf794d7f28664" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="4e2e1783d0a1624a26c43c6f430ebcc646993fcb61023de64b8f63d1cb3d90b6" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="a28c499a7c5e19b9c6643a5c377780f0ad3e972db75023f4c44228f3f5578e76" name="libopenssl1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="60ae249b4678814fa55afe3ebeb7ab46f14173401803a92ffd6a366958d07358" name="libopenssl1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="2cf2f216120d365d6daa55a60373abf0a3157da6463cd38daf11ea5cc82633a4" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="74c16b8398702319a08792e1cd222c0ec265e3cf962ac69266e8c3b0c3be6eb7" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="f27a7a5266e8277e88c62716ed30ca6f8c9de0b9a41a1e76385c576ce59c5f19" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="a34018fa7245fd4f46275015a5f4f47107492693b50fb4dc458e05ca35034b81" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="c3660619a440b7017c81d8faaf8f5e6d7e41c11d1598382be2cb51208d60f052" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="791221e67b51dd2fcb768b93b1878e5a65d269b2eb15c6d12dcf897ac4feeab5" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="5df39fb0dc8f8871e60e37065f109df29f4bd07c84099202304c0bed43c1c0d3" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="d738f410829c214c01ff6a98d92851410dd16d21f5bccc6d7f128e7d1157af39" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="581842e32bc2e7743bf9043827cafefe1488acb5c5fd57a364e9e960de9144ff" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="30583cc8801208b0b96ad56200ec6e11068c93ec8ae793603d5e8b96dcb652d9" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="9f0f5b99759b957744e8d14034ff83bdb2b81cd7dcaa0ce603b85690ec972a49" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="22e4fdc37148bed3dda6d6de9f3dc90b6604b3bfb432230b4753dee48742f290" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="a71d0eac54c1d24548c889f01bf77a6a4add6e4966d0ea1aa5b60b964c0d81ab" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="b18636e08c90d89083852831bcc549e880c427aae3815c0c4b386201ff85ce29" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="ee940fa998a39c655d079fc28fcec54ff28a137cc2faa70c5a2458c9a05968c7" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="f297587f3d5f50dc56c2943a90ab4118a0742a4c4b4f99a02c3365ece96bdc43" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="6e56d8d23436b203800eb39cc590e384139be037b46dc07a293c644452ebff3f" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="853a933535e5402b60fb7e95c6449bf290f3561ac026ecc69faff7ba259e98a6" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="7feb215fec80697011e1685dfb82676392d7a0fd0d4c6ea7f01d6f73b3bcc84f" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="15d57bbd7d4c3edcde4777dfd36b93420b0da833314dddcc4fb852223f856a0f" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="513dc7d4aaa8d63295da7ceee66725ddc7f8b45cb71545ffc1f5411d780aece5" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="a068275b5d4f826b2ac9bccce30bda4f17c04de1cf290a35c67fe9a6be2244b0" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="be610d9618dd4396d3feec5344ba41df6d96d0cc5a458382e8477c8aebd74d88" name="libopenssl1_1-hmac" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="958ce2bd5e6a69175d1558cba86dd806b56e43da01d1ded684dbf391107a5aec" name="libopenssl1_1-hmac" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="303b50b777247ec5b4e4cf8cf02aad07407cfe0c44f3c9f6983702ce6eaf8492" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="ea8543ddee2ec699b55505e4ca4239b7bb701ab73541923503db5beb19f511b5" name="libopenssl3" arch="aarch64">
  <version epoch="0" ver="3.0.8" rel="150400.4.34.1"/>
  <changelog author="otto.hollmann@suse.com" date="1666785600">- Fix X.509 Email Address Buffer Overflow [bsc#1204714, CVE-2022-3602, CVE-2022-3786]
  * An off by one error in the punycode decoder allowed for a single
    unsigned int overwrite of a buffer which could cause a crash and
    possible code execution.
  * Also fixed the ossl_a2ulabel() function which was broken and also
    contained a potential buffer overflow, albeit one byte without
    control of the contents.
  * Added a test case that errors without the CVE fix and passes with it.
  * Add patches:
  - openssl-3-CVE-2022-3602_1.patch
  - openssl-3-CVE-2022-3602_2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="6da8655da52944d0a623b9e9129079f2ff96c7e59eb554e9fb4a836d90f26299" name="libopenssl3" arch="ppc64le">
  <version epoch="0" ver="3.0.8" rel="150400.4.34.1"/>
  <changelog author="otto.hollmann@suse.com" date="1666785600">- Fix X.509 Email Address Buffer Overflow [bsc#1204714, CVE-2022-3602, CVE-2022-3786]
  * An off by one error in the punycode decoder allowed for a single
    unsigned int overwrite of a buffer which could cause a crash and
    possible code execution.
  * Also fixed the ossl_a2ulabel() function which was broken and also
    contained a potential buffer overflow, albeit one byte without
    control of the contents.
  * Added a test case that errors without the CVE fix and passes with it.
  * Add patches:
  - openssl-3-CVE-2022-3602_1.patch
  - openssl-3-CVE-2022-3602_2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="f88451f1220be4abaa7648945377ff1f5bf1ff68ec987a576fdf1f803cbfb416" name="libopenssl3" arch="s390x">
  <version epoch="0" ver="3.0.8" rel="150400.4.34.1"/>
  <changelog author="otto.hollmann@suse.com" date="1666785600">- Fix X.509 Email Address Buffer Overflow [bsc#1204714, CVE-2022-3602, CVE-2022-3786]
  * An off by one error in the punycode decoder allowed for a single
    unsigned int overwrite of a buffer which could cause a crash and
    possible code execution.
  * Also fixed the ossl_a2ulabel() function which was broken and also
    contained a potential buffer overflow, albeit one byte without
    control of the contents.
  * Added a test case that errors without the CVE fix and passes with it.
  * Add patches:
  - openssl-3-CVE-2022-3602_1.patch
  - openssl-3-CVE-2022-3602_2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="e27eca6cc82f41ad3839b51132b9179ad0970c4f0c5f427af0d6bc1d7127b614" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.0.8" rel="150400.4.34.1"/>
  <changelog author="otto.hollmann@suse.com" date="1666785600">- Fix X.509 Email Address Buffer Overflow [bsc#1204714, CVE-2022-3602, CVE-2022-3786]
  * An off by one error in the punycode decoder allowed for a single
    unsigned int overwrite of a buffer which could cause a crash and
    possible code execution.
  * Also fixed the ossl_a2ulabel() function which was broken and also
    contained a potential buffer overflow, albeit one byte without
    control of the contents.
  * Added a test case that errors without the CVE fix and passes with it.
  * Add patches:
  - openssl-3-CVE-2022-3602_1.patch
  - openssl-3-CVE-2022-3602_2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="15de29e2f6c129d0a3c9e8bbcaaa0da775258571bf5938f432d1b919196d6b66" name="libopenssl3" arch="aarch64">
  <version epoch="0" ver="3.0.8" rel="150400.4.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
</package>
<package pkgid="ec4b431323b44f17236cb382bc430fded3e1528cb707a743913edcf0621653e4" name="libopenssl3" arch="ppc64le">
  <version epoch="0" ver="3.0.8" rel="150400.4.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
</package>
<package pkgid="d880af845a1fc85a5e21b2bb71adb8b1b75ee04a37825d13f3eac001dc32e1fe" name="libopenssl3" arch="s390x">
  <version epoch="0" ver="3.0.8" rel="150400.4.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
</package>
<package pkgid="49cc728f195a13bee1e8c2adb4ca9df8084094d74c30d20266c294a431957eba" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.0.8" rel="150400.4.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
</package>
<package pkgid="f410117e13e5e7fe0fe7953fdc38e12d33671c7d50034bad4ebebb0310226ea8" name="libopenssl3" arch="aarch64">
  <version epoch="0" ver="3.0.8" rel="150400.4.42.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="3addab8426b4e8d19d0e8b00c8d3f286b8b1f0d2b3c2dd4cdae0b6829cb1686c" name="libopenssl3" arch="ppc64le">
  <version epoch="0" ver="3.0.8" rel="150400.4.42.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="d5c5f04795cc7433fc6577160cf27cb9b021a552a16a16b5d478d855b124252e" name="libopenssl3" arch="s390x">
  <version epoch="0" ver="3.0.8" rel="150400.4.42.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="6a9169fed40b92046f6e9dcf1e338ecc89fb50d57ab2ed280597dbc55d65630c" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.0.8" rel="150400.4.42.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="33bf5a89f3c2afe2120e2d7e39c83b7bc8018b73c022396fc3c41ed3f67038b2" name="libopenssl3" arch="aarch64">
  <version epoch="0" ver="3.0.8" rel="150400.4.49.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1704974400">- Security fix: [bsc#1218690, CVE-2023-6129]
  * POLY1305: Fix vector register clobbering on PowerPC
  * Add openssl-CVE-2023-6129.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1705406400">- Security fix: [bsc#1218810, CVE-2023-6237]
  * Limit the execution time of RSA public key check
  * Add openssl-CVE-2023-6237.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="8761b5246c7d8e51e2bdbe37375483632798373553912b707b20ee54977e6f67" name="libopenssl3" arch="ppc64le">
  <version epoch="0" ver="3.0.8" rel="150400.4.49.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1704974400">- Security fix: [bsc#1218690, CVE-2023-6129]
  * POLY1305: Fix vector register clobbering on PowerPC
  * Add openssl-CVE-2023-6129.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1705406400">- Security fix: [bsc#1218810, CVE-2023-6237]
  * Limit the execution time of RSA public key check
  * Add openssl-CVE-2023-6237.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="2bbe2210a7c840db4691be73cea10fc7a4701d7f1a2c90e6e1bc62a6fa197ac5" name="libopenssl3" arch="s390x">
  <version epoch="0" ver="3.0.8" rel="150400.4.49.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1704974400">- Security fix: [bsc#1218690, CVE-2023-6129]
  * POLY1305: Fix vector register clobbering on PowerPC
  * Add openssl-CVE-2023-6129.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1705406400">- Security fix: [bsc#1218810, CVE-2023-6237]
  * Limit the execution time of RSA public key check
  * Add openssl-CVE-2023-6237.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="8d02534d0c93dfe6115788e835e6eaa47d869ff8dd9ec1b3bb17455043c6a21b" name="libopenssl3" arch="x86_64">
  <version epoch="0" ver="3.0.8" rel="150400.4.49.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1704974400">- Security fix: [bsc#1218690, CVE-2023-6129]
  * POLY1305: Fix vector register clobbering on PowerPC
  * Add openssl-CVE-2023-6129.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1705406400">- Security fix: [bsc#1218810, CVE-2023-6237]
  * Limit the execution time of RSA public key check
  * Add openssl-CVE-2023-6237.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="3a704cfbbe06abaeb3e5eab6685ee03d9c2e7cff7d0b79f27592f47cf5f789f1" name="libparted0" arch="aarch64">
  <version epoch="0" ver="3.2" rel="150300.21.3.1"/>
  <changelog author="sparschauer@suse.de" date="1505304000">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="anicka@suse.com" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="anicka@suse.com" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
  <changelog author="anicka@suse.com" date="1582804800">- make parted work with pmemXs devices (bsc#1164260)</changelog>
  <changelog author="anicka@suse.com" date="1585137600">- print maximum number of partitions for yast (bsc#1161783)
  - add: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1586347200">- fix null pointer dereference (bsc#1168756)
  - change: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1591704000">- fix support of pmemXs devices (bnc#1164260)
  - remove: libparted-fix-NVDIMM-partition-naming.patch
  - remove: libparted-linux-pmem-path.patch</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1638792000">- fix null pointer dereference (bsc#1193412)
  - add: parted-fix-check-diskp-in-do_name.patch
- update mkpart options in manpage (bsc#1182142)
  - add: parted-mkpart-manpage.patch</changelog>
</package>
<package pkgid="798a9a90d778bb1bfd9d4c7ae4b7bf411888b7c722338211747d436481e15ee0" name="libparted0" arch="s390x">
  <version epoch="0" ver="3.2" rel="150300.21.3.1"/>
  <changelog author="sparschauer@suse.de" date="1505304000">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="anicka@suse.com" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="anicka@suse.com" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
  <changelog author="anicka@suse.com" date="1582804800">- make parted work with pmemXs devices (bsc#1164260)</changelog>
  <changelog author="anicka@suse.com" date="1585137600">- print maximum number of partitions for yast (bsc#1161783)
  - add: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1586347200">- fix null pointer dereference (bsc#1168756)
  - change: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1591704000">- fix support of pmemXs devices (bnc#1164260)
  - remove: libparted-fix-NVDIMM-partition-naming.patch
  - remove: libparted-linux-pmem-path.patch</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1638792000">- fix null pointer dereference (bsc#1193412)
  - add: parted-fix-check-diskp-in-do_name.patch
- update mkpart options in manpage (bsc#1182142)
  - add: parted-mkpart-manpage.patch</changelog>
</package>
<package pkgid="400f75028fa7ffb131851aab4ec3683d1d9c9a9cc35b66ba434927715a9fb151" name="libparted0" arch="x86_64">
  <version epoch="0" ver="3.2" rel="150300.21.3.1"/>
  <changelog author="sparschauer@suse.de" date="1505304000">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="anicka@suse.com" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="anicka@suse.com" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
  <changelog author="anicka@suse.com" date="1582804800">- make parted work with pmemXs devices (bsc#1164260)</changelog>
  <changelog author="anicka@suse.com" date="1585137600">- print maximum number of partitions for yast (bsc#1161783)
  - add: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1586347200">- fix null pointer dereference (bsc#1168756)
  - change: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1591704000">- fix support of pmemXs devices (bnc#1164260)
  - remove: libparted-fix-NVDIMM-partition-naming.patch
  - remove: libparted-linux-pmem-path.patch</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1638792000">- fix null pointer dereference (bsc#1193412)
  - add: parted-fix-check-diskp-in-do_name.patch
- update mkpart options in manpage (bsc#1182142)
  - add: parted-mkpart-manpage.patch</changelog>
</package>
<package pkgid="35d69831aa18dc7537c8a096587adf88792e6abe1ce8d04055f3b48dd0161d17" name="libpci3" arch="aarch64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="e3d199d1397a78dbe612f534d6818657fb5cd9ebc2b591e2107c44586f7f2470" name="libpci3" arch="s390x">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="da2c4916f7a7352e8c0426e4fc12b9bb803773e1b6e09ca63f7443cd16e0b935" name="libpci3" arch="x86_64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="40584f19131e0e24c9a98745c815fd7256bee845bf5db3f47e70ed97fbdfdd54" name="libpcre2-8-0" arch="aarch64">
  <version epoch="0" ver="10.39" rel="150400.4.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1544529600">- Build with --enable-jit-sealloc option, otherwise when
  selinux is enabled or systemd memory protections are on,
  programs will fail to work with execmem violations.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Mark all license files as %license</changelog>
  <changelog author="bwiedemann@suse.com" date="1548244800">- Do not run profiling in parallel for reproducible builds (boo#1040589)</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133274).</changelog>
  <changelog author="jsikes@suse.de" date="1556798400">- Update to 10.33-RC1 to fix issue with LTO (boo#1133274).
  * Callouts from pcre2_substitute() are now available.
  * The POSIX functions are now all called pcre2_regcomp() etc., with wrapper
    functions that use the standard POSIX names. However, in pcre2posix.h the POSIX
    names are defined as macros. This should help avoid linking with the wrong
    library in some environments, while still exporting the POSIX names for
    pre-existing programs that use them.
  * Some new options:
    (a) PCRE2_EXTRA_ESCAPED_CR_IS_LF makes \r behave as \n.
    (b) PCRE2_EXTRA_ALT_BSUX enables support for ECMAScript 6's \u{hh...}
    construct.
    (c) PCRE2_COPY_MATCHED_SUBJECT causes a copy of a matched subject to be
    made, instead of just remembering a pointer.
  * Some new Perl features:
    (a) Perl 5.28's experimental alphabetic names for atomic groups and
    lookaround assertions, for example, (*pla:...) and (*atomic:...).
    (b) The new Perl "script run" features (*script_run:...) and
    (*atomic_script_run:...) aka (*sr:...) and (*asr:...).
    (c) When PCRE2_UTF is set, allow non-ASCII letters and decimal digits in
    capture group names.
  * --disable-percent-zt disables the use of %zu and %td in formatting strings
    in pcre2test. They were already automatically disabled for VC and older C
    compilers.
  * Some changes related to callouts in pcre2grep:
    (a) Support for running an external program under VMS has been added, in
    addition to Windows and fork() support.
    (b) --disable-pcre2grep-callout-fork restricts the callout support in
    to the inbuilt echo facility.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574424000">- pcre2 10.34:
  * implement the documented maximum number of capturing
    subpatterns of 65535
  * Improve the invalid utf32 support of the JIT compiler
  * Add support for matching in invalid UTF strings to the pcre2_match()
  * Give more error detail for invalid UTF-8 when detected in pcre2grep
  * support for invalid UTF-8 to pcre2grep.
  * Adjust the limit for "must have" code unit searching, in particular,
  * increase it substantially for non-anchored patterns.
  * Allow (*ACCEPT) to be quantified, because an ungreedy quantifier
    with a zero minimum is potentially useful.
  * Some changes to the way the minimum subject length is handled
  * Check for integer overflow when computing lookbehind lengths
  * Implement non-atomic positive lookaround assertions
  * Upgraded to Unicode 12.1.0
  * Make pcre2test -C show if libreadline or libedit is supported
  * Various bug fixes and improvements</changelog>
  <changelog author="schwab@suse.de" date="1574769600">- Enable JIT on aarch64</changelog>
  <changelog author="mcalabkova@suse.com" date="1585310400">- Resubmit the package (bsc#1167890, jsc#SLE-11608)</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1589371200">- Refresh spec-file via spec-cleaner.
  * Add %make_build and %license macros.
- Update to 10.35
  * https://www.pcre.org/changelog.txt
  * Use PCRE2_MATCH_EMPTY flag to detect empty matches in JIT.
  * A JIT bug is fixed which allowed to read the fields
    of the compiled pattern before its existence is checked.
  * Added PCRE2_SUBSTITUTE_LITERAL.
  * Avoid some VS compiler warnings.
  * Added PCRE2_SUBSTITUTE_MATCHED.
  * Added (?* and (?&lt;* as synonms for (*napla: and (*naplb:
    to match another regex engine.
  * Fix *THEN verbs in lookahead assertions in JIT.
  * Added PCRE2_SUBSTITUTE_REPLACEMENT_ONLY.
  * The JIT stack should be freed when the low-level stack
    allocation fails.
  * Changed setting of CMAKE_MODULE_PATH in CMakeLists.txt from SET
    to LIST(APPEND...) to allow a setting from the command line
    to be included.
  * Updated to Unicode 13.0.0.
  * CMake build now checks for secure_getenv() and strerror().
  * Restrict the configuration setting for the SELinux compatible
    execmem allocator (change 10.30/44) to Linux and NetBSD.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1607169600">- pcre2 10.36:
  * add GNU grep's -m (aka --max-count) option to pcre2grep
  * unify the handling of substitution strings for both -O and
    callouts in pcre2grep, with the addition of $x{...} and
    $o{...} to allow for characters whose code points are greater
    than 255 in Unicode mode</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Remove regcomp, regexec etc. from libpcre2-posix.
  (Add pcre2-symbol-clash.patch)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- pcre2 10.37:
  * removal of the actual POSIX names regcomp etc. from the POSIX
    wrapper library because these have caused issues for some
    applications, replacing pcre2-symbol-clash.patch
  * fix a hypothetical NULL dereference
  * fix two bugs related to over-large numbers so the behaviour is
    now the same as Perl
  * Fix propagation of \K back from the full pattern recursion
  * Restore single character repetition optimization in JIT</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1635076800">- pcre2 10.38:
  * Following Perl's lead, \K is now locked out in lookaround
    assertions by default, but an option is provided to re-enable
    the previous behaviour</changelog>
  <changelog author="pgajdos@suse.com" date="1636632000">- added patches
  fix revert https://github.com/PhilipHazel/pcre2/commit/080d7789eba00b570181dfe28809b01aa88c01f8
  + pcre2-readd-wrappers-POSIX.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 10.39
  * Fix incorrect detection of alternatives in first character
    search in JIT
  * Update to Unicode 14.0.0
- 0001-Fixed-atomic-group-backtracking-bug.patch released for 15:Update
  due to bsc#1187937 is already upstreamed
  https://bugzilla.suse.com/show_bug.cgi?id=1187937#c7</changelog>
  <changelog author="pgajdos@suse.com" date="1651752000">- enable jit for s390x [bsc#1199196]</changelog>
  <changelog author="pgajdos@suse.com" date="1651752001">- do not enable jit-sealloc [bsc#1182864] [bsc#1199208]</changelog>
  <changelog author="jsikes@suse.com" date="1655380800">- Added pcre2-10.39-bsc1199232-unicode-property-matching.patch
  * bsc#1199232
  * CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
  <changelog author="jsikes@suse.com" date="1658318400">- Added pcre2-bsc1199235-CVE-2022-1587.patch
  * CVE-2022-1587 / bsc#1199235
  * Fix out-of-bounds read due to bug in recursions
  * Sourced from:
  - https://github.com/PCRE2Project/pcre2/commit/03654e751e7f0700693526b67dfcadda6b42c9d0</changelog>
  <changelog author="pmonreal@suse.com" date="1689940800">- Security fix: [bsc#1213514, CVE-2022-41409]
  * Integer overflow vulnerability in pcre2test before 10.41
    allows attackers to cause a denial of service or other
    unspecified impacts via negative input.
  * Add pcre2-CVE-2022-41409.patch</changelog>
</package>
<package pkgid="0a954f12cfa4ce87a3f3dd1338d5442cd01f433254ac7031432c63a12b72c337" name="libpcre2-8-0" arch="s390x">
  <version epoch="0" ver="10.39" rel="150400.4.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1544529600">- Build with --enable-jit-sealloc option, otherwise when
  selinux is enabled or systemd memory protections are on,
  programs will fail to work with execmem violations.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Mark all license files as %license</changelog>
  <changelog author="bwiedemann@suse.com" date="1548244800">- Do not run profiling in parallel for reproducible builds (boo#1040589)</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133274).</changelog>
  <changelog author="jsikes@suse.de" date="1556798400">- Update to 10.33-RC1 to fix issue with LTO (boo#1133274).
  * Callouts from pcre2_substitute() are now available.
  * The POSIX functions are now all called pcre2_regcomp() etc., with wrapper
    functions that use the standard POSIX names. However, in pcre2posix.h the POSIX
    names are defined as macros. This should help avoid linking with the wrong
    library in some environments, while still exporting the POSIX names for
    pre-existing programs that use them.
  * Some new options:
    (a) PCRE2_EXTRA_ESCAPED_CR_IS_LF makes \r behave as \n.
    (b) PCRE2_EXTRA_ALT_BSUX enables support for ECMAScript 6's \u{hh...}
    construct.
    (c) PCRE2_COPY_MATCHED_SUBJECT causes a copy of a matched subject to be
    made, instead of just remembering a pointer.
  * Some new Perl features:
    (a) Perl 5.28's experimental alphabetic names for atomic groups and
    lookaround assertions, for example, (*pla:...) and (*atomic:...).
    (b) The new Perl "script run" features (*script_run:...) and
    (*atomic_script_run:...) aka (*sr:...) and (*asr:...).
    (c) When PCRE2_UTF is set, allow non-ASCII letters and decimal digits in
    capture group names.
  * --disable-percent-zt disables the use of %zu and %td in formatting strings
    in pcre2test. They were already automatically disabled for VC and older C
    compilers.
  * Some changes related to callouts in pcre2grep:
    (a) Support for running an external program under VMS has been added, in
    addition to Windows and fork() support.
    (b) --disable-pcre2grep-callout-fork restricts the callout support in
    to the inbuilt echo facility.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574424000">- pcre2 10.34:
  * implement the documented maximum number of capturing
    subpatterns of 65535
  * Improve the invalid utf32 support of the JIT compiler
  * Add support for matching in invalid UTF strings to the pcre2_match()
  * Give more error detail for invalid UTF-8 when detected in pcre2grep
  * support for invalid UTF-8 to pcre2grep.
  * Adjust the limit for "must have" code unit searching, in particular,
  * increase it substantially for non-anchored patterns.
  * Allow (*ACCEPT) to be quantified, because an ungreedy quantifier
    with a zero minimum is potentially useful.
  * Some changes to the way the minimum subject length is handled
  * Check for integer overflow when computing lookbehind lengths
  * Implement non-atomic positive lookaround assertions
  * Upgraded to Unicode 12.1.0
  * Make pcre2test -C show if libreadline or libedit is supported
  * Various bug fixes and improvements</changelog>
  <changelog author="schwab@suse.de" date="1574769600">- Enable JIT on aarch64</changelog>
  <changelog author="mcalabkova@suse.com" date="1585310400">- Resubmit the package (bsc#1167890, jsc#SLE-11608)</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1589371200">- Refresh spec-file via spec-cleaner.
  * Add %make_build and %license macros.
- Update to 10.35
  * https://www.pcre.org/changelog.txt
  * Use PCRE2_MATCH_EMPTY flag to detect empty matches in JIT.
  * A JIT bug is fixed which allowed to read the fields
    of the compiled pattern before its existence is checked.
  * Added PCRE2_SUBSTITUTE_LITERAL.
  * Avoid some VS compiler warnings.
  * Added PCRE2_SUBSTITUTE_MATCHED.
  * Added (?* and (?&lt;* as synonms for (*napla: and (*naplb:
    to match another regex engine.
  * Fix *THEN verbs in lookahead assertions in JIT.
  * Added PCRE2_SUBSTITUTE_REPLACEMENT_ONLY.
  * The JIT stack should be freed when the low-level stack
    allocation fails.
  * Changed setting of CMAKE_MODULE_PATH in CMakeLists.txt from SET
    to LIST(APPEND...) to allow a setting from the command line
    to be included.
  * Updated to Unicode 13.0.0.
  * CMake build now checks for secure_getenv() and strerror().
  * Restrict the configuration setting for the SELinux compatible
    execmem allocator (change 10.30/44) to Linux and NetBSD.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1607169600">- pcre2 10.36:
  * add GNU grep's -m (aka --max-count) option to pcre2grep
  * unify the handling of substitution strings for both -O and
    callouts in pcre2grep, with the addition of $x{...} and
    $o{...} to allow for characters whose code points are greater
    than 255 in Unicode mode</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Remove regcomp, regexec etc. from libpcre2-posix.
  (Add pcre2-symbol-clash.patch)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- pcre2 10.37:
  * removal of the actual POSIX names regcomp etc. from the POSIX
    wrapper library because these have caused issues for some
    applications, replacing pcre2-symbol-clash.patch
  * fix a hypothetical NULL dereference
  * fix two bugs related to over-large numbers so the behaviour is
    now the same as Perl
  * Fix propagation of \K back from the full pattern recursion
  * Restore single character repetition optimization in JIT</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1635076800">- pcre2 10.38:
  * Following Perl's lead, \K is now locked out in lookaround
    assertions by default, but an option is provided to re-enable
    the previous behaviour</changelog>
  <changelog author="pgajdos@suse.com" date="1636632000">- added patches
  fix revert https://github.com/PhilipHazel/pcre2/commit/080d7789eba00b570181dfe28809b01aa88c01f8
  + pcre2-readd-wrappers-POSIX.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 10.39
  * Fix incorrect detection of alternatives in first character
    search in JIT
  * Update to Unicode 14.0.0
- 0001-Fixed-atomic-group-backtracking-bug.patch released for 15:Update
  due to bsc#1187937 is already upstreamed
  https://bugzilla.suse.com/show_bug.cgi?id=1187937#c7</changelog>
  <changelog author="pgajdos@suse.com" date="1651752000">- enable jit for s390x [bsc#1199196]</changelog>
  <changelog author="pgajdos@suse.com" date="1651752001">- do not enable jit-sealloc [bsc#1182864] [bsc#1199208]</changelog>
  <changelog author="jsikes@suse.com" date="1655380800">- Added pcre2-10.39-bsc1199232-unicode-property-matching.patch
  * bsc#1199232
  * CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
  <changelog author="jsikes@suse.com" date="1658318400">- Added pcre2-bsc1199235-CVE-2022-1587.patch
  * CVE-2022-1587 / bsc#1199235
  * Fix out-of-bounds read due to bug in recursions
  * Sourced from:
  - https://github.com/PCRE2Project/pcre2/commit/03654e751e7f0700693526b67dfcadda6b42c9d0</changelog>
  <changelog author="pmonreal@suse.com" date="1689940800">- Security fix: [bsc#1213514, CVE-2022-41409]
  * Integer overflow vulnerability in pcre2test before 10.41
    allows attackers to cause a denial of service or other
    unspecified impacts via negative input.
  * Add pcre2-CVE-2022-41409.patch</changelog>
</package>
<package pkgid="7a658c6eb8120852fe162cec2b1dfbc8d40802954e7c80fd31d2bf1272e414c5" name="libpcre2-8-0" arch="x86_64">
  <version epoch="0" ver="10.39" rel="150400.4.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1544529600">- Build with --enable-jit-sealloc option, otherwise when
  selinux is enabled or systemd memory protections are on,
  programs will fail to work with execmem violations.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Mark all license files as %license</changelog>
  <changelog author="bwiedemann@suse.com" date="1548244800">- Do not run profiling in parallel for reproducible builds (boo#1040589)</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133274).</changelog>
  <changelog author="jsikes@suse.de" date="1556798400">- Update to 10.33-RC1 to fix issue with LTO (boo#1133274).
  * Callouts from pcre2_substitute() are now available.
  * The POSIX functions are now all called pcre2_regcomp() etc., with wrapper
    functions that use the standard POSIX names. However, in pcre2posix.h the POSIX
    names are defined as macros. This should help avoid linking with the wrong
    library in some environments, while still exporting the POSIX names for
    pre-existing programs that use them.
  * Some new options:
    (a) PCRE2_EXTRA_ESCAPED_CR_IS_LF makes \r behave as \n.
    (b) PCRE2_EXTRA_ALT_BSUX enables support for ECMAScript 6's \u{hh...}
    construct.
    (c) PCRE2_COPY_MATCHED_SUBJECT causes a copy of a matched subject to be
    made, instead of just remembering a pointer.
  * Some new Perl features:
    (a) Perl 5.28's experimental alphabetic names for atomic groups and
    lookaround assertions, for example, (*pla:...) and (*atomic:...).
    (b) The new Perl "script run" features (*script_run:...) and
    (*atomic_script_run:...) aka (*sr:...) and (*asr:...).
    (c) When PCRE2_UTF is set, allow non-ASCII letters and decimal digits in
    capture group names.
  * --disable-percent-zt disables the use of %zu and %td in formatting strings
    in pcre2test. They were already automatically disabled for VC and older C
    compilers.
  * Some changes related to callouts in pcre2grep:
    (a) Support for running an external program under VMS has been added, in
    addition to Windows and fork() support.
    (b) --disable-pcre2grep-callout-fork restricts the callout support in
    to the inbuilt echo facility.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574424000">- pcre2 10.34:
  * implement the documented maximum number of capturing
    subpatterns of 65535
  * Improve the invalid utf32 support of the JIT compiler
  * Add support for matching in invalid UTF strings to the pcre2_match()
  * Give more error detail for invalid UTF-8 when detected in pcre2grep
  * support for invalid UTF-8 to pcre2grep.
  * Adjust the limit for "must have" code unit searching, in particular,
  * increase it substantially for non-anchored patterns.
  * Allow (*ACCEPT) to be quantified, because an ungreedy quantifier
    with a zero minimum is potentially useful.
  * Some changes to the way the minimum subject length is handled
  * Check for integer overflow when computing lookbehind lengths
  * Implement non-atomic positive lookaround assertions
  * Upgraded to Unicode 12.1.0
  * Make pcre2test -C show if libreadline or libedit is supported
  * Various bug fixes and improvements</changelog>
  <changelog author="schwab@suse.de" date="1574769600">- Enable JIT on aarch64</changelog>
  <changelog author="mcalabkova@suse.com" date="1585310400">- Resubmit the package (bsc#1167890, jsc#SLE-11608)</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1589371200">- Refresh spec-file via spec-cleaner.
  * Add %make_build and %license macros.
- Update to 10.35
  * https://www.pcre.org/changelog.txt
  * Use PCRE2_MATCH_EMPTY flag to detect empty matches in JIT.
  * A JIT bug is fixed which allowed to read the fields
    of the compiled pattern before its existence is checked.
  * Added PCRE2_SUBSTITUTE_LITERAL.
  * Avoid some VS compiler warnings.
  * Added PCRE2_SUBSTITUTE_MATCHED.
  * Added (?* and (?&lt;* as synonms for (*napla: and (*naplb:
    to match another regex engine.
  * Fix *THEN verbs in lookahead assertions in JIT.
  * Added PCRE2_SUBSTITUTE_REPLACEMENT_ONLY.
  * The JIT stack should be freed when the low-level stack
    allocation fails.
  * Changed setting of CMAKE_MODULE_PATH in CMakeLists.txt from SET
    to LIST(APPEND...) to allow a setting from the command line
    to be included.
  * Updated to Unicode 13.0.0.
  * CMake build now checks for secure_getenv() and strerror().
  * Restrict the configuration setting for the SELinux compatible
    execmem allocator (change 10.30/44) to Linux and NetBSD.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1607169600">- pcre2 10.36:
  * add GNU grep's -m (aka --max-count) option to pcre2grep
  * unify the handling of substitution strings for both -O and
    callouts in pcre2grep, with the addition of $x{...} and
    $o{...} to allow for characters whose code points are greater
    than 255 in Unicode mode</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Remove regcomp, regexec etc. from libpcre2-posix.
  (Add pcre2-symbol-clash.patch)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- pcre2 10.37:
  * removal of the actual POSIX names regcomp etc. from the POSIX
    wrapper library because these have caused issues for some
    applications, replacing pcre2-symbol-clash.patch
  * fix a hypothetical NULL dereference
  * fix two bugs related to over-large numbers so the behaviour is
    now the same as Perl
  * Fix propagation of \K back from the full pattern recursion
  * Restore single character repetition optimization in JIT</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1635076800">- pcre2 10.38:
  * Following Perl's lead, \K is now locked out in lookaround
    assertions by default, but an option is provided to re-enable
    the previous behaviour</changelog>
  <changelog author="pgajdos@suse.com" date="1636632000">- added patches
  fix revert https://github.com/PhilipHazel/pcre2/commit/080d7789eba00b570181dfe28809b01aa88c01f8
  + pcre2-readd-wrappers-POSIX.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 10.39
  * Fix incorrect detection of alternatives in first character
    search in JIT
  * Update to Unicode 14.0.0
- 0001-Fixed-atomic-group-backtracking-bug.patch released for 15:Update
  due to bsc#1187937 is already upstreamed
  https://bugzilla.suse.com/show_bug.cgi?id=1187937#c7</changelog>
  <changelog author="pgajdos@suse.com" date="1651752000">- enable jit for s390x [bsc#1199196]</changelog>
  <changelog author="pgajdos@suse.com" date="1651752001">- do not enable jit-sealloc [bsc#1182864] [bsc#1199208]</changelog>
  <changelog author="jsikes@suse.com" date="1655380800">- Added pcre2-10.39-bsc1199232-unicode-property-matching.patch
  * bsc#1199232
  * CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
  <changelog author="jsikes@suse.com" date="1658318400">- Added pcre2-bsc1199235-CVE-2022-1587.patch
  * CVE-2022-1587 / bsc#1199235
  * Fix out-of-bounds read due to bug in recursions
  * Sourced from:
  - https://github.com/PCRE2Project/pcre2/commit/03654e751e7f0700693526b67dfcadda6b42c9d0</changelog>
  <changelog author="pmonreal@suse.com" date="1689940800">- Security fix: [bsc#1213514, CVE-2022-41409]
  * Integer overflow vulnerability in pcre2test before 10.41
    allows attackers to cause a denial of service or other
    unspecified impacts via negative input.
  * Add pcre2-CVE-2022-41409.patch</changelog>
</package>
<package pkgid="a9fcb61275dc46e968453ac1a9fde8cfba3afee71f65025e67a1f44a83493ba7" name="libpolkit0" arch="aarch64">
  <version epoch="0" ver="0.116" rel="150200.3.12.1"/>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="meissner@suse.com" date="1642075200">- CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
  added CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644235200">- CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
  added CVE-2021-4115.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="e8b99a455b0251f29c24a4313df69b986a04ebb3e4be8ff4ff0c6dcfc6247e48" name="libpolkit0" arch="s390x">
  <version epoch="0" ver="0.116" rel="150200.3.12.1"/>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="meissner@suse.com" date="1642075200">- CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
  added CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644235200">- CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
  added CVE-2021-4115.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="d96a9dce021662261ee80d207d47548d0e67da8b072d3908a2554d7a77f738d9" name="libpolkit0" arch="x86_64">
  <version epoch="0" ver="0.116" rel="150200.3.12.1"/>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="meissner@suse.com" date="1642075200">- CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
  added CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644235200">- CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
  added CVE-2021-4115.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="f1576ed26127815901b4449fd698f9a3a8bfba69e32a99b4b8971399260faa71" name="libprocps7" arch="aarch64">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="92eadfa3e6eee968c8697640ecd853911afbedabea6304646d227ccb0e19552f" name="libprocps7" arch="s390x">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="813e076ef416d905db4a7b7895de5bac68246face1ee34fc09b2d5018b049a0a" name="libprocps7" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="34d8cc8f289bf33c751ec25d2f25d907d5ee173f9976fbbb41845be6933ad531" name="libprocps7" arch="aarch64">
  <version epoch="0" ver="3.3.15" rel="150000.7.34.1"/>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
</package>
<package pkgid="8ba0e0b149f8c7ce08774aab9edd69bce15f46315558d1cf8a3fa025a58d88fb" name="libprocps7" arch="s390x">
  <version epoch="0" ver="3.3.15" rel="150000.7.34.1"/>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
</package>
<package pkgid="ea6e40d953e0e8d3eaa2564f9f5480923a5f0ea80e1205e86260138757a33848" name="libprocps7" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="150000.7.34.1"/>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
</package>
<package pkgid="096da2248c0d95d101dcf99378a5c78fa80ffaac0ae414a4e7e186ef6cf5eef2" name="libprocps8" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="9e08e84a6160c20e016b8aa769e3b9ff3e86823804d24002af6c2a2b4fb9b460" name="libprocps8" arch="ppc64le">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="6ca0c667c705991456719b928a78d683db074b4b9c6a690bb451c218eff1d45b" name="libprocps8" arch="s390x">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="6feb6a642a83b70bbb015f173290e529667b6b1fc233a62dba7eac1374a41f5c" name="libprocps8" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="1c7acf8e437af01d4809f7c757bdb6600bef4613e81596ef30af2a050a39b8c0" name="libprotobuf-lite20" arch="aarch64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="41475a2c85efe819d08457d4436cd51420b1c107afae0f4f3128889f7b15ee86" name="libprotobuf-lite20" arch="s390x">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="3e36d9fbf8a5482764e73f7f1999c480e3a4f4831f6ea6706354dfc703e8d600" name="libprotobuf-lite20" arch="x86_64">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="0146f765267f05969100322510f156d8bc66b5c80a9b6387ed06c95313b20d53" name="libprotobuf-lite25_1_0" arch="aarch64">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="752b8162fdb52957ef09056c7f771fb4dbc55c70beff70e6279b08432b7f502d" name="libprotobuf-lite25_1_0" arch="ppc64le">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="c6a1491c4f12383bf302e53868fc49cf525652e8e1dc48ba4c89c821c743eff9" name="libprotobuf-lite25_1_0" arch="s390x">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="99accaea3c59a4a07bffda5e37a3c4707d3f1569410b652dc80312dc90888640" name="libprotobuf-lite25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="ca590369d4ac0ab696e40c642a2e9d42ce9862bfc679f76d4a49f11f2c9d6e81" name="libprotobuf-lite25_1_0" arch="aarch64">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="185e7503950d3c1bf2abea2ae4e02b64267f02bef655afc9db0108cefc16696a" name="libprotobuf-lite25_1_0" arch="ppc64le">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="4433ae9e5ce37e600047de03d9f4bb802fad48940b9313b10544cb7469718d32" name="libprotobuf-lite25_1_0" arch="s390x">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="1d90755daf7158375888e94bc554277c9d6733764f191907c9ff368064a11025" name="libprotobuf-lite25_1_0" arch="x86_64">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="52ba2aeec406365cd45198485df422d1a05476f3c78b5209a1c8b787a6217d28" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="186d4d170e7ed0f0c2d4358e698115d697f8baa19a9ee039d75fe079d97daa9a" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="cda6765cd8de9d6f3e440af1041441c7994d5bd1f37812951e3e47ee9ab11ee0" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="5164c151b5de2232be31aa9d6c78f4b7bcbdb9d5899bfef7e102edad4e7aff59" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="dcda3addd227f44a75c633b169a69b5f45957c2b570efbb6e9ea9a571eb712ff" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="bff1a5797066d946f9090f57299b621ba660557d43b9c2a0c31f39d6df4dbf2d" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="af49a0c42313d763841cfcf321ff545a3377ccdd712bb5b3a2e3032cbd14502d" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="7d73e4f72000198897e733a59de0d6b37d5e2dd0f379dbd1b5b60096c10b76f1" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="d4065caa31a1a86fcc5d761c6cd78e334ea074b8c281e70784ec27d640423fd7" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="2390da5290018b2eecddc57d0d0cd7abccfe87bda5089cdddaa00ee5472db504" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="97bd62787bab3d0c3ec31b297ffcd2fdaf8fd07343874aba444a4bb18e4bbf01" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="35627dd68e7b5841030dc089a66e7a8f9dc88c1d5fe9859493422e69cdf70a4d" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="51b7404af6211d4cc233e8f49afd216457ae250b1cd381ba72d094b8f1a47ea5" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="f72d0ae9f779498c7db32b9dab04a87b87800cd4e9c539689ce6a08635995e23" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="8b816a719b8a74fb9a7a9d22c4d8a3d0a009ee9ecf78f2e17bb9968fc467e1e7" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="dab8288609a84e1e12a0e02bd81f48ba459ab8bfbbbdb0981103a3a4c5ffd152" name="libpython3_6m1_0" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="6b671abd13d10fda0e71b46bfbd9445153bdc2d3e810a1223cf94e4795cb3a80" name="libpython3_6m1_0" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="4f8eb9a3d25e58ed2cd920ac7ef6f8ca7747cdd042433ec78853e43d1ecbd501" name="libpython3_6m1_0" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="34852d0aea50770445945037a53b252741ba988e6fb24f3253ed66d8c51bc1f2" name="librados2" arch="aarch64">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="52998835663cc7952cb7d130e104ea38287dd56932fcb7fcbc43a7c7050a4362" name="librados2" arch="x86_64">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="c8e01bfdddc8cd7ceac2c4681a0e775c27fcc63ad530c59c02ef2e037dcf567f" name="librados2" arch="aarch64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="706ed669da0b19f8e71429a31f600b95e5bb2803e57feb9cee25cb929aee2e09" name="librados2" arch="x86_64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="11e2d461b8cc5e8f7bb2558bbaabbcf39e2f837436020196d1e2a454dee7aeab" name="librbd1" arch="aarch64">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="ddd3eb68bc820edf88bc1fe1fb5c2af21ee3ee932a352efbda7772cc3f7be218" name="librbd1" arch="x86_64">
  <version epoch="0" ver="16.2.11.58+g38d6afd3b78" rel="150400.3.6.1"/>
  <changelog author="ncutler@suse.com" date="1636113600">- Update to 16.2.6-462-g5fefbbf8888:
  + rebased on top of upstream commit SHA1 dd7139c66c1d36da50475ec97d8d6b54b07d1dea
  * (bsc#1191751) rgw/tracing: unify SO version numbers within librgw2 package
  * spec: make selinux scriptlets respect CEPH_AUTO_RESTART_ON_UPGRADE</changelog>
  <changelog author="ncutler@suse.com" date="1636545600">- Preservation of Bugzilla, Jira and CVE citations from earlier incarnations of
  this changes file after double-checking that none of these fixes got lost in
  the pacific rebase:
  + bsc#1163764 (--container-init feature cherry-picked to octopus)
  + bsc#1170200 (mgr/dashboard: Fix for CrushMap viewer items getting compressed vertically)
  + bsc#1172926 (mgr/orchestrator: Sort 'ceph orch device ls' by host)
  + bsc#1173079 (mgr/devicehealth: device_health_metrics pool gets created even without any OSDs in the cluster)
  + bsc#1174466 (mon: have 'mon stat' output json as well)
  + bsc#1174526 (mgr/dashboard: allow getting fresh inventory data from the orchestrator)
  + bsc#1174529 (rpm: on SUSE, podman is required for cephadm to work)
  + bsc#1174644 (cephadm: log to file)
  + bsc#1175120 (downstream branding)
  + bsc#1175161 (downstream branding)
  + bsc#1175169 (downstream branding)
  + bsc#1176390 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176451 (Drop patch "rpm: on SUSE, podman is required for cephadm to work")
  + bsc#1176489 (mgr/cephadm: lock multithreaded access to OSDRemovalQueue)
  + bsc#1176499 (mgr/cephadm: fix RemoveUtil.load_from_store())
  + bsc#1176638 (ceph-volume: batch: call the right prepare method)
  + bsc#1176679 (mgr/dashboard: enable different URL for users of browser to Grafana)
  + bsc#1176828 (cephadm: command_unit: call systemctl with verbose=True)
  + bsc#1177078 (mgr/dashboard: Fix bugs in a unit test and i18n translation)
  + bsc#1177151 (python-common: do not skip unavailable devices)
  + bsc#1177319 (--container-init feature cherry-picked to octopus)
  + bsc#1177344 (mgr/dashboard: support Orchestrator and user-defined Ganesha cluster)
  + bsc#1177360 (cephadm: silence "Failed to evict container" log msg)
  + bsc#1177450 (ceph-volume: don't exit before empty report can be printed)
  + bsc#1177643 (Revert "spec: Podman (temporarily) requires apparmor-abstractions on suse")
  + bsc#1177676 (cephadm: allow uid/gid == 0 in copy_tree, copy_files, move_files)
  + bsc#1177843 (CVE-2020-25660)
  + bsc#1177857 (mgr/cephadm: upgrade: fail gracefully, if daemon redeploy fails)
  + bsc#1177933 (cephadm: configure journald as the logdriver)
  + bsc#1178531 (cephadm: set default container_image to registry.suse.com/ses/7/ceph/ceph)
  + bsc#1178837 (rgw: cls/user: set from_index for reset stats calls)
  + bsc#1178860 (mgr/dashboard: Disable TLS 1.0 and 1.1)
  + bsc#1178905 (CVE-2020-25678)
  + bsc#1178932 (cephadm: reference the last local image by digest)
  + bsc#1179016 (rpm: require smartmontools on SUSE)
  + bsc#1179452 (mgr/insights: Test environment requires 'six')
  + bsc#1179526 (rgw: during GC defer, prevent new GC enqueue)
  + bsc#1179569 (cephadm: reference the last local image by digest)
  + bsc#1179802 (CVE-2020-27781)
  + bsc#1179997 (CVE-2020-27839)
  + bsc#1180107 (ceph-volume: pass --filter-for-batch from drive-group subcommand)
  + bsc#1180155 (CVE-2020-27781)
  + bsc#1181291 (mgr/cephadm: alias rgw-nfs -&gt; nfs)
  + bsc#1182766 (cephadm: fix 'inspect' and 'pull')
  + bsc#1183074 (CVE-2021-20288)
  + bsc#1183561 (mgr/cephadm: on ssh connection error, advice chmod 0600)
  + bsc#1183899 (bluestore: fix huge reads/writes at BlueFS)
  + bsc#1184231 (cephadm: Allow to use paths in all &lt;_devices&gt; drivegroup sections)
  + bsc#1184517 (cls/rgw: look for plane entries in non-ascii plain namespace too)
  + bsc#1185246 (rgw: check object locks in multi-object delete)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1185619 (CVE-2021-3524)
  + bsc#1186020 (CVE-2021-3531)
  + bsc#1186021 (CVE-2021-3509)
  + bsc#1186348 (mgr/zabbix: adapt zabbix_sender default path)
  + bsc#1188979 ("mgr/cephadm: pass --container-init to "cephadm deploy" if specified" and "Revert "cephadm: default container_init to False")
  + bsc#1189173 (downstream branding)
  + jsc#SES-1071 (ceph-volume: major batch refactor - upstream PR#34740)
  + jsc#SES-185 (SES support with cache software)
  + jsc#SES-704 (mgr/snap_schedule)</changelog>
  <changelog author="ncutler@suse.com" date="1637582400">- Update to 16.2.6-463-g22e7612f9ad:
  + (bsc#1178073) mgr/dashboard: fix downstream NFS doc links</changelog>
  <changelog author="stefen.allen@suse.com" date="1641816000">- Update to 16.2.7-37-gb3be69440db:
  + (bsc#1194353) Downstream branding breaks dashboard npm build
  + (bsc#1188911) OSD marked down causes wrong backfill_toofull</changelog>
  <changelog author="stefen.allen@suse.com" date="1646395200">- Update to 16.2.7-577-g3e3603b5dd1
  + Update prometheus-server version</changelog>
  <changelog author="stefen.allen@suse.com" date="1646740800">- Update to 16.2.7-596-g7d574789716
  + Update Prometheus Container image paths (pr #459)
  + mgr/dashboard: Fix documentation URL (pr #456)
  + mgr/dashboard: Adapt downstream branded navigation page (pr #454)</changelog>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
</package>
<package pkgid="9360962f2c866cee0859f2340688008f9ebac9d27af3f1d7cddcd0ca5eb508a1" name="librbd1" arch="aarch64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="1a303310bc09b06ee162ee5d18a8fdb5ca0dd787c30d46ad177bfc925b2e3c33" name="librbd1" arch="x86_64">
  <version epoch="0" ver="16.2.13.66+g54799ee0666" rel="150400.3.9.2"/>
  <changelog author="stefen.allen@suse.com" date="1647345600">- Update to 16.2.7-640-gceb23c7491b
  + (bsc#1194875) common: fix FTBFS due to dout &amp; need_dynamic on GCC-12
  + (bsc#1196938) cephadm: preserve authorized_keys file during upgrade</changelog>
  <changelog author="stefen.allen@suse.com" date="1648123200">- Update to 16.2.7-650-gd083eaa3886
  + (pr#469) cephadm: update image paths to registry.suse.com
  + (pr#468) cephadm: use snmp-notifier image from registry.suse.de
  + (pr#467) cephadm: infer the default container image during pull
  + (pr#465) mgr/cephadm: try to get FQDN for inventory address
  + Sync _constaints file for IBS and OBS</changelog>
  <changelog author="stefen.allen@suse.com" date="1648641600">- Update to v16.2.7-652-gf5dc462fdb5
  + (bsc#1194875) [SES7P] include/buffer: include &lt;memory&gt;</changelog>
  <changelog author="stefen.allen@suse.com" date="1648728000">- Update to v16.2.7-654-gd5a90ff46f0
  + (bsc#1196733) remove build directory during %clean</changelog>
  <changelog author="michael.fritch@suse.com" date="1650369600">- Update to 16.2.7-969-g6195a460d89
  + (jsc#SES-2515) High-availability NFS export</changelog>
  <changelog author="michael.fritch@suse.com" date="1653307200">- Update to 16.2.9.50-g7d9f12156fb:
  + (jsc#SES-2515) High-availability NFS export
  + (bsc#1196044) cephadm: prometheus: The generatorURL in alerts is only using hostname
  + (bsc#1196785) cephadm: avoid crashing on expected non-zero exit
  + (bsc#1187748) When an RBD is mapped, it is attempted to be deployed as an OSD.</changelog>
  <changelog author="stefen.allen@suse.com" date="1654171200">- Update to ceph-16.2.9-58-ge2e5cb80063:
  + (bsc#1200064, pr#480) Remove last vestiges of docker.io image paths</changelog>
  <changelog author="tserong@suse.com" date="1654776000">- Update to 16.2.9-158-gd93952c7eea:
  + cmake: check for python(\d)\.(\d+) when building boost
  + make-dist: patch boost source to support python 3.10</changelog>
  <changelog author="tserong@suse.com" date="1657713600">- Update to 16.2.9-536-g41a9f9a5573:
  + (bsc#1195359, bsc#1200553) rgw: check bucket shard init status in RGWRadosBILogTrimCR
  + (bsc#1194131) ceph-volume: honour osd_dmcrypt_key_size option (CVE-2021-3979)
  + (bsc#1196046) mgr/cephadm: try to get FQDN for configuration files</changelog>
  <changelog author="tserong@suse.com" date="1658836800">- Update to 16.2.9-538-g9de83fa4064:
  + (bsc#1201604) cephfs-shell: move source to separate subdirectory</changelog>
  <changelog author="tserong@suse.com" date="1665057600">- Update to 16.2.9-539-gea74dd900cd:
  + (bsc#1202292) ceph.spec.in: Add -DFMT_DEPRECATED_OSTREAM to CXXFLAGS</changelog>
  <changelog author="michael.fritch@suse.com" date="1674820800">- Update to 16.2.11-56-gc067055f8f5:
  + (bsc#1199183) osd, tools, kv: non-aggressive, on-line trimming of accumulated dups
  + (bsc#1200262) ceph-volume: fix fast device alloc size on mulitple device
  + (bsc#1200501) cephadm: update monitoring container images
  + (bsc#1200978) mgr/dashboard: prevent alert redirect
  + (bsc#1201797) mgr/volumes: Add subvolumegroup resize cmd
  + (bsc#1201837) mgr/volumes: Fix subvolume discover during upgrade (CVE-2022-0670)
  + (bsc#1201976) monitoring/ceph-mixin: add RGW host to label info
  + (bsc#1202077) mgr/dashboard: enable addition of custom Prometheus alerts
  + (bsc#1203375) python-common: Add 'KB' to supported suffixes in SizeMatcher
  + (bsc#1204430) ceph-crash: drop privleges to run as "ceph" user, rather than root (CVE-2022-3650)
  + (bsc#1205025) rgw: Guard against malformed bucket URLs (CVE-2022-3854)
  + (bsc#1205436) mgr/dashboard: fix rgw connect when using ssl</changelog>
  <changelog author="tserong@suse.com" date="1674820801">- Update to 16.2.11-57-g9be7fb44a33:
  + ceph.spec.in: Replace %usrmerged macro with regular version check
- checkin.sh: default to ses7p branch</changelog>
  <changelog author="tserong@suse.com" date="1675771200">- Update to 16.2.11-58-g38d6afd3b78:
  + test/CMakeLists.txt: move 'APPEND rgw_libs Boost::filesystem' to top level</changelog>
  <changelog author="tserong@suse.com" date="1678449600">- Update to 16.2.11-62-gce6291a3463:
  + (bsc#1201088) fix FTBFS on gcc 13</changelog>
  <changelog author="tserong@suse.com" date="1680004800">- Update to 16.2.11-65-g8b7e6fc0182:
  + (bsc#1201088) test/librados: fix FTBFS on gcc 13
  + (bsc#1208820) mgr/dashboard: allow to pass controls on iscsi disk create</changelog>
  <changelog author="fcrozat@suse.com" date="1683201600">- Add _multibuild to define additional spec files as additional
  flavors.  Eliminates the need for source package links in OBS.</changelog>
  <changelog author="tserong@suse.com" date="1683806400">- Update to 16.2.13-66-g54799ee0666:
  + (bsc#1199880) mgr: don't dump global config holding gil
  + (bsc#1209621) cephadm: fix NFS haproxy failover if active node disappears
  + (bsc#1210153) mgr/cephadm: fix handling of mgr upgrades with 3 or more mgrs
  + (bsc#1210243, bsc#1210314) ceph-volume: fix regression in activate
  + (bsc#1210719) cephadm: mount host /etc/hosts for daemon containers in podman deployments
  + (bsc#1210784) mgr/dashboard: Fix SSO error: 'str' object has no attribute 'decode'
  + (bsc#1210944) cmake: patch boost source to support python 3.11
  + (bsc#1211090) fix FTBFS on s390x</changelog>
  <changelog author="tserong@suse.com" date="1684929600">- Add "#!BuildConstraint" to spec files for compatibility with _multibuild</changelog>
  <changelog author="tserong@suse.com" date="1687867200">- Remove _constraints file, add README-constraints.txt and pre_checkin.env</changelog>
</package>
<package pkgid="c3023f63e179ea6c3310b7d4c377974f395354009363390b087b088e347d83f0" name="librdmacm1" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="742fd08399f74907b1ccaaca2a3fc8ee2f1228a338e49ac978a907d22ead2c8d" name="librdmacm1" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="5ad732dd273ad5f4f3215caba3a3f08799d99f90c085cd5120a0c63347fda579" name="librdmacm1" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="3e665bb8bc259a57c74ab689beb2fecbc114329307bf1798b5c8ecaf35ddead6" name="librsvg-2-2" arch="aarch64">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="15f58ce5890d29cadfd86ecdbd1bb8c166e93289a026aae31e97abf3a01828a7" name="librsvg-2-2" arch="s390x">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="e62dbf0b2f7e1eae5d41990b2d8a949bde175df790ffe1db0885eca02d3bb57f" name="librsvg-2-2" arch="x86_64">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="66ef49c41ed8eab1961922a669ca06c86a518efcb1d26a68faa3080e55711279" name="librsvg" arch="src">
  <version epoch="0" ver="2.52.10" rel="150400.3.6.1"/>
  <changelog author="federico@suse.com" date="1619179200">- Update to version 2.46.5 on SLE and Leap:
  + Update dependent crates that had security vulnerabilities:
    generic-array to 0.12.4 - RUSTSEC-2020-0146
    smallvec to 0.6.14      - RUSTSEC-2021-0003 - CVE-2021-25900
  + There are no changes to the library code.
  + Fix bash-isms in Makefile.am (Tin-Wei Lan).
  + Fix Visual Studio build (Chun-wei Fan).
- bsc#1183403 - CVE-2021-25900 - buffer overflow in the smallvec crate.</changelog>
  <changelog author="dimstar@opensuse.org" date="1619784000">- Update to version 2.50.5:
  + Images embedded as data: URLs didn't render if they had a MIME
    type with a charset parameter.
  + Don't allow number lists with unbounded lengths in tableValues
    attributes, for feComponentTransfer and feConvolveMatrix.
  + Negative rx/ry in rect element should be ignored.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622116800">- Update to version 2.50.6:
  + Librsvg now requires at least Pango 1.44.
  + glgo#GNOME/librsvg#730: Incorrect text spacing when the
    transform is not 1:1. You can see this when a small font-size
    is scaled up due to a transform. It is less visible for a large
    font-size scaled down.
  + glgo#GNOME/librsvg#704: Fix circle/ellipse in paths when they
    are made out of a single Arc command.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1622894400">- Update to version 2.50.7:
  + Two cairo-related bug fixes:
  - glgo#GNOME/librsvg#745: Fix mismatched cairo_save/restore
    when running in inside the Cairo test suite.
  - glgo#GNOME/librsvg#746: Possible cairo_save() without
    cairo_restore() in render_layer().</changelog>
  <changelog author="dimstar@opensuse.org" date="1631880000">- Update to version 2.52.0:
  + The biggest user-visible change is that rsvg-convert has been
    ported to Rust.
  + rsvg-convert is now aware of physical units, and fixes a bug
    where PDFs were created at the wrong size.
  + Support for Accept-Language.
  + rsvg-convert's default DPI is now 96, to better match W3C
    standards.
  + SVG2/CSS3 features:
  - Transform property from SVG2; previously librsvg only
    supported the transform attribute from SVG1.1, which has
    different syntax.
  - context-fill and context-stroke for &lt;marker&gt; and &lt;use&gt;
    elements.
  - markers now support orient="auto-start-reverse".
  - paint-order for text elements.
  - "auto" values for the width and height attributes of the
    &lt;image&gt;, &lt;rect&gt;, and &lt;svg&gt; elements.
  - All the &lt;filter-function&gt; types from the Filter Effects
    Module Level 1 specification: blur(), brightness(),
    contrast(), drop-shadow(), grayscale(), hue-rotate(),
    invert(), opacity(), sepia(), saturate().
  - The filter property now supports chains of uri() filters or
    &lt;filter-function&gt; shortcuts.
  - Support CSS selectors for attribute matching, like
    rect[attr^="prefix"]
  + New APIs: See the HTML documentation for details.
- Drop -lang package: there are no translations available anymore.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1632657600">- Disable testsuite run on ix86 and arm.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1633521600">- Update to version 2.52.1:
  + Fix ordering of tspan inside text elements for right-to-left
    languages.
  + Fix text-anchor positioning for right-to-left languages.
  + Fix regression in computing sizes when an SVG has only one of
    width/height and a viewBox.
  + Spec compliance - the writing-mode property applies only to
    text elements, no to individual tspan elements.
  + Fix build on big-endian platforms.
  + Clarify documentation for the rsvg_handle_write() /
    rsvg_handle_close() deprecated APIs.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1634385600">- Update to version 2.52.2:
  + New features:
  - rsvg-convert now supports generating multi-page PDFs in a
    sensible way.
  - With one SVG document per page, each page with the SVG's
    natural size:
  - rsvg-convert --format=pdf -o out.pdf a.svg b.svg c.svg
  - With all pages sized as portrait US Letter, and each SVG
    scaled to fit so that there is a 1in margin around each page:
    rsvg-convert --format=pdf -o out.pdf \
  - -page-width=8.5in --page-height=11in \
  - -width=6.5in --height=8.5in --keep-aspect-ratio \
  - -top=1in --left=1in a.svg b.svg c.svg
    Please see the man page for details.
  - Support &lt;a&gt; elements inside &lt;text&gt;. Also, support the CSS
    :link pseudo-class for matching against links.
  - Support the CSS :lang() pseudo-class for matching against an
    element's xml:lang attribute.
  - Support the mask-type property from SVG2.
  + Bugs fixed:
  - Don't panic when a shorthand property is set to inherit.
  - Fix regression with the viewport size of interior &lt;svg&gt;
    elements.
  - Allow length units to be case-insensitive, per SVG2.
  + Documentation:
  - There is now a FEATURES.md in the repository, where you can
    see all the elements, attributes, and properties that librsvg
    supports. We will be adding detail to this gradually.
  - For developers, there is now devel-docs/adding-a-property.md
    with a tutorial on how to add support for new CSS properties.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1635336000">- Update to version 2.52.3:
  + Bugfixes, mostly for text layout. Also, text links in PDF!
  - Support text-decoration=overline.
  - Basic support for the unicode-bidi property. Librsvg still
    considers each tspan independently of others, which is
    incorrect, but at least bidi-override works now for a single
    embedding level.
  - Fix placement of tspan that changes the text direction.
  - :lang() selector should now match lang attribute from an
    element's parent.
  - Fix the text-anchor property for right-to-left text.
  - PDF now includes links inside text elements.</changelog>
  <changelog author="william.brown@suse.com" date="1635854400">- Add cargo audit obs service</changelog>
  <changelog author="federico@suse.com" date="1636200000">- Add librsvg-s390x-cairo-has-current-point.patch for
  https://github.com/gtk-rs/gtk-rs-core/issues/335 - otherwise the
  test suite fails on s390x due to a bug in the cairo-rs bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636804800">- Update to version 2.52.4:
  + New features:
  - Support the isolation property from the Compositing and
    Blending Level 1 specification.
  - Support Visual Studio 2022.
  + Bug fixes:
  - The opacity and mix-blend-mode properties were not being
    applied when an element has a mask.
  - Fix panic when an empty group has a pattern fill and filters.
  - Fix the tests on Windows; the still only work when Fontconfig
    is present.
  - Work around a bug in the cairo-rs bindings in the test suite,
    that only manifests itself in s/390x due to its calling
    convention. See
    https://github.com/gtk-rs/gtk-rs-core/issues/335</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1637236800">- Disable testsuite for now, let upstream figure out the issue with
  harfbuzz 3.1.1.</changelog>
  <changelog author="federico@suse.com" date="1638446400">- Remove librsvg-s390x-cairo-has-current-point.patch - it is included
  in the upstream tarball now.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1639742400">- Update to version 2.52.5:
  + Fix mangled output in rsvg-convert when redirecting output to
    a pipe on Windows.
  + When outputting to SVG, rsvg-convert now uses the width/height
    units specified in the command line; it always used pixels
    before.
  + Fix incorrect top/left margins for SVG/PS/EPS/PDF output.
  + Fix incorrect placement of glyphs when text has non-uniform
    scaling in the X/Y axes. This is not a librsvg bug, but is
    fixed by Pango 1.49.3 and later. Hopefully Pango 1.48.11 will
    be released soon with this fix as well. Note that this release
    of librsvg cannot increase the minimum Pango version to 1.48.11
    because it is not released yet.
  + Miscellaneous: Updated crate dependencies: assert_cmd, cast,
    clap cssparser, float-cmp, itertools, nalgebra, png, proptest,
    rctree, selectors, system-deps.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1645099200">- Update to version 2.52.6:
  + Fix incorrect text rendering when text has different scales in
    the X/Y axes. This regressed after librsvg 2.52.5, when Pango
    had to revert its fix for the same bug. Now librsvg renders all
    text as paths, and does the scaling itself. Please file a bug
    if you have evidence that this presents a performance problem
    for you.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1647086400">- Update to version 2.52.7:
  + Backport a fix for the regression that was introduced in the
    last release: Output filled text as text for PDF; fixes
    regression due to outputting all text as paths.</changelog>
  <changelog author="yu.daike@suse.com" date="1651233600">- Update to version 2.52.8:
  + Catch circular references when rendering patterns.</changelog>
  <changelog author="qkzhu@suse.com" date="1654862400">- Update to version 2.52.9:
  + Fix regressions when computing element geometries.</changelog>
  <changelog author="federico@suse.com" date="1689940800">- Update to version 2.52.10:
  + Fix arbitrary file read when href has special characters.
- bsc#1213502 - CVE-2023-38633 - directory traversal in URI decoder.</changelog>
</package>
<package pkgid="0510c16d5c147fd10ed1c4c902597097872a28c02bf72d71b341262aec65149e" name="libsgutils2-1_47-2" arch="aarch64">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="e9d9affbeedaa585719ca2ddb9928e99de85f955bf6b25183a62c6df00a8d7af" name="libsgutils2-1_47-2" arch="s390x">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="343e0aa49daae62516a57f6dd6b0e1ca0719fb51b3042bc2396567b26238390b" name="libsgutils2-1_47-2" arch="x86_64">
  <version epoch="0" ver="1.47+13.75d23ac" rel="150400.3.6.1"/>
  <changelog author="hare@suse.de" date="1502452800">- Drop patch merged with git repository
  * drop add-lunsearch-filter-to-searchexisting.patch
- Drop rules included in git repository
  * drop 40-usb-blacklist.rules
- Update to latest svn snapshot:
  * sg_rdac: add sanity checks for -f=lun value
  * sg_vpd improvements
  * sg_ses: fix uninitialized struct
  * sg_luns: resync with SAM and SPC drafts
  * sg_vpd: fix struct misalignment introduced by --force
  * sg_logs: add --vendor and fixup enumeration
- Port patches from SLES:
  * Add systemd service files for LUN masking (bsc#954600)
  * 55-scsi-sg3_id.rules: handle VPD page 0x80 correctly (bsc#1006469)
  * scripts: added udev rules for legacy CCISS (bsc#1006175)
  * rescan-scsi-bus.sh: Add lunsearch filter to findresized()
  (bsc#1027176)
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063)
  * 55-scsi-sg3_id.rules: allow to override sysfs inquiry
  (bsc#1012523)
  * sg_inq: export all NAA values (bsc#1050767)
  * Silence gcc warnings</changelog>
  <changelog author="hare@suse.de" date="1507896000">- Update to svn r721:
  * Merge SUSE-specific patches with upstream svn
  * sg_write_atomic: add new program for WRITE ATOMIC
  * sg_bg_ctl: new background control command
  * sg_ses: Improve output and option handling
  * sg_logs: Add --vendor and decode more pages
  * sg_get_lba_status: add new program
  * Install rescan-scsi-bus.sh and scsi_logging_level per default</changelog>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
</package>
<package pkgid="0fb719c4673a769d49c43533c92e1a31564dbb6b0b38b0eaf32e2cf3626ea8ba" name="libsgutils2-1_47-2" arch="aarch64">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="4c71a8aeda80ed84c77159a844d555f56d849a8e13dd830fc99115c075db38f1" name="libsgutils2-1_47-2" arch="s390x">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="23e8f71bd50734a66b1884f918020891b9cd4e6dbd762ade826c7b6c3a1e1f63" name="libsgutils2-1_47-2" arch="x86_64">
  <version epoch="0" ver="1.47+15.b6898b8" rel="150400.3.11.1"/>
  <changelog author="hare@suse.de" date="1511956800">- Update to svn r730:
  * Move testing utilities to 'testing' directory
  * sg_opcode: check resid and trim response
  * sg_rep_zones: expand --help option
  * sg_mode: Add Out-of-band management control page
  * sg_ses: filer join output on dpage element presence
  * documentation cleanup
- rescan-scsi-bus.sh: Add '--ignore-rev' option
- Supplement SCSI modaliases (bsc#1065212)</changelog>
  <changelog author="hare@suse.de" date="1513598400">- sg_inq: decode standard INQUIRY for CD-ROMs correctly (bsc#1070431)
- rescan-scsi-bus.sh: new option for ignore rev change
- rescan-scsi-bus.sh: Remove white space
- Add 'coreutils' to Requires (bsc#1072744)
- Add 'posttrans' to rpm spec (bsc#1071972)</changelog>
  <changelog author="hare@suse.de" date="1513944000">- sg_inq: check VPD page 0x0 before reading serial number
  (bsc#1067839)
- sg_inq: add option '-o/--only' to skip reading VPD pages
  (bsc#1067839)
- Revert 'postun' rpm spec changes after review</changelog>
  <changelog author="hare@suse.de" date="1518004800">- Update to svn r744:
  * sg_write_x: new command for normal/atomic/orwrite etc
    SCSI WRITE variants
  * sg_ses: add NVMe support
  * sg_inq: decode NVMe controller / NSIDs
- rescan_scsi_bus.sh: Fix manpage for --forcerescan
- 55-scsi-sg3_id.rules: fixes for scsi_id compability (bsc#1079873)
- 55-scsi-sg3_id.rules: run sg_inq for SPC devices (bsc#1079873)</changelog>
  <changelog author="hare@suse.de" date="1518091200">- Merge local patch with git repository
  * Delete sgut-libversioning.diff</changelog>
  <changelog author="hare@suse.de" date="1518177600">- Update to svn r751:
  * NVMe bugfixes
  * sg_seek: new utility
  * sg_stream_ctl: new utility program
- 54-before-scsi-sg3_id.rules: compability rule for systemd
  (bsc#1079873)
- Add dracut.conf to install new rule with dracut</changelog>
  <changelog author="mwilck@suse.com" date="1518436800">- dracut.conf: add whitespace at end of line (bsc#1080562)</changelog>
  <changelog author="hare@suse.de" date="1523016000">- Update to svn r763:
  * More NVMe bugfixes
  * sg_vpd: add device constituents vpd
  * sg_raw: add --raw option
  * sg_turs: add --low option
  * sg_ses: decoding dpage fixes; add --quiet option
- rescan-scsi-bus.sh: Fixup syntax error (bsc#1087008)
- rescan-scsi-bus.sh: Fixes from shellcheck</changelog>
  <changelog author="mwilck@suse.com" date="1553601600">- Spec file:
  * add fc_wwpn_id (bsc#1005063)
  * add lun masking service (bsc#954600)
  * drop BuildRequires on udev
  * replace unversioned "Provides: scsi" with versioned
- Update to version sg3_utils-1.45~803+31.564be3d:
  * New versioning scheme for upstream pre-release:
    1.45 - upstream release target, 803 - upstream svn id,
    +31: SUSE commits on top of svn, 564be3d - git hash
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008)
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212)
  * Add scsi-enable-target-scan.sh (bsc#954600)
- Update to svn r803:
  * sg_opcodes: expand MLU (18-102r0)
  * sg_format: add --dcrt used twice (FOV=1 DCRT=0)
  * rescan-scsi-bus: widen LUN 0 only scanning
  (bsc#1069384)
- Earlier SUSE fixes included in 1.45:
  * rescan-scsi-bus.sh: use LUN wildcard in idlist (bsc#1069384)
  [svn: r795]
  * sg_ses: fixup page decoding (bsc#1077787) [svn: r795]
  * sg_ses: allow to decode raw data instead of reading from a device
  (bsc#1050943) [svn: r795]
- Update to sg3_utils-1.44 [20180912] [svn: r791]
  * rescan-scsi-bus.sh: harden code
  - bump version to 20180615
  - add --ignore-rev to ignore revision change
  * introduce SG3_UTILS_DSENSE environment variable
  * sginfo: don't open /dev/snapshot
  * sg_timestamp: add '--no-timestamp' option
  - add --elapsed and --hex options
  * sg_wr_mode: add --rtd option for RTD bi
  * sg_unmap: add --all=ST,RN[,LA] option
  * sgm_dd, sg_dd: add --dry-run and --verbose options
  * sg_inq+sg_vpd: update Extended inquiry data vpd page
  * sg_ses: add 'hw_reset' and 'sw_reset' to enclosure services
    controller electronics element type (18-047r1)
  * sg_decode sense: add --cdb and --err=ES options
  * sg_format: add --dry-run option
  - extend --wait timeout for &gt; 4TB disks
  * sg_sanitize: add --dry-run option
- Earlier SUSE fixes included in 1.44:
  * sg_inq: decode standard INQUIRY for CD-ROMs correctly
  (bsc#1065448, bsc#1070431) [svn: r742]
  * sg_inq: export all NAA values (bsc#1050767) [svn: r715]
  * Add fc_wwpn_id to generate by-path links for fibrechannel
  (bsc#1005063) (svn@715)
  * sg_vpd: struct opts_t misaligment (bsc#1050943) [svn: r707]</changelog>
  <changelog author="jengelh@inai.de" date="1555588800">- Replace old $RPM_* shell vars.</changelog>
  <changelog author="mwilck@suse.com" date="1556193600">- Update to version 1.45~815+5.6aa67ed:
  * 59-fc-wwpn-id.rules: fix rule syntax (bsc#1133418)
- Update to svn r815:
  * sg_opcodes: expand MLU (spc5r20)
  * sg_inq: update version descriptors to spc5r21
  * sg_vpd: 3pc VPD page add copy group descriptor
  * sg_xcopy: add --fco (fast copy only) (spc5r20) and --app=1
  * add nanosecond durations with SG3_UTILS_LINUX_NANO
- Earlier SUSE fixes now included upstream:
  * 58-scsi-sg3_symlink.rules: don't skip multipath members
  (bsc#1085212) [r815]
  * rescan-scsi-bus.sh: terminate scanning if last lun got removed
  (bsc#1087008) [r815]
  * Add scsi-enable-target-scan.sh (bsc#954600) [r814]
  * shellcheck cleanups for rescan-scsi-bus.sh [r814]</changelog>
  <changelog author="info@paolostivanin.com" date="1618920000">- Update to version 1.46:
  * sg_rep_pip: new utility: report provisioning initialization
    pattern command
  * sg_turs: estimated time-to-ready [spc6r03]
  - add --delay=MS option
  * sg_requests: substantial cleanup
  * sg_vpd: add Format presets and Concurrent positioning ranges
  - add hot-pluggable field in standard Inquiry [spc6r05]
  - fix vendor struct opts_t alignment
  * sg_inq: add hot-pluggable field in standard Inquiry
  * sg_dd: --verify : separate category for miscompare errors
  - --verify : oflag=coe continue on miscompares, counts them
  - add cdl= operand for command duration limit indexes
  - add oflag=nocreat and conv=nocreat : OFILE must exist
  - add iflag=00, ff, random flags
  - setup conditional auto rule for getrandom()
  - add command timeout after comma in time= operand
  * sg_get_elem_status: add ralwd bit sbc4r20a
  * sg_write_x: add dld bits to write(32) [sbc4r19a]
  * sg_rep_zones: print invalid write pointer LBA as -1 rather
    than 16 "f"s
  * sg_opcodes: improve handling of RWCDLP field
  * sg_ses: use fan speed factor field for calculation [ses4r04]
  - add --all (-a) option, same action as --join
  * sg_compare_and_write: add examples section to its manpage
  * sg_modes: document '-s' option (same as '-6')
  * sg_sanitize + sg_format: when --verbose given once report
    probable success; without --verbose 'no news is good news'
  * sg_zone: add Remove element and modify zones command
  * sg_raw: increase maximum data-in and data-out buffer size
    from 64 KB to 1 MB
  - fix --cmdfile= handling
  - add --nvm option to send commands from the NVM command set
  - add --cmdset option to bypass cdb heuristic
  - add --scan= first_opcode,last_opcode
  * sg_pt_freebsd: allow device names without leading /dev/
    thus fix for regression introduced in rev 731 (ver: 1.43)
  * sg_pt_solaris+sg_pt_osf1: fix problem with clear_scsi_pt_obj()
    which needs to remember is_nvme and dev_fd values
  * sg_lib: add ZBC (2020) feature set entries
  * sg_lib: restore elements and rebuild command added
  * sg_lib,sg_pt: add partial_clear_scsi_pt_obj(),
    get_scsi_pt_cdb_len() and get_scsi_pt_cdb_buf()
  - add do_nvm_pt() for the NVM (sub-)command set
  - tweak transport error handling in Linux
  * sg_lib: Linux NVMe SNTL: add read, write and verify;
    synchronize cache and write same translations
  - add dummy start stop unit and test unit ready commands
  - wire cache mpage's WCE to nvme 'volatile write cache'
  - fix crash in sg_f2hex_arr() when fname not found
  * sg_lib: reprint cdb with illegal request sense key
  - asc/ascq match asc-num.txt @t10 20200708 [spc6r02]
  * gcc-10: suppress warnings
  * autoconf: upgrade version 2.69 to 2.70
  * remove space from end of source lines for git-svn
  * testing/sg_mrq_testing: new, for blocking mrq usage
  * testing/sgs_dd: add evfd flags and eventfd processing
  * testing: remove master-slave terminology for sgv4
  * examples: add nvme_read_ctl.hex and nvme_write_ctl.hex
- Earlier SUSE fixes included in 1.46:
  * 40-usb-blacklist.rules: use ID_SCSI_INQUIRY
    (bsc#840054, bsc#1131482)</changelog>
  <changelog author="mwilck@suse.com" date="1636632000">- Update to version 1.47:
  * sg_rep_zones: add support for REPORT ZONE DOMAINS and
    REPORT REALMS in this utility
  * sg_raw: fix prints of NVMe NVM command names
  * sg_logs: additions to Volume statistics lpage [ssc5r05c]
  - additions to Command duration limits statistics log
    page [spc6r06]
  * sg_vpd: fix do_hex type on some recent pages
  - zoned block dev char vpd: add zone alignment mode and
    zone starting LBA granularity [zbc2r11]
  * sg_read_buffer: fix --length= problem
  * sg_dd, sgm_dd, sgp_dd: don't close negative file descriptors
  * sg_dd: srand48_r() and mrand48_r() are GNU libc specific,
    put conditional in so non-reentrant version used otherwise
  - 'iflag=00,ff' places the 32 bit block address (big endian)
    into each block
  * sgp_dd: major rework, fix issue with error being ignored
  - new: --chkaddr which checks for block address in each block
  - add check for stdatomic.h presence in configure.ac
  * sg_xcopy: tweak CSCD identification descriptor
  * sg_get_elem_status: fix issue with '--maxlen=' option
  - add 2 depopulation revocation health attributes [sbc5r01]
  * transport error handling improved. To fix report of a
    BAD_TARGET transport error but the utility still continued.
  - introduce SG_LIB_TRANSPORT_ERROR [35] exit status
  * several utilities: override '--maxlen=LEN' when LEN
    is &lt; 16 (or 4), take default (or 4) instead
  * scripts: 55-scsi-sg3_id.rules remove outdated rule (bsc#1189297)
  * sg_lib: add sg_scsi_status_is_good(),
    sg_scsi_status_is_bad() and sg_get_zone_type_str()
  * pt_linux: fix verify(BytChk=0) which Linux SNTL translated
    to write, other SNTL cleanups
  * pt_linux_nvme: fix fua setting
  * pt: check_pt_file_handle() add return value of 5 for
- _service updates:
  * re-enable service, hadn't been used for 1.46 release
  * use upstream author's git repository, simplify versioning scheme
  * use obscpio format</changelog>
  <changelog author="mwilck@suse.com" date="1641297600">- Update to version 1.47+2.388b767:
  * rescan-scsi-bus.sh: apply fix for '-r' (boo#1194293)
  * _service: use openSUSE github repo again (with cherry-picks
    from upstream)
  * spec file: suppress commit ID in library version</changelog>
  <changelog author="mwilck@suse.com" date="1644321600">- Update to version 1.47+3.adb7276:
  * rescan-scsi-bus.sh: fix garbled output (bsc#1195621)</changelog>
  <changelog author="mwilck@suse.com" date="1645444800">- Update to version 1.47+4.82fb156:
  * rescan_scsi_bus.sh: restore numeric ordering of hosts (bsc#1196244)</changelog>
  <changelog author="mwilck@suse.com" date="1654084800">- Update to version 1.47+5.d13bc56:
  * rescan-scsi-bus.sh: add timeout parameter (bsc#1199248)</changelog>
  <changelog author="mwilck@suse.com" date="1674820800">- Update to version 1.47+13.75d23ac:
  * rescan-scsi-bus: speed large multipath scans (bsc#1207706)
  * rescan-scsi-bus.sh speed testonline()
  * rescan-scsi-bus.sh: add option --no-lip-scan
  * rescan-scsi-bus: sgdevice26: do not traverse sg class if scsi_device isnot added
  * rescan-scsi-bus.sh: fix handling of '-I &lt;secs&gt;' option</changelog>
  <changelog author="mwilck@suse.com" date="1697803200">- Update to version 1.47+15.b6898b8:
  * rescan-scsi-bus.sh: remove /tmp/rescan-scsi-mpath-info.txt
  (gh#doug-gilbert/sg3_utils#44)
  * rescan_scsi_bus.sh: fix multipath issue when called with -s and
  without -u (bsc#1215720, bsc#1216355)</changelog>
  <changelog author="mwilck@suse.com" date="1698408000">- Make sure initrd is rebuilt when sg3_utils is updated
  (bsc#1215772)</changelog>
</package>
<package pkgid="ba732292891c5261ca94b5d11be0d7fa8db6fc3ed04b8bdd22b14693da5dd003" name="libsigc++2" arch="src">
  <version epoch="0" ver="2.10.7" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.6.2:
  + slot: Handle auto-disconnection when a slot contains a slot
    (bgo#755003).
  + slot and signal: Correct move constructors and move
    assignments (bgo#756484).
  + trackable, slot_base, signal_base, connection: Add some
    noexcept specs (bgo#756484).
  + trackable, slot, signal: Remove noexcept from move operations
    (bgo#756484).
  + slot and signal: Add missing move constructors and move
    assignments (bgo#756484).
  + signal_impl: =delete copy and move operations (bgo#756484).
  + typed_slot_rep: =delete unimplemented copy and move operations
    (bgo#756484).
  + slot_rep: =delete copy and move operations (bgo#756484).</changelog>
  <changelog author="dimstar@opensuse.org" date="1454587200">- Add libsigc++-std-c11.patch: Add -std=c11 to CFLAGS in the .pc
  file. This allows other packages building against libsigc++ to
  be aware of the C11 requirement we bring. libsigc++ itself checks
  for the availability during configure, so it is safe to pass this
  requirement on.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.7.1:
  + signal: Add a moving connect() method, taking an rvalue
    reference to a slot (bgo#756484).
  + can_deduce_result_type_with_decltype: Rename the check()
    methods to checksize(). check() is a preprocessor macro in Mac
    OS X (bgo#759315).
  + Temporarily undefine the nil macro, if it's defined. nil is a
    preprocessor macro in Objective-C++ and Mac OS X (bgo#695235).
  + Correct the mem_functor&lt;&gt; declarations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457784000">- Update to version 2.7.2:
  + Deprecate sigc::ref() and sigc::reference_wrapper(), adding
    support instead for std::ref(), std::cref(), and
    std::reference_wrapper().
  + mem_fun(): Deprecate mem_fun(pointer, func). Leaving just
    mem_fun(reference, func) (bgo#763215).
  + Make all operator bool() explicit. (A C++11 feature).
  + Build:
  - Remove some now-unnecessary configure checks (bgo#762065).
  - Update MSVC project.
  + Documentation: Improve the documentation of mem_fun(), making
    it clear that mem_fun() does not return a slot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 2.8.0:
  + Documentation: Mention use with CMake.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078400">- No longer apply libsigc++-std-c11.patch for Tumbleweed, not
  needed anymore since GCC 6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078401">- Update to version 2.9.2:
  + Minor documentation improvements.
  + Some more minor uses of C++11 syntax.
- Changes from version 2.9.1:
  + slot: Allow sigc::slot&lt;R(Args...)&gt; syntax, like std::function,
    deprecating the sigc::slot&lt;R, Args...&gt; syntax (bgo#763393).
  + signal: Allow sigc::signal&lt;R(Args...)&gt; syntax, like
    std::function, deprecating the sigc::signal&lt;R, Args...&gt; syntax
    (bgo#763393).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467806400">- Update to version 2.9.3:
  + signal:
  - Deprecate slots().
  - Deprecate emit_reverse().
  + Benchmark: Update it and use boost::timer, and actually build
    it, but not built by default.
  + Build: Fix the build on MSVC++ 2013 and 2015 (bgo#767777).</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 2.10.0:
  + Fix silent builds (bgo#768797).</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- RPM group reassignment
- Drop --with-pic, we build no static libs for which it is meant</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add libsigc++2-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libsigc-2_0-0/NEWS(bsc#1209094,bsc#1209140).</changelog>
</package>
<package pkgid="431b6a7c8a504da84326013fc1572f9e78524d81229380f1d7e856762b8942bd" name="libsigc-2_0-0" arch="aarch64">
  <version epoch="0" ver="2.10.7" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.6.2:
  + slot: Handle auto-disconnection when a slot contains a slot
    (bgo#755003).
  + slot and signal: Correct move constructors and move
    assignments (bgo#756484).
  + trackable, slot_base, signal_base, connection: Add some
    noexcept specs (bgo#756484).
  + trackable, slot, signal: Remove noexcept from move operations
    (bgo#756484).
  + slot and signal: Add missing move constructors and move
    assignments (bgo#756484).
  + signal_impl: =delete copy and move operations (bgo#756484).
  + typed_slot_rep: =delete unimplemented copy and move operations
    (bgo#756484).
  + slot_rep: =delete copy and move operations (bgo#756484).</changelog>
  <changelog author="dimstar@opensuse.org" date="1454587200">- Add libsigc++-std-c11.patch: Add -std=c11 to CFLAGS in the .pc
  file. This allows other packages building against libsigc++ to
  be aware of the C11 requirement we bring. libsigc++ itself checks
  for the availability during configure, so it is safe to pass this
  requirement on.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.7.1:
  + signal: Add a moving connect() method, taking an rvalue
    reference to a slot (bgo#756484).
  + can_deduce_result_type_with_decltype: Rename the check()
    methods to checksize(). check() is a preprocessor macro in Mac
    OS X (bgo#759315).
  + Temporarily undefine the nil macro, if it's defined. nil is a
    preprocessor macro in Objective-C++ and Mac OS X (bgo#695235).
  + Correct the mem_functor&lt;&gt; declarations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457784000">- Update to version 2.7.2:
  + Deprecate sigc::ref() and sigc::reference_wrapper(), adding
    support instead for std::ref(), std::cref(), and
    std::reference_wrapper().
  + mem_fun(): Deprecate mem_fun(pointer, func). Leaving just
    mem_fun(reference, func) (bgo#763215).
  + Make all operator bool() explicit. (A C++11 feature).
  + Build:
  - Remove some now-unnecessary configure checks (bgo#762065).
  - Update MSVC project.
  + Documentation: Improve the documentation of mem_fun(), making
    it clear that mem_fun() does not return a slot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 2.8.0:
  + Documentation: Mention use with CMake.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078400">- No longer apply libsigc++-std-c11.patch for Tumbleweed, not
  needed anymore since GCC 6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078401">- Update to version 2.9.2:
  + Minor documentation improvements.
  + Some more minor uses of C++11 syntax.
- Changes from version 2.9.1:
  + slot: Allow sigc::slot&lt;R(Args...)&gt; syntax, like std::function,
    deprecating the sigc::slot&lt;R, Args...&gt; syntax (bgo#763393).
  + signal: Allow sigc::signal&lt;R(Args...)&gt; syntax, like
    std::function, deprecating the sigc::signal&lt;R, Args...&gt; syntax
    (bgo#763393).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467806400">- Update to version 2.9.3:
  + signal:
  - Deprecate slots().
  - Deprecate emit_reverse().
  + Benchmark: Update it and use boost::timer, and actually build
    it, but not built by default.
  + Build: Fix the build on MSVC++ 2013 and 2015 (bgo#767777).</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 2.10.0:
  + Fix silent builds (bgo#768797).</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- RPM group reassignment
- Drop --with-pic, we build no static libs for which it is meant</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add libsigc++2-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libsigc-2_0-0/NEWS(bsc#1209094,bsc#1209140).</changelog>
</package>
<package pkgid="28554b29cfa776e04c34e2a77b2e4b111b44adcb7e7de4cf7729be88977f811d" name="libsigc-2_0-0" arch="s390x">
  <version epoch="0" ver="2.10.7" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.6.2:
  + slot: Handle auto-disconnection when a slot contains a slot
    (bgo#755003).
  + slot and signal: Correct move constructors and move
    assignments (bgo#756484).
  + trackable, slot_base, signal_base, connection: Add some
    noexcept specs (bgo#756484).
  + trackable, slot, signal: Remove noexcept from move operations
    (bgo#756484).
  + slot and signal: Add missing move constructors and move
    assignments (bgo#756484).
  + signal_impl: =delete copy and move operations (bgo#756484).
  + typed_slot_rep: =delete unimplemented copy and move operations
    (bgo#756484).
  + slot_rep: =delete copy and move operations (bgo#756484).</changelog>
  <changelog author="dimstar@opensuse.org" date="1454587200">- Add libsigc++-std-c11.patch: Add -std=c11 to CFLAGS in the .pc
  file. This allows other packages building against libsigc++ to
  be aware of the C11 requirement we bring. libsigc++ itself checks
  for the availability during configure, so it is safe to pass this
  requirement on.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.7.1:
  + signal: Add a moving connect() method, taking an rvalue
    reference to a slot (bgo#756484).
  + can_deduce_result_type_with_decltype: Rename the check()
    methods to checksize(). check() is a preprocessor macro in Mac
    OS X (bgo#759315).
  + Temporarily undefine the nil macro, if it's defined. nil is a
    preprocessor macro in Objective-C++ and Mac OS X (bgo#695235).
  + Correct the mem_functor&lt;&gt; declarations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457784000">- Update to version 2.7.2:
  + Deprecate sigc::ref() and sigc::reference_wrapper(), adding
    support instead for std::ref(), std::cref(), and
    std::reference_wrapper().
  + mem_fun(): Deprecate mem_fun(pointer, func). Leaving just
    mem_fun(reference, func) (bgo#763215).
  + Make all operator bool() explicit. (A C++11 feature).
  + Build:
  - Remove some now-unnecessary configure checks (bgo#762065).
  - Update MSVC project.
  + Documentation: Improve the documentation of mem_fun(), making
    it clear that mem_fun() does not return a slot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 2.8.0:
  + Documentation: Mention use with CMake.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078400">- No longer apply libsigc++-std-c11.patch for Tumbleweed, not
  needed anymore since GCC 6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078401">- Update to version 2.9.2:
  + Minor documentation improvements.
  + Some more minor uses of C++11 syntax.
- Changes from version 2.9.1:
  + slot: Allow sigc::slot&lt;R(Args...)&gt; syntax, like std::function,
    deprecating the sigc::slot&lt;R, Args...&gt; syntax (bgo#763393).
  + signal: Allow sigc::signal&lt;R(Args...)&gt; syntax, like
    std::function, deprecating the sigc::signal&lt;R, Args...&gt; syntax
    (bgo#763393).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467806400">- Update to version 2.9.3:
  + signal:
  - Deprecate slots().
  - Deprecate emit_reverse().
  + Benchmark: Update it and use boost::timer, and actually build
    it, but not built by default.
  + Build: Fix the build on MSVC++ 2013 and 2015 (bgo#767777).</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 2.10.0:
  + Fix silent builds (bgo#768797).</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- RPM group reassignment
- Drop --with-pic, we build no static libs for which it is meant</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add libsigc++2-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libsigc-2_0-0/NEWS(bsc#1209094,bsc#1209140).</changelog>
</package>
<package pkgid="f092b3d726e36c7aa6f4f62a9dfb699c7ffa6cd3b77de939233f2a8b302de7f5" name="libsigc-2_0-0" arch="x86_64">
  <version epoch="0" ver="2.10.7" rel="150400.3.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1448193600">- Update to version 2.6.2:
  + slot: Handle auto-disconnection when a slot contains a slot
    (bgo#755003).
  + slot and signal: Correct move constructors and move
    assignments (bgo#756484).
  + trackable, slot_base, signal_base, connection: Add some
    noexcept specs (bgo#756484).
  + trackable, slot, signal: Remove noexcept from move operations
    (bgo#756484).
  + slot and signal: Add missing move constructors and move
    assignments (bgo#756484).
  + signal_impl: =delete copy and move operations (bgo#756484).
  + typed_slot_rep: =delete unimplemented copy and move operations
    (bgo#756484).
  + slot_rep: =delete copy and move operations (bgo#756484).</changelog>
  <changelog author="dimstar@opensuse.org" date="1454587200">- Add libsigc++-std-c11.patch: Add -std=c11 to CFLAGS in the .pc
  file. This allows other packages building against libsigc++ to
  be aware of the C11 requirement we bring. libsigc++ itself checks
  for the availability during configure, so it is safe to pass this
  requirement on.</changelog>
  <changelog author="zaitor@opensuse.org" date="1456833600">- Update to version 2.7.1:
  + signal: Add a moving connect() method, taking an rvalue
    reference to a slot (bgo#756484).
  + can_deduce_result_type_with_decltype: Rename the check()
    methods to checksize(). check() is a preprocessor macro in Mac
    OS X (bgo#759315).
  + Temporarily undefine the nil macro, if it's defined. nil is a
    preprocessor macro in Objective-C++ and Mac OS X (bgo#695235).
  + Correct the mem_functor&lt;&gt; declarations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1457784000">- Update to version 2.7.2:
  + Deprecate sigc::ref() and sigc::reference_wrapper(), adding
    support instead for std::ref(), std::cref(), and
    std::reference_wrapper().
  + mem_fun(): Deprecate mem_fun(pointer, func). Leaving just
    mem_fun(reference, func) (bgo#763215).
  + Make all operator bool() explicit. (A C++11 feature).
  + Build:
  - Remove some now-unnecessary configure checks (bgo#762065).
  - Update MSVC project.
  + Documentation: Improve the documentation of mem_fun(), making
    it clear that mem_fun() does not return a slot.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 2.8.0:
  + Documentation: Mention use with CMake.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078400">- No longer apply libsigc++-std-c11.patch for Tumbleweed, not
  needed anymore since GCC 6.</changelog>
  <changelog author="zaitor@opensuse.org" date="1466078401">- Update to version 2.9.2:
  + Minor documentation improvements.
  + Some more minor uses of C++11 syntax.
- Changes from version 2.9.1:
  + slot: Allow sigc::slot&lt;R(Args...)&gt; syntax, like std::function,
    deprecating the sigc::slot&lt;R, Args...&gt; syntax (bgo#763393).
  + signal: Allow sigc::signal&lt;R(Args...)&gt; syntax, like
    std::function, deprecating the sigc::signal&lt;R, Args...&gt; syntax
    (bgo#763393).</changelog>
  <changelog author="zaitor@opensuse.org" date="1467806400">- Update to version 2.9.3:
  + signal:
  - Deprecate slots().
  - Deprecate emit_reverse().
  + Benchmark: Update it and use boost::timer, and actually build
    it, but not built by default.
  + Build: Fix the build on MSVC++ 2013 and 2015 (bgo#767777).</changelog>
  <changelog author="dimstar@opensuse.org" date="1474372800">- Update to version 2.10.0:
  + Fix silent builds (bgo#768797).</changelog>
  <changelog author="jengelh@inai.de" date="1480939200">- RPM group reassignment
- Drop --with-pic, we build no static libs for which it is meant</changelog>
  <changelog author="dimstar@opensuse.org" date="1486641600">- Explicitly BuildRequire m4</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1543579200">- Update to version 2.10.1:
  + signal_impl::clear(): Don't clear the slot list during signal
    emission, to prevent a segfault. And add a test for this.
  + slot_base::set_parent(): Create a dummy slot_rep if necessary.
  + Avoid compiler warnings from function pointer conversions.
  + Build:
  - Make --disable-benchmark work.
  - Replace the Visual Studio project files with MSVC NMake
    project files.
  - Add MSVC_NMake/README.txt for Visual Studio builds.
  + Documentation:
  - signal_base: Warn against deletion during emission.
  - Update links in README, configure.ac, libsigcplusplus.doap.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1565784000">- Update to version 2.10.2:
  + This release is identical to 2.10.1, except for: Reference docs
    generated by Doxygen 1.8.11. Hopefully it will show up at
    https://developer.gnome.org/libsigc++/stable/</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1567857600">- Drop conditional libsigc++-std-c11.patch: No longer needed for
  any currently supported version of openSUSE.
- Use make_build macro.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1585137600">- Update to version 2.10.3:
  + Add Meson build, alongside the existing Autotools build.
  + Improve MSVC builds on Windows.
  + meson.build: Check if .git is a directory or file.
  + docs/reference/meson.build: Check if perl is found.
  + README: Describe building with Meson and Autotools.
  + Tests: Make test_track_obj.cc compile with clang++.</changelog>
  <changelog author="dimstar@opensuse.org" date="1601985600">- Update to version 2.10.4:
  + Build:
  - Meson build: Set default value of the 'warnings' option to
    'min'
  - NMake Makefiles: Several improvements
  - docs/reference/: Update for Doxygen &gt;= 1.8.16
  + Updated documentation.
- Switch to meson build system:
  + Add meson, and remove m4 BuildRequires.
  + Replace configure/make/make_install with
    meson/meson_build/meson_install macros.
  + No longer ship the htmldoc as part of the devel package.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1606305600">- Update to version 2.10.6:
  + Build: Meson build: Fix versioning on macOS.
  + Documentation:
  - sigc++/sigc++.h: Describe how to use libsigc++ with Meson.
  - Update links to the web page, now at
    libsigcplusplus.github.io/libsigcplusplus.</changelog>
  <changelog author="dimstar@opensuse.org" date="1621598400">- Update to version 2.10.7:
  + Meson build:
  - Make it possible to use sigc++ as a subproject.
  - Fix dependency on files generated from .h.m4 files.
  - No implicit_include_directories.
  - Make quiet installations possible.
  - Fix build as subproject without building documentation.
  + Documentation fixes.</changelog>
  <changelog author="qzhao@suse.com" date="1681732800">- Add libsigc++2-remove-unnecessary-executable-flag-from-file.patch:
  cancel executable permission for file
  /usr/share/doc/packages/libsigc-2_0-0/NEWS(bsc#1209094,bsc#1209140).</changelog>
</package>
<package pkgid="829bc7da0f20b00409a8fe42db6e6d8c497ece6b9ff5c111d272c1f3c03ab541" name="libslirp" arch="src">
  <version epoch="0" ver="4.7.0+44" rel="150300.15.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551], remove patch:
  * 0001-meson-remove-meson-dist-script.patch</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]
  =&gt; Remove patches:
  * libslirp-CVE-2021-3592.patch
  * libslirp-CVE-2021-3593.patch
  * libslirp-CVE-2021-3594.patch
  * libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773], remove patches:
  * libslirp-fix-dhcp-1.patch
  * libslirp-fix-dhcp-2.patch</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
</package>
<package pkgid="1f15553c69868d50ca65f626c2f6d2f68b3b3b2f7a765f3b5265041554de8acc" name="libslirp0" arch="aarch64">
  <version epoch="0" ver="4.7.0+44" rel="150300.15.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551], remove patch:
  * 0001-meson-remove-meson-dist-script.patch</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]
  =&gt; Remove patches:
  * libslirp-CVE-2021-3592.patch
  * libslirp-CVE-2021-3593.patch
  * libslirp-CVE-2021-3594.patch
  * libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773], remove patches:
  * libslirp-fix-dhcp-1.patch
  * libslirp-fix-dhcp-2.patch</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
</package>
<package pkgid="c83de2bdeb8cdb17bb0fe8c9055a43f25bdd747fb855246d7bc8d862cf1354e4" name="libslirp0" arch="s390x">
  <version epoch="0" ver="4.7.0+44" rel="150300.15.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551], remove patch:
  * 0001-meson-remove-meson-dist-script.patch</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]
  =&gt; Remove patches:
  * libslirp-CVE-2021-3592.patch
  * libslirp-CVE-2021-3593.patch
  * libslirp-CVE-2021-3594.patch
  * libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773], remove patches:
  * libslirp-fix-dhcp-1.patch
  * libslirp-fix-dhcp-2.patch</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
</package>
<package pkgid="abdb538c110b5de40dcf3439dd7e1a2fff1d241416394cb8fbc26edaa3b9609b" name="libslirp0" arch="x86_64">
  <version epoch="0" ver="4.7.0+44" rel="150300.15.2"/>
  <changelog author="appleonkel@opensuse.org" date="1587470400">- Initial package, adapted specfile from Fedora to work on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1588593600">- Update to 4.3.0
- Fix use-afte-free in ip_reass() (CVE-2020-1983)</changelog>
  <changelog author="rhafer@suse.com" date="1594209600">- Update to 4.3.1 (bsc#1172380)
  - A silent truncation could occur in `slirp_fmt()`, which will
    now print a critical message. See also #22.
  - CVE-2020-10756 - Drop bogus IPv6 messages that could lead to
    data leakage.  See !44 and !42.
  - Fix win32 builds by using the SLIRP_PACKED definition.
  - Various coverity scan errors fixed. !41
  - Fix new GCC warnings. !43
- Packaging changes
  - Enable "set_version" source service in _service file
  - Move "tar" and "recompress" service to "buildtime" as outlined
    in the OBS user guide
  - Enable "package-meta" as the libslirp build process now
    requires access to the git metadata.</changelog>
  <changelog author="rbrown@suse.com" date="1610107200">- Update to version 4.4.0:
  * Release v4.4.0
  * socket: consume empty packets
  * slirp: check pkt_len before reading protocol header
  * Remove the QEMU-special make build-system
  * Add DNS resolving for iOS
  * meson: support compiling as subproject
  * meson: remove meson-dist script
  * Add G_GNUC_PRINTF to local function slirp_vsnprintf
  * sosendoob: better document what urgc is used for
  * .gitlab-ci: add a Coverity stage
  * TCPIPHDR_DELTA: Fix potential negative value
  * udp, udp6, icmp, icmp6: Enable forwarding errors on Linux
  * icmp, icmp6: Add icmp_forward_error and icmp6_forward_error
  * udp, udp6, icmp: handle TTL value
  * ip_stripoptions use memmove
  * changelog: post-release
- fixes [bsc#1201551], remove patch:
  * 0001-meson-remove-meson-dist-script.patch</changelog>
  <changelog author="novell@tower-net.de" date="1626436800">- Update to version 4.6.0:
  * build-sys: forgot to bump version to 4.6.0
  * changelog: post-release
  * Release v4.6.0
  * udp: check upd_input buffer size
  * tftp: introduce a header structure
  * tftp: check tftp_input buffer size
  * upd6: check udp6_input buffer size
  * bootp: check bootp_input buffer size
  * bootp: limit vendor-specific area to input packet memory buffer
  * Revert "Set macOS deployment target to macOS 10.4"
- fixes CVE-2021-3592 [bsc#1187364], CVE-2021-3593 [bsc#1187365],
    CVE-2021-3594 [bsc#1187367],CVE-2021-3595[bsc#1187366]
  =&gt; Remove patches:
  * libslirp-CVE-2021-3592.patch
  * libslirp-CVE-2021-3593.patch
  * libslirp-CVE-2021-3594.patch
  * libslirp-CVE-2021-3595.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1626868800">- Update to version 4.6.1:
  * Release v4.6.1
  * Fix "DHCP broken in libslirp v4.6.0"
- fixes [bsc#1198773], remove patches:
  * libslirp-fix-dhcp-1.patch
  * libslirp-fix-dhcp-2.patch</changelog>
  <changelog author="fvogt@suse.com" date="1626955200">- Update to version 4.6.1+7:
  * Haiku: proper path to resolv.conf for DNS server
  * Fix for Haiku
  * dhcp: Always send DHCP_OPT_LEN bytes in options
- Commit _servicedata to fix changelogs
- Don't include .git in source archive, not needed
- Run set_version together with obs_scm</changelog>
  <changelog author="fvogt@suse.com" date="1658145600">- Update to version 4.7.0+44 (current git master):
  * Fix vmstate regression
  * msvc: use char* for pointer arithmetic
  * Align outgoing packets
  * Bump incoming packet alignment to 8 bytes
  * msvc: fix some gcc-specific pragma warnings
  * msvc: enable vmstate code on !gnuc
  * vmstate: only enable when building under GNU C
  * ncsitest: Fix build with msvc
  * Avoid running git-version-gen when building with MS VC
  * windows: export symbols
  * win32: replace strcasecmp with g_ascii_strcasecmp
  * Drop spurious inline
  * Avoid returning void
  * Fix arithmetic on void *
  * Avoid using ##__VA_ARGS__ gcc extension
  * Fix bitfields order for MSVC
  * Separate out SLIRP_PACKED to SLIRP_PACKED_BEGIN/END
  * Do not use ssize_t on Windows
  * Do not include unistd.h on windows, it does not have it
  * Accept build-aux/git-version-gen failing to run
  * container_of: avoid using __extension__
  * ncsi: Add Mellanox Get Mac Address handler
  * slirp: Add out-of-band ethernet address
  * ncsi: Add OEM command handler
  * ncsi: Add basic test for Get Version ID response
  * ncsi: Use response header for payload length
  * ncsi: Pass command header to response handlers
  * src/slirp.h: Bump the minimum Windows version to Windows 7
  * ncsi: Add Get Version ID command
  * ncsi: Pass Slirp structure to response handlers
  * slirp: Add manufacturer's ID
  * Add support for Haiku to meson.build
  * meson: add extra warnings
  * win32: declare some local functions as static
  * Include &lt;sys/socket.h&gt; and &lt;arpa/inet.h&gt; for AF_INET6 and inet_pton
  * Release v4.7.0
  * bump ABI version and age
  * slirp: invoke client callback before creating timers
  * pingtest: port to timer_new_opaque
  * introduce timer_new_opaque callback
  * introduce slirp_timer_new wrapper
  * icmp6: make ndp_send_ra static
  * Add sanitizers CI runs
  * socket: Handle ECONNABORTED from recv
  * bootp: fix g_str_has_prefix warning/critical
  * slirp: Don't duplicate packet in tcp_reass
  * Rename insque/remque -&gt; slirp_[ins|rem]que
  * mbuf: Use SLIRP_DEBUG to enable mbuf debugging instead of DEBUG
  * Replace inet_ntoa() with safer inet_ntop()
  * Add VMS_END marker
  * bootp: add support for UEFI HTTP boot
  * IPv6 DNS proxying support
  * Add missing scope_id in caching
  * Drop fixed TODO
  * socket: Move closesocket(so-&gt;s_aux) to sofree
  * socket: Check so_type instead of so_tcpcb for Unix-to-inet translation
  * socket: Add s_aux field to struct socket for storing auxilliary socket
  * socket: Initialize so_type in socreate
  * socket: Allocate Unix-to-TCP hostfwd port from OS by binding to port 0
  * Allow to disable internal DHCP server
  * slirp_pollfds_fill: Explain why dividing so_snd.sb_datalen by two
  * CI: run integration tests with slirp4netns
  * socket: Check address family for Unix-to-inet accept translation
  * socket: Add debug args for tcpx_listen (inet and Unix sockets)
  * socket: Restore original definition of fhost
  * socket: Move &lt;sys/un.h&gt; include to socket.h
  * Support Unix sockets in hostfwd
  * resolv: fix IPv6 resolution on Darwin
  * Use the exact sockaddr size in getnameinfo call
  * Initialize sin6_scope_id to zero
  * slirp_socketpair_with_oob: Connect pair through 127.0.0.1
  * resolv: fix memory leak when using libresolv
  * pingtest: Add a trivial ping test
  * icmp: Support falling back on trying a SOCK_RAW socket</changelog>
  <changelog author="pgajdos@suse.com" date="1668168000">- added patches
  fix https://gitlab.freedesktop.org/slirp/libslirp/-/issues/64
  + libslirp-semicolon.patch</changelog>
</package>
<package pkgid="55474987f2de509237bb5f42c9d91d7acff95fef1d0f98f27805fb61979381b5" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="ac91e4348b5fb8df8ea21aaccba927422fd27e995b3db5385d9800cd6bf4abe4" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="bde0c7efd42d2dfb74262bbb8cf39df6d64f142cb9fd48da638555bf936f13b1" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="2eea3e1e4f890fc7789bf63f629a21bdd86f3a2c3620b843a4d9dc273caad6c8" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="933cf1e6d3707b5e8a01284dfc309d5a0370808d58f3a3c3f4a0f4d0456d94ae" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="27abcac3e8b566310ceb83ed936d06f7839af8475e105be6a887ae5926db43c1" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="cd869e9236960b0da08151301cf8200b82d1fd986df1a3e49c310ad9b25f66fd" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="b1bd94c6c19c9d11d138e438723988feaf853cf00b5133397a3aa3e7d7bb7417" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="7ddf1a09134b71bb9c2052d33e6b0533c9a62aab55c19fd24bff5cc883d13598" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="17066283ded3b98aba4bd0d657f7781e0a46f9f9bc503f0df5194740d1f3dba7" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="f31d272c0ea0d7e16465cc829bf28aa8547ceff27429e83a010a213d4896df79" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="cfb814dcdf40f800d6f83b8572ac24346f23da7c697f23d672df50f50ca4284b" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="c1f8bcaba8cbcb505eba272fb975496df3e9186063e491d04ff3340f937c2df6" name="libsmartcols1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="5d48c2e07a269a07d16926efa0e83b84198e05448c83cb4af92c98a7bdc4f95f" name="libsmartcols1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="c5d2618074cb7b03dd5a5ddddf127fc34bde8a5e71129c7f8e69c93b0b247670" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="0e971d190e3bf9dbbc32e4cc14f3c688d785ea3bf9c0925cd7263ed818825726" name="libsnapper5" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="56ad9e35d7f598ecaf35544f3dc89996bb9222968c2ddc78a78d20619b72827b" name="libsnapper5" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="0c3ec156fdc6225dc4d3c11a6d4811301be5582559beb24f243ac400784cd076" name="libsnapper5" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1586174400">- updated translations (bsc#1149754)
- generate dsc file for Ubuntu 19.10</changelog>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
</package>
<package pkgid="2d2aa2867710b163cc30d88bcf6ab8100084ec76553f52f8a97225db1c4dfb9b" name="libsnapper5" arch="aarch64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="f70601d0c885004b9dfc35ea748cb8c2103e3b8798adfc3be1d511d080adecc1" name="libsnapper5" arch="s390x">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="b8a8130e70ae5caa1ac186af6e6760de05437221799cc23820196ee29dc1a1f1" name="libsnapper5" arch="x86_64">
  <version epoch="0" ver="0.8.16" rel="150300.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1592308800">- special rollback for transactional server (bsc#1172273)
- version 0.8.10</changelog>
  <changelog author="aschnell@suse.com" date="1594641600">- added error handing for failed ambit detection (bsc#1174038)
- version 0.8.11</changelog>
  <changelog author="aschnell@suse.com" date="1595505600">- fixed error when using mksubvolume to create /tmp (bsc#1174401)
- version 0.8.12</changelog>
  <changelog author="aschnell@suse.com" date="1598529600">- call fsync after writing snapshot info file (bsc#1078336)
- version 0.8.13</changelog>
  <changelog author="aschnell@suse.com" date="1598616000">- improved error messages for wrong command line options and
  arguments (bsc#1150156)</changelog>
  <changelog author="aschnell@suse.com" date="1598875200">- fix LVM setup for volume groups and logical volumes with one
  character long names (gh#openSUSE/snapper#465)</changelog>
  <changelog author="lnussel@suse.com" date="1598961600">- activate snapperd using systemd service</changelog>
  <changelog author="aschnell@suse.com" date="1599220800">- package new snapperd.service file on Debian based distributions
  (gh#openSUSE/snapper#557)</changelog>
  <changelog author="aschnell@suse.com" date="1600776000">- added option to cleanup to make requested free space available
  (jsc#SLE-15765)
- version 0.8.14</changelog>
  <changelog author="aschnell@suse.com" date="1605700800">- use C++11 regexes instead of own regcomp/regexec wrapper class
  (see gh#openSUSE/snapper#583)</changelog>
  <changelog author="aschnell@suse.com" date="1605787200">- state in man-pages that ext4 support is discontinued
  (gh#openSUSE/snapper#331)</changelog>
  <changelog author="aschnell@suse.com" date="1606219200">- do not override passwd after getpwuid_r et.al. calls
  (gh#openSUSE/snapper#589)</changelog>
  <changelog author="aschnell@suse.com" date="1606996800">- fixed compilation with --disable-btrfs (gh#openSUSE/snapper#505)</changelog>
  <changelog author="aschnell@suse.com" date="1607083200">- in systemd-helper continue with other configs if one config is
  broken (gh#openSUSE/snapper#495)</changelog>
  <changelog author="aschnell@suse.com" date="1608206400">- added option to abbreviate columns in table (see
  gh#openSUSE/snapper#268)
- version 0.8.15</changelog>
  <changelog author="aschnell@suse.com" date="1611576000">- fixed testsuite for equal-date (gh#openSUSE/snapper#526)</changelog>
  <changelog author="aschnell@suse.com" date="1615377600">- updated translations (bsc#1149754)</changelog>
  <changelog author="aschnell@suse.com" date="1616155200">- fixed creating root config (root prefix handling)
  (gh#openSUSE/snapper#627)</changelog>
  <changelog author="aschnell@suse.com" date="1681387200">- avoid stale btrfs qgroups on transactional systems (bsc#1210151)
  * added pr805.patch
- wait for existing btrfs quota rescans to finish (bsc#1210150)
  * added pr790.patch</changelog>
  <changelog author="aschnell@suse.com" date="1686916800">- improved responsiveness of snapperd when a btrfs quota rescan
  is running (see bsc#1211459)
  * added pr821.patch</changelog>
</package>
<package pkgid="23db2391cf1316850aa08f58fd2f67e2b2f86cbba58fd8b8e057f9c80387ff8f" name="libsnmp40" arch="aarch64">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="185457179b6e38ae6b69a25b704d2ef1c4f78934116f4055263f2256ab6ebddf" name="libsnmp40" arch="s390x">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="f68288386bd207c48fde4a6619c4535c03f418ab1eeaa87e9218bc146ffafd90" name="libsnmp40" arch="x86_64">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="41af0ae32652faeaed55377cad3397a6b6d6462db4f9f0bb006a9bfe788c9f08" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="8569cc9b811a52b8994824f42f7cde4dcec057adbd93398695653ee269f47d1a" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0fb587f369b1f35299b3fdb60ab99de0661d35e0df8613229dd1ba029d732337" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="5c9509e2eaec79fa9db1272a4acae15c98293a4a49774638ba0eabe565e35bd7" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="b167dfd410bb37beb9fee374e4fdf54084a1ed9724529cebd56473c8bb896882" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="d7d8f46ca0c01c68bcf9ec5c6d14e136278b0c63488e9a1e41115b10e06bb73e" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="36a3221e819a22b23b63a057374b9a3dc4a1ebb74966822add9a25bde62acdb7" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="d1b914581a545fc87ac00a8fe17d7b8afd63ff26e2ddfc51ed1cefc334b7dd64" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="055b225311a325d8f5b20fda22237e14b40c64e12e606607b77f316c1a4dc2e0" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="8cc7d7572bd8a0b878e9b42b6f0c55067bc96e2c1c22eb712f157a6ba4a9e1cb" name="libsoftokn3" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a1389297f6c276d335fbbd7e3cb947e5e46efeca64b7efe6503f958e4f92aa34" name="libsoftokn3" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="04001384cdf5103853f227b4688935e338c3755ecd7c2b564afbd0d0e5970f36" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="22e75b29c21842d7092fdc7107ea1535dda91ef937df7c798e851bbf0c4f8e6b" name="libsoftokn3-hmac" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="710356d65a854de5397cbf969f97292a79651d865d6b6001c50262bc9344bb83" name="libsoftokn3-hmac" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="528d53fa3b6dacbb45a3b3073432deb25ed994ffef417e2ea000be2ad5cb6486" name="libsoftokn3-hmac" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="f412f7242f97835b4542b01cea6df1b4af2adaa213e53cdb0687359f19d191b9" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="a801bfc81e357c770141cc06b58d8221a66a86eea75725f44bed5f9cb96fa3db" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="cf829c93297e2b56c7ee5c741d6646d665e73d5c613ef85bb14098af5e4602ff" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="5e1bdb996ba450c01addfeace7e8cba826c1e3bbdffaee7528ef06de8a4b90dd" name="libsolv" arch="src">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="d2e7e89c6e6cb80b789eda59041bebef3b00a8f22463d8e4bfc0329a2608a028" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="8802942eba908792ff54d4d280c75060c0f7b0e4aab2022a6edeead43e135ca0" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="f85c7e284958c305634a6f5cae0c354def2fcd4c34ae0c5e0d24e9cbe7ee8a3e" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.6.4"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="2e960c5180c452e93fa8750f783f68bccbcc78ac4047a325cf1a2d0b04efa87e" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="51d22ccd6f5c3ac9bfa5e4ad4c12b34f37617bbc9a707494fec2187e4cd8fdc0" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="10b19f5c0818eca003b01c9d33294184c00ded8caa50b7163ceebd32cc7ab175" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.24" rel="150400.3.8.1"/>
  <changelog author="mls@suse.de" date="1575979200">- build with -DENABLE_RPMDB_LIBRPM=1 on SUSE to support
  multiple rpm database backends</changelog>
  <changelog author="mls@suse.de" date="1576756800">- fix solv_zchunk decoding error if large chunks are used
  [bnc#1159314]</changelog>
  <changelog author="mls@suse.de" date="1579694400">- fixed solv_zchunk decoding error if large chunks are used
- treat retracted pathes as irrelevant
- made add_update_target work with multiversion installs
- bump version to 0.7.11</changelog>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
</package>
<package pkgid="4f0852d9b9ff48741c3da8d7b44bad8f672de52f5eb3156210b8a4a675e76bb0" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="aa4364228ebbb4754410bdf9060636b46c0e26162d70cd97cfef17fcca981fd6" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="98f58c71f9032133705c17ee474ac35a66a4280de77df4b9ae70f5322e82f534" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.27" rel="150400.3.11.2"/>
  <changelog author="mls@suse.de" date="1587384000">- fix ruleinfo of complex dependencies returning the wrong origin
- bump version to 0.7.12</changelog>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
</package>
<package pkgid="c590fc076bd5c11e879b6e7498752ee67a83b5b7994ff20dd142035ccb763885" name="libsolv-tools" arch="aarch64">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="407d260d012f8f84cf1ab51689c7d16a5da553e368fc31f72a4a45dcc7bdbbab" name="libsolv-tools" arch="s390x">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="5ae410f51c1b21a2b7ff385e932f9b9495fa3ead3cd744dc6a91b6b697bea7b8" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.7.28" rel="150400.3.16.2"/>
  <changelog author="mls@suse.de" date="1587729600">- Fix solvable swapping messing up idarrays
- bump version to 0.7.13</changelog>
  <changelog author="mls@suse.de" date="1590580800">- Support blacklisted packages in solver_findproblemrule()
  [bnc#1172135]
- Support rules with multiple negative literals in choice rule
  generation
- bump version to 0.7.14</changelog>
  <changelog author="mls@suse.de" date="1590667200">- Enable zstd compression support for sle15-sp2</changelog>
  <changelog author="ma@suse.de" date="1592913600">- Enable zstd compression support for sle15</changelog>
  <changelog author="mls@suse.de" date="1599825600">- fix deduceq2addedmap clearing bits outside of the map
- conda: feature depriorization first
- conda: fix startswith implementation
- move find_update_seeds() call in cleandeps calculation
- set SOLVABLE_BUILDHOST in rpm and rpmmd parsers
- new testcase_mangle_repo_names() function
- new solv_fmemopen() function
- bump version to 0.7.15</changelog>
  <changelog author="mls@suse.de" date="1601899200">- make testcase_mangle_repo_names deal correctly with freed repos
  [bnc#1177238]</changelog>
  <changelog author="mls@suse.de" date="1603195200">- do not ask the namespace callback for splitprovides when writing
  a testcase
- fix add_complex_recommends() selecting conflicted packages in
  rare cases leading to crashes
- improve choicerule generation so that package updates are
  prefered in more cases
- bump version to 0.7.16</changelog>
  <changelog author="mls@suse.de" date="1611057600">- repo_write: fix handling of nested flexarray
- improve choicerule generation a bit more to cover more cases
- harden testcase parser against repos being added too late
- support python-3.10
- check %_dbpath macro in rpmdb code
- handle default/visible/langonly attributes in comps parser
- support multiple collections in updateinfo parser
- add '-D' option in rpmdb2solv to set the dbpath
- bump version to 0.7.17</changelog>
  <changelog author="mls@suse.de" date="1616760000">- fixed regex code on win32
- fixed memory leak in choice rule generation
- repo_add_conda: add flag to skip v2 packages
- bump version to 0.7.18</changelog>
  <changelog author="mls@suse.de" date="1617796800">- fix rare segfault in resolve_jobrules() that could happen
  if new rules are learnt
- fix a couple of memory leaks in error cases
- fix error handling in solv_xfopen_fd()
- bump version to 0.7.19</changelog>
  <changelog author="dimstar@opensuse.org" date="1627646400">- Disable python2 usage on suse_version &gt;= 1550 by default (still
  possible to use osc build --with=python).</changelog>
  <changelog author="mls@suse.de" date="1632571200">- fix misparsing of '&amp;' in attributes with libxml2
- choice rules: treat orphaned packages as newest [bsc#1190465]
- fix compatibility with Python 3.10
- new SOLVER_EXCLUDEFROMWEAK job type
- support for environments in comps parser
- bump version to 0.7.20</changelog>
  <changelog author="mls@suse.de" date="1645790400">- fix segfault on conflict resolution when using bindings
- fix split provides not working if the update includes a forbidden
  vendor change
- support strict repository priorities
  new solver flag: SOLVER_FLAG_STRICT_REPO_PRIORITY
- support zstd compressed control files in debian packages
- add an ifdef allowing to rename Solvable dependency members
  ("requires" is a keyword in C++20)
- support setting/reading userdata in solv files
  new functions: repowriter_set_userdata, solv_read_userdata
- support queying of the custom vendor check function
  new function: pool_get_custom_vendorcheck
- support solv files with an idarray block
- allow accessing the toolversion at runtime
- bump version to 0.7.21</changelog>
  <changelog author="mls@suse.de" date="1647864000">- reworked choice rule generation to cover more usecases
- support SOLVABLE_PREREQ_IGNOREINST in the ordering code
  [bsc#1196514]
- support parsing of Debian's Multi-Arch indicator
- bump version to 0.7.22</changelog>
  <changelog author="mls@suse.de" date="1670932800">- fix "keep installed" jobs not disabling "best update" rules
- do not autouninstall suse ptf packages
- ensure duplinvolvedmap_all is reset when a solver is reused
- special case file dependencies in the testcase writer
- support stringification of multiple solvables
- new weakdep introspection interface similar to ruleinfos
- support decision reason queries
- support merging of related decissions
- support stringification of ruleinfo, decisioninfo and decision reasons
- support better info about alternatives
- new '-P' and '-W' options for testsolv
- bump version to 0.7.23</changelog>
  <changelog author="mls@suse.de" date="1681387200">- handle learnt rules in solver_alternativeinfo()
- support x86_64_v[234] architecture levels
- implement decision sorting for package decisionlists
- add back findutils requires for the libsolv-tools packagse
  [bsc#1195633]
- bump version to 0.7.24</changelog>
  <changelog author="mls@suse.de" date="1694692800">- support complex deps in SOLVABLE_PREREQ_IGNOREINST
- fix minimization not prefering installed packages in some cases
- reduce memory usage in repo_updateinfoxml
- fix lock-step interfering with architecture selection
- fix choice rule handing for package downgrades
- fix complex dependencies with an "else" part sometimes leading
  to unsolved dependencies
- bump version to 0.7.25</changelog>
  <changelog author="mls@suse.de" date="1699358400">- fix evr roundtrip in testcases
- do not use deprecated headerUnload with newer rpm versions
- bump version to 0.7.26</changelog>
  <changelog author="mls@suse.de" date="1700740800">- add zstd support for the installcheck tool
- add putinowndirpool cache to make file list handling in
  repo_write much faster
- bump version to 0.7.27</changelog>
  <changelog author="mls@suse.de" date="1706270400">- build for multiple python versions [jsc#PED-6218]
- bump version to 0.7.28</changelog>
</package>
<package pkgid="c8f42c3b8cd99fa476f5118dde44f94f9dd3eb325b5c8b5c2799f8386eeb9d3d" name="libsqlite3-0" arch="aarch64">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="50c5018e9bf269b5a33e397723ff50e05b51cb3b879f142680c93c228c5aa03b" name="libsqlite3-0" arch="s390x">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="58729b4c3252f5a5dd9567356397b0df83c604d8ba8c462ae34821f5e00691fa" name="libsqlite3-0" arch="x86_64">
  <version epoch="0" ver="3.44.0" rel="150000.3.23.1"/>
  <changelog author="astieger@suse.com" date="1523448000">- update to 3.23.1:
  * Fix two problems in the new LEFT JOIN strength reduction
    optimization
  * Fix misbehavior of the FTS5 xBestIndex method
  * Fix a harmless reference to an uninitialized virtual machine
    register
  * Fix the eval.c extension so that it works with PRAGMA
    empty_result_callbacks=ON
  * Fix the generate_series virtual table so that it correctly
    returns no rows if any of its constraints are NULL
  * Performance enhancements in the parser</changelog>
  <changelog author="max@suse.com" date="1552996800">- CVE-2018-20346, bsc#1119687: Upgrade to the most recent version
  to fix a remote code execution vulnerability in FTS3 (Magellan).
- Drop sqlite-fts5-link.patch and do it in the spec file instead.
- Version 3.27.2:
  * Add the VACUUM INTO command
  * Issue an SQLITE_WARNING message on the error log if a
    double-quoted string literal is used
  * Add the remove_diacritics=2 option to FTS3 and FTS5.
  * Add  the SQLITE_PREPARE_NO_VTAB option to sqlite3_prepare_v3().
    Use that option to prevent circular references to shadow tables
    from causing resource leaks.
  * Enhancements to the sqlite3_deserialize() interface
  * Enhancements to the CLI, mostly to support testing and debugging
    of the SQLite library itself
  * Increased robustness against malicious SQL that is run against
    a maliciously corrupted database
- Version 3.26.0:
  * Optimization: When doing an UPDATE on a table with indexes on
    expressions, do not update the expression indexes if they do
    not refer to any of the columns of the table being updated.
  * Allow the xBestIndex() method of virtual table implementations
    to return SQLITE_CONSTRAINT to indicate that the proposed query
    plan is unusable and should not be given further consideration.
  * Added the SQLITE_DBCONFIG_DEFENSIVE option which disables the
    ability to create corrupt database files using ordinary SQL.
  * Added support for read-only shadow tables when the
    SQLITE_DBCONFIG_DEFENSIVE option is enabled.
  * Added the PRAGMA legacy_alter_table command, which if enabled
    causes the ALTER TABLE command to behave like older version of
    SQLite (prior to version 3.25.0) for compatibility.
  * Added PRAGMA table_xinfo that works just like PRAGMA table_info
    except that it also shows hidden columns in virtual tables.
  * Added the explain virtual table as a run-time loadable
    extension.
  * Add a limit counter to the query planner to prevent excessive
    sqlite3_prepare() times for certain pathological SQL inputs.
  * Added support for the sqlite3_normalized_sql() interface, when
    compiling with SQLITE_ENABLE_NORMALIZE.
  * Enhanced triggers so that they can use table-valued functions
    that exist in schemas other than the schema where the trigger
    is defined.
  * Improvements to the ".help" command in the CLI.
  * The SQLITE_HISTORY environment variable, if it exists,
    specifies the name of the command-line editing history file.
  * The --deserialize option associated with opening a new database
    in the CLI cause the database file to be read into memory and
    accessed using the sqlite3_deserialize() API. This simplifies
    running tests on a database without modifying the file on disk.
- Version 3.25.2:
  * Add the PRAGMA legacy_alter_table=ON command that causes the
    "ALTER TABLE RENAME" command to behave as in 3.24.0 and earlier
  * Fix issue with some expressions with windows functions in views
- Version 3.25.1:
  * Avoid false-positive error checks on ALTER TABLE
  * Further ORDER BY LIMIT optimization fixes for window functions
- Version 3.25.0:
  * Add support for window functions
  * Add support for renaming columns within a table
  * Query optimizer improvements
  * slightly better concurrency in multi-threaded environments
  * The ORDER BY LIMIT optimization might have caused an infinite
    loop in the byte code of the prepared statement under very
    obscure circumstances, due to a confluence of minor defects in
    the query optimizer
- Version 3.24.0:
  * Add support for PostgreSQL-style UPSERT
  * Add support for auxiliary columns in r-tree tables
  * Add C-language APIs for discovering SQL keywords used by SQLite
  * Add C-language APIs for dynamic strings based on sqlite3_str
  * Enhance ALTER TABLE so that it recognizes "true" and "false" as
    valid arguments to DEFAULT
  * Add the sorter-reference optimization as a compile-time option
  * Improve the format of the EXPLAIN QUERY PLAN raw output, so that
  it gives better information about the query plan and about the
    relationships between the various components of the plan
  * Added the SQLITE_DBCONFIG_RESET_DATABASE option to the
    sqlite3_db_config() API.
  * Automatically intercept the raw EXPLAIN QUERY PLAN output an
    reformat it into an ASCII-art graph.
  * Lines that begin with "#" and that are not in the middle of an
    SQL statement are interpreted as comments
  * Add the --append option to the ".backup" command
  * Add the ".dbconfig" command
  * various performance improvements
  * various bug fixes</changelog>
  <changelog author="max@suse.com" date="1555502400">- Upgrade to 3.28.0:
  * CVE-2019-9936, bsc#1130326: running fts5 prefix queries inside
    a transaction could trigger a heap-based buffer over-read.
  * CVE-2019-9937, bsc#1130325: interleaving reads and writes in a
    single transaction with an fts5 virtual table will lead to a
    NULL Pointer Dereference.
  * Enhanced window functions
  * Enhanced VACUUM INTO so that it works for read-only databases.
  * New query optimizations.
  * Added the sqlite3_value_frombind() API for determining if the
    argument to an SQL function is from a bound parameter.
  * Security and compatibilities enhancements to fts3_tokenizer().
  * Improved robustness against corrupt database files.</changelog>
  <changelog author="max@suse.com" date="1568116800">- bsc#1150137, CVE-2019-16168, sqlite3-CVE-2019-16168.patch:
  Improper validation of qlite_stat1 sz field leads to division by
  zero.</changelog>
  <changelog author="max@suse.com" date="1625054400">- Sync version 3.36.0 from Factory to implement jsc#SLE-16032.
- Obsoletes sqlite3-CVE-2019-16168.patch.
- The following CVEs have been fixed in upstream releases up to
  this point, but were not mentioned in the change log so far:
  * bsc#1173641, CVE-2020-15358: heap-based buffer overflow in
    multiSelectOrderBy due to mishandling of query-flattener
    optimization
  * bsc#1164719, CVE-2020-9327: NULL pointer dereference and
    segmentation fault because of generated column optimizations in
    isAuxiliaryVtabOperator
  * bsc#1160439, CVE-2019-20218: selectExpander in select.c proceeds
    with WITH stack unwinding even after a parsing error
  * bsc#1160438, CVE-2019-19959: memory-management error via
    ext/misc/zipfile.c involving embedded '\0' input
  * bsc#1160309, CVE-2019-19923: improper handling  of  certain uses
    of SELECT DISTINCT in flattenSubquery may lead to null pointer
    dereference
  * bsc#1159850, CVE-2019-19924: improper error handling in
    sqlite3WindowRewrite()
  * bsc#1159847, CVE-2019-19925: improper handling of NULL pathname
    during an update of a ZIP archive
  * bsc#1159715, CVE-2019-19926: improper handling  of certain
    errors during parsing  multiSelect in select.c
  * bsc#1159491, CVE-2019-19880: exprListAppendList in window.c
    allows attackers to trigger an invalid pointer dereference
  * bsc#1158960, CVE-2019-19603: during handling of CREATE TABLE
    and CREATE VIEW statements, does not consider confusion with
    a shadow table name
  * bsc#1158959, CVE-2019-19646: pragma.c mishandles NOT NULL in an
    integrity_check PRAGMA command in certain cases of generated
    columns
  * bsc#1158958, CVE-2019-19645: alter.c allows attackers to trigger
    infinite recursion via certain types of self-referential views
    in conjunction with ALTER TABLE statements
  * bsc#1158812, CVE-2019-19317: lookupName in resolve.c omits bits
    from the colUsed bitmask in the case of a generated column,
    which allows attackers to cause a denial of service
  * bsc#1157818, CVE-2019-19244: sqlite3,sqlite2,sqlite: The
    function sqlite3Select in select.c allows a crash if a
    sub-select uses both DISTINCT and window functions, and also
    has certain ORDER BY usage
  * bsc#928701, CVE-2015-3415: sqlite3VdbeExec comparison operator
    vulnerability
  * bsc#928700, CVE-2015-3414: sqlite3,sqlite2: dequoting of
    collation-sequence names
  * CVE-2020-13434 boo#1172115: integer overflow in
    sqlite3_str_vappendf
  * CVE-2020-13630 boo#1172234: use-after-free in fts3EvalNextRow
  * CVE-2020-13631 boo#1172236: virtual table allowed to be renamed
    to one of its shadow tables
  * CVE-2020-13632 boo#1172240: NULL pointer dereference via
    crafted matchinfo() query
  * CVE-2020-13435: Malicious SQL statements could have crashed the
    process that is running SQLite (boo#1172091)</changelog>
  <changelog author="max@suse.com" date="1638273600">- SQLite3 3.37.0:
  * STRICT tables provide a prescriptive style of data type
    management, for developers who prefer that kind of thing.
  * When adding columns that contain a CHECK constraint or a
    generated column containing a NOT NULL constraint, the
    ALTER TABLE ADD COLUMN now checks new constraints against
    preexisting rows in the database and will only proceed if no
    constraints are violated.
  * Added the PRAGMA table_list statement.
  * Add the .connection command, allowing the CLI to keep multiple
    database connections open at the same time.
  * Add the --safe command-line option that disables dot-commands
    and SQL statements that might cause side-effects that extend
    beyond the single database file named on the command-line.
  * CLI: Performance improvements when reading SQL statements that
    span many lines.
  * Added the sqlite3_autovacuum_pages() interface.
  * The sqlite3_deserialize() does not and has never worked
    for the TEMP database. That limitation is now noted in the
    documentation.
  * The query planner now omits ORDER BY clauses on subqueries and
    views if removing those clauses does not change the semantics
    of the query.
  * The generate_series table-valued function extension is modified
    so that the first parameter ("START") is now required. This is
    done as a way to demonstrate how to write table-valued
    functions with required parameters. The legacy behavior is
    available using the -DZERO_ARGUMENT_GENERATE_SERIES
    compile-time option.
  * Added new sqlite3_changes64() and sqlite3_total_changes64()
    interfaces.
  * Added the SQLITE_OPEN_EXRESCODE flag option to sqlite3_open_v2().
  * Use less memory to hold the database schema.
  * bsc#1189802, CVE-2021-36690: Fix an issue with the SQLite Expert
    extension when a column has no collating sequence.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641124800">- update to 3.37.1:
  * Fix a bug introduced by the UPSERT enhancements of version
    3.35.0 that can cause incorrect byte-code to be generated for
    some obscure but valid SQL, possibly resulting in a NULL-
    pointer dereference.
  * Fix an OOB read that can occur in FTS5 when reading corrupt
    database files.
  * Improved robustness of the --safe option in the CLI.
  * Other minor fixes to assert() statements and test cases.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1641988800">- update to 3.37.2:
  * Fix a bug introduced in version 3.35.0 (2021-03-12) that can
    cause database corruption if a SAVEPOINT is rolled back while
    in PRAGMA temp_store=MEMORY mode, and other changes are made,
    and then the outer transaction commits
  * Fix a long-standing problem with ON DELETE CASCADE and ON
    UPDATE CASCADE in which a cache of the bytecode used to
    implement the cascading change was not being reset following a
    local DDL change</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1645876800">- update to 3.38.0
  * Add the -&gt; and -&gt;&gt; operators for easier processing of JSON
  * The JSON functions are now built-ins
  * Enhancements to date and time functions
  * Rename the printf() SQL function to format() for better
    compatibility, with alias for backwards compatibility.
  * Add the sqlite3_error_offset() interface for helping localize
    an SQL error to a specific character in the input SQL text
  * Enhance the interface to virtual tables
  * CLI columnar output modes are enhanced to correctly handle tabs
    and newlines embedded in text, and add options like "--wrap N",
    "--wordwrap on", and "--quote" to the columnar output modes.
  * Query planner enhancements using a Bloom filter to speed up
    large analytic queries, and a balanced merge tree to evaluate
    UNION or UNION ALL compound SELECT statements that have an
    ORDER BY clause.
  * The ALTER TABLE statement is changed to silently ignores
    entries in the sqlite_schema table that do not parse when
    PRAGMA writable_schema=ON</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1647172800">- update to 3.38.1:
  * Fix problems with the new Bloom filter optimization that might
    cause some obscure queries to get an incorrect answer.
  * Fix the localtime modifier of the date and time functions so
    that it preserves fractional seconds.
  * Fix the sqlite_offset SQL function so that it works correctly
    even in corner cases such as when the argument is a virtual
    column or the column of a view.
  * Fix row value IN operator constraints on virtual tables so that
    they work correctly even if the virtual table implementation
    relies on bytecode to filter rows that do not satisfy the
    constraint.
  * Other minor fixes to assert() statements, test cases, and
    documentation. See the source code timeline for details.
- add upstream patch to run atof1 tests only on x86_64
  sqlite-src-3380100-atof1.patch</changelog>
  <changelog author="max@suse.com" date="1647432000">- Remove obsolete configure flags
- Package the Tcl bindings here again so that we only ship one copy
  of SQLite (bsc#1195773).</changelog>
  <changelog author="max@suse.com" date="1648555200">- update to 3.38.2:
  * Fix a problem with the Bloom filter optimization that might
    cause an incorrect answer when doing a LEFT JOIN with a WHERE
    clause constraint that says that one of the columns on the
    right table of the LEFT JOIN is NULL.
  * Other minor patches.</changelog>
  <changelog author="info@paolostivanin.com" date="1651147200">- update to 3.38.3:
  * Fix a case of the query planner be overly aggressive with
    optimizing automatic-index and Bloom-filter construction,
    using inappropriate ON clause terms to restrict the size of the
    automatic-index or Bloom filter, and resulting in missing rows
    in the output.
  * Other minor patches. See the timeline for details.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1652011200">- update to 3.38.5:
  * Fix a blunder in the CLI of the 3.38.4 release
- includes changes from 3.38.4:
  * fix a byte-code problem in the Bloom filter pull-down
    optimization added by release 3.38.0 in which an error in the
    byte code causes the byte code engine to enter an infinite loop
    when the pull-down optimization encounters a NULL key</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1656676800">- update to 3.39.0:
  * Add (long overdue) support for RIGHT and FULL OUTER JOIN
  * Add new binary comparison operators IS NOT DISTINCT FROM and
    IS DISTINCT FROM that are equivalent to IS and IS NOT,
    respective, for compatibility with PostgreSQL and SQL standards
  * Add a new return code (value "3") from the sqlite3_vtab_distinct()
    interface that indicates a query that has both DISTINCT and
    ORDER BY clauses
  * Added the sqlite3_db_name() interface
  * The unix os interface resolves all symbolic links in database
    filenames to create a canonical name for the database before
    the file is opened
  * Defer materializing views until the materialization is actually
    needed, thus avoiding unnecessary work if the materialization
    turns out to never be used
  * The HAVING clause of a SELECT statement is now allowed on any
    aggregate query, even queries that do not have a GROUP BY
    clause
  * Many microoptimizations collectively reduce CPU cycles by about
    2.3%.
- drop sqlite-src-3380100-atof1.patch, included upstream
- add sqlite-src-3390000-func7-pg-181.patch to skip float precision
  related test failures on 32 bit</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1657886400">- update to 3.39.1:
  * Fix an incorrect result from a query that uses a view that
    contains a compound SELECT in which only one arm contains a
    RIGHT JOIN and where the view is not the first FROM clause term
    of the query that contains the view
  * Fix a long-standing problem with ALTER TABLE RENAME that can
    only arise if the sqlite3_limit(SQLITE_LIMIT_SQL_LENGTH) is set
    to a very small value.
  * Fix a long-standing problem in FTS3 that can only arise when
    compiled with the SQLITE_ENABLE_FTS3_PARENTHESIS compile-time
    option.
  * Fix the initial-prefix optimization for the REGEXP extension so
    that it works correctly even if the prefix contains characters
    that require a 3-byte UTF8 encoding.
  * Enhance the sqlite_stmt virtual table so that it buffers all of
    its output.</changelog>
  <changelog author="max@suse.com" date="1658404800">- update to 3.39.2:
  * Fix a performance regression in the query planner associated
    with rearranging the order of FROM clause terms in the
    presences of a LEFT JOIN.
  * Apply fixes for CVE-2022-35737, Chromium bugs 1343348 and
    1345947, forum post 3607259d3c, and other minor problems
    discovered by internal testing. [boo#1201783]</changelog>
  <changelog author="max@suse.com" date="1662379200">- update to 3.39.3:
  * Use a statement journal on DML statement affecting two or more
    database rows if the statement makes use of a SQL functions
    that might abort.
  * Use a mutex to protect the PRAGMA temp_store_directory and
    PRAGMA data_store_directory statements, even though they are
    decremented and documented as not being threadsafe.</changelog>
  <changelog author="max@suse.com" date="1670932800">- bsc#1206337, CVE-2022-46908, sqlite-CVE-2022-46908.patch:
  relying on --safe for execution of an untrusted CLI script</changelog>
  <changelog author="max@suse.com" date="1700481600">- Sync version 3.44.0 from Factory
  * Fixes bsc#1210660, CVE-2023-2137: Heap buffer overflow
  * sqlite3-rtree-i686.patch: temporary build fix for 32-bit x86.
  * Obsoletes sqlite-CVE-2022-46908.patch
  * Obsoletes sqlite-src-3390000-func7-pg-181.patch</changelog>
</package>
<package pkgid="fbcb7305c6a953eb83e53734a25adb86ca18e63c2a4be99d3071a2fb6e9f5a02" name="libssh" arch="src">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="2037512b729cae9bdba217cc6e48f11f5997915b1216084394ec32289370b132" name="libssh" arch="src">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="29ab8d3cd43c5643966f137070dd26cfe0d958691e0094a7657b84089a39a4ff" name="libssh-config" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="d5f8a412f802010d8e896bb6d47bdc69bca79b476ceb90320693209cd3c335c5" name="libssh-config" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="f1015a3707a964cf2e1364920fe8d176d18a73670fc6b9e189df752ed4301cdb" name="libssh-config" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="4bfb34d9bcfcd16a4427af030614b5607c1da9f9d272cbc60528eec5b40a12ce" name="libssh-config" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="c827b3b829bf7104407abbbf709971acc1d660ec9ca9637a67e85206340415b5" name="libssh-config" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="adb061595e2ad0178a49e7965ffa22855900c7899c1578e457abd141aaf01f4d" name="libssh-config" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="1f53591e0037846b0a8f935dd0c2ef0a3b60888204ed5037ed38f82bc3449368" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="eaa68c1cf7161593c0a7bb7e09329652795ad8966935a4c4c1457a5d766469c8" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="291590f6d5e84f8ad50960aa756501984c9fff723159d3533577fcec5735aec6" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="d50e14381a7e064b8e3751890a541aab546261899f34c6517dd1817d150c4ae8" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="f87bfd399827ba6d97f6866325ac1e0824179cf1d82fbb096eacb77959d33f25" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="758ca4b281efcc174b9555a0e51e8412cb3e4cc1208e73f082c7013799a3b44f" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="001cda92ad35a0ffbb129a15d1180d935fcaebfb20790e42e553e0186a0df7cc" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="c302b3f2983b4e6a96062b1a7fdd64b085ba2109845944f8009f52ef16825c83" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="3098ac9ee81c3447b0c812780bd731e83450709db8db0fc90ee7bc2f7b7181ec" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="548eaad4eec62da678d17a22aae5b766697b06c9e36e96729e72de9767ad7f1d" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.11.0" rel="150000.4.29.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="e76353067054a537af86fc939b300a97a5734c9713434964f2bfb5039162e0f6" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.11.0" rel="150000.4.29.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="54af8b0a58d2baf3152e4b3fdc6aca604fdc3f523c77e7ce8e5ea8a1e0e5a5a9" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.11.0" rel="150000.4.29.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="944dc8ebf1cbb1a624f53228e7215b039d6383939bf31b832606ca3b4b9b1ced" name="libssh2-1" arch="aarch64">
  <version epoch="0" ver="1.9.0" rel="150000.4.16.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="869fbec0cecf86aeaadd42a22dcb77ab30662f4bc648d97a71f464d1f15db822" name="libssh2-1" arch="s390x">
  <version epoch="0" ver="1.9.0" rel="150000.4.16.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="e1bf41931d23581b5af16ec1f5c96374ff63a5c014239a293a049c37631fe437" name="libssh2-1" arch="x86_64">
  <version epoch="0" ver="1.9.0" rel="150000.4.16.1"/>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="981d9b751518735b9128b870fb6af52aa03cca1da19c5455bc074444bedab6a9" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.19.1"/>
  <changelog author="vcizek@suse.com" date="1357646400">- update to 1.4.3
    compression: add support for zlib@openssh.com
    Bug fixes:
    sftp_read: return error if a too large package arrives
    libssh2_hostkey_hash.3: update the description of return value
    examples: use stderr for messages, stdout for data
    openssl: do not leak memory when handling errors
    improved handling of disabled MD5 algorithm in OpenSSL
    known_hosts: Fail when parsing unknown keys in known_hosts file
    configure: gcrypt doesn't come with pkg-config support
    session_free: wrong variable used for keeping state
    libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
    Return LIBSSH2_ERROR_SOCKET_DISCONNECT on EOF when reading banner
    userauth.c: fread() from public key file to correctly detect any errors
    configure.ac: Add option to disable build of the example applications
    Added 'Requires.private:' line to libssh2.pc
    SFTP: filter off incoming "zombie" responses
    gettimeofday: no need for a replacement under cygwin
    SSH_MSG_CHANNEL_REQUEST: default to want_reply
    win32/libssh2_config.h: Remove hardcoded #define LIBSSH2_HAVE_ZLIB
    build error with gcrypt backend
    always do "forced" window updates to avoid corner case stalls
    aes: the init function fails when OpenSSL has AES support
    transport_send: Finish in-progress key exchange before sending data
    channel_write: acknowledge transport errors
    examples/x11.c: Make sure sizeof passed to read operation is correct
    examples/x11.c:,Fix suspicious sizeof usage
    sftp_packet_add: verify the packet before accepting it
    SFTP: preserve the original error code more
    sftp_packet_read: adjust window size as necessary
    Use safer snprintf rather then sprintf in several places
    Define and use LIBSSH2_INVALID_SOCKET instead of INVALID_SOCKET
    sftp_write: cannot return acked data *and* EAGAIN
    sftp_read: avoid data *and* EAGAIN
    libssh2.h: Add missing prototype for libssh2_session_banner_set()
- dropped patches (already in the upstream)
  0004-libssh2.h-Add-missing-prototype-for-libssh2_session_.patch
  0005-Add-symbol-versioning.patch
  0006-missing-libssh2_session_banner_set.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1362052800">- Use AC_CONFIG_HEADERS instead of AM_CONFIG_HEADER, fixes
  build with new automake</changelog>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="2247acddb2c44e3b696240937ca726ef48c8da7a76a9899ee36ec0b5626954a2" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.22.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1362052800">- Use AC_CONFIG_HEADERS instead of AM_CONFIG_HEADER, fixes
  build with new automake</changelog>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
</package>
<package pkgid="b8d2baca9c57e724aaaed9a16e6deccde799a4774cb5e7454f5d12195ccac049" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.25.1"/>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
</package>
<package pkgid="c0e29e12394cba16240bd30e6017037d6a7dd57bbee17ce2c4f9523e517db323" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.11.0" rel="150000.4.29.1"/>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="david.anes@suse.com" date="1639137600">- Bump to version 1.10.0
    Enhancements and bugfixes:
  * support ECDSA certificate authentication
  * fix detailed _libssh2_error being overwritten by generic errors
  * unified error handling
  * fix _libssh2_random() silently discarding errors
  * don't error if using keys without RSA
  * avoid OpenSSL latent error in FIPS mode
  * fix EVP_Cipher interface change in openssl 3
  * fix potential overwrite of buffer when reading stdout of command
  * use string_buf in ecdh_sha2_nistp() to avoid attempting to parse malformed data
  * correct a typo which may lead to stack overflow
  * fix random big number generation to match openssl
  * added key exchange group16-sha512 and group18-sha512.
  * add support for an OSS Fuzzer fuzzing target
  * adds support for ECDSA for both key exchange and host key algorithms
  * clean up curve25519 code
  * update the min, preferred and max DH group values based on RFC 8270.
  * changed type of LIBSSH2_FX_* constants to unsigned long
  * added diffie-hellman-group14-sha256 kex
  * fix for use of uninitialized aes_ctr_cipher.key_len when using HAVE_OPAQUE_STRUCTS, regression
  * fixes memory leaks and use after free AES EVP_CIPHER contexts when using OpenSSL 1.0.x.
  * fixes crash with delayed compression option using Bitvise server.
  * adds support for PKIX key reading
  * use new API to parse data in packet_x11_open() for better bounds checking.
  * double the static buffer size when reading and writing known hosts
  * improved bounds checking in packet_queue_listener
  * improve message parsing (CVE-2019-17498)
  * improve bounds checking in kex_agree_methods()
  * adding SSH agent forwarding.
  * fix agent forwarding message, updated example.
  * added integration test code and cmake target. Added example to cmake list.
  * don't call `libssh2_crypto_exit()` until `_libssh2_initialized` count is down to zero.
  * add an EWOULDBLOCK check for better portability
  * fix off by one error when loading public keys with no id
  * fix use-after-free crash on reinitialization of openssl backend
  * preserve error info from agent_list_identities()
  * make sure the error code is set in _libssh2_channel_open()
  * fixed misspellings
  * fix potential typecast error for `_libssh2_ecdsa_key_get_curve_type`
  * rename _libssh2_ecdsa_key_get_curve_type to _libssh2_ecdsa_get_curve_type
- Rebased patch libssh2-ocloexec.path
- Removed patch libssh2_org-CVE-2019-17498.patch: the security fix
    is already included in the latest version.</changelog>
  <changelog author="pmonreal@suse.com" date="1687262400">- Update to 1.11.0:
  * Enhancements and bugfixes
  - Adds support for encrypt-then-mac (ETM) MACs
  - Adds support for AES-GCM crypto protocols
  - Adds support for sk-ecdsa-sha2-nistp256 and sk-ssh-ed25519 keys
  - Adds support for RSA certificate authentication
  - Adds FIDO support with *_sk() functions
  - Adds RSA-SHA2 key upgrading to OpenSSL, WinCNG, mbedTLS, OS400 backends
  - Adds Agent Forwarding and libssh2_agent_sign()
  - Adds support for Channel Signal message libssh2_channel_signal_ex()
  - Adds support to get the user auth banner message libssh2_userauth_banner()
  - Adds LIBSSH2_NO_{MD5, HMAC_RIPEMD, DSA, RSA, RSA_SHA1, ECDSA, ED25519,
    AES_CBC, AES_CTR, BLOWFISH, RC4, CAST, 3DES} options
  - Adds direct stream UNIX sockets with libssh2_channel_direct_streamlocal_ex()
  - Adds wolfSSL support to CMake file
  - Adds mbedTLS 3.x support
  - Adds LibreSSL 3.5 support
  - Adds support for CMake "unity" builds
  - Adds CMake support for building shared and static libs in a single pass
  - Adds symbol hiding support to CMake
  - Adds support for libssh2.rc for all build tools
  - Adds .zip, .tar.xz and .tar.bz2 release tarballs
  - Enables ed25519 key support for LibreSSL 3.7.0 or higher
  - Improves OpenSSL 1.1 and 3 compatibility
  - Now requires OpenSSL 1.0.2 or newer
  - Now requires CMake 3.1 or newer
  - SFTP: Adds libssh2_sftp_open_ex_r() and libssh2_sftp_open_r() extended APIs
  - SFTP: No longer has a packet limit when reading a directory
  - SFTP: now parses attribute extensions if they exist
  - SFTP: no longer will busy loop if SFTP fails to initialize
  - SFTP: now clear various errors as expected
  - SFTP: no longer skips files if the line buffer is too small
  - SCP: add option to not quote paths
  - SCP: Enables 64-bit offset support unconditionally
  - Now skips leading \r and \n characters in banner_receive()
  - Enables secure memory zeroing with all build tools on all platforms
  - No longer logs SSH_MSG_REQUEST_FAILURE packets from keepalive
  - Speed up base64 encoding by 7x
  - Assert if there is an attempt to write a value that is too large
  - WinCNG: fix memory leak in _libssh2_dh_secret()
  - Added protection against possible null pointer dereferences
  - Agent now handles overly large comment lengths
  - Now ensure KEX replies don't include extra bytes
  - Fixed possible buffer overflow when receiving SSH_MSG_USERAUTH_BANNER
  - Fixed possible buffer overflow in keyboard interactive code path
  - Fixed overlapping memcpy()
  - Fixed Windows UWP builds
  - Fixed DLL import name
  - Renamed local RANDOM_PADDING macro to avoid unexpected define on Windows
  - Support for building with gcc versions older than 8
  - Improvements to CMake, Makefile, NMakefile, GNUmakefile, autoreconf files
  - Restores ANSI C89 compliance
  - Enabled new compiler warnings and fixed/silenced them
  - Improved error messages
  - Now uses CIFuzz
  - Numerous minor code improvements
  - Improvements to CI builds
  - Improvements to unit tests
  - Improvements to doc files
  - Improvements to example files
  - Removed "old gex" build option
  - Removed no-encryption/no-mac builds
  - Removed support for NetWare and Watcom wmake build files
  * Rebase libssh2-ocloexec.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1695038400">- Upgrade to version 1.11.0 in SLE-15: [jsc#PED-7040]
  * Add the keyring file: libssh2_org.keyring
  * Rebase libssh2-ocloexec.patch
  * Remove libssh2_org-CVE-2020-22218.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1702987200">- Security fix: [bsc#1218127, CVE-2023-48795]
  * Add 'strict KEX' to fix CVE-2023-48795 "Terrapin Attack"
  * Add libssh2_org-CVE-2023-48795.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1707480000">- Always add the KEX pseudo-methods "ext-info-c" and "kex-strict-c-v00@openssh.com"
  when configuring custom method list. [bsc#1218971, CVE-2023-48795]
  * The strict-kex extension is announced in the list of available
    KEX methods. However, when the default KEX method list is modified
    or replaced, the extension is not added back automatically.
  * Add libssh2_org-CVE-2023-48795-ext.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1712059200">- Fix an issue with Encrypt-then-MAC family. [bsc#1221622]
  * Test the ETM feature in the remote end's configuration when
    receiving data. Upstream issue: #1331.
  * Add libssh2_org-ETM-remote.patch</changelog>
</package>
<package pkgid="f07819a6886b5193461ff3acacd6cbbcfbb9458c525ef863c8881aa2e5967d8b" name="libssh2_org" arch="src">
  <version epoch="0" ver="1.9.0" rel="150000.4.16.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1324987200">- Refresh patches.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328184000">- Update to version 1.4.0 plus git bugfixes</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1328184001">- fix license</changelog>
  <changelog author="vcizek@suse.com" date="1357646400">- update to 1.4.3
    compression: add support for zlib@openssh.com
    Bug fixes:
    sftp_read: return error if a too large package arrives
    libssh2_hostkey_hash.3: update the description of return value
    examples: use stderr for messages, stdout for data
    openssl: do not leak memory when handling errors
    improved handling of disabled MD5 algorithm in OpenSSL
    known_hosts: Fail when parsing unknown keys in known_hosts file
    configure: gcrypt doesn't come with pkg-config support
    session_free: wrong variable used for keeping state
    libssh2_userauth_publickey_fromfile_ex.3: mention publickey == NULL
    comp_method_zlib_decomp: handle Z_BUF_ERROR when inflating
    Return LIBSSH2_ERROR_SOCKET_DISCONNECT on EOF when reading banner
    userauth.c: fread() from public key file to correctly detect any errors
    configure.ac: Add option to disable build of the example applications
    Added 'Requires.private:' line to libssh2.pc
    SFTP: filter off incoming "zombie" responses
    gettimeofday: no need for a replacement under cygwin
    SSH_MSG_CHANNEL_REQUEST: default to want_reply
    win32/libssh2_config.h: Remove hardcoded #define LIBSSH2_HAVE_ZLIB
    build error with gcrypt backend
    always do "forced" window updates to avoid corner case stalls
    aes: the init function fails when OpenSSL has AES support
    transport_send: Finish in-progress key exchange before sending data
    channel_write: acknowledge transport errors
    examples/x11.c: Make sure sizeof passed to read operation is correct
    examples/x11.c:,Fix suspicious sizeof usage
    sftp_packet_add: verify the packet before accepting it
    SFTP: preserve the original error code more
    sftp_packet_read: adjust window size as necessary
    Use safer snprintf rather then sprintf in several places
    Define and use LIBSSH2_INVALID_SOCKET instead of INVALID_SOCKET
    sftp_write: cannot return acked data *and* EAGAIN
    sftp_read: avoid data *and* EAGAIN
    libssh2.h: Add missing prototype for libssh2_session_banner_set()
- dropped patches (already in the upstream)
  0004-libssh2.h-Add-missing-prototype-for-libssh2_session_.patch
  0005-Add-symbol-versioning.patch
  0006-missing-libssh2_session_banner_set.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1362052800">- Use AC_CONFIG_HEADERS instead of AM_CONFIG_HEADER, fixes
  build with new automake</changelog>
  <changelog author="boris@steki.net" date="1366804800">- fix building on older kernels and older OS / SLE</changelog>
  <changelog author="mvyskocil@suse.com" date="1372075200">- ignore groff-full to remove factory build cycle
- add groff to build requires to make tests passing</changelog>
  <changelog author="vcizek@suse.com" date="1426075200">- update to 1.5.0
  * fixes CVE-2015-1782 (bnc#921070)
- tarball verification
  * added libssh2_org.keyring
  * added libssh2-1.5.0.tar.gz.asc
  Changes in 1.5.0:
  Added Windows Cryptography API: Next Generation based backend
  Bug fixes:
  Security Advisory: Using `SSH_MSG_KEXINIT` data unbounded, CVE-2015-1782
  missing _libssh2_error in _libssh2_channel_write
  knownhost: Fix DSS keys being detected as unknown.
  knownhost: Restore behaviour of `libssh2_knownhost_writeline` with short buffer.
  libssh2.h: on Windows, a socket is of type SOCKET, not int
  libssh2_priv.h: a 1 bit bit-field should be unsigned
  windows build: do not export externals from static library
  Fixed two potential use-after-frees of the payload buffer
  Fixed a few memory leaks in error paths
  userauth: Fixed an attempt to free from stack on error
  agent_list_identities: Fixed memory leak on OOM
  knownhosts: Abort if the hosts buffer is too small
  sftp_close_handle: ensure the handle is always closed
  channel_close: Close the channel even in the case of errors
  docs: added missing libssh2_session_handshake.3 file
  docs: fixed a bunch of typos
  userauth_password: pass on the underlying error code
  _libssh2_channel_forward_cancel: accessed struct after free
  _libssh2_packet_add: avoid using uninitialized memory
  _libssh2_channel_forward_cancel: avoid memory leaks on error
  _libssh2_channel_write: client spins on write when window full
  windows build: fix build errors
  publickey_packet_receive: avoid junk in returned pointers
  channel_receive_window_adjust: store windows size always
  userauth_hostbased_fromfile: zero assign to avoid uninitialized use
  configure: change LIBS not LDFLAGS when checking for libs
  agent_connect_unix: make sure there's a trailing zero
  MinGW build: Fixed redefine warnings.
  sftpdir.c: added authentication method detection.
  Watcom build: added support for WinCNG build.
  configure.ac: replace AM_CONFIG_HEADER with AC_CONFIG_HEADERS
  sftp_statvfs: fix for servers not supporting statfvs extension
  knownhost.c: use LIBSSH2_FREE macro instead of free
  Fixed compilation using mingw-w64
  knownhost.c: fixed that 'key_type_len' may be used uninitialized
  configure: Display individual crypto backends on separate lines
  examples on Windows: check for WSAStartup return code
  examples on Windows: check for socket return code
  agent.c: check return code of MapViewOfFile
  kex.c: fix possible NULL pointer de-reference with session-&gt;kex
  packet.c: fix possible NULL pointer de-reference within listen_state
  tests on Windows: check for WSAStartup return code
  userauth.c: improve readability and clarity of for-loops
  examples on Windows: use native SOCKET-type instead of int
  packet.c: i &lt; 256 was always true and i would overflow to 0
  kex.c: make sure mlist is not set to NULL
  session.c: check return value of session_nonblock in debug mode
  session.c: check return value of session_nonblock during startup
  userauth.c: make sure that sp_len is positive and avoid overflows
  knownhost.c: fix use of uninitialized argument variable wrote
  openssl: initialise the digest context before calling EVP_DigestInit()
  libssh2_agent_init: init -&gt;fd to LIBSSH2_INVALID_SOCKET
  configure.ac: Add zlib to Requires.private in libssh2.pc if using zlib
  configure.ac: Rework crypto library detection
  configure.ac: Reorder --with-* options in --help output
  configure.ac: Call zlib zlib and not libz in text but keep option names
  Fix non-autotools builds: Always define the LIBSSH2_OPENSSL CPP macro
  sftp: seek: Don't flush buffers on same offset
  sftp: statvfs: Along error path, reset the correct 'state' variable.
  sftp: Add support for fsync (OpenSSH extension).
  _libssh2_channel_read: fix data drop when out of window
  comp_method_zlib_decomp: Improve buffer growing algorithm
  _libssh2_channel_read: Honour window_size_initial
  window_size: redid window handling for flow control reasons
  knownhosts: handle unknown key types</changelog>
  <changelog author="vcizek@suse.com" date="1434110400">- update to 1.6.0
  Changes:
    Added CMake build system
    Added libssh2_userauth_publickey_frommemory()
  Bug fixes:
    wait_socket: wrong use of difftime()
    userauth: Fixed prompt text no longer being copied to the prompts struct
    mingw build: allow to pass custom CFLAGS
    Let mansyntax.sh work regardless of where it is called from
    Init HMAC_CTX before using it
    direct_tcpip: Fixed channel write
    WinCNG: fixed backend breakage
    OpenSSL: caused by introducing libssh2_hmac_ctx_init
    userauth.c: fix possible dereferences of a null pointer
    wincng: Added explicit clear memory feature to WinCNG backend
    openssl.c: fix possible segfault in case EVP_DigestInit fails
    wincng: fix return code of libssh2_md5_init()
    kex: do not ignore failure of libssh2_sha1_init()
    scp: fix that scp_send may transmit not initialised memory
    scp.c: improved command length calculation
    nonblocking examples: fix warning about unused tvdiff on Mac OS X
    configure: make clear-memory default but WARN if backend unsupported
    OpenSSL: Enable use of OpenSSL that doesn't have DSA
    OpenSSL: Use correct no-blowfish #define
    kex: fix libgcrypt memory leaks of bignum
    libssh2_channel_open: more detailed error message
    wincng: fixed memleak in (block) cipher destructor</changelog>
  <changelog author="vcizek@suse.com" date="1456228800">- update to 1.7.0
  * Fixes CVE-2016-0787 (boo#967026)
  * Changes:
    libssh2_session_set_last_error: Add function
    mac: Add support for HMAC-SHA-256 and HMAC-SHA-512
    WinCNG: support for SHA256/512 HMAC
    kex: Added diffie-hellman-group-exchange-sha256 support
    OS/400 crypto library QC3 support
  * and many bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Version update to 1.8.0:
  * support openssl-1.1
  * many bugfixes
- Fixes bsc#1042660
- Remove obsolete conditionals that are no longer needed</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Remove --with-pic which is only for static libs</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Drop openssh BuildRequires: this is only used for one of the
  minor self-tests.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1552305600">- Security fixes:
  * [bsc#1128471, CVE-2019-3855] Possible integer overflow in transport
    read allows out-of-bounds write with specially crafted payload
  - libssh2_org-CVE-2019-3855.patch
  * [bsc#1128472, CVE-2019-3856] Possible integer overflow in keyboard
    interactive handling allows out-of-bounds write with specially
    crafted payload
  - libssh2_org-CVE-2019-3856.patch
  * [bsc#1128474, CVE-2019-3857] Possible integer overflow leading to
    zero-byte allocation and out-of-bounds with specially crafted
    message channel request SSH packet
  - libssh2_org-CVE-2019-3857.patch
  * [bsc#1128476, CVE-2019-3858] Possible zero-byte allocation leading
    to an out-of-bounds read with a specially crafted SFTP packet
  - libssh2_org-CVE-2019-3858.patch
  * [bsc#1128480, CVE-2019-3859] Out-of-bounds reads with specially
    crafted payloads due to unchecked use of _libssh2_packet_require
    and _libssh2_packet_requirev
  - libssh2_org-CVE-2019-3859.patch
  * [bsc#1128481, CVE-2019-3860] Out-of-bounds reads with specially
    crafted SFTP packets
  - libssh2_org-CVE-2019-3860.patch
  * [bsc#1128490, CVE-2019-3861] Out-of-bounds reads with specially
    crafted SSH packets
  - libssh2_org-CVE-2019-3861.patch
  * [bsc#1128492, CVE-2019-3862] Out-of-bounds memory comparison with
    specially crafted message channel request SSH packet
  - libssh2_org-CVE-2019-3862.patch
  * [bsc#1128493, CVE-2019-3863] Integer overflow in user authenicate
    keyboard interactive allows out-of-bounds writes with specially
    crafted keyboard responses
  - libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1554811200">- Version update to 1.8.2: [bsc#1130103]
  Bug fixes:
  * Fixed the misapplied userauth patch that broke 1.8.1
  * moved the MAX size declarations from the public header</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1556280000">- Fix upstream patch for CVE-2019-3859 [bsc#1133528, bsc#1130103]
  - Added libssh2_org-CVE-2019-3859-fix.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1571832000">- Security fix: [bsc#1154862, CVE-2019-17498]
  * The SSH_MSG_DISCONNECT:packet.c logic has an integer overflow in
    a bounds check that might lead to disclose sensitive information
    or cause a denial of service
  * Add patch libssh2_org-CVE-2019-17498.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1598529600">- Drop man and groff BuildRequires: both are no longer used in
  current versions.</changelog>
  <changelog author="pmonreal@suse.com" date="1603713600">- Version update to 1.9.0: [bsc#1178083, jsc#SLE-16922]
  Enhancements and bugfixes:
  * adds ECDSA keys and host key support when using OpenSSL
  * adds ED25519 key and host key support when using OpenSSL 1.1.1
  * adds OpenSSH style key file reading
  * adds AES CTR mode support when using WinCNG
  * adds PEM passphrase protected file support for Libgcrypt and WinCNG
  * adds SHA256 hostkey fingerprint
  * adds libssh2_agent_get_identity_path() and libssh2_agent_set_identity_path()
  * adds explicit zeroing of sensitive data in memory
  * adds additional bounds checks to network buffer reads
  * adds the ability to use the server default permissions when creating sftp directories
  * adds support for building with OpenSSL no engine flag
  * adds support for building with LibreSSL
  * increased sftp packet size to 256k
  * fixed oversized packet handling in sftp
  * fixed building with OpenSSL 1.1
  * fixed a possible crash if sftp stat gets an unexpected response
  * fixed incorrect parsing of the KEX preference string value
  * fixed conditional RSA and AES-CTR support
  * fixed a small memory leak during the key exchange process
  * fixed a possible memory leak of the ssh banner string
  * fixed various small memory leaks in the backends
  * fixed possible out of bounds read when parsing public keys from the server
  * fixed possible out of bounds read when parsing invalid PEM files
  * no longer null terminates the scp remote exec command
  * now handle errors when diffie hellman key pair generation fails
  * improved building instructions
  * improved unit tests
- Rebased patches:
  * libssh2-ocloexec.patch
  * libssh2_org-CVE-2019-17498.patch
- Remove patches fixed in this version:
  libssh2_org-CVE-2019-3855.patch libssh2_org-CVE-2019-3856.patch
  libssh2_org-CVE-2019-3857.patch libssh2_org-CVE-2019-3858.patch
  libssh2_org-CVE-2019-3859.patch libssh2_org-CVE-2019-3859-fix.patch
  libssh2_org-CVE-2019-3860.patch libssh2_org-CVE-2019-3861.patch
  libssh2_org-CVE-2019-3862.patch libssh2_org-CVE-2019-3863.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1693224000">- Security fix: [bsc#1214527, CVE-2020-22218]
  * The function _libssh2_packet_add() allows to access out of
    bounds memory.
  * Add libssh2_org-CVE-2020-22218.patch</changelog>
</package>
<package pkgid="4f2024ac3c6d8840770a455a20451fe09c7f038ef445132be92304ceb2721da5" name="libssh4" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="261483db30063e0d3dadf2bfcaea36c9c90aff4d4527a45a3b817eafb1251216" name="libssh4" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="289c06d27de10c601370c13e528f7e810694036655add182547c56cdde2f7379" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1540814400">- Update to version 0.8.5
  * Added support to get known_hosts locations with ssh_options_get()
  * Fixed preferred algorithm for known hosts negotiations
  * Fixed KEX with some server implementations (e.g. Cisco)
  * Fixed issues with MSVC
  * Fixed keyboard-interactive auth in server mode
    (regression from CVE-2018-10933)
  * Fixed gssapi auth in server mode (regression from CVE-2018-10933)
  * Fixed socket fd handling with proxy command
  * Fixed a memory leak with OpenSSL</changelog>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
</package>
<package pkgid="17ba48fee1294edf74b55a25094667ab448c1a220bab0c6eff640108587dda8f" name="libssh4" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="e3d4d03bf435c7bb81c023e511f8483fa60be16c2f9605d096192a56d8bc6062" name="libssh4" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="d6fa3ed18459b1bc4bf43d209aefa3d56031c0af461ef7a661fdb40ab91d5110" name="libssh4" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.3.6.1"/>
  <changelog author="asn@cryptomilk.org" date="1546171200">- Update to version 0.8.6
  * Fixed compilation issues with different OpenSSL versions
  * Fixed StrictHostKeyChecking in new knownhosts API
  * Fixed ssh_send_keepalive() with packet filter
  * Fixed possible crash with knownhosts options
  * Fixed issus with rekeying
  * Fixed strong ECDSA keys
  * Fixed some issues with rsa-sha2 extentions
  * Fixed access violation in ssh_init() (static linking)
  * Fixed ssh_channel_close() handling</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1546948800">- Added the tests in a multiple build description file *test* to
  break the cycle for cmocka, curl, doxygen and libssh.</changelog>
  <changelog author="tchvatal@suse.com" date="1549886400">- Drop doxygen from dependencies to avoid buildcycle
  * the documentation is available online anyway for anyone to
    consume and consult http://api.libssh.org</changelog>
  <changelog author="asn@cryptomilk.org" date="1551096000">- Update to version 0.8.7
  * Fixed handling extension flags in the server implementation
  * Fixed exporting ed25519 private keys
  * Fixed corner cases for rsa-sha2 signatures
  * Fixed some issues with connector</changelog>
  <changelog author="coolo@suse.com" date="1551355200">- Avoid build cycle between curl and libssh by using obs hint to
  prefer curl-mini</changelog>
  <changelog author="jmcdonough@suse.com" date="1558612800">- Add support for new AES-GCM encryption types; (bsc#1134193)
  * Add 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
  * Add 0001-tests-Add-aes-gcm-ciphers-tests.patch</changelog>
  <changelog author="idonmez@suse.com" date="1559131200">- Fix the typo in Obsoletes for -devel-doc subpackage
- Actually remove the description for -devel-doc subpackage</changelog>
  <changelog author="asn@cryptomilk.org" date="1561723200">- Update to verion 0.9.0
  * Added support for AES-GCM
  * Added improved rekeying support
  * Added performance improvements
  * Disabled blowfish support by default
  * Fixed several ssh config parsing issues
  * Added support for DH Group Exchange KEX
  * Added support for Encrypt-then-MAC mode
  * Added support for parsing server side configuration file
  * Added support for ECDSA/Ed25519 certificates
  * Added FIPS 140-2 compatibility
  * Improved known_hosts parsing
  * Improved documentation
  * Improved OpenSSL API usage for KEX, DH, and signatures
- Removed 0001-libcrypto-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-libgcrypt-Implement-OpenSSH-compatible-AES-GCM-ciphe.patch
- Removed 0001-tests-Add-aes-gcm-ciphers-tests.patch
- Add libssh client and server config files</changelog>
  <changelog author="tchvatal@suse.com" date="1562760000">- Split out configuration to separate package to not mess up the
  library packaging and coinstallation</changelog>
  <changelog author="asn@cryptomilk.org" date="1572004800">- Update to version 0.9.1
  * Added support for Ed25519 via OpenSSL
  * Added support for X25519 via OpenSSL
  * Added support for localuser in Match keyword
  * Fixed Match keyword to be case sensitive
  * Fixed compilation with LibreSSL
  * Fixed error report of channel open (T75)
  * Fixed sftp documentation (T137)
  * Fixed known_hosts parsing (T156)
  * Fixed build issue with MinGW (T157)
  * Fixed build with gcc 9 (T164)
  * Fixed deprecation issues (T165)
  * Fixed known_hosts directory creation (T166)</changelog>
  <changelog author="asn@cryptomilk.org" date="1573128000">- Update to version 0.9.2
  * Fixed libssh-config.cmake
  * Fixed issues with rsa algorithm negotiation (T191)
  * Fixed detection of OpenSSL ed25519 support (T197)</changelog>
  <changelog author="dimstar@opensuse.org" date="1575892800">- Rename suffix define to pkg_suffix: rpm 4.15 has suffix reserved
  for internal use.</changelog>
  <changelog author="asn@cryptomilk.org" date="1575979200">- Update to version 0.9.3
  * Fixed CVE-2019-14889 - SCP: Unsanitized location leads to command execution (bsc#1158095)
  * SSH-01-003 Client: Missing NULL check leads to crash in erroneous state
  * SSH-01-006 General: Various unchecked Null-derefs cause DOS
  * SSH-01-007 PKI Gcrypt: Potential UAF/double free with RSA pubkeys
  * SSH-01-010 SSH: Deprecated hash function in fingerprinting
  * SSH-01-013 Conf-Parsing: Recursive wildcards in hostnames lead to DOS
  * SSH-01-014 Conf-Parsing: Integer underflow leads to OOB array access
  * SSH-01-001 State Machine: Initial machine states should be set explicitly
  * SSH-01-002 Kex: Differently bound macros used to iterate same array
  * SSH-01-005 Code-Quality: Integer sign confusion during assignments
  * SSH-01-008 SCP: Protocol Injection via unescaped File Names
  * SSH-01-009 SSH: Update documentation which RFCs are implemented
  * SSH-01-012 PKI: Information leak via uninitialized stack buffer</changelog>
  <changelog author="dimstar@opensuse.org" date="1582027200">- Drop the hack to pull curl-mini: we moved the split a bit higher
  up and now have a non-curl linked variant of cmake in
  openSUSE:Factory.</changelog>
  <changelog author="asn@cryptomilk.org" date="1586433600">- Update to version 0.9.4
  * https://www.libssh.org/2020/04/09/libssh-0-9-4-and-libssh-0-8-9-security-release/
  * Fix possible Denial of Service attack when using AES-CTR-ciphers
    CVE-2020-1730 (bsc#1168699)</changelog>
  <changelog author="dmueller@suse.com" date="1599998400">- update to 0.9.5 (bsc#1174713, CVE-2020-16135):
  * CVE-2020-16135: Avoid null pointer dereference in sftpserver (T232)
  * Improve handling of library initialization (T222)
  * Fix parsing of subsecond times in SFTP (T219)
  * Make the documentation reproducible
  * Remove deprecated API usage in OpenSSL
  * Fix regression of ssh_channel_poll_timeout() returning SSH_AGAIN
  * Define version in one place (T226)
  * Prevent invalid free when using different C runtimes than OpenSSL (T229)
  * Compatibility improvements to testsuite</changelog>
  <changelog author="asn@cryptomilk.org" date="1600689600">- Add missing BR for openssh needed for tests</changelog>
  <changelog author="asn@cryptomilk.org" date="1629979200">- Update to version 0.9.6 (bsc#1189608, CVE-2021-3634)
  * https://git.libssh.org/projects/libssh.git/tag/?h=libssh-0.9.6</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1704974400">- Update to version 0.9.8
  * Fix CVE-2023-6004: Command injection using proxycommand (bsc#1218209)
  * Fix CVE-2023-48795: Potential downgrade attack using strict kex (bsc#1218126)
  * Fix CVE-2023-6918: Missing checks for return values of MD functions (bsc#1218186)
  * Allow @ in usernames when parsing from URI composes
- Update to version 0.9.7
  * Fix CVE-2023-1667: a NULL dereference during rekeying with algorithm
    guessing (bsc#1211188)
  * Fix CVE-2023-2283: a possible authorization bypass in
    pki_verify_data_signature under low-memory conditions (bsc#1211190)
  * Fix several memory leaks in GSSAPI handling code</changelog>
  <changelog author="adam.majer@suse.de" date="1709208000">- Fix regression parsing IPv6 addresses provided as hostname (bsc#1220385)
  * Added libssh-fix-ipv6-hostname-regression.patch</changelog>
</package>
<package pkgid="b9823928e66e7752a3bb7db7a873e4b07e5be43ecbc9b9b5bffa4fa799ca9a1f" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.14.1"/>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
</package>
<package pkgid="a8b877890f077a0988be9d6863784bd35e5de5fbabbbbffa9c87fea9d3c68ffb" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.14.1"/>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
</package>
<package pkgid="f3169cb9f957968296f2794e0e35b835b55c985b2f5d4986531c36ee7c80f129" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.14.1"/>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
</package>
<package pkgid="4c302bb6fb086e0bb0038d19dd435bbec68d39b301434bd829de2269c752b66c" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.17.1"/>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="fbd7b844ca0de8f0994322f1ddaf9430977a302976a165cb64e36e8e2520980f" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.17.1"/>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="6f60446fbfe94a0d088eed16d215a05cf10eaee4779de831c937a79b8a67d73d" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.17.1"/>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="c19ec1a01da12580b88034e5a5bb76151ac7ce5a3a774526c08c69a5103decf4" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.24.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="9ed2c6351675fd0669ac7e18eabe9c1acda3a69a8186d8e1414d59b0e63b7672" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.24.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="b1e9ec126f8f47f283cded493795e8ee99348516f4c1118a5b55580774047846" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.24.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="f2681947ed71477f2fd80fd0e00015b7dda2d27bc62b2ce598eac81486885887" name="libsss_certmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.27.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0009-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="8044ff7796ea3626fe960b8c5d2cf2e5846c040bfde4e73be14c810c590679ea" name="libsss_certmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.27.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0009-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="300fa94dafbd2a20fb27c04e058e4c13e9346b109bfbda3dd60ac8b4159a8792" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.27.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0009-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="59539573964459d9a0c692675f85e3e4caf15abfb2dc03d90dbf04fbb73d87f3" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.14.1"/>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
</package>
<package pkgid="1d5114797575b42dde5ff31acd41d8649e430bba7825fd0158d3b2661ecd773a" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.14.1"/>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
</package>
<package pkgid="b63f8666f2dc35c5ea86a633e6394566f7735eaba565d13a74d7b8260b7a4788" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.14.1"/>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
</package>
<package pkgid="6fbd8debfec56170ffa174e06b0fa6356b001eb3bacf5223f60a9ac5f630f975" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.17.1"/>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="bfb63fddeb640ff52d9cbd255cc48e2bafecc0f07930a9e518278bdaf1f06beb" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.17.1"/>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="4a51a14cd224c2e21c39e4f5999bbc926af2a5e3ed759cb2a7af0e78e7ad1c4b" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.17.1"/>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="d992624785a637d04552db0d5062754b8d822f82295aa8396f9761a81e7cddc2" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.24.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="122c1467d52320f76d39726d3e47268f011b3824b893980cde4aa6a9bc970f8a" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.24.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="ed761558b03d386169d0e134663641c0a1d7c0e90bc49eb164c5d13cc329931f" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.24.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="723bfc8a8b1b7d92b266d5ca08d383df1b54e1103a9a8ba6eb927b792edc8746" name="libsss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.27.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0009-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="58dcb373892fe7474223244bc51c926dd6b1eeeb2d5db062d96e5322c3d29305" name="libsss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.27.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0009-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="92b020542ba6b3144d3c7aae9479f5f88e8cad7b151679581819856ed372d48e" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.27.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0009-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="f940539f130292a2d48275cccb38afc12e17813c98e5f6a34f82e84a05800c80" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.14.1"/>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
</package>
<package pkgid="02926e890122292d4c3fab61adad7f8e72977f9f5a675ad000053d4c36b5c141" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.14.1"/>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
</package>
<package pkgid="6707a6ca6d3b260392e2235969ca884c289f181f99cba60631e55d7393ae684b" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.14.1"/>
  <changelog author="dmulder@suse.com" date="1577966400">- SSSD should accept host entries from GPO's security filter, add
  sssd-gpo_host_security_filter-1.16.1.patch; (jsc#SLE-9298)</changelog>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
</package>
<package pkgid="ddc5896d7494883f953ad4bccc6e5273d1ff31b57194378d181beecd6740e629" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.17.1"/>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="736c52ee6c4c4a56a8a948e452c94cb66b2e249dea5fbbcf9bb52e280bae4cd2" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.17.1"/>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="402fa9c8bfe4ae19957e0153b81b0ae9cbab8cd6cf8bb3240aa4b827a75c8b10" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.17.1"/>
  <changelog author="dmulder@suse.com" date="1578916800">- SSSD GPO host entries are ignored if computer cn does not
  match it's samaccountname, add
  0001-Resolve-computer-lookup-failure-when-sam-cn.patch;
  (jsc#SLE-9298); (bsc#1160688)</changelog>
  <changelog author="scabrero@suse.de" date="1579176000">- Install infopipe dbus service (bsc#1106598)</changelog>
  <changelog author="scabrero@suse.de" date="1583755200">- Update samba secrets after changing machine password; (jsc#SLE-11503);
  Add 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch</changelog>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
</package>
<package pkgid="5fe834db10c1cf14e9a517452d15053789ab59459003c8506363b4df3838243f" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.24.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="23b2709b8321aff22e18879b99315a01a1b0f2f87ecfde8701b3a428224f3a86" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.24.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="2492e455a221e706c15a7a49b939331d20037cba022e0d29d6e8d4ba90a96a2e" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.24.1"/>
  <changelog author="scabrero@suse.de" date="1585310400">- Fix dynamic DNS updates not using FQDN (bsc#1160587); Add
  0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch</changelog>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
</package>
<package pkgid="a1cd51ba3d2a2325696477ec9d06b52146a074a20636f0ea57c4fd03f80b87eb" name="libsss_nss_idmap0" arch="aarch64">
  <version epoch="0" ver="2.5.2" rel="150400.4.27.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0009-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="cc4199d72fda190554e21b7c0384e58c75c7f712ae2f28ba28343b7281fffca0" name="libsss_nss_idmap0" arch="s390x">
  <version epoch="0" ver="2.5.2" rel="150400.4.27.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0009-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="e95618211a0387e7d3433c97dbd7c0aaa82da34baa06a1b04d0fe002b480d7e1" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="150400.4.27.1"/>
  <changelog author="scabrero@suse.de" date="1601467200">- Fix build against samba &gt;= 4.12
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
- Fix build with curl &gt;= 7.62.0
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch</changelog>
  <changelog author="scabrero@suse.de" date="1616155200">- Fix a dependency loop by moving internal libraries to sssd-common
  package; (bsc#1182058);</changelog>
  <changelog author="scabrero@suse.de" date="1617796800">- Move sssctl command from sssd to sssd-tools package; (bsc#1184289);</changelog>
  <changelog author="scabrero@suse.de" date="1618488000">- Create timestamp attribute in cache objects if missing;
  (bsc#1182637); Add 0038-CACHE-Create-timestamp-if-missing.patch</changelog>
  <changelog author="scabrero@suse.de" date="1619524800">- Use /run instead of /var/run for daemon PID files; (bsc#1185185);</changelog>
  <changelog author="scabrero@suse.de" date="1622548800">- Fix sss_cache spurious error messages when invoked from shadow-utils;
  (bsc#1185017); Add 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1628769600">- Update to version 2.5.2; (jsc#SLE-17763);
  * originalADgidNumber attribute in the SSSD cache is now indexed.
  * Add new config option fallback_to_nss.
- Changes from version 2.5.1
  * auto_private_groups option can be set centrally through ID
    range setting in IPA (see ipa idrange commands family). This
    feature requires SSSD update on both client and server. This
    feature also requires freeipa 4.9.4 and newer.
  * Fix getsidbyname issues with IPA users with a user-private-group.
  * Default value of ldap_sudo_random_offset changed to 0
    (disabled). This makes sure that sudo rules are available as
    soon as possible after SSSD start in default configuration.
- Changes from version 2.5.0
  * Added support for automatic renewal of renewable TGTs that
    are stored in KCM ccache. This can be enabled by setting
    tgt_renewal = true. See the sssd-kcm man page for more
    details. This feature requires MIT Kerberos
    krb5-1.19-0.beta2.3 or higher.
  * Backround sudo periodic tasks (smart and full refresh) periods are
    now extended by a random offset to spread the load on the server in
    environments with many clients.
  * Completing a sudo full refresh now postpones the smart refresh by
    ldap_sudo_smart_refresh_interval value. This ensure that the smart
    refresh is not run too soon after a successful full refresh.
  * If debug_backtrace_enabled is set to true then on any error all prior
    debug messages (to some limit) are printed even if debug_level is set
    to low value.
  * Besides trusted domains known by the forest root, trusted domains known
    by the local domain are used as well.
  * New configuration option offline_timeout_random_offset to control random
    factor in backend probing interval when SSSD is in offline mode.
  * ad_gpo_implicit_deny is now respected even if there are no
    applicable GPOs present.
  * During the IPA subdomains request a failure in reading a single specific
    configuration option is not considered fatal and the request will
    continue.
  * Unknown IPA id-range types are not considered as an error
- Changes from version 2.4.2
  * Default value of "user" config option was fixed into
    accordance with man page, i.e. default is "root".
  * pam_sss_gss now support authentication indicators to further
    harden the authentication.
- Changes from version 2.4.1
  * New PAM module pam_sss_gss for authentication using GSSAPI.
  * case_sensitive=Preserving can now be set for trusted domains
    with AD and IPA providers.
  * krb5_use_subdomain_realm=True can now be used when sub-domain
    user principal names have upnSuffixes which are not known in
    the parent domain. SSSD will try to send the Kerberos request
    directly to a KDC of the sub-domain.
  * SYSLOG_IDENTIFIER was renamed to SSSD_PRG_NAME in journald
    output, to avoid issues with PID parsing in rsyslog
    (BSD-style forwarder) output.
  * Added pam_gssapi_check_upn to enforce authentication only
    with principal that can be associated with target user.
  * Added pam_gssapi_services to list PAM services that can
    authenticate using GSSAPI.
- Changes from version 2.4.0
  * Session recording can now exclude specific users or groups
    when scope is set to all (see exclude_users and
    exclude_groups options).
  * Active Directory provider now sends CLDAP pings over UDP
    protocol to Domain Controllers in parallel to determine site
    and forest to speed up server discovery.
- Changes from version 2.3.1
  * Domains can be now explicitly enabled or disabled using
    enable option in domain section. This can be especially used
    in configuration snippets.
  * New configuration options memcache_size_passwd,
    memcache_size_group, memcache_size_initgroups that can be
    used to control memory cache size.
  * Fixed several regressions in GPO processing introduced in
    sssd-2.3.0
  * Fixed regression in PAM responder: failures in cache only
    lookups are no longer considered fatal.
  * Fixed regression in proxy provider: pwfield=x is now default
    value only for sssd-shadowutils target.
- Changes from version 2.3.0
  * SSSD can now handle hosts and networks nsswitch databases
    (see resolve_provider option).
  * By default, authentication request only refresh user's
    initgroups if it is expired or there is not active user's
    session (see pam_initgroups_scheme option).
  * OpenSSL is used as default crypto provider, NSS is deprecated.
  * The AD provider now defaults to GSS-SPNEGO SASL mechanism
    (see ldap_sasl_mech option).
  * The AD provider can now be configured to use only ldaps port
    (see ad_use_ldaps option).
  * SSSD now accepts host entries from GPO's security filter.
  * New debug level (0x10000) added for low level LDB messages
    only (see sssd.conf man page).
- Changes from version 2.2.3
  * allow_missing_name now treats empty strings the same as
    missing names.
  * "soft_ocsp" and "soft_crl" options have been added to make
    the checks for revoked certificates more flexible if the
    system is offline.
  * Smart card authentication in polkit is now allowed by default.
  * Handling of FreeIPA users and groups containing ‘@’ sign now works.
  * Issue when autofs was unable to mount shares was fixed.
  * SSSD was unable to hande ldap_uri containing URIs with
    different port numbers, which has been rectified.
- Changes from version 2.2.2
  * Removing domain from ad_enabled_domain was not reflected in SSSD’s cache.
    This has been fixed.
  * Because of a race condition SSSD could crash during shutdown. The race
    condition was fixed.
  * Fixed a bug that limited number of external groups fetched by SSSD
    to 2000.
  * pam_sss now properly creates gnome keyring during login.
  * SSSD with KCM could wrongly pick older ccache instead of the latest one
    after login. This was fixed.
- Changes from version 2.2.1
  * New options were added which allow sssd-kcm to handle bigger data.
  * SSSD can now automatically refresh cached user data from subdomains
    in IPA/AD trust.
  * Fixed issue with SSSD hanging when connecting to non-responsive server
    with ldaps://.
  * SSSD is now restarted by systemd after crashes.
  * Fixed refression when dyndns_update was set to True and
    dyndns_refresh_interval was not set or set to 0 then DNS records were
    not updated at all.
  * Fixed issue when default_domain_suffix was used with files provider
    and caused all results from files domain to be fully qualified.
  * Fixed issue with sudo rules not being visible on OpenLDAP servers
  * Fixed crash with auth_provider = proxy that prevented logins
- Changes from version 2.2.0
  * The Kerberos provider can now include more KDC addresses or
    host names when writing data for the Kerberos locator plugin.
  * The 2FA prompting can now be configured.
  * The LDAP authentication provider now allows to use a
    different method of changing LDAP passwords using a modify
    operation in addition to the default extended operation.
  * The "auto_private_groups" configuration option now takes a
    new value hybrid.
  * A new option "ad_gpo_ignore_unreadable" was added.
  * The "cached_auth_timeout" parameter is now inherited by
    trusted domains.
  * The "ldap_sasl_mech" option now accepts another mechanism
    "GSS-SPNEGO" in addition to "GSSAPI".
  * The sssctl tool has two new commands, "cert-show" and "cert-map".
- Changes from version 2.1.0
  * Any provider can now match and map certificates to user identities.
  * pam_sss can now be configured to only perform Smart Card
    authentication or return an error if this is not possible.
  * pam_sss can also prompt the user to insert a Smart Card if,
    during an authentication it is not available.
  * It is now possible to refresh the KCM configuration without restarting
    the whole SSSD deamon
  * A new configuration option ad_gpo_implicit_deny was added.
    This option (when set to True) can be used to deny access to
    users even if there is not applicable GPO.
  * The dynamic DNS update can now batch DNS updates to include
    all address family updates in a single transaction.
- Changes from version 2.0.0
  * The Python API for managing users and groups in local domains
    (id_provider=local) was removed completely. The local
    provider (id_provider=local) and the command line tools to
    manage users and groups in the local domains, such as
    sss_useradd is not built anymore.
  * The LDAP provider had a special-case branch for evaluating
    group memberships with the RFC2307bis schema when group
    nesting was explicitly disabled. This codepath is removed.
  * The ldap_groups_use_matching_rule_in_chain and
    ldap_initgroups_use_matching_rule_in_chain options and the code
    that evaluated them was removed.
  * The "ldap_sudo_include_regexp" option changed its default
    value from true to false. Wildcards in the sudoHost LDAP
    attribute are no longer evaluated. This was costly to
    evaluate on the LDAP server side and at the same time rarely
    used.
  * The KCM responder has a new back end to store credential caches
    in a local database
  * The list of PAM services which are allowed to authenticate
    using a Smart Card is now configurable using a new option
    pam_p11_allowed_services.
- Make cifs-idmap plugin (idmapwb.so) use update-alternatives
  mechanism to be able to switch between cifs-utils and sssd;
  (bsc#1182682).
- Build sssd's KCM
- Drop obsolete patches:
  + 0001-SUDO-Create-the-socket-with-stricter-permissions.patch
  + 0002-intg-Do-not-hardcode-nsslibdir.patch
  + 0003-MONITOR-Do-not-use-two-configuration-databases.patch
  + 0004-Strip-whitespaces-in-netgroup-triple.patch
  + 0005-nss-sssd-returns-for-emtpy-home-directories.patch
  + 0006-Rotate-child-log-files.patch
  + 0007-nss-add-a-netgroup-counter-to-struct-nss_enum_index.patch
  + 0008-nss-initialize-nss_enum_index-in-nss_setnetgrent.patch
  + 0009-NSS-nss_clear_netgroup_hash_table-do-not-free-data.patch
  + 0010-SUDO-Allow-defaults-sudoRole-without-sudoUser-attrib.patch
  + 0011-GPO-Add-option-ad_gpo_ignore_unreadable.patch
  + 0012-nss-use-enumeration-context-as-talloc-parent-for-cac.patch
  + 0013-Revert-LDAP-IPA-add-local-email-address-to-aliases.patch
  + 0014-util-Remove-the-unused-function-is_email_from_domain.patch
  + 0015-MONITOR-Propagate-error-when-resolv.conf-does-not-ex.patch
  + 0016-MONITOR-Add-a-new-option-to-control-resolv.conf-moni.patch
  + 0017-MONITOR-Resolve-symlinks-setting-the-inotify-watcher.patch
  + 0018-SYSDB-Delete-linked-local-user-overrides-when-deleti.patch
  + 0019-winbind-idmap-plugin-support-inferface-version-6.patch
  + 0020-winbind-idmap-plugin-fix-detection.patch
  + 0021-nss-imap-add-sss_nss_getsidbyuid-and-sss_nss_getsidb.patch
  + 0022-cifs-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0023-winbind-idmap-plugin-use-new-sss_nss_idmap-calls.patch
  + 0024-libwbclient-sssd-use-new-sss_nss_idmap-calls.patch
  + 0025-pysss_nss_idmap-add-python-bindings-for-new-sss_nss_.patch
  + 0026-winbind-idmap-plugin-update-struct-idmap_domain-to-l.patch
  + 0027-utils-make-N_ELEMENTS-public.patch
  + 0028-ad-replace-ARRAY_SIZE-with-N_ELEMENTS.patch
  + sssd-gpo_host_security_filter-1.16.1.patch
  + 0001-Resolve-computer-lookup-failure-when-sam-cn.patch
  + 0031-ad-Add-support-for-passing-add-samba-data-to-adcli.patch
  + 0032-AD-use-getaddrinfo-with-AI_CANONNAME-to-find-the-FQD.patch
  + 0033-Fix-build-failure-against-samba-4.12.0rc1.patch
  + 0034-Use-ndr_pull_steal_switch_value-for-modern-samba-ver.patch
  + 0035-ad_gpo_ndr.c-refresh-ndr_-methods-from-samba-4.12.patch
  + 0036-ad_gpo_ndr.c-more-ndr-updates.patch
  + 0037-UTIL-Fix-compilation-with-curl-7.62.0.patch
  + 0038-CACHE-Create-timestamp-if-missing.patch
  + 0039-sss_cache-Do-not-fail-for-missing-domains.patch</changelog>
  <changelog author="scabrero@suse.de" date="1641902400">- Remove libsmbclient-devel BuildRequires in favor of
  pkgconfig(smbclient)</changelog>
  <changelog author="scabrero@suse.de" date="1642075200">- Update the private ldb modules installation following libldb2
  changes from /usr/lib64/ldb/samba to /usr/lib64/ldb2/modules/ldb/samba</changelog>
  <changelog author="scabrero@suse.de" date="1644408000">- Remove caches only when performing a package downgrade. The sssd
  daemon takes care of upgrading the database format when necessary
  (bsc#1195552)</changelog>
  <changelog author="scabrero@suse.de" date="1645444800">- Fix 32-bit libraries package. Libraries were moved from sssd to
  sssd-common to fix bsc#1182058 and baselibs.conf was not updated
  accordingly; (bsc#1196166);</changelog>
  <changelog author="scabrero@suse.de" date="1646049600">- Add 'ldap_ignore_unreadable_references' parameter to skip
  unreadable objects referenced by 'member' attributte;
  (bsc#1190775); (gh#SSSD/sssd#4893); Add patch
  0001-ldap-ignore-unreadable-references.patch</changelog>
  <changelog author="scabrero@suse.de" date="1647259200">- Fix shell command injection in sssctl via the logs-fetch and
  cache-expire subcommands; (CVE-2021-3621); (bsc#1189492); Add
  0002-TOOLS-replace-system-with-execvp-to-avoid-execution-.patch</changelog>
  <changelog author="dmulder@suse.com" date="1664193600">- Fix sdap_access_host No matching host rule found;
  (bsc#1202559); Add patch
  0001-Fix-sdap_access_host-No-matching-host-rule-found.patch</changelog>
  <changelog author="nopower@suse.com" date="1690372800">- Fix sssd entering failed state under heavy load by adding
  watchdog to monitor sbus_call_DBus_Hello_send(); (bsc#1213283);
  Add patch 0001-sssd-watchdog.patch</changelog>
  <changelog author="scabrero@suse.de" date="1696248000">- ldap password policy: return failure if there are no grace logins
  left; (bsc#1214434); Add patch
  0005-ldap-return-failure-if-there-are-no-grace-logins-lef.patch</changelog>
  <changelog author="scabrero@suse.de" date="1702296000">- Only send cldap-ping to our local domain; (bsc#1217319);
  (gh#SSSD/sssd#5822);
- Do not write kdc info file for GC lookup; (bsc#1217319);
  (gh#SSSD/sssd#5956);
- Add patch 0006-bsc1217319-gh5875-gh5956.patch</changelog>
  <changelog author="scabrero@suse.de" date="1703592000">- Decrease sudo responder log level when searching non-existent
  entries; (bsc#1216907); Add patch
  0007-SUDO-decrease-log-level-in-case-object-wasn-t-found.patch</changelog>
  <changelog author="scabrero@suse.de" date="1704456000">- Update shadowLastChanged attribute during LDAP password change;
  (bsc#1218537); Add patch
  0008-Update-shadowLastChanged-attribute-during-LDAP-passw.patch</changelog>
  <changelog author="scabrero@suse.com" date="1713873600">- Fix possible race evaluating GPO based access policies;
  (CVE-2023-3758); (bsc#1223100); Add patch
  0009-ad-gpo-use-hash-to-store-intermediate-results.patch</changelog>
</package>
<package pkgid="5b1ea8b0f9c800cc556ffa98b89d89f7a9949abc56098e88d17b7f3467da2bbc" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="8822083bdcf1810d65c65a45f5296e9d070fde90183acdcf0a98407e8f2d61ef" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="01ec7dfd8e0a34fb09dde713a9f458a6fe998729b9188777b19bb9b4791099f1" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.10.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1652184000">- Enable PRU architecture for AM335x platforms</changelog>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
</package>
<package pkgid="29d19930d7f6d35de2debc870d337d3c7c067dd661081a8bf0db58932f65e510" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.16.1"/>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
  <changelog author="rguenther@suse.com" date="1692273600">- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
  with variable length stack allocations on aarch64.
  Fixes CVE-2023-4039.  [bsc#1214052]</changelog>
</package>
<package pkgid="9860973ebd1ea92d54f268924f8c1ca7ec78600e1cf863bd487b56752f23ee2c" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.16.1"/>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
  <changelog author="rguenther@suse.com" date="1692273600">- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
  with variable length stack allocations on aarch64.
  Fixes CVE-2023-4039.  [bsc#1214052]</changelog>
</package>
<package pkgid="f2ac9026651a3752ae43eb0b4c81fe098c421a4d73916f7885a3d741eaa85b8f" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="12.3.0+git1204" rel="150000.1.16.1"/>
  <changelog author="rguenther@suse.com" date="1652788800">- Update to gcc-12 branch head, 325d82b08696da17fb26bd2e1b6b, git78</changelog>
  <changelog author="rguenther@suse.com" date="1656504000">- Update to gcc-12 branch head, 7811663964aa7e31c3939b859bb, git215
  * includes libgomp mold linker detection fix
  * includes nvptx offload compiler build fix
  * includes s390x tsan executable stack fix</changelog>
  <changelog author="rguenther@suse.com" date="1658404800">- Update to gcc-12 branch head, 4f15d2234608e82159d030dadb1, git287
  * includes build fixes when building against glibc 2.33.</changelog>
  <changelog author="rguenther@suse.com" date="1658836800">- Add Provides of libstdc++6-pp-gccN to libstdc++6-pp.  [bsc#1201848]</changelog>
  <changelog author="mliska@suse.cz" date="1659960000">- Remove workaround for obs-service-format_spec_file.</changelog>
  <changelog author="rguenther@suse.com" date="1660305600">- Update to gcc-12 branch head, 6b7d570a5001bb79e34c0d1626a, git372
  * includes release candidate for GCC 12.2</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1661083200">- Allow cross-pru-gcc12-bootstrap for armv7l architecture.
  PRU architecture is used for real-time MCUs embedded into TI
  armv7l and aarch64 SoCs. We need to have cross-pru-gcc12 for
  armv7l in order to build both host applications and PRU firmware
  during the same build.</changelog>
  <changelog author="mliska@suse.cz" date="1661774400">- Add gcc12-fifo-jobserver-support.patch that adds support
  for FIFO jobserver for make.</changelog>
  <changelog author="rguenther@suse.com" date="1661860800">- Update to gcc-12 branch head, e927d1cf141f221c5a32574bde0, git416
  * includes GCC 12.2 release
  * includes recent fixes backported from trunk</changelog>
  <changelog author="rguenther@suse.com" date="1661947200">- Prune invalid-license rpmlint warnings, the SLE12 codestream
  doesn't get fixed but FF applies there, too.  [bsc#1185337]</changelog>
  <changelog author="dmueller@suse.com" date="1664193600">- add gcc12-riscv-inline-atomics.patch,
  gcc12-riscv-pthread.patch: handle subword size inline atomics
  (needed by several openSUSE packages)</changelog>
  <changelog author="rguenther@suse.com" date="1665662400">- Update embedded newlib to version 4.2.0
  * includes newlib-4.1.0-aligned_alloc.patch</changelog>
  <changelog author="rguenther@suse.com" date="1666267200">- Update to gcc-12 branch head, 0aaef83351473e8f4eb774f8f99, git537</changelog>
  <changelog author="dmueller@suse.com" date="1669204800">- avoid trailing backslashes at the end of post install scripts</changelog>
  <changelog author="rguenther@suse.com" date="1671710400">- Update to gcc-12 branch head, e4b5fec75aa8d0d01f6e042ec28, git696
  * remove gcc12-fifo-jobserver-support.patch which is now
    included upstream</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Don't rely on %usrmerged, set it based on standard %suse_version</changelog>
  <changelog author="rguenther@suse.com" date="1674561600">- Update to gcc-12 branch head, 193f7e62815b4089dfaed4c2bd3, git749</changelog>
  <changelog author="mliska@suse.cz" date="1680091200">- Speed up builds with --enable-link-serialization.</changelog>
  <changelog author="rguenther@suse.com" date="1683547200">- Update to GCC 12.3 release, 0c61aa720e62f1baf0bfd178e283, git1204
  * includes regression bug fixes
- Add gcc12-testsuite-fixes.patch to pick testsuite related fixes
  from the branch after the release.</changelog>
  <changelog author="rguenther@suse.com" date="1692273600">- Add gcc12-aarch64-bsc1214052.patch to fix -fstack-protector issues
  with variable length stack allocations on aarch64.
  Fixes CVE-2023-4039.  [bsc#1214052]</changelog>
</package>
<package pkgid="bef4355b201cfb6ce68d32843281bde86a0d1a09346eaf3a89a786e7d2acab98" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="f41cae9fa57f23c34e4f653fe800fbce42ef8d51f9e75944d490677904ee00f2" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="7590b7360d613712900026e0240e94952e484e7af6d76dd3239a935176911f9e" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.3.3"/>
  <changelog author="mliska@suse.cz" date="1679659200">- Use --enable-link-serialization rather that --enable-link-mutex,
  the benefit of the former one is that the linker jobs are not
  holding tokens of the make's jobserver.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1679659201">- Add %limit_build for gcc13 to avoid OOM</changelog>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
</package>
<package pkgid="e52aee15913ebcbd655b65c38021d92da48ddd11697d9583e7b34f7466abe671" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="7138fd54816c4a19d3a3498f6049b29e307ad14796c265dc848ed0b86dd19ec5" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="a9200cb66263a1c7af89bdb24c54799056fdeeff8dc77d6307a361a1822663e4" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="13.2.1+git7813" rel="150000.1.6.1"/>
  <changelog author="mliska@suse.cz" date="1680609600">- Bump to d0b961b802dd7d9d555ff4515835a479329326e9, git6995.</changelog>
  <changelog author="schwab@suse.de" date="1681214400">- riscv-atomic.patch: RISC-V: Add support for inlining subword atomic
  operations
- riscv-pthread.patch: Don't add -latomic with -pthread</changelog>
  <changelog author="mliska@suse.cz" date="1681214401">- Add new x86-related intrinsics (amxcomplexintrin.h).</changelog>
  <changelog author="mliska@suse.cz" date="1681300800">- Bump to d339e9802f758e051b0a1ef6db732ff846cbf4e3, git7162.</changelog>
  <changelog author="rguenther@suse.com" date="1682078400">- Bump to f980561c60b0446cc427595198d7f3f4f90e0924, git7231.
  * fixes compile-time issue reported in [bsc#1210557]
  * GCC 13.1 RC3
- Disable building the rust frontend.</changelog>
  <changelog author="rguenther@suse.com" date="1682596800">- Bump to 910735c5d7ce7607384fc1eec4189e90c8ae5c84, git7256.
  * Includes GCC 13.1 release and first bugfixes
- Update riscv-atomic.patch from the version committed upstream.</changelog>
  <changelog author="rguenther@suse.com" date="1684756800">- Bump to dd36656ada05731c069ecd5b1878380294fb1f3e, git7364.
  * Includes the RISC-V atomic changes
- Remove riscv-atomic.patch and riscv-pthread.patch now included
- Make libstdc++6-devel packages own their directories since they
  can be installed standalone.  [bsc#1211427]</changelog>
  <changelog author="rguenther@suse.com" date="1686657600">- Raise architecture levels for ALP.  [PED-153]
  * Raise POWER architecture baseline to power9.  [PED-2005]
  * Raise x86-64 architecture baseline to x86-64-v2 for ALP.  [PED-252]
  * Delay raising s390x architecture baseline to z14.  [PED-253]</changelog>
  <changelog author="rguenther@suse.com" date="1687953600">- Bump to a533ded17fb13cbbb2fa5133ecd470360f66c5cf, git7489.
- Add gcc13-pr110334.patch to fix missed optimization in Skia
  resulting in Firefox crashes when building with LTO.  [boo#1212101]</changelog>
  <changelog author="rguenther@suse.com" date="1688990400">- Bump to f9781fcf733ca3afe5b5811afd8ecbb18d9d3a11, git7552
- Remove gcc13-pr110334.patch again as it breaks libreoffice build.</changelog>
  <changelog author="schwab@suse.de" date="1689076800">- Also handle -static-pie in the default-PIE specs</changelog>
  <changelog author="rguenther@suse.com" date="1689854400">- Bump to 9aac37ab8a7b919a89c6d64bc7107a8436996e93, git7597
  * GCC 13.2 RC1
- Add rpmlint filter for SLE12 complaining about invalid licenses.</changelog>
  <changelog author="schwab@suse.de" date="1690977600">- gdcflags.patch: Use substituted GDCFLAGS
- Filter out -Werror=return-type from D compile flags</changelog>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
</package>
<package pkgid="1a0fd3a722f2249af8d7a923683c5f6b9ed0f8175ed03d13730979dc38a332ba" name="libstdc++6" arch="aarch64">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="64e9a0826a7c31b969cba3ab8b600dd10604de5092e0339112539dd094189c5a" name="libstdc++6" arch="s390x">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="e76f8a955ab848f718c3117d8e5dab775d23adf94396afb372b9eda820e49b2f" name="libstdc++6" arch="x86_64">
  <version epoch="0" ver="13.2.1+git8285" rel="150000.1.9.1"/>
  <changelog author="rguenther@suse.com" date="1691064000">- Bump to cc279d6c64562f05019e1d12d0d825f9391b5553, git7683
  * Includes GCC 13.2 release
  * Includes patch to fix broken testcase in libbacktrace, fixing
    build problems on SLES 12</changelog>
  <changelog author="msuchanek@suse.com" date="1692360000">- Raise Power architecture baseline to Power9 only for ALP (boo#1213915).</changelog>
  <changelog author="rguenther@suse.com" date="1692792000">- Turn cross compiler to s390x to a glibc cross.  [bsc#1214460]</changelog>
  <changelog author="rguenther@suse.com" date="1693224000">- Disable building glibc cross compilers on SLE based code streams,
  the required cross-glibc packages are not available there.
- Disable building avr cross on non-openSUSE code streams since
  avr-libc isn't available there.
- Disable building newlib cross compilers on non-openSUSE code streams
  since newlib isn't available there.
- Fix typo preventing s390x compiler build.
- Raise s390x architecture baseline to z14 for ALP.  [PED-253]
- Turn cross compiler to ppc64le to a glibc cross.</changelog>
  <changelog author="rguenther@suse.com" date="1694520000">- Bump to b96e66fd4ef3e36983969fb8cdd1956f551a074b, git7831
  * Includes many bugfixes
  * Includes fix to -fstack-protector issues with variable
    length stack allocations on aarch64.  [bsc#1214052] (CVE-2023-4039)</changelog>
  <changelog author="dmueller@suse.com" date="1695384000">- add pr111411.patch (bsc#1215427)</changelog>
  <changelog author="rguenther@suse.com" date="1699358400">- Add gcc13-bsc1216664.patch, works around SAP ASE DB crash during
  C++ standard library initialization.  [bsc#1216664]</changelog>
  <changelog author="rguenther@suse.com" date="1700827200">- Avoid update-alternatives dependency for accelerator crosses.
- Package tool links to llvm in cross-amdgcn-gcc13 rather than in
  cross-amdgcn-newlib13-devel since that also has the dependence.
- Depend on llvmVER instead of llvm with VER equal to
  %product_libs_llvm_ver where available and adjust tool discovery
  accordingly.  This should also properly trigger re-builds when
  the patchlevel version of llvmVER changes, possibly changing
  the binary names we link to.  [bsc#1217450]</changelog>
  <changelog author="rguenther@suse.com" date="1701345600">- Update to gcc-13 branch head, 741743c028dc00f27b9c8b1d5, git8109
  * Includes fix for building mariadb on i686.  [bsc#1217667]
  * Remove pr111411.patch contained in the update.</changelog>
  <changelog author="rguenther@suse.com" date="1704801600">- Update to gcc-13 branch head, 36ddb5230f56a30317630a928, git8205</changelog>
  <changelog author="rguenther@suse.com" date="1705579200">- Package m2rte.so plugin in the gcc13-m2 sub-package rather than
  in gcc13-devel.  [boo#1210959]
- Require libstdc++6-devel-gcc13 from gcc13-m2 as m2 programs
  are linked against libstdc++6.</changelog>
  <changelog author="rguenther@suse.com" date="1705924800">- Add cross-X-newlib-devel requires to newlib cross compilers.
  [boo#1219031]</changelog>
  <changelog author="rguenther@suse.com" date="1706184000">- Update to gcc-13 branch head, fc7d87e0ffadca49bec29b2107, git8250
  * Includes fix for building TVM.  [boo#1218492]</changelog>
  <changelog author="rguenther@suse.com" date="1707134400">- Use %{_target_cpu} to determine host and build.</changelog>
  <changelog author="rguenther@suse.com" date="1707220800">- Update to gcc-13 branch head, 67ac78caf31f7cb3202177e642, git8285
- Add gcc13-pr88345-min-func-alignment.diff to add support for
  - fmin-function-alignment.  [bsc#1214934]</changelog>
  <changelog author="rguenther@suse.com" date="1707393600">- Add gcc13-sanitizer-remove-crypt-interception.patch to remove
  crypt and crypt_r interceptors.  The crypt API change in SLE15 SP3
  breaks them.  [bsc#1219520]</changelog>
  <changelog author="rguenther@suse.com" date="1708603200">- Use %patch -P N instead of %patchN.</changelog>
  <changelog author="rguenther@suse.com" date="1709640000">- Fix libgccjit-devel dependency, a newer shared library is OK.
- Fix libgccjit dependency, the corresponding compiler isn't required.</changelog>
  <changelog author="rguenther@suse.com" date="1710331200">- Revert libgccjit dependency change.  [boo#1220724]</changelog>
  <changelog author="rguenther@suse.com" date="1710936000">- Add gcc13-pr111731.patch to fix unwinding for JIT code.
  [bsc#1221239]</changelog>
</package>
<package pkgid="dd7870531229aff557506426d3a271a7141cb0c07c775dce16d35643b3c5160a" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="560b5bae3243799d99eaf77b26e630a4d2010388dc3850a5881923dc2412ac90" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="0b3554664d871a09c45674da9513c468be4744f719216fd3b788d1642be66821" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="4cf8174d4d493c3a755dc5f8ca3a8f128c591caf838497c60db387bd82169615" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.33.1"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="a9de3ec0a471361583a559fd592d8af22a4edc7618f358d753488f8030770f4f" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.33.1"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="7fc7a391353c3ea7a13c18993d9747da4a6e53dff42a44ebe118ae03ebd130cf" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.33.1"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="eb5b5a502916bf9031f59defc16768a3bf73dc59d347cbc48efc4778d2bd21d1" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="0722bbd672b17ad3e69cb21fb1e3bd3db3f333afddc96b4430cd3b1af312ae49" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="a4edda3110a9a6a68697333345fab4d4590ee56aa28d8d14eb011e3253d30e62" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="abd12a4046a13b802662bd15d92c45a6dcddfb85464964fcd8208cc2f3c2c517" name="libsystemd0" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="5d24c054faa5b6821879d1ccb629334007b9aafb59a1de03d363143c85dab7b1" name="libsystemd0" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="abcf2c4d08ef5b8dc4cd7b02036ab2fea9aa884baf5fbb1e5da7197831767fc9" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="ca2b7a2b635686e70f9b3f3fe61c762c3fbbdce21c8985da9c094b264df48a94" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="320e030ae83cd2f5fad7d6a9e5a09d061b83e630b093e420f3125d81a3756a58" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="228558555f1ace0f24049bfdf1425b17d7128a576ff4a9c4848fc2c6045a605b" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.28.1"/>
  <changelog author="pgajdos@suse.com" date="1539777600">- security update
  * CVE-2018-17100 [bsc#1108637]
    + tiff-CVE-2018-17100.patch
  * CVE-2018-17101 [bsc#1108627]
    + tiff-CVE-2018-17101.patch
  * CVE-2018-17795 [bsc#1110358]
    % tiff-4.0.9-bsc1046077-CVE-2017-9935.patch renamed to
    tiff-CVE-2017-9935,CVE-2018-17795.patch
  * CVE-2018-16335 [bsc#1106853]
    % tiff-CVE-2017-11613.patch renamed to
    tiff-CVE-2017-11613,CVE-2018-16335,15209.patch
- add a possibility to build with ASAN</changelog>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
</package>
<package pkgid="5afc04acdd99ed909e39c29a04d5b83e217343bbbcd5ed0723e6e1854915ec67" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="64b6126bb13cb09f3196073b60bc45731e0b34d4254c2a3909160504fe5c3f4e" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="450d9b39625ae067a25bfb8b82f3a18dcf2a0f456e1241e8c3f96dd7d99f197a" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.32.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- asan_build: build ASAN included
- debug_build: build more suitable for debugging</changelog>
  <changelog author="pgajdos@suse.com" date="1542024001">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
</package>
<package pkgid="9176dcdecb3c1b72bc2364baa4bb50452fe0df4c10dbe10e834065d027564457" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="0c8d64d251804403af8ecf4f8e1fb659e08ad9e13fbbc9ebbd70a377b58776eb" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="2f1c5b5e2a44f844293b7c508826efb92a3ec8973844905d58d95ae4668b41d6" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.35.1"/>
  <changelog author="pgajdos@suse.com" date="1542024000">- security update
  * CVE-2018-18661 [bsc#1113672]
    + tiff-CVE-2018-18661.patch
  * CVE-2018-18557 [bsc#1113094]
    + tiff-CVE-2018-18557.patch
  * CVE-2018-12900 [bsc#1099257]
    + tiff-CVE-2018-12900.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
</package>
<package pkgid="712447a8c2e6d19449e143d08911890b3af1b4eb46aa352f15b662bdfa1c09ac" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="fa696969eb3b397029da7bc622a2307ac0907043aa949526b08bc39f25666a47" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="c7b1e0c1661a396cb24b5ee7822e0ccd74131e9296bd465bbb852d093a28901a" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.38.1"/>
  <changelog author="pgajdos@suse.com" date="1542628800">- security update
  * CVE-2018-19210 [bsc#1115717]
    + tiff-CVE-2018-19210.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
</package>
<package pkgid="d7fbde52a4f5d643546dd61561829949eef319401989365322013a82978ccb0c" name="libtiff5" arch="aarch64">
  <version epoch="0" ver="4.0.9" rel="150000.45.41.1"/>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
</package>
<package pkgid="e06824b70767823122765ffed6b9a9b4f3f8bf5615415531fb995313cf9313de" name="libtiff5" arch="s390x">
  <version epoch="0" ver="4.0.9" rel="150000.45.41.1"/>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
</package>
<package pkgid="a0f6a79c1dcea73e5959c269d95d7d044ce4c9e095abcf8d5b8420cc83c1f22d" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="150000.45.41.1"/>
  <changelog author="pgajdos@suse.com" date="1548849600">- extend tiff-CVE-2018-19210.patch and rename it to
  tiff-CVE-2018-17000,19210.patch [bsc#1108606c#11]
  * solves CVE-2018-19210 [bsc#1115717] and CVE-2018-17000 [bsc#1108606]</changelog>
  <changelog author="mvetter@suse.com" date="1549281600">- security update
  * CVE-2019-6128 [bsc#1121626]
    + tiff-CVE-2019-6128.patch</changelog>
  <changelog author="mvetter@suse.com" date="1549972800">- security update
  * CVE-2019-7663 [bsc#1125113]
    + tiff-CVE-2019-7663.patch</changelog>
  <changelog author="mvetter@suse.com" date="1573041600">- security update: Fix integer overflow in _TIFFCheckMalloc()
  * CVE-2019-14973 [bsc#1146608]
    + tiff-CVE-2019-14973.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1573041601">- security update: amend patch to fix test
- modified patches
  % tiff-CVE-2019-14973.patch (refreshed)</changelog>
  <changelog author="mvetter@suse.com" date="1642420800">- security update: Fix buffer overwrite
  * CVE-2019-17546[bsc#1154365]
    + tiff-CVE-2019-17546.patch
- security update: Fix heap based buffer overflow in pal2rgb
  * CVE-2017-17095[bsc#1071031]
    + tiff-CVE-2017-17095.patch
- security update: Fix OOB in _TIFFmemcpy
  * CVE-2022-22844[bsc#1194539]
    + tiff-CVE-2022-22844.patch
- security update: Fix memory allocation failure in tif_read.c
  * CVE-2020-35521[bsc#1182808] CVE-2020-35522[bsc#1182809]
    + tiff-CVE-2020-35521,CVE-2020-35522.patch
- security update: Fix DOS via invertImage()
  * CVE-2020-19131[bsc#1190312]
    + tiff-CVE-2020-19131.patch
- security update: Fix heap-based buffer overflow in TIFF2PDF tool
  * CVE-2020-35524[bsc#1182812]
    + tiff-CVE-2020-35524.patch
- security update: Fix integer overflow in tif_getimage
  * CVE-2020-35523 [bsc#1182811]
    + tiff-CVE-2020-35523.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838400">- security update
  * CVE-2022-1056 [bsc#1197631]
  * CVE-2022-0891 [bsc#1197068]
    + tiff-CVE-2022-1056,CVE-2022-0891.patch</changelog>
  <changelog author="mvetter@suse.com" date="1651838401">- security update
  * CVE-2022-0561 [bsc#1195964]
    + tiff-CVE-2022-0561.patch
  * CVE-2022-0562 [bsc#1195965]
    + tiff-CVE-2022-0562.patch
  * CVE-2022-0865 [bsc#1197066]
    + tiff-CVE-2022-0865.patch
  * CVE-2022-0909 [bsc#1197072]
    + tiff-CVE-2022-0909.patch
  * CVE-2022-0924 [bsc#1197073]
    + tiff-CVE-2022-0924.patch
  * CVE-2022-0908 [bsc#1197074]
    + tiff-CVE-2022-0908.patch</changelog>
  <changelog author="mvetter@suse.com" date="1657108800">- security update
  * CVE-2022-2056 [bsc#1201176]
  * CVE-2022-2057 [bsc#1201175]
  * CVE-2022-2058 [bsc#1201174]
    + tiff-CVE-2022-2056,CVE-2022-2057,CVE-2022-2058.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659355200">- security update:
  * CVE-2022-34526 [bsc#1202026]
    + tiff-CVE-2022-34526.patch</changelog>
  <changelog author="mvetter@suse.com" date="1659528000">- CVE-2022-34266 [bsc#1201971] and [bsc#1201723]:
  Rename tiff-CVE-2022-0561.patch to
  tiff-CVE-2022-0561,CVE-2022-34266.patch
  This CVE is actually a duplicate.</changelog>
  <changelog author="mvetter@suse.com" date="1666008000">- security update:
  * CVE-2022-2519 [bsc#1202968]
  * CVE-2022-2520 [bsc#1202973]
  * CVE-2022-2521 [bsc#1202971]
    + tiff-CVE-2022-2519,CVE-2022-2520,CVE-2022-2521.patch
  * CVE-2022-2867 [bsc#1202466]
  * CVE-2022-2868 [bsc#1202467]
  * CVE-2022-2869 [bsc#1202468]
    + tiff-CVE-2022-2867,CVE-2022-2868,CVE-2022-2869.patch</changelog>
  <changelog author="mvetter@suse.com" date="1668340800">- security update:
  * CVE-2022-3597 [bsc#1204641]
  * CVE-2022-3626 [bsc#1204644]
  * CVE-2022-3627 [bsc#1204645]
    + tiff-CVE-2022-3597,CVE-2022-3626,CVE-2022-3627.patch
  * CVE-2022-3599 [bsc#1204643]
    + tiff-CVE-2022-3599.patch
  * CVE-2022-3970 [bsc#1205392]
    + tiff-CVE-2022-3970.patch</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- security update:
  * CVE-2022-3570 [bsc#1205422]
  * CVE-2022-3598 [bsc#1204642]
    + tiff-CVE-2022-3598,3570.patch</changelog>
  <changelog author="mvetter@suse.com" date="1674734400">- security update:
  * CVE-2022-48281 [bsc#1207413]
    + tiff-CVE-2022-48281.patch</changelog>
  <changelog author="mvetter@suse.com" date="1684497600">- security update:
  * CVE-2023-0795 [bsc#1208226]
  * CVE-2023-0796 [bsc#1208227]
  * CVE-2023-0797 [bsc#1208228]
  * CVE-2023-0798 [bsc#1208229]
  * CVE-2023-0799 [bsc#1208230]
  * CVE-2023-25433 [bsc#1212883]
    + tiff-CVE-2023-0795,CVE-2023-0796,CVE-2023-0797,CVE-2023-0798,CVE-2023-0799.patch
  * CVE-2023-0800 [bsc#1208231]
  * CVE-2023-0801 [bsc#1208232]
  * CVE-2023-0802 [bsc#1208233]
  * CVE-2023-0803 [bsc#1208234]
  * CVE-2023-0804 [bsc#1208236]
    + tiff-CVE-2023-0800,CVE-2023-0801,CVE-2023-0802,CVE-2023-0803,CVE-2023-0804.patch</changelog>
  <changelog author="mvetter@suse.com" date="1698667200">- security update:
  * CVE-2023-38289 [bsc#1213589]
    + tiff-CVE-2023-38289.patch
  * CVE-2023-38288 [bsc#1213590]
    + tiff-CVE-2023-38288.patch
  * CVE-2023-3576 [bsc#1213273]
    + tiff-CVE-2023-3576.patch
  * CVE-2020-18768 [bsc#1214574]
    + tiff-CVE-2020-18768.patch
  * CVE-2023-26966 [bsc#1212881]
    + tiff-CVE-2023-26966.patch
  * CVE-2023-3618 [bsc#1213274]
    + tiff-CVE-2023-3618.patch
  * CVE-2023-2908 [bsc#1212888]
    + tiff-CVE-2023-2908.patch
  * CVE-2023-3316 [bsc#1212535]
    + tiff-CVE-2023-3316.patch</changelog>
  <changelog author="mvetter@suse.com" date="1701864000">- security update:
  * CVE-2023-2731 [bsc#1211478]
    Fix null pointer deference in LZWDecode()
    This patch also contains a required commit which is marked
    to fix CVE-2022-1622 [bsc#1199483] but we are not vulnerable
    to that CVE because relevant code is not present.
    + tiff-CVE-2023-2731.patch
  * CVE-2023-26965 [bsc#1212398]
    Fix heap-based use after free in loadImage()
    + tiff-CVE-2023-26965.patch
  * CVE-2022-40090 [bsc#1214680]
    Fix infinite loop in TIFFReadDirectory()
    + tiff-CVE-2022-40090.patch
  * CVE-2023-1916 [bsc#1210231]
    Fix out-of-bounds read in extractImageSection()
    + tiff-CVE-2023-1916.patch</changelog>
  <changelog author="mvetter@suse.com" date="1706270400">- security update:
  * CVE-2023-52356 [bsc#1219213]
    Fix segfault in TIFFReadRGBATileExt()
    + tiff-CVE-2023-52356.patch</changelog>
  <changelog author="mvetter@suse.com" date="1710331200">- security update:
  * CVE-2023-40745[bsc#1214687] CVE-2023-41175[bsc#1214686] [bsc#1221187]
    CVE-2023-38288[bsc#1213590]
    Fix potential int overflow in raw2tiff.c and tiffcp.c
    Rename tiff-CVE-2023-38288.patch into
    tiff-CVE-2023-38288,CVE-2023-40745,CVE-2023-41175.patch</changelog>
</package>
<package pkgid="c0f8341e8e6b626ec382448c5e0b80aaad89ea4b0dd501b319a78606a647eead" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="85e5265752f2f2926c806d88ad918a4802a192e5fdd7c9863bd9a72b0fe7f3b0" name="libtirpc" arch="src">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="84a52092f2f8ac159ec372cff55eeee3d0d04b38a55d1be2b7f235855952e81b" name="libtirpc-netconfig" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="a4a30e8e4394655710865b55f575d520e8689b2ac66038378d947c5faf1ec981" name="libtirpc-netconfig" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="ad01059eba7c87d88d7bf2dc6a808337d690fe15d58d57c2ba10f70e1700f14e" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="0886d8d15afa22ae01a0c5ef492b904eebd30dc9a41464b9b3837db4bd92dab7" name="libtirpc-netconfig" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="56e02407dd95cc4c492181e59950743d9a1bea57c0153a2c361c91a7537cca66" name="libtirpc-netconfig" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="63350e9e5e3c34343a57bdef59e6cc38b5f6a82668543a21d4312c8ceeeae7e8" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="54298f3dd6e231045ef2b7bb0d16ba6fdc40815d6dd80aa3e3e94589ada7213c" name="libtirpc3" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="46817297bf97a346b5defa5438579b57e9a9d835dee62b7904ce04d534bd6fc3" name="libtirpc3" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="8943d7bf9fa0ab95382455410a88b77ad83deedb0de51d80682176b1ffa7db64" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.20.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
</package>
<package pkgid="00eee553dbd49a939e21865cd9d65074b06dbaf9aa071cd2ccaa1ba55dceb8b7" name="libtirpc3" arch="aarch64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="84295e15637455ef2bb5613eeb5a113b527d9c884f007fcf8115b7aecd370293" name="libtirpc3" arch="s390x">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="e24629a7bd078f4f2fb0a855985ff80b44d77e4e4ad8d441bdb0cbbece0706e3" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.3.4" rel="150300.3.23.1"/>
  <changelog author="kukuk@suse.de" date="1520251200">- Adjust include directory [bsc#1083902]</changelog>
  <changelog author="kukuk@suse.de" date="1521028800">- Update to libtirpc 1.0.3
  - clnt_dg_call: Fix a buffer overflow (CVE-2016-4429)
  - Avoid choosing reserved ports in legacy RPC APIs
  - rpcinfo: change order of version to be tried to 4, 3, 2
  - includes 003-rpc-types.patch
  - includes 004-replace-bzero-with-memset.patch
  - includes 005-missing-includes.patch
  - includes 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  - includes decls.patch
- Drop COPYING.GPLv2, GPLv2 code was removed from library</changelog>
  <changelog author="jengelh@inai.de" date="1521115200">- Remove ineffective --with-pic.</changelog>
  <changelog author="kukuk@suse.de" date="1522929600">- Revert binddynport changes as they break backward compatibility
  [brc#1562169].
  - add 002-revert-binddynport.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1523534400">- fix socket leak introduced by change-rpc-protocol-version-order patch
  (bsc#1087925)
  - add 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1552305600">- Fix SLES 15 - yp_bind_client_create_v3: RPC: Unknown host (bsc#1126096).
  - Add upstream patch
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1571227200">- Updated to libtirpc 1.1.5 rc2 (this includes changes in 1.1.4 release)
  - add libtirpc-1-1-5-rc1.patch and libtirpc-1-1-5-rc2.patch to reflect
    upstream changes after 1.1.4 release
  - remove /etc/bindresvport.blacklist as it's still supported by glibc
    although it's not compiled with --enable-obsolete-rpc
- Drop patches accepted in previous releases or not needed
  - 000-bindresvport_blacklist.patch (accepted in 5b037cc9, libtirpc 1.1.4)
  - 001-new-rpcbindsock-path.patch (not needed, rpcbind now uses /var/run directory)
  - 002-revert-binddynport.patch (fixed in 2802259, libtirpc-1-0-4-rc1)
  - 0001-Fix-regression-introduced-by-change-rpc-version-orde.patch
    (backport of 25d38d7, libtirpc-1-0-4-rc1)
  - 0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
    (backport of 145272c, libtirpc-1-0-4-rc2)
- Add fixes from upcomming release
  - 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - 0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch
  - 0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1573560000">- Fix previous version:
  - actually delete
    0001-xdrstdio_create-buffers-do-not-output-encoded-values.patch
  - use 0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch
  - use 0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch (renamed from
    0003-man-rpc_secure.3t-Fix-typo-in-manpage.patch)
  - use 0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch
    (renamed from
    0004-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="pvorel@suse.cz" date="1578052800">- Update to libtirpc 1.2.5
  - A number resource leaks and other issues were fix which were identified
  by a Coverity Scan.
  - The AUTH_DES authentication has been deprecated. If any of those routines
    are called, they will fail immediately.
  - numerous bug fixes
- Package changes:
  - Build without AUTH_DES authentication
  - Add patch from next release 0001-Add-authdes_seccreate-stub.patch
    (a86b4ff Add authdes_seccreate() stub)
  - Drop rc patches (libtirpc-1-1-5-rc1.patch, libtirpc-1-1-5-rc2.patch)
  - Drop patches all patches backported from this release
  (0001-Makefile.am-Use-LIBADD-instead-of-LDFLAGS-to-link-ag.patch,
  0002-man-rpc_secure.3t-Fix-typo-in-manpage.patch,
  0003-xdr-add-a-defensive-mask-in-xdr_int64_t-and-xdr_u_in.patch)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1580472000">- Skip unneeded autogen.sh run (configure is up-to-date), drop
  dependencies: libtool, autoconf
- Replace krb5-mini-devel/krb5-devel with pkgconfig(krb5)</changelog>
  <changelog author="pvorel@suse.cz" date="1580904000">- Backport upstream fix daed7ee ("Avoid multiple-definiton with gcc -fno-common")
  to fix build error with gcc flag -fno-common (bsc#1160875).
  Tested on gcc-9 and gcc-10.
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch</changelog>
  <changelog author="pvorel@suse.cz" date="1586952000">- Update to libtirpc 1.2.6
  - Drop patches all patches backported from this release
  (0001-Add-authdes_seccreate-stub.patch,
  0001-Avoid-multiple-definiton-with-gcc-fno-common.patch)</changelog>
  <changelog author="thomas.blume@suse.com" date="1646740800">- add option to enforce connection via protocol version 2 first
  (bsc#1196647)
  add 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1650628800">- check for nullpointer in check_address (bsc#1198176)
  update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1652184000">- fix memory leak in params.r_addr assignement (bsc#1198752)
  - add 0001-fix-parms.r_addr-memory-leak.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1658491200">-exclude ipv6 addresses in client protocol 2 code (bsc#1200800)
  - update 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1662724800">- fix CVE-2021-46828: libtirpc: DoS vulnerability with lots of
  connections (bsc#1201680)
  - add 0001-Fix-DoS-vulnerability-in-libtirpc.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1669723200">- consider /proc/sys/net/ipv4/ip_local_reserved_ports, before binding
  to a random port (bsc#1199467)
  - add binddynport-honor-ip_local_reserved_ports.patch</changelog>
  <changelog author="thomas.blume@suse.com" date="1697198400">-  update to 1.3.4 (bsc#1199467)
  * binddynport.c honor ip_local_reserved_ports
  - replaces: binddynport-honor-ip_local_reserved_ports.patch
  * gss-api: expose gss major/minor error in authgss_refresh()
  * rpcb_clnt.c: Eliminate double frees in delete_cache()
  * rpcb_clnt.c: memory leak in destroy_addr
  * portmapper: allow TCP-only portmapper
  * getnetconfigent: avoid potential DoS issue by removing unnecessary sleep
  * clnt_raw.c: fix a possible null pointer dereference
  * bindresvport.c: fix a potential resource leakage
- update to 1.3.3 (bsc#1201680, CVE-2021-46828):
  * Fix DoS vulnerability in libtirpc
  - replaces: 0001-Fix-DoS-vulnerability-in-libtirpc.patch
  * _rpc_dtablesize: use portable system call
  * libtirpc: Fix use-after-free accessing the error number
  * Fix potential memory leak of parms.r_addr
  - replaces 0001-fix-parms.r_addr-memory-leak.patch
  * rpcb_clnt.c add mechanism to try v2 protocol first
  - preplaces: 0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  * Eliminate deadlocks in connects with an MT environment
  * clnt_dg_freeres() uncleared set active state may deadlock
  * thread safe clnt destruction
  * SUNRPC: mutexed access blacklist_read state variable
  * SUNRPC: MT-safe overhaul of address cache management in rpcb_clnt.c
- drop 0001-Fix-DoS-vulnerability-in-libtirpc.patch (upstream)
- update to 1.3.2:
  * Replace the final SunRPC licenses with BSD licenses
  * blacklist: Add a few more well known ports
  * libtirpc: disallow calling auth_refresh from clnt_call with RPCSEC_GSS
- Update to libtirpc 1.3.1
  * Remove AUTH_DES interfaces from auth_des.h
    The unsupported  AUTH_DES authentication has be
    compiled out since commit d918e41d889 (Wed Oct 9 2019)
    replaced by API routines that return errors.
  * svc_dg: Free xp_netid during destroy
  * Fix memory management issues of fd locks
  * libtirpc: replace array with list for per-fd locks
  * __svc_vc_dodestroy: fix double free of xp_ltaddr.buf
  * __rpc_dtbsize: rlim_cur instead of rlim_max
  * pkg-config: use the correct replacements for libdir/includedir
  Patches replaced by update:
  binddynport-honor-ip_local_reserved_ports.patch (bsc#1199467)
  0001-Fix-DoS-vulnerability-in-libtirpc.patch (bsc#1201680)
  0001-fix-parms.r_addr-memory-leak.patch (bsc#1198752)
  0001-rpcb_clnt.c-config-to-try-protocolversion-2-first.patch
  (bsc#1196647), (bsc#1200800), (bsc#1198176)
  * replaces /etc/netconfig-try-2-first by the environment variable
  RPCB_V2FIRST</changelog>
  <changelog author="thomas.blume@suse.com" date="1699272000">- fix sed parsing for libtirpc.pc.in in specfile (boo#1216862)</changelog>
</package>
<package pkgid="c24dcd4e448fc274913160db6558b0912f3a0f9b36f514abdfef1b9d8123ae4d" name="libtool" arch="src">
  <version epoch="0" ver="2.4.6" rel="150000.3.6.2"/>
  <changelog author="dmueller@suse.de" date="1320926400">- update to 2.4.2:
  - The generic approximation of the command line length limit (when getconf is
    not available) works again.  Regression introduced in v2.2.6-39-g9c3d4d8.
  - The bug that leaked developer tool paths into the release tarballs
    from ./bootstrap is fixed.
  - Improved support for the Cuda Compiler Driver (nvcc) on Darwin.
  - For GCC LTO support, the -fuse-linker-plugin switch is now also removed
    when computing compiler postdeps.
  - The undocumented hardcode_libdir_flag_spec_ld tag variable has been
    removed in favor of using hardcode_libdir_flag_spec with $wl set to empty.</changelog>
  <changelog author="coolo@suse.com" date="1322568000">- buildrequire automake for file list check</changelog>
  <changelog author="pth@suse.de" date="1342699200">- buildrequire makeinfo which is a seperate package now.</changelog>
  <changelog author="schwab@suse.de" date="1359806400">- Add config-guess-sub-update.patch:
  Update config.guess/sub for aarch64</changelog>
  <changelog author="pth@suse.de" date="1385467200">- Change License as described in bnc#818958.</changelog>
  <changelog author="dvaleev@suse.com" date="1405339200">- Add libtool-ppc64le.patch to fix libtool-testsuite tests</changelog>
  <changelog author="coolo@suse.com" date="1410264000">- install COPYING as %doc</changelog>
  <changelog author="foss@grueninger.de" date="1415016000">- Drop patch config-guess-sub-update.patch for libltdl/config as the
  folder no longer exists.
- Drop patch libtool-ppc64le.patch for ppc handling as it is already
  part of v2.4.3
- Update to libtool 2.4.3
  * * New features:
  - Moved to gnulib release infrastructure.
  - M4 is now used for scanning the M4 macros in your configure.ac that
  'libtoolize' looks at to determine what files you want, and where you
  would like them installed.  This means that you can compose your
  version number or any other argument that Libtoolize needs to know at
  M4 time using git-version-gen from gnulib, for example.
  - Invoking 'libtoolize --ltdl' no longer maintains a separate autoconf
  macro directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever macro
  directory is declared by the parent project. (Note: if you were
  already sharing a macro directory with AC_CONFIG_MACRO_DIR(ltdl/m4)
  or similar, that still works as does any other directory choice).
  - Invoking 'libtoolize --ltdl' no longer maintains a separate auxiliary
  scripts directory in the libltdl tree, but automatically adjusts the
  installed libltdl configuration files to share whatever auxiliary
  scripts directory is declared by the parent project. (Note: if you
  were already sharing an auxiliary directory with subproject libltdl
  using AC_CONFIG_AUX_DIR(ltdl/config) or similar, that still works as
  does any other directory choice).
  - The legacy tests have all been migrated to the Autotest harness.
  - The Autotest testsuite can be run without the especially time consuming
  tests with:
    make check-local TESTSUITEFLAGS='-k "!expensive"'
  * * Bug fixes:
  - Fix a long-standing latent bug in autom4te include path for autotests
  with VPATH builds.
  - Fix a long-standing latent bug in libtoolize that could delete lines
  from libltdl/Makefile.am in recursive mode due to underquoting in a
  sed script.
  - Fix a long-standing bug in libtoolize, by outputting the 'putting
  auxiliary files in' header with 'libtoolize --ltdl --subproject'.
  - Fix a long-standing bug in libtoolize subproject installation, by not
  installing a set of autoconf macro files into the parent project if
  there is no configure.ac present to use them.
  - The libtoolize subproject mode selector is now named '--subproject'
  and is equivalent to the implied '--subproject' mode when no other
  mode is selected; '--standalone' never worked, and is no longer
  accepted.
  - Libtool and libtoolize no longer choke on paths with a comma in them.
  - In the case where $SHELL does not have the same enhanced features
  (e.g. the ability to parse 'var+=append') as $CONFIG_SHELL, libtool
  will now correctly fallback to using only vanilla shell features
  instead of failing with a parse at startup.
  - Correctly recognize import libraries when Microsoft dumpbin is used
  as the name lister and extend the dumpbin wrapper to find symbols
  in import libraries using the -headers option of dumpbin. Also fix a
  bug in the dumpbin wrapper that could lead to broken symbol listings
  in some corner cases.
  - Use the improved Microsoft dumpbin support to mend preloading of
  import libraries for Microsoft Visual C/C++.
  - No longer mangle module-definition (.def) files when feeding them to
  the Microsoft Visual C/C++ linker via the -export-symbols argument to
  the libtool script, thus matching how .def files are handled when
  using GNU tools.
  - Recognize more variants (e.g. those starting with a LIBRARY statement)
  of module-definitions (.def) files when using them instead of a raw
  list of symbols to export.
  - Fix a long-standing bug when using libtoolize without automake; we
  no longer remove install-sh with --force, since it's not a file
  libtoolize will reinstall without --install..
  * * Important incompatible changes:
  - GNU M4 is required to run libtoolize in a directory with a
  'configure.ac' (or 'configure.in') that needs tracing to determine
  what modes and directories have been specified.
  - The use of the idiosyncratically named 'Makefile.inc' in nonrecursive
  libltdl builds is deprecated, although it will be supported for one
  more year or until the next release, whichever takes longer.  Please
  upgrade to the more standard naming of 'ltdl.mk' in keeping with other
  GNU projects.
  - libtoolize now behaves consistenty in respect of multiple directory
  arguments to ACLOCAL_AMFLAGS and multiple invocations of AC_CONFIG-
  _MACRO_DIRS, where the first directory is always selected.  Previous
  releases took the first ACLOCAL_AMFLAGS argument, but the last
  invocation of AC_CONFIG_MACRO_DIRS.
  - The libtoolize program now advises use of the new Autoconf
  AC_CONFIG_MACRO_DIRS declaration.  If you follow that advice, all
  your developers will need at least autoconf-2.70 and automake-1.13
  to rebootstrap your probject.  If you still need to support
  bootstrap with older Autotools, then you should add the following
  to your configure.ac file:
    m4_ifndef([AC_CONFIG_MACRO_DIRS],
    [m4_define([AC_CONFIG_MACRO_DIRS],
    m4_defn([AC_CONFIG_MACRO_DIR]))])
  - Overhead of probing for a non-backslash crippled echo equivalent
  during initialization of every script has been removed in favor of
  trusting that "printf %s\n" works out of the box on all non-museum
  host architectures.  Manually setting ECHO appropriately in the
  build environment will be necessary on some ancient architectures.
  * * Changes in supported systems or compilers:
  - Support for bitrig (*-*-bitrig*).
  - Solaris 7 and earlier requires ECHO=/usr/ucb/echo in the build
  environment, to build and use libtool.</changelog>
  <changelog author="pth@suse.de" date="1416571200">- Add libtool-dont_delete_gnulib_files.patch that prevents deletion
  of files from gnulib to be deleted by libtoolize.
- BuildRequire help2man.
- Remove unneeded clean section.
- Use rpm macros where possible.
- Pass V=1 to make to make compilation verbose.</changelog>
  <changelog author="foss@grueninger.de" date="1417262400">-</changelog>
  <changelog author="foss@grueninger.de" date="1417262401">- Drop patch libtool-dont_delete_gnulib_files.patch which is
  included in 2.4.4
- Update to libtool 2.4.4
  * * New features:
  - Libltdl maintains its own fork of argz, with macros and files in
    the LT_ and lt__ namespaces (resp.) where they cannot clash with
    client projects' use of gnulib argz.
  * * Bug fixes:
  - Installation of 'libtoolize' once again obeys '--program-prefix',
    '--program-suffix' and '--program-transform-name' configure options.
  - `libtoolize` doesn't remove any files that it can't reinstall,
    including old versions of the snippet directory, and gnulib's
    version of the argz module and supporting files.
  - LT_FUNC_DLYSM_USCORE now works correctly on systems that don't
    support self dlopen()ing.
  * * Important incompatible changes:
  - LT_LIB_DLLOAD no longer prepends -ldl or -ldld to LIBS, causing
    duplicate occurrences in libltdl link lines.  If you need to
    add a library for dlopen() or shl_load() in your Makefile, then
    use $(LIBADD_DLOPEN) or $(LIBADD_SHL_LOAD) respectively.  If you
    are using libltdl, this all happens automatically, and the only
    difference you'll see is no more duplicated library names in the
    verbose link line.
  * * Changes in supported systems or compilers:
  - Preliminary support for tcc on linux*.  Although it already worked
    sometimes in previous releases, making sure to set LD correctly now
    avoids mis-matching GNU ld with tcc:
    ./configure CC=tcc LD=tcc
  - Added -os2dllname option to work around 8 character base name
    limit on OS/2.  The option has no effect on other systems.
  - Support for DLL versioning, -export-symbols and -export-symbols-regex
    on OS/2.
  - Support filename-based shared library versioning on AIX. See manual
    for details.</changelog>
  <changelog author="foss@grueninger.de" date="1417867200">- Require M4 as libtool's libtoolize requires it since 2.4.3</changelog>
  <changelog author="foss@grueninger.de" date="1421928000">- Update to libtool 2.4.5
  New features:
  - Libtoolize searches for the best available M4 on the user PATH at
    runtime, rather than settling for the first one found.
  - Support munging sys_lib_dlsearch_path_spec with LT_SYS_LIBRARY_PATH
    environment variable.
  Bug fixes:
  - Bail out at configure time if the installed M4 is not sufficient
    for the purposes of libtoolize.
  - freebsd-elf library versioning was upgraded incorrectly in 2.4.4,
    but now works properly again.
  - Fix a 2.4.4 regression so that libltdl subprojects do not warn
    about missing libltdl/libltdl directory as in prior releases.
  - When using Sun C++ on Solaris or GNU/Linux we used to set libtool's
    postdeps permanently, based on the contents of $CXX and $CXXFLAGS at
    configure time, which was brittle and error-prone.  Now, we no
    longer check for a SunCC ABI at configure time, but augment the
    postdeps at libtool time based on the current invocation flags on
    each call.
  Changes in supported systems or compilers:
  - /usr/local prefixed rpaths are now added to the link-line on
    ia64-hp-hpux*, because the default system runtime loader path does
    not contain them.
  - Previously, when using Sun C++ on Solaris or GNU/Linux, `-Cstd -Crun`
    flags were added to $postdeps unless CXX or CXXFLAGS contained
    `-library=stlport4`.  Newer releases have added other compiler flags
    that are also incompatible with `-Cstd -Crun`, so now we don't add
    them if any of `-std=c++[0-9][0-9]`, `-library=stdcxx4` or
    `-compat=g` were found in CXX or CXXFLAGS when the Sun C++ compiler
    is detected.</changelog>
  <changelog author="pth@suse.de" date="1423483200">- Add libtool-no_host_name.patch to remove the host name from
  generated scripts (bnc#916268).</changelog>
  <changelog author="pth@suse.de" date="1429272000">- Update to 2.4.6:
  Noteworthy changes in release 2.4.6 (2015-02-15) [stable]
  * New features:
  - LT_SYS_LIBRARY_PATH can be set in config.site, or at configure time
    and persists correctly in the generated libtool script.
  * Bug fixes:
  - Fix a race condition in ltdl dryrun test that would cause spurious
    random failures of that test.
  - LT_SYS_DLSEARCH_PATH is munged correctly.
- Add tarball signature.</changelog>
  <changelog author="mpluskal@suse.com" date="1429444800">- Use url for signature
- Add keyring file for automatic verification of signature
- Cleanup spec file with spec-cleaner
- Remove old ppc/ppc64 obsolete/provides
- Update info pre/post requires and replace postun with preun</changelog>
  <changelog author="pth@suse.de" date="1429531200">- Remove empty entry.</changelog>
  <changelog author="pth@suse.de" date="1430740800">- Fix call of install_info.</changelog>
  <changelog author="pth@suse.de" date="1438862400">- Remove spurious install_info_delete in postun (bsc#940773).</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Fix install_info_{install,delete} usage: install-info does not
  allow file globbing.</changelog>
</package>
<package pkgid="0afc57f2123b18ccfa13f7ebeab43c55d8e4f6fa5892ab555984fff513a27088" name="libtpms" arch="src">
  <version epoch="0" ver="0.8.2" rel="150300.3.9.1"/>
  <changelog author="meissner@suse.com" date="1389700800">- import 0.5.1
  - software TPM driver library for hooking into QEMU</changelog>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 0.5.2
  * No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
  comes from git and configure script has to be generated</changelog>
  <changelog author="vcizek@suse.com" date="1516190400">- Update to version 0.6.0-dev1
  * no upstream changelog
  * fix build with openssl 1.1 (bsc#1074801)
- fix rpm group</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Update to version 0.6.0
  * Introduce TPM2 support
- Use %license tag for LICENSE</changelog>
  <changelog author="glin@suse.com" date="1567684800">- Update to version 0.7.0
  * fixes for TPM2
- Add gcc-c++ to BuildRequires</changelog>
  <changelog author="kai.liu@suse.com" date="1595505600">- Update to version 0.7.3
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest `swtpm` (master, stable branches) for test cases to
    succeed there.
- Changes since version 0.7.2
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rathern than
    max. possible
  * Fixes to symmetric decrytion related to input size check, defer
    padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
    always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
  * tpm2: Fix TDES key creation by adding missing un-/marshalling
    functions
  * tpm2: Fix a bug in CheckAuthSession
  * compilation fixes for TPM 1.2 &amp; TPM 2 and various architectures
    and gcc versions
  * Fix support for NIST curves P{192,224,521} and SM2 P256 and
    BNP648 that would not work;
  * Runtime filter elliptic curves (that OpenSSL does not support)
    and do not advertise those curves as capabilities
  * Removed unnecessary space in MANUFACTURER "IBM " -&gt; "IBM"</changelog>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="meissner@suse.com" date="1666353600">- Added patches:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="meissner@suse.com" date="1682424000">- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch:
  Fixes CVE-2023-1017 &amp; CVE-2023-1018: fixed memory corruptions in CryptParameterDecryption (bsc#1206022 bsc#1206023)</changelog>
</package>
<package pkgid="f2ff0f7526d9e142e1c4bef612b992575298620b2b44fa771326dace98e3534e" name="libtpms0" arch="aarch64">
  <version epoch="0" ver="0.8.2" rel="150300.3.9.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 0.5.2
  * No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
  comes from git and configure script has to be generated</changelog>
  <changelog author="vcizek@suse.com" date="1516190400">- Update to version 0.6.0-dev1
  * no upstream changelog
  * fix build with openssl 1.1 (bsc#1074801)
- fix rpm group</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Update to version 0.6.0
  * Introduce TPM2 support
- Use %license tag for LICENSE</changelog>
  <changelog author="glin@suse.com" date="1567684800">- Update to version 0.7.0
  * fixes for TPM2
- Add gcc-c++ to BuildRequires</changelog>
  <changelog author="kai.liu@suse.com" date="1595505600">- Update to version 0.7.3
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest `swtpm` (master, stable branches) for test cases to
    succeed there.
- Changes since version 0.7.2
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rathern than
    max. possible
  * Fixes to symmetric decrytion related to input size check, defer
    padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
    always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
  * tpm2: Fix TDES key creation by adding missing un-/marshalling
    functions
  * tpm2: Fix a bug in CheckAuthSession
  * compilation fixes for TPM 1.2 &amp; TPM 2 and various architectures
    and gcc versions
  * Fix support for NIST curves P{192,224,521} and SM2 P256 and
    BNP648 that would not work;
  * Runtime filter elliptic curves (that OpenSSL does not support)
    and do not advertise those curves as capabilities
  * Removed unnecessary space in MANUFACTURER "IBM " -&gt; "IBM"</changelog>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="meissner@suse.com" date="1666353600">- Added patches:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="meissner@suse.com" date="1682424000">- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch:
  Fixes CVE-2023-1017 &amp; CVE-2023-1018: fixed memory corruptions in CryptParameterDecryption (bsc#1206022 bsc#1206023)</changelog>
</package>
<package pkgid="0e29ee86b065b032b40c653f8bcfa0d52201aaa48ec4f21130b958c167a0aef7" name="libtpms0" arch="s390x">
  <version epoch="0" ver="0.8.2" rel="150300.3.9.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 0.5.2
  * No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
  comes from git and configure script has to be generated</changelog>
  <changelog author="vcizek@suse.com" date="1516190400">- Update to version 0.6.0-dev1
  * no upstream changelog
  * fix build with openssl 1.1 (bsc#1074801)
- fix rpm group</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Update to version 0.6.0
  * Introduce TPM2 support
- Use %license tag for LICENSE</changelog>
  <changelog author="glin@suse.com" date="1567684800">- Update to version 0.7.0
  * fixes for TPM2
- Add gcc-c++ to BuildRequires</changelog>
  <changelog author="kai.liu@suse.com" date="1595505600">- Update to version 0.7.3
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest `swtpm` (master, stable branches) for test cases to
    succeed there.
- Changes since version 0.7.2
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rathern than
    max. possible
  * Fixes to symmetric decrytion related to input size check, defer
    padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
    always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
  * tpm2: Fix TDES key creation by adding missing un-/marshalling
    functions
  * tpm2: Fix a bug in CheckAuthSession
  * compilation fixes for TPM 1.2 &amp; TPM 2 and various architectures
    and gcc versions
  * Fix support for NIST curves P{192,224,521} and SM2 P256 and
    BNP648 that would not work;
  * Runtime filter elliptic curves (that OpenSSL does not support)
    and do not advertise those curves as capabilities
  * Removed unnecessary space in MANUFACTURER "IBM " -&gt; "IBM"</changelog>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="meissner@suse.com" date="1666353600">- Added patches:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="meissner@suse.com" date="1682424000">- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch:
  Fixes CVE-2023-1017 &amp; CVE-2023-1018: fixed memory corruptions in CryptParameterDecryption (bsc#1206022 bsc#1206023)</changelog>
</package>
<package pkgid="15b805948206de7a7071b0235cb84fd68c2273dc16d6e0223289835c5a757e0c" name="libtpms0" arch="x86_64">
  <version epoch="0" ver="0.8.2" rel="150300.3.9.1"/>
  <changelog author="p.drouand@gmail.com" date="1426939200">- Update to version 0.5.2
  * No entry for this release
- Update project home and download Urls
- Add autoconf, automake and libtool build require; the tarball
  comes from git and configure script has to be generated</changelog>
  <changelog author="vcizek@suse.com" date="1516190400">- Update to version 0.6.0-dev1
  * no upstream changelog
  * fix build with openssl 1.1 (bsc#1074801)
- fix rpm group</changelog>
  <changelog author="glin@suse.com" date="1548676800">- Update to version 0.6.0
  * Introduce TPM2 support
- Use %license tag for LICENSE</changelog>
  <changelog author="glin@suse.com" date="1567684800">- Update to version 0.7.0
  * fixes for TPM2
- Add gcc-c++ to BuildRequires</changelog>
  <changelog author="kai.liu@suse.com" date="1595505600">- Update to version 0.7.3
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest `swtpm` (master, stable branches) for test cases to
    succeed there.
- Changes since version 0.7.2
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rathern than
    max. possible
  * Fixes to symmetric decrytion related to input size check, defer
    padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)] and to
    always use a temporary malloc'ed buffer for decryption
- Changes since version 0.7.1
  * tpm2: Fix TDES key creation by adding missing un-/marshalling
    functions
  * tpm2: Fix a bug in CheckAuthSession
  * compilation fixes for TPM 1.2 &amp; TPM 2 and various architectures
    and gcc versions
  * Fix support for NIST curves P{192,224,521} and SM2 P256 and
    BNP648 that would not work;
  * Runtime filter elliptic curves (that OpenSSL does not support)
    and do not advertise those curves as capabilities
  * Removed unnecessary space in MANUFACTURER "IBM " -&gt; "IBM"</changelog>
  <changelog author="glin@suse.com" date="1606132800">- Update to version 0.7.4
  * Addressed potential constant-time related issues in TPM 1.2 and
    TPM 2 code
    TPM 1.2: RSA decryption
    TPM 2: EcSchnorr and EcSM2 signatures; Ecsda is handled by OpenSSL
  * Fixed some compilation issues</changelog>
  <changelog author="glin@suse.com" date="1616155200">- Update to version 0.7.7
  * CryptSym: fix AES output IV (bsc#1183729, CVE-2021-3446)
  * tpm2: Fix public key context save due to ANY_OBJECT_Marshal usage
  * tpm2: Address some Coverity issues (false positives)
  * tpm1.2: Backported ASAN/UBSAN related fixes
  * tpm2: Return properly sized array for b parameter for NIST P521
    (HLK)
  * tpm2: Addressed issues detected by UBSAN
  * tpm2: Addressed issues detected by cppcheck (false positives)</changelog>
  <changelog author="glin@suse.com" date="1618833600">- Update to version 0.8.2
  * NOTE: Downgrade to 0.7.x or below is not possible.
    Due to fixes in the TPM 2 prime number generation code in
    rev155 it is not possible to downgrade from libtpms version
    0.8.0 to some previous version. The seeds are now associated
    with an age so that older seeds use the old TPM 2 prime number
    generation code while newer seed use the newer code.
  * tpm2: rev155: Add new RsaAdjustPrimeCandidate code but do
    not use (bsc#1184939 CVE-2021-3505)
  * tpm2: Activate SEED_COMPAT_LEVEL_RSA_PRIME_ADJUST_FIX
    (bsc#1184939 CVE-2021-3505)
  * Update to TPM 2 code release 159
  - X509 support is enabled
    + SM2 signing of ceritificates is NOT supported
  - Authenticated timers are disabled
  * Update to TPM 2 code relase 162
  - ECC encryption / decryption is disabled
  * Fix support for elliptic curve due to missing unmarshalling
    code
  * Runtime filter supported elliptic curves supported by OpenSSL
  * Fix output buffer parameter and size for RSA decryption that
    could cause stack corruption under certain circumstances
  * Set the RSA PSS salt length to the digest length rather than
    max
  * Fixes to symmetric decryption related to input size check,
    defer padding to the user [EVP_CIPHER_CTX_set_padding(ctx, 0)]
    and to always use a temporary malloc'ed buffer for decryption
  * Fixed the set of PCRs belonging to the TCB group. This affects
    the pcrUpdateCounter in TPM2_Pcrread() responses, thus needs
    latest swtpm for test cases to succeed there.</changelog>
  <changelog author="pgajdos@suse.com" date="1630411200">- security update
- added patches
  fix CVE-2021-3746 [bsc#1189935], out-of-bounds access via specially crafted TPM 2 command packets
  + libtpms-CVE-2021-3746.patch</changelog>
  <changelog author="meissner@suse.com" date="1666353600">- Added patches:
  0001-tpm2-Reset-TPM2B-buffer-sizes-after-test-fails-for-v.patch
  0002-tpm2-Add-maxSize-parameter-to-TPM2B_Marshal-for-sani.patch
  0003-tpm2-Restore-original-value-if-unmarsalled-value-was.patch
- CVE-2021-3623: Fixed out-of-bounds access when trying to resume the
  state of the vTPM (bsc#1187767)</changelog>
  <changelog author="pgajdos@suse.com" date="1669377600">- fix build for ppc64le: use -Wl,--no-as-needed in check-local
  [bsc#1204556]</changelog>
  <changelog author="meissner@suse.com" date="1682424000">- 0001-tpm2-Check-size-of-buffer-before-accessing-it-CVE-20.patch:
  Fixes CVE-2023-1017 &amp; CVE-2023-1018: fixed memory corruptions in CryptParameterDecryption (bsc#1206022 bsc#1206023)</changelog>
</package>
<package pkgid="3b4104147691b841ac4efbc766e78fc988501057cfe0150e4127cbfdd6979070" name="libtss2-esys0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="63cbd4a65a11a85283c4ec5ffc4fac681a4b32843f5c60a00dd60a159567c6f1" name="libtss2-esys0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="2abbd8a50b4c16100b6e7a2c0da19dacf9d56b402d2122744ad50374f60f069d" name="libtss2-esys0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="7aa5a1e7a7c53334e6e36aa6eecc94162d408d406720baadba74a922f31a4375" name="libtss2-fapi1" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="47f32314d779eba6e7ae4b78f2d330bc1939caae6ab480971b6817a7d5ba9e23" name="libtss2-fapi1" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="16c49352f9a06b4f684c359c7f00f916e9fab0cb37b7acff6582d30e292ea0f1" name="libtss2-fapi1" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="b1e0603a79df4192c58f4ede7c23c0973f9137896c2d823ff7960779dc4c0da5" name="libtss2-mu0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="f862300ed0fef585cf126289ec38322cba80e9058d443b234f6ade66f51d24b9" name="libtss2-mu0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="7b969614cea92211acabc8e8ea7ca8af3886d09109529ccc8fbc6904ada33cc4" name="libtss2-mu0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="15dd7e9dac4556ebda1057c05eb62961c2c34c54bda295050e0b057ba78fdf1c" name="libtss2-rc0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="026e229da7858698ad7998703d2a41eac64f87266580a8892269a76a8c48d504" name="libtss2-rc0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="82be47d513e07d4b1ecd3736609dd4ac1a79b2b40c3a8fa854c19b9ec5de5a25" name="libtss2-rc0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="2b39803dec9ba769147c0d013bf823c413cfde70078900bff89dd84486f65ffc" name="libtss2-sys1" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="aea8a917ca68c584988ee2deb3df808087f6de5cd4f9f44c8e037a9408612c53" name="libtss2-sys1" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="bc8a0a1654e8e129fb7215ace108fb23af5c6f43b0bfb473b91557479f8f136f" name="libtss2-sys1" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="ab2a365c854bd5845c6c19d1c39270689cdccb95b2a3da43d8231785821df4e6" name="libtss2-tcti-device0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="255f584441c364fbd9c2f81c51ee584398b6d79d0d00653bfb398d83bb7a3be4" name="libtss2-tcti-device0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="6b7f868ca660c885e6c6e2dc5dc554daae08531d0b39c6b245d592ac1e9ac9e2" name="libtss2-tcti-device0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="45693d9e3b4b34917286f2d06d5824e7746a9d0c7c74a04f5ec30083c7c8d481" name="libtss2-tctildr0" arch="aarch64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="65f45796133a738b29bfc74359ccf26af4d3f6bc0b57fa037e262f39b5e846d6" name="libtss2-tctildr0" arch="s390x">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="5b6e0a291c523dee76e7a1604cfb6ea9ede21bc1f8049f28c1dc0886a9c56887" name="libtss2-tctildr0" arch="x86_64">
  <version epoch="0" ver="3.1.0" rel="150400.3.6.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1530792000">- added all librares to baselibs.conf to satisfy 32-bit dependencies of esys0
  and sys0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537272000">- also process udev triggers for tpmrm subsystem, otherwise /dev/tpmrm0 isn't
  properly updated (at least on SLES-12-SP4)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1537963200">- update to upstream version 2.0.1 (FATE#324477):
  - Fixed problems with doxygan failing make distcheck
  - Fixed conversion of gcrypt mpi numbers to binary data
  - Fixed an error in parsing socket address in MSSIM TCTI
  - Fixed compilation error with --disable-tcti-mssim
  - Added initialization function for gcrypt to suppress warning
  - Fixed invalid type base type while marshaling TPMI_ECC_CURVE in Tss2_Sys_ECC_Parameters
  - Fixed invalid RSA encryption with exponent equal to 0
  - Fixed checking of return codes in ESAPI commands
  - Added checks for programs required by the test harness @ configure time
  - Fixed warning on TPM2_RC_INITIALIZE rc after a Startup in Esys_Startup
  - Checked for 1.2 TPM type response
  - Changed constants values in esys header file to unsigned</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1551873600">- update to upstream version 2.2.1:
  - changes from version 2.2.0:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - Added support for QNX build
  - Added support for partial reads in device TCTI
  - changes from version 2.1.1:
  - Fixed leak of hkey on success in iesys_cryptossl_hmac_start
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
  - changes from version 2.1.0:
  - Fixed handling of the default TCTI
  - Changed logging to be ISO-C99 compatible
  - Fixed leak of dlopen handle
  - Fixed logging of a response header tag in Tss2_Sys_Execute
  - Fixed marshaling of TPM2B parameters in SAPI commands
  - Fixed unnecessary warning in Esys_Startup
  - Fixed warnings in doxygen documentation
  - Added Esys_Free wrapper function for systems using different C runtime libraries
  - Added Windows TBS TCTI
  - Added non-blocking mode of operation in tcti-device
  - Added tests for Esys_HMAC and Esys_Hash
  - Enabled integration tests on physical TPM device
  - Added openssl libcrypto backend
  - Added Doxygen documentation to integration tests
  - Refactored SetDecryptParam
  - Enabled OpenSSL crypto backend by default
  - changes from 2.0.2:
  - Fixed NULL ptr issues in Esys_HMAC_Start, Esys_HierarchyChangeAuth and Esys_NV_ChangeAuth
  - Fixed NULL ptr issue in sequenceHandleNode
  - Fixed NULL ptr auth handling in Esys_TR_SetAuth
  - Fixed NULL auth handling in iesys_compute_session_value
  - Fixed marshaling of TPM2Bs with sub types.
  - Fixed NULL ptr session handling in Esys_TRSess_SetAttributes
  - Fixed the way size of the hmac value of a session without authorization
  - Added missing MU functions for TPM2_NT type
  - Added missing MU functions for TPMA_ID_OBJECT type
  - Added missing type TPM2_NT into tss2_tpm2_types.h
  - Fixed wrong typename _ID_OBJECT in tss2_tpm2_types.h
  - Fixed build breakage when --with-maxloglevel is not 'trace'
  - Fixed build breakage in generated configure script when CFLAGS is set
  - Fixed configure scritp ERROR_IF_NO_PROG macro
  - Changed TPM2B type unmarshal to use sizeof of the dest buffer instead of dest
  - Fixed unmarshaling of the TPM2B type with invalid size
  - Removed dead code defect detected by coverity from Esys_TRSess_GetNonceTPM
- introduce _service file for syncing with upstream tags</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1566561600">- update to upstream version 2.2.3:
  - changes in version 2.2.3:
  * Fix computation of session name
  * Fixed PolicyPassword handling of session Attributes
  * Fixed windows build from dist ball
  * Fixed default tcti configure option
  * Fixed nonce size calculation in ESYS sessions
  - changes in version 2.2.2:
  * Fixed wrong encryption flag in EncryptDecrypt
  * Fixing openssl engine invocation</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1576065600">- update to upstream version 2.3.0:
  - changes in version 2.3.0:
  - tss2-tctildr: A new library that helps with tcti initialization
    Recommend to use this in place of custom tcti loading code now !
  - tss2-rc: A new library that provides textual representations for return
    codes
  - Option to disable NIST-deprecated crypto (--disable-weak-crypto)
  - Support Esys_TR_FromTPMPublic on sessions (for use in Esys_FlushContext)
  - map-files with correct symbol lists for tss2-sys and tss2-esys
    This may lead to unresolved symbols in linked applications
  - Support to call Tss2_Sys_Execute repeatedly on certain errors
  - Reduced RAM consumption in Esys due to Tss2_Sys_Execute change
  - Automated session attribution clearing for esys (decrypt and encrypt)
    per cmd
  - Removed libtss2-mu from "Requires" field of libtss2-esys.pc
    Needs to be added explicitely now
  - All fixes from 2.2.1, 2.2.2 and 2.2.3
  - Fixed SPDX License Identifiers
  - Fixed Null-pointer problems in tcti-tbs
  - Fixed Default locality for tcti-mssim set to LOC_0
  - Fixed coverity and valgrind leaks detected in test programs (not library
    code)</changelog>
  <changelog author="mardnh@gmx.de" date="1577620800">- update to upstream version 2.3.2:
  - changes since version 2.3.0:
  - Fix unit tests on S390 architectures
  - Fixed HMAC generation for policy sessions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(udev) instead of udev: allow OBS to
  shortcut through the -mini flavor.</changelog>
  <changelog author="msuchanek@suse.com" date="1580472000">- Use system-users for tss user creation (boo#1162360).</changelog>
  <changelog author="mardnh@gmx.de" date="1582113600">- Update to version 2.3.3
  * Fixed mixing salted and unsalted sessions in the same ESAPI
    context
  * Removed use of VLAs from TPML marshal code
  * Added check for object node before calling compute_session_value
    function
  * Fixed auth calculation in Esys_StartAuthSession called with
    optional parameters
  * Fixed compute_encrypted_salt error handling in
    Esys_StartAuthSession
  * Fixed exported symbols map for libtss2-mu</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1603108800">- Update to 3.0.1, changelog at:
  https://github.com/tpm2-software/tpm2-tss/blob/3.0.x/CHANGELOG.md
- Update libtss2-sys0 to libtss2-sys1
- Add new libs:
  * libtss2-fapi1
  * libtss2-tcti-cmd0
  * libtss2-tcti-swtpm0</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1603368000">- move the tcti-fapi tmpfiles.d config file into the libtss2-fapi1 sub-package.
- improve the descriptions of new libraries (fapi1, cmd0, swtpm0)
- adjust baselibs.conf to match new library versions and added libraries</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1611835200">- update to 3.0.3:
  - changes in 3.0.3:
  * Fix Regression in Fapi_List
  * Fix memory leak in policy calculation
  - changes in 3.0.2:
  * FAPI: Fix setting of the system flag of NV objects
  * This will let NV object metadata be created system-wide always instead of
  * locally in the user. Existing metadata will remain in the user directory.
  * It can be moved to the corresponding systemstore manually if needed.
  * FAPI: Fix policy searching, when a policyRef was provided
  * FAPI: Accept EK-Certs without CRL dist point
  * FAPI: Fix return codes of Fapi_List
  * FAPI: Fix memleak in policy execution
  * FAPI: Fix coverity NULL-pointer check
  * FAPI: Set the written flag of NV objects in FAPI PolicyNV commands
  * FAPI: Fix deleting of policy files.
  * FAPI: Fix wrong file loading during object search.
  * Fapi: Fix memory leak
  * Fapi: Fix potential NULL-Dereference
  * Fapi: Remove superfluous NULL check
  * Fix a memory leak in async keystore load.</changelog>
  <changelog author="meissner@suse.com" date="1624881600">- small services fixes and comments</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626264000">- Clean spec file
- Add new library libtss2-tcti-pcap0
- Update to 3.1.0:
  * Fix FAPI PolicyPCR not instatiating correctly (CVE-2020-24455)
  * Fixed possible access outside the array in ifapi_calculate_tree
  * Added pcap TCTI
  * Added GlobalSign TPM Root CA certs to FAPI cert store
  * Changed EncryptDecrypt mode type to align with TPM2.0 spec 1.59
  * Added two new TPM commands TPM2_CC_CertifyX509,
    and TPM2_CC_ACT_SetTimeout</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626350400">- Remove conflicting sysusers.d file</changelog>
  <changelog author="aplanas@suse.com" date="1638964800">- Version 3.1.0 includes:
  + cover update to 2.4.5 (jsc#SLE-17366)
  + cover update to 2.3.0 (jsc#SLE-9515)
  + fix policy session for TPM2_PolicyAuthValue (bsc#1160736)
- Add version the configuration file tpm2-tss-fapi.conf</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1674216000">- add 0001-tss2_rc-ensure-layer-number-is-in-bounds.patch: fixes
  CVE-2023-22745 (bsc#1207325): Buffer Overlow in TSS2_RC_Decode. Overly large
  RC values passed to the TSS2 function could lead to memory overread or
  memory overread.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1714737600">- add 0001-FAPI-Fix-check-of-magic-number-in-verify-quote.patch: fixes
  CVE-2024-29040 (bsc#1223690): Missing verification of the magic number in
  Fapi_VerifyQuote(), which might allow an attacker to generate arbitrary
  quote data, which would not be detected by Fapi_VerifyQuote().</changelog>
</package>
<package pkgid="f923bef23234d72545e59adfdf0c1619ee79b82aa56126187bec66ad98294095" name="libtukit4" arch="aarch64">
  <version epoch="0" ver="4.1.6" rel="150400.3.3.2"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="9e4ac479817aa18a3a57ac4546f03d82ba10d77b2a469271792b7dee4a04bfaf" name="libtukit4" arch="s390x">
  <version epoch="0" ver="4.1.6" rel="150400.3.3.2"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="13e23324432c81da456f8c13181f32683ec34203992f48466059bf4f5356240f" name="libtukit4" arch="x86_64">
  <version epoch="0" ver="4.1.6" rel="150400.3.3.2"/>
  <changelog author="iforster@suse.com" date="1631880000">- Version 3.5.5
  - t-u: Use tukit for SUSEConnect call [bsc#1190574]
    Correctly registers repositories</changelog>
  <changelog author="iforster@suse.com" date="1632398400">- Version 3.5.6
  - tukit: Add S/390 bootloader support [bsc#1189807]
  - t-u: support purge-kernels with t-u patch [bsc#1190788]</changelog>
  <changelog author="iforster@suse.com" date="1634040000">- Version 3.5.7
  Various fixes affecting Salt support:
  - t-u: Don't squash stderr messages into stdout
  - t-u: Correctly handle case when the snapshot has been deleted due to
    using --drop-if-no-change: Don't show reboot messages and avoid an awk
    error message [bsc#1191475]
  - tukit: Make inotify handler less sensitive / ignore more directories
    [bsc#1191475]</changelog>
  <changelog author="iforster@suse.com" date="1634904000">- Version 3.6.0
  - Simplify mount hierarchy by just using a single slave bind
    mount as the root of the update environment; this may avoid the
    error messages of failed unmounts
    May fix [boo#1191945]</changelog>
  <changelog author="iforster@suse.com" date="1636545600">- Version 3.6.1
  - Fix rsyncing /etc into the running system with
  - -drop-if-no-change [bsc#1192242]</changelog>
  <changelog author="iforster@suse.com" date="1637323200">- Version 3.6.2
  - Bind mount root file system snapshot on itself, this makes the
    temporary directory in /tmp unnecessary; also fixes [boo#1188110]
    to return the correct snapshot's working directory via API call.
  - Use separate mount namespace for transactional-update; this should
    fix several applications that fail to run if a mount point has the
    'unbindable' mount flag set</changelog>
  <changelog author="iforster@suse.com" date="1637582400">- Version 4.0.0~rc1
  This release is API, but not ABI compatible with previous releases;
  existing applications will have to be recompiled against this new version.
  Major features:
  - Introduces a D-Bus service to access the libtukit API via the
    org.opensuse.tukit.Transaction interface
  - Introduces a C binding via libtukit.h.
  Other changes:
  - t-u: Rework --quiet handling to make sure no output is shown even in
    error cases; this is necessary for automation, e.g. with Salt.
    [gh#openSUSE/transactional-update#73]
  - tukit: Allow storing command output into variable by introducing a new
    optional parameter for "execute" and "callExt".
  - Replace multiple and non-standalone occurenses of {} in "callExt"
    argument.
  - Split transactional-update.timer into transactional-update.timer
    and transactional-update-cleanup.timer; the later will clean up
    old snapshots even when the system does not do automatic updates.
  - tukit: Remove legacy alias "setDiscard" for "setDiscardIfUnchanged".
  - Throw exception if snapshot is not found.
  - Fix various compiler warnings
- Update spec file:
  - Include tukitd D-Bus daemon
  - Only install one version of the library (as there are no breaking API
    changes yet)
  - Add %pre scriplets for systemd services
  - Replace %systemd_postun scriptlets with %systemd_postun_with_restart
    to satisfy rpmlint checks
  - Add transactional-update log file as %ghost file</changelog>
  <changelog author="iforster@suse.com" date="1646568000">- Version 4.0.0~rc2
  - Fix missing prompt in "shell" command [bsc#1196580]
  - Add output of tukit commands to log file
  - Fix compilation error with GCC12 [boo#1194876]
  - Fixed (non-critical) security review comments [boo#1196149]
  - Fixed selfupdate
  - Code cleanup</changelog>
  <changelog author="iforster@suse.com" date="1651579200">- Version 4.0.0~rc3
  - Add Snapshot interface
  - Reworked signal handling: All public signals are sent from the
    main thread now, keeping the same sender for everything
  - Implement D-Bus call "Execute" for Transactions
  - Implement interface for listing Snapshots
  - Implement Reboot interface
  - Fix bug when using --continue on old snapshots
  - Fix hypothetical integer overflow in snapshot list [bsc#1196826]
  - Fix wrong sort order in status command
    [gh#openSUSE/transactional-update#80]</changelog>
  <changelog author="iforster@suse.com" date="1652788800">- Version 4.0.0~rc4
  - Fix building with GCC 12
  - Fix stack overflow with very long commands / ids [bsc#1196149]
  - Use separate mount namespace for chroot, allowing overwriting
    the bind mounts from the update environment - this could have
    lead to data loss of the bind mount previously
  - Fix C error and exception handling for snapshots</changelog>
  <changelog author="schubi@suse.com" date="1655812800">- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.</changelog>
  <changelog author="iforster@suse.com" date="1659441600">- Version 4.0.0
  - Last minute interface change: Changed "List" method of Snapshot D-Bus
    interface to return a map of properties instead of a comma separated
    list of strings; this will allow retrieving the snapshot properties
    even if they contain a comma in their value [boo#1202147]
  - Remove "Snapshot.hpp" as a public API for now - all public
    functionality is part of SnapshotManager.hpp
  - Add header file documentation for SnapshotManager.hpp
  - Add method to delete snapshot
    [gh#openSUSE/transactional-update#52]
  - Allow setting description of snapshot
    [gh#openSUSE/transactional-update#55]
  - create_dirs_from_rpmdb: set SELinux file context of missing directories
    [gh#openSUSE/transactional-update#84], [bsc#1197242]
  - Fix broken logrotate due to typo in config file
    [gh#openSUSE/transactional-update#87]
  - create_dirs_from_rpmdb: Fix handling return code of create_dirs()
    [gh#openSUSE/transactional-update#86]
  - Fix broken "shell" prompt after selfupdate
  - Add documented D-Bus interface definition files
  - Add tukit_sm_get_current and tukit_sm_get_default to C interface
  - Fixed typos</changelog>
  <changelog author="fvogt@suse.com" date="1661169600">- Version 4.0.1
  - create_dirs_from_rpmdb: Just warn if no default SELinux context found
    [gh#openSUSE/transactional-update#88], [bsc#1188215]
  - create_dirs_from_rpmdb: Don't update the rpmdb cookie on failure
    [gh#openSUSE/transactional-update#88]
  - Handle directories owned by multiple packages
    [gh#openSUSE/transactional-update#90], [bsc#1188215]</changelog>
  <changelog author="schubi@suse.com" date="1662033600">- Migration of logrotate configuration to /usr/etc: Saving user
  changed configuration files in /etc and restoring them while
  an RPM update.</changelog>
  <changelog author="iforster@suse.com" date="1664539200">- Version 4.1.0
  - t-u: Add a "setup-kdump" command; implements [jsc#PED-1441]
  - Export TRANSACTIONAL_UPDATE_ROOT (the path to the snapshot) in
    the update environment; implements [jsc#PED-1078]
  - Add support for "notify" reboot method for desktop use
    [gh#openSUSE/transactional-update#93]
  - Fix kdump initrd recreation detection; the check was performed in the
    active snapshot instead of the target snapshot
  - Document register command [bsc#1202900]
  - Avoid unnecessary snapshots for register command [bsc#1202901]
  - Various optimizations for register command
  - Remove bogus error message when triggering reboot
  - Rework /etc overlay documentation in "The Transactional Update Guide"
  - Fix incorrect manpage formatting
  - Remove leftover "salt" reboot method in configuration example file
  - Replace deprecated std::mem_fn with lambdas</changelog>
  <changelog author="iforster@suse.com" date="1674043200">- Version 4.1.1
  - Mount user specific binddirs last: Prevously the internal mounts would
    potentially overwrite user bind mounts [boo#1205011]
  - selinux: Relabel shadowed /var files during update to make sure they
    don't interfere with the update [boo#1205937]
  - Clean up /var/lib/overlay more aggressively [boo#1206947]
  - tukit: Merge /etc overlay into parent if --discard is used together
    with --continue - previously the files were incorrectly always merged
    with the currently running system
  - status: do not execute the status command if experimental
  - Don't delete created mount point dirs any more
  - Small code optimizations</changelog>
  <changelog author="iforster@suse.com" date="1674475200">- Version 4.1.2
  - Don't try to mount user mounts if they don't exist [boo#1207366]</changelog>
  <changelog author="iforster@suse.com" date="1675857600">- Version 4.1.3
  - Suppress SELinux relabelling output in quiet mode
  - Documentation readability improvements</changelog>
  <changelog author="iforster@suse.com" date="1678449600">- Version 4.1.4
  - Workaround for broken Tumbleweed package libfdisk1</changelog>
  <changelog author="iforster@suse.com" date="1696507200">- Version 4.1.6
  - Use permissions of real /etc when creating overlay
    [bsc#1215878]
- Version 4.1.5
  - Add support for configuration file snippets</changelog>
</package>
<package pkgid="cc5d5dc44076c35f736a4b6c3281d9b6d124721fdaca0b38a85378e999ccb115" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="9cf616608db09497d2bdfd9fdeaa8aab51b3e9066a77c4449449af951f88b1e3" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="11b947f50aaecf5cb4e0f3518cc7746629fcc5c4761ded51970cf6953e40c619" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.28.3"/>
  <changelog author="fbui@suse.com" date="1673265600">- Import commit 540e0bd5374f9f42f1e645eb15971431ebb4b8c8
  29fb8a2dd0 core/unit: try to submit stop_when_unneeded queue on removing dependencies
  bd63eab381 core/device: start units specified in SYSTEMD_WANTS if it is not running
  e0898fa873 coredump: do not allow user to access coredumps with changed uid/gid/capabilities (bsc#1205000 CVE-2022-4415)
  119424f96e coredump: adjust whitespace
  3833d5a408 coredump: drop an unused variable
  36728edcfd coredump: Fix format string type mismatch
  34f6867a8a analyze: use DumpUnitsMatchingPatternsByFileDescriptor
  e67a7087ec manager: add DumpUnitsMatchingPatternsByFileDescriptor()
  feb8f2a983 manager: rename dbus method
  98fed27339 analyze: extend the dump command to accept patterns
  a06d9470af man: document the Dump() calls of the PID 1 D-Bus interface, and what they are
  79eb37a5e0 cryptsetup: retry TPM2 unseal operation if it fails with TPM2_RC_PCR_CHANGED (bsc#1204944)
- Drop 5000-coredump-Fix-format-string-type-mismatch.patch
    5001-coredump-drop-an-unused-variable.patch
    5002-coredump-adjust-whitespace.patch
    5003-coredump-do-not-allow-user-to-access-coredumps-with-.patch
  They have been merged into SUSE/v249 branch.</changelog>
  <changelog author="fbui@suse.com" date="1673265601">- Ship systemd-pstore with udev (jsc#PED-2663)</changelog>
  <changelog author="fbui@suse.com" date="1674129600">- Don't overwrite /etc/pam.d/systemd-user on update (bsc#1207264)
  Regression introduced when systemd was forked for 15.4.</changelog>
  <changelog author="fbui@suse.com" date="1674302400">- Import commit 1bfa716e7fb6d7169cece864e75dfe9e52914c99 (merge of v249.14)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/540e0bd5374f9f42f1e645eb15971431ebb4b8c8...1bfa716e7fb6d7169cece864e75dfe9e52914c99
- Rebase 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch</changelog>
  <changelog author="fbui@suse.com" date="1674475200">- Make sure that /lib/udev exists and is a symlink to /usr/lib/udev when the
  testsuite is run.</changelog>
  <changelog author="fbui@suse.com" date="1674734400">- Move systemd-cryptenroll into udev package.</changelog>
  <changelog author="fbui@suse.com" date="1675684800">- systemd-testsuite: move the integration tests in a dedicated sub directory.</changelog>
  <changelog author="fbui@suse.com" date="1675684801">- Make sure we apply the presets on units shipped by systemd package</changelog>
  <changelog author="fbui@suse.com" date="1675684802">- machines.target belongs to systemd-container, do its init/cleanup steps from
  the scriptlets of this sub-package.</changelog>
  <changelog author="fbui@suse.com" date="1675771200">- Make use of the %systemd_* rpm macros consistently. Using the upstream
  variants will ease the backports of Factory changes to SLE since Factory
  systemd uses the upstream variants exclusively.</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771203">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
</package>
<package pkgid="d30cb4c5a9e0ca769f65b945b5218e75e0af683512b99c585cb7e50e2f3f74eb" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.33.1"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="c83a31aa839021577329681fc66d6c3d21a8061fc89968020bc167b1f5887906" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.33.1"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="c356146233a45f85f446c274d1c981d011fd20707359caa388d38ce794335ae0" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.33.1"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="af8747e655a384e2fd7d9e675e235750912f501480d7ea7726708be9ed11157f" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="18b4de885b310def0440b80b07d8ee6628e245802592dc53b408932426b0c5fc" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="1db8dd870505c71d262eb13bda138c73e84585ceecc37c755d9ef67509437b75" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.16" rel="150400.8.35.5"/>
  <changelog author="fbui@suse.com" date="1675771200">- Import commit 119740915155d473de087bd633ba62c1c3e47d36 (merge of v249.15)
  For a complete list of changes, visit:
  https://github.com/openSUSE/systemd/compare/1bfa716e7fb6d7169cece864e75dfe9e52914c99...119740915155d473de087bd633ba62c1c3e47d36</changelog>
  <changelog author="fbui@suse.com" date="1675771201">- Conditionalize the use of /lib/modprobe.d only on systems with split usr
  support enabled (i.e. SLE).</changelog>
  <changelog author="fbui@suse.com" date="1675771202">- Drop a workaround related to systemd-timesyncd that addressed a Factory issue.</changelog>
  <changelog author="fbui@suse.com" date="1676030400">- Move systemd-boot and all components managing (secure) UEFI boot into udev
  sub-package: they may deserve a dedicated sub-package in the future but for
  now move them to udev so they aren't installed in systemd based containers.</changelog>
  <changelog author="fbui@suse.com" date="1676635200">- Drop build requirement on libpci, it's not more needed since udev hwdb was
  introduced 11 years ago.</changelog>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
</package>
<package pkgid="28dea0857e8244382b4e4ba1fab4b279df1c0788abe8b228b7a82251b8e29893" name="libudev1" arch="aarch64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="d38046f5a9da8ddcf1cb08ad2ed17a23f0f85f4584a321c7a6282a42090e24ef" name="libudev1" arch="s390x">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="05102979a5899659a78401cfe18c48416b2e0ea72d09a6e3c3876bccbaa2a86c" name="libudev1" arch="x86_64">
  <version epoch="0" ver="249.17" rel="150400.8.40.1"/>
  <changelog author="lidong.zhong@suse.com" date="1677585600">- Fix return non-zero value when disabling SysVinit service (bsc#1208432)</changelog>
  <changelog author="fbui@suse.com" date="1677585601">- Import commit dad0071f15341be2b24c2c9d073e62617e0b4673 (merge of v249.16)</changelog>
  <changelog author="fbui@suse.com" date="1679313600">- Update 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
  Since commit 38f3e20883ff658935aae5c9 (v248), the symlinks /dev/cdrw and
  /dev/dvdrw could have no longer been created. Futhermore the rule added by
  this patch dealing with /dev/cdrom was redundant with the upstream one</changelog>
  <changelog author="fbui@suse.com" date="1680782400">- Update 1001-udev-use-lock-when-selecting-the-highest-priority-de.patch (bsc#1203141)
  Optimize when hundred workers claim the same symlink with the same priority.</changelog>
  <changelog author="fbui@suse.com" date="1680782401">- Import commit 6441bb41141aaa8bfb63559917362748a3044c15
  165ca0d018 udev-rules: fix nvme symlink creation on namespace changes (bsc#1207410)</changelog>
  <changelog author="fbui@suse.com" date="1682424000">- Include pam_keyinit.so in our systemd-user PAM service (bsc#1209741)
  That way "systemd --user" instances get their own session keyring instead of
  the user default session keyring. For some reasons cifscreds refuses to work
  with the latter. That's what is expected for every PAM session anyway.</changelog>
  <changelog author="mvidner@suse.com" date="1682683200">- kbd-model-map.legacy: drop some entries no longer needed by YaST
  Related to bsc#1194609.</changelog>
  <changelog author="fbui@suse.com" date="1682683201">- kbd-model-map.legacy:: add 'ara' which should replace 'arabic' in the long
  term (bsc#1210702)</changelog>
  <changelog author="fbui@suse.com" date="1683633600">- Rather than having one script per fix, use a single script (or "fixlet") per
  (sub) package that contains all the fixups relative to a (sub) package. This
  has the advantage to limit the number of scripts but more importantly it will
  ease the sharing of the spec file between TW and SLE. We should also be able
  to compare the fixlets of two distros even if the spec files have diverged.
  Note that all the fixups are run just once now.</changelog>
  <changelog author="fbui@suse.com" date="1683633601">- Move the persistent net rule fix in udev fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1684324800">- Move more packaging fixups in the fixlet script.</changelog>
  <changelog author="fbui@suse.com" date="1687348800">- Make sure to pre-install the groups systemd and udev rely on. This is needed
  when the tmpfiles are run at package installation time (i.e. when
  file-triggers are disabled).</changelog>
  <changelog author="fbui@suse.com" date="1690459200">- Add 5001-sleep-don-t-init-sys-power-resume-if-resume-option-i.patch (bsc#1186606)</changelog>
  <changelog author="fbui@suse.com" date="1690804800">- Import commit 155fe1917157bdeecf7e28ef0ea9f62084f27f14
  3b8c671f90 detach-md: similar to the DM case, also don't try to detach MD device backing /usr/ (bsc#1211576)
  6da5d2d1fc shutdown: don't attempt to detach DM volume backing /usr/ (bsc#1211576)
  37178881c1 udev: decrease devlink priority for iso disks (bsc#1213185)
  02ede28319 shutdown: get only active md arrays. (bsc#1212434 bsc#1213575 bsc#1211576)
  412b8dbb32 umount: /usr/ should never be unmounted regardless of HAVE_SPLIT_USR or not (bsc#1211576)
  16f897570a units: remove the restart limit on the modprobe@.service
  e4e85b08bd tests: add test case for long unit names
  3f84b06f9d core: shorten long unit names that are based on paths and append path hash at the end (bsc#1208194)</changelog>
  <changelog author="fbui@suse.com" date="1692187200">- Import commit b473c02cc08e093e370034425671cbc001c6748e
  02caac7973 units/initrd-parse-etc.service: Conflict with emergency.target
  70b3bff9f8 sd-device-monitor: dynamically allocate receive buffer (bsc#1213873)
  e2e1fbba2b sd-device: change type of properties nulstr from uint8_t* to char*
  c9d3dd5954 udev: set description for device monitor
  3f07f44fde test: use sd_device_monitor_set_description()
  b304a1e1a2 sd-device-monitor: logs description for device monitor
  929d4066c5 sd-device-monitor: introduce sd_device_monitor_{set,get}_description()
  340e523048 sd-device-monitor: fix inversed condition
  02659c7b67 tree-wide: port various places over to new stat_inode_same() helper
  b35a4b042a stat-util: add helper stat_inode_same() for comparing stat's st_dev/st_ino in one
  d25219cbe3 libsystemd: ignore both EINTR and EAGAIN
  648a151313 errno-util: introduce ERRNO_IS_TRANSIENT()</changelog>
  <changelog author="fbui@suse.com" date="1693396800">- Rename 0001-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch into
  1013-strip-the-domain-part-from-etc-hostname-when-setting.patch
- Rename 0003-strip-the-domain-part-from-etc-hostname-when-setting.patch into
  1014-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch
- Rename 0005-udev-create-default-symlinks-for-primary-cd_dvd-driv.patch into
  1015-networkd-make-network.service-an-alias-of-systemd-ne.patch
- Rename 0007-networkd-make-network.service-an-alias-of-systemd-ne.patch into
  1016-core-disable-session-keyring-per-system-sevice-entir.patch
- Rename 0011-core-disable-session-keyring-per-system-sevice-entir.patch into
  1017-restore-var-run-and-var-lock-bind-mount-if-they-aren.patch
  Hence these patch files can be easily identified as SLE specific ones.</changelog>
  <changelog author="fbui@suse.com" date="1695902400">- systemd.spec: add missing `%tmpfiles_create systemd-resolve.conf`</changelog>
  <changelog author="fbui@suse.com" date="1695902401">- Import commit e677079182c975ecdad88a76f657fecb4de523d9
  7692c5bda8 utmp-wtmp: handle EINTR gracefully when waiting to write to tty
  29c3eb4681 utmp-wtmp: fix error in case isatty() fails
  98970eb90b homed: handle EINTR gracefully when waiting for device node
  0305809edd resolved: handle -EINTR returned from fd_wait_for_event() better
  40db4d6abe sd-netlink: handle EINTR from poll() gracefully, as success
  5e681711c6 varlink: also handle EINTR gracefully when waiting for EIO via ppoll()
  6bbd70f092 stdio-bridge: don't be bothered with EINTR
  f978feb591 sd-bus: handle -EINTR return from bus_poll() (bsc#1215241)
  746962ff40 core: replace slice dependencies as they get added (bsc#1214668)</changelog>
  <changelog author="fbui@suse.com" date="1702641600">- Import commit 86f0670d3a01c1a2d4df17f1c68d03f1586195e3
  ba7f1df7a5 vconsole-setup: simplify error handling
  94f4eaea77 Introduce RET_GATHER and use it in src/shared/
  e02406fcc1 mount: replace UNIT_DEPENDENCY_MOUNTINFO_OR_FILE with UNIT_DEPENDENCY_MOUNTINFO/UNIT_DEPENDENCY_MOUNT_FILE
  0b8db54511 mount: drop UNIT_DEPENDENCY_MOUNTINFO_IMPLICIT and UNIT_DEPENDENCY_MOUNTINFO_DEFAULT
  98ba536bd1 mount: always use UNIT_DEPENDENCY_FILE in mount_add_quota_dependencies()
  73c7b2bb48 core/mount: make device deps from /proc/self/mountinfo and .mount unit file exclusive
  ba585a28d7 core: Add trace logging to mount_add_device_dependencies()
  36e0a4f80f core/mount: also remove default deps from /proc/self/mountinfo when it is updated (bsc#1217460)
  bc107c86c3 core/mount: set Mount.from_proc_self_mountinfo flag before adding default dependencies
  ce4907c7c3 core: wrap some long comment</changelog>
  <changelog author="fbui@suse.com" date="1704715200">- Import commit 2cb4d40f1c6a388706af8a83d5344fc0de3c6f4d (merge of v249.17)
  c8578cef7f resolved: actually check authenticated flag of SOA transaction</changelog>
</package>
<package pkgid="b27c7dd69345d3678e281f8571e08ef4a38b594b946cf0d6f59abe73de721536" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="66ed462ae6ff293b0e71da6fe19330d823d0f7fafbc96eede4f599a51ffa28bc" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="20676f27d286a9318f565296d2c9ed27964151cf35629ae795f93953b9c0773f" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.17.1"/>
  <changelog author="jengelh@inai.de" date="1612872000">- Override GTKDOCIZE with /bin/true so we can run autoreconf
  without needing gtk-doc as a dependency.</changelog>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
</package>
<package pkgid="6f0dd16ac9466598f897422d7b40579a9b95e2cd31389d2e9c1ba719ca933d61" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="792c259ce33e3cfa41e7b8b2d14fb4f678e53f838f34a82a494aeceae3481305" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="69d70dfb605b5972c5b07d7a8c0c7d10ea1f66ffe76c8613d5543afbfccc6476" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.20.1"/>
  <changelog author="sbrabec@suse.com" date="1612958400">- libmount: don't use "symfollow" for helpers on user mounts
  (boo#1181750, util-linux-libmount-dont-use-symfollow.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
</package>
<package pkgid="2f635a61a113650e421c63ccb45f519f18e8e31d269e5173d2b5c9261e8d9365" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="beaee281452a5563a4bc5f0c3d126afd5c0f3a9bd5f8a67a09743ec0ba442d0b" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="4b59666bfc0b93ae1b23a041ebf282b5596c7c3ebde73898a059c4a998668dde" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.23.1"/>
  <changelog author="sbrabec@suse.com" date="1613476800">- Update to version 2.36.2:
  * agetty: tty eol defaults to REPRINT
  * fsck.cramfs: fix fsck.cramfs crashes on blocksizes &gt; 4K
  * lib/caputils: add fall back for last cap using prctl.
  * lib/signames: change license to public domain
  * libfdisk:
  * (dos) fix last possible sector calculation
  * (script) ignore empty values for start and size
  * ignore 33553920 byte optimal I/O size
  * libmount:
  * add vboxsf, virtiofs to pseudo filesystems
  * do not canonicalize ZFS source dataset
  * don't use "symfollow" for helpers on user mounts (boo#1181750,
    obsoletes util-linux-libmount-dont-use-symfollow.patch)
  * fix /{etc,proc}/filesystems use
  * login: use full tty path for PAM_TTY
  * lsblk: read SCSI_IDENT_SERIAL also from udev
  * rfkill: stop execution when rfkill device cannot be opened
  * setpriv: allow using [-+]all for capabilities.
  * su: use full tty path for PAM_TTY
  * switch_root: check if mount point to move even exists
  * umount:
  * ignore --no-canonicalize,-c for non-root users
  * Show the 'r' option in the help menu
  * Code cleanups and documentation improvements.
  * Translation updates.</changelog>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
</package>
<package pkgid="5a5a3576bed3af3ff063b4194c41bab4d92cdd6796f612001142bb8332511e9a" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="06f23c11f2b0ee86b1c6e38ffac02f09fbb7aca7edc0ee83381ab1a45e2779b9" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="e151bfbdc0df5b88dfbc7e1901b92d18e4fe6a6967fdea56fbb2c6a1844c816d" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.26.1"/>
  <changelog author="sbrabec@suse.com" date="1616155200">- ipcs: Avoid overflows (bsc#1178236,
  util-linux-ipcs-shmall-overflow-1.patch,
  util-linux-ipcs-shmall-overflow-2.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
</package>
<package pkgid="4c51b4894857fec485cdbad1637ac61b206523a3ee6b69bb94578ac767d417bb" name="libuuid1" arch="aarch64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="ccf65cd7702115237aa0d5d3130f470fa57989583a48ed196232104be4c3c00a" name="libuuid1" arch="s390x">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="4af7bcacef95b132db8372d982aaa8935413ac47c8086440d4a6697cfbd236e8" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.37.2" rel="150400.8.29.1"/>
  <changelog author="sbrabec@suse.com" date="1633608000">- ipcutils: Avoid potential memory allocation overflow
  (bsc#1188921, CVE-2021-37600,
  util-linux-ipcutils-overflow-CVE-2021-37600.patch).
- Add bc to BuildRequires to run more complete testsuite,
  fix testsuite (bsc#1178236#c19,
  util-linux-ipcs-shmall-overflow-ts.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- Update to version 2.37.2:
  * No longer uses Groff to maintain man-pages.
  * New implementation of hardlink.
  * lscpu reimplemented.
  * uclampset: new util to manipulate the utilization clamping
    attributes of the system or a process.
  * hexdump automatically uses -C when called as "hd".
  * dmesg supports new command-line options --since and --until.
  * findmnt supports new command-line options --shadowed to print
    only filesystems over-mounted by another filesystem.
  * mount supports --read-only command-line option for non-root
    users too.
  * umount(8) can umount also all over-mounted filesystems (more
    filesystems on the the same mount point) when executed with
  - -recursive.
  * libfdisk (and fdisk, sfdisk, cfdisk) supports partition type
    names on input, ignoring the case of the characters and all
    non-alphanumeric and non-digit characters in the name
    (e.g. type="Linux /usr x86" is the same as type="linux usr-x86"
    for sfdisk).
  * libmount no longer contains a workaround to detect inconsistent
    /proc/self/mountinfo reads.
  * libblkid supports "probing hints" now. The hints are the
    optional way how to force probing functions to check for
    example another location -- for example specific session on
    multi-session UDF. The command blkid(8) supports this
    functionality with a new --hint option. The library has been
    also extended to support others ISO9660 and UDF identifiers.
  * blkzone provides a new "capacity" command.
  * cfdisk is possible to start in read-only mode by a new
    command-line option --read-only
  * lsblk provides new columns FSROOTS, and MOUNTPOINTS. The column
    MOUNTPOINTS is used in the default output now and this new
    column prints all mount points where the device is used (btrfs
    subvolumes, bind mounts, etc).
  * losetup uses LOOP_CONFIG ioctl now.
  * column supports a new command-line option --table-columns-limit
    to specify a maximal number of the input columns. The last
    column will contain all remaining line data if the limit is
    smaller than the number of the columns in the input data.
  * Obsoletes util-linux-ipcs-shmall-overflow-1.patch,
    util-linux-ipcs-shmall-overflow-2.patch,
    util-linux-ipcs-shmall-overflow-ts.patch,
    util-linux-ipcutils-overflow-CVE-2021-37600.patch.
  * Many other new features and fixes. For the complete list see
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.1-ReleaseNotes
    https://www.kernel.org/pub/linux/utils/util-linux/v2.37/v2.37.2-ReleaseNotes
- Update util-linux-login_defs-check.sh and
  login_defs-support-for-util-linux to version 2.37
  (new variable LOGIN_KEEP_USERNAME).
- INCOMPATIBLE CHANGE: Remove the raw utility altogether, as it is
  not even built any more with the latest kernel.</changelog>
  <changelog author="sbrabec@suse.com" date="1639483200">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="sbrabec@suse.com" date="1639828800">- blockdev: Remove NBSP character in values (bsc#1188507#c31,
  blockdev-remove-nbsp.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643025600">- Fix unauthorized umount (CVE-2021-3995, CVE-2021-3996,
  bsc#1194976,
  util-linux-libmount-check-fuse-umount-CVE-2021-3995.patch,
  util-linux-libmount-fix-deleted-suffix-CVE-2021-3996.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1643630400">- Implement "X-fstrim.notrim" fstab mount option that skips fstrim
  for selected device (jsc#SLE-17942,
  util-linux-fstrim-implement-X-fstrim.notrim.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308800">- Fix "su -s" bash completion
  (bsc#1172427, util-linux-bash-completion-su-chsh-l.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646308801">- Make uuidd lock state file usable and time based UUIDs safe again
  (bsc#1194642, util-linux-uuidd-fix-lock-state.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1646395200">- Prevent root owning of /var/lib/libuuid/clock.txt
  (bsc#1194642, util-linux-uuidd-prevent-root-owning.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1647604800">- Extend cache in uuid_generate_time_generic() (bsc#1194642#c51,
  util-linux-libuuid-extend-cache.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1656072000">- agetty: Resolve tty name even if stdin is specified (bsc#1197178,
  util-linux-agetty-resolve-tty-if-stdin-is-specified.patch).
- libmount: When moving a mount point, update all sub mount entries
  in utab (bsc#1198731,
  util-linux-libmount-moving-mount-point-sub-mounts.patch,
  util-linux-libmount-fix-and-improve-utab-on-ms_move.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1663588800">- libuuid improvements (bsc#1201959, PED-1150):
  * libuuid: Fix range when parsing UUIDs
    (util-linux-libuuid-uuid_parse-overrun.patch).
  * Improve cache handling for short running applications-increment
    the cache size over runtime
    (util-linux-libuuid-improve-cache-handling.patch).
  * Implement continuous clock handling for time based UUIDs
    (util-linux-libuuid-continuous-clock-handling.patch).
  * Check clock value from clock file to provide seamless libuuid
    update (util-linux-libuuid-check-clock-value.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1666094400">- Fix file conflict during upgrade (boo#1204211).</changelog>
  <changelog author="sbrabec@suse.com" date="1669896000">- libuuid continuous clock handling for time based UUIDs:
  Prevent use of the new libuuid ABI by uuidd %post before update
  of libuuid1 (bsc#1205646).
- util-linux-uuidd-prevent-root-owning.patch: Use chown --quiet
  to prevent error message if /var/lib/libuuid/clock.txt does not
  exist.</changelog>
  <changelog author="david.anes@suse.com" date="1670587200">- Fix tests not passing when '@' character is in build path:
  Fixes rpmbuild %checks fail when @ in the directory path (bsc#1194038).
- Add util-linux-fix-tests-when-at-symbol-in-path.patch</changelog>
  <changelog author="daniel.garcia@suse.com" date="1682683200">- Add upstream patch fix-lib-internal-cache-size.patch
  bsc#1210164, gh#util-linux/util-linux@2fa4168c8bc9</changelog>
  <changelog author="antonio.teixeira@suse.com" date="1684929600">- Add util-linux-libblkid-reopen-floppy-without-O_NONBLOCK.patch
  Fixes blkid for floppy drives (bsc#1194900).
- util-linux-fix-tests-when-at-symbol-in-path.patch:
  Add patch to util-linux-systemd and python3-libmount, as it was
  previously only included in util-linux.</changelog>
  <changelog author="ailiop@suse.com" date="1706011200">- Add upstream patch
  util-linux-libuuid-avoid-truncate-clocks.txt-to-improve-perform.patch
  bsc#1207987 gh#util-linux/util-linux@1d98827edde4</changelog>
  <changelog author="rgoldwyn@suse.com" date="1708516800">- Add upstream patch
  more-exit-if-POLLERR-and-POLLHUP-on-stdin-is-received.patch
  bsc#1220117 - L3-Question: Processes not cleaned up after failed SSH session are using up 100% CPU</changelog>
  <changelog author="sbrabec@suse.com" date="1711540800">- Properly neutralize escape sequences in wall
  (util-linux-CVE-2024-28085.patch, bsc#1221831, CVE-2024-28085,
  and its prerequisites: util-linux-fputs_careful1.patch,
  util-linux-wall-migrate-to-memstream.patch
  util-linux-fputs_careful2.patch).</changelog>
</package>
<package pkgid="186c484cad26aa8399477b45b9e30ae4d552d3dab3c0aea7f498da36b24b0814" name="libvirt" arch="src">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="5c175322a83f95938bf7b287035ba4332855e2d3ad19a469a571bbfb691f8082" name="libvirt" arch="src">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="cdc9be10d02b3631b000fb205386591ed31b8176d2e0dfa1220e1b345d2c2ccd" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="2021bc7b8ef2d6dd55e1efbe0bfccda0e97fdd0761cce78b338532454329ed23" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="423e26a6a1b6d3b6127874b8e696c34de058c39b997f6bef2de6cf746522da98" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="a1b657b3844b00cf5e99a2b321a78c6a1b0de96c97c556bfaedbc4d0c0232543" name="libvirt-client" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="a82c329e3c9c1968b67fb175cd0a9a465a985ddbe4bab269903139fe636ba8c6" name="libvirt-client" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="90701d05cc056340c4fb4493e72808fd00a04a6e16596867bd0d2fc06034ddcd" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="c8192150ade538f90fdfe0a1dc33c5c96ae45c3d858b2ad167192e59db96bce9" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="e06a6748cfa65d343ad7bdb4a833293aeb859150eb1e46c2681a52f2833f1189" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="b88f74176496a794ee57208728c5d06fe225ded9317431103ba458a563fa7166" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="d86cbd2fe94c7cff2988ebea8e4e04b382822a17c7f70192eef16c58b57b2673" name="libvirt-daemon" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="481fec72fab1e1afd8c86b02490433f822540ad6e239b2c0fc63a1f7c63e514d" name="libvirt-daemon" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="2f4ab37d6cd91716ecc852f498396c0d145546fa69db84107b65850f657e21c5" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="7b1651c0b511e4f8359684925e6a873026b1167015f6877daa3eb00c32b1f56e" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="338e848c59b6f0448f8b8f641b2fbed7682a7f47e0bc3e1d4264f1a5c2d434f7" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="b564db6df7b81867c854ea484b8c3b2333ae74161cd93d7a76050a47644d11f5" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="a0b0916e4145a957c0de0c7ebfdb4a82ded5530c5c0d379106312c4bb96ff8e4" name="libvirt-daemon-driver-interface" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="55b13763faf72bb38547f0c73be25c2b88945ba7224b6c3ca739caac917fd589" name="libvirt-daemon-driver-interface" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="19599f57df7989a869156445843a819791edc83a3d8ffd544bf9a2dc4c428dcf" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="9812ec4da1e6db8d979fd1fcd9d9d686fcb0d1123e5ef75c659a964d0b82cdda" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="68d23cefa736f6358e3dad451e94f5495d5562218c27a39a69655a7a0ce14881" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="981d38d32117ef146da31a0e2e20e36a25d4d4d1999262399d16fcb831047e9b" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="bc08c840d2a036b27d7e8e60c6fc375e2bf03d6fb7b770d981b08db4d6d5bcb9" name="libvirt-daemon-driver-network" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="4559b906582c279ae7b0796af6ea07196306142852a7a462131d61bb2ea7d9e1" name="libvirt-daemon-driver-network" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="879ae0f2bac0f238f07fd95479b9c6938fec7ab0a9a4cfd8228eab88c1f71759" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="b879e941ec57df4d52e21bd4301752d0882ebab60a5e5f5a5b39fd74eb23308a" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="8b2f9734a057585faa224a6672767ca697a51d874f8cbd36345d7f2e9dbfbb32" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="654b875c9c413ead549e8974e3063760c5b95bc457f52821caaacb6f3abcddbf" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="071dcbf1db95becf49c95a637c1667669266f18f25a3eb6f775f0afd6833f654" name="libvirt-daemon-driver-nodedev" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="29a42a4d9bb2e00ec7c4f7b59a77a653f0b34b492b880eb3b3e516211db2162a" name="libvirt-daemon-driver-nodedev" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="c809a54ec2a6d6bf10b5aecc1aab3e9d75ce96f7f0b92b2742053c24ed1f7f8b" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="b8783c1cfb232ca4865aa654b209aedab2cb884bbda2b70e690212b5cfb2cb20" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="64d2576fe33ec6bf21c32dd5772ae60d2cb70c7707e4cc24d9a9d01f94476562" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="eef40fae6e6b1ee415404981b08c830a5b704f9e36ab44c3289325f073400c52" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="bc310d52f239765f88ac4902fe76ff867bf7ca0574c163225c8822cfa564168d" name="libvirt-daemon-driver-nwfilter" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="451c05bfbf9da2b84d7b99bf0a7f036f2cef064411faaca1a1f84572161f02e2" name="libvirt-daemon-driver-nwfilter" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="6588119a2a65cb917f1edebca540d8e2430de9277a83665a6faa71c9f1c6e264" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="d081f0231e63b235e624385c68b9529a7fcdbf69c77afc20f75d404bf5774f6e" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="9a086aa878037960971bfaa491cbe8fcaf08d87524429da2cf83c8dcbe4a9522" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="601cb1df72f00232c9512da35d6df1b2c0ea21aff467fbca7ce93730fc74867b" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="4f5d5c18bffd1316285efc0187bada67305ff7da7637162a7caae221be8d4a4a" name="libvirt-daemon-driver-qemu" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="53872f3b15ca5cec1d9ccca9e50830759eea17a0217a9002298ab7b2581ec259" name="libvirt-daemon-driver-qemu" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="dbd22803d6ba6ab01e53e1521e56b496140fb92ad020d2ee058a6505edb3a01f" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="8c61755776e4f905bd8586b108e8dae0828ca178174c2b54497da1e75671118a" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="36cfa0056b3eaffabcf87123b91e0e42698f1c9774c421a591b2ca6ac524befc" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="b99683a1a8955b7f3ba4dd79fc9afae5627d40c2d167168f78c7ebe6cd2b58a1" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="f22ebe1e07134a897bb424f77c98a2012493fcb1e0c7a0c9bd94a61aae99b3ee" name="libvirt-daemon-driver-secret" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="2e0b6170d14a71487d456cde00fca99f5fcfb315a820dd8868f1ffcc4323eddd" name="libvirt-daemon-driver-secret" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="8c6cb24acd15af6227464ed73dae28a72380d765af5547f2894e1d6f7fca5559" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="ea253f446a823137ad59cfb4ee6aff02f802e41f6c059b9839b3d9371cf2293d" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="d3ae8aa4e46e42aa478536572d51fd4e97403c7f2e2e643c49c2a0a7ac345f09" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="68fd1011bcb4ad0c4027d4c572667dde6bec120bfdc6fc06cd2477e0713fc86a" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="8480c1cc23e729cfa7d3b60a6309d4040f6d813f02752c1fbd276c32b34fd422" name="libvirt-daemon-driver-storage" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="b5eaac156c46aab594cf82958fb7e2b6f9f5b1e2f47cfa92105438a8a6f84ad1" name="libvirt-daemon-driver-storage" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="bca498961b49acdea7633189522f4229b13c5392f17f02f891ef0b7590278b8b" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="96223224faff285dd57fc2897f491969ef0ebda178ed749ff94f053c3adc3f8e" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="3451fa3b48812677d5f3fff29186fe740577febd1a99948fdee92c01cf969799" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="6ebf4e8acd4c445fd52f122162f3229610a8977557f8a93592a01c1025345ccd" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="559918bdbd0717ffd8bc645ef206156d7434c3b8780bbfdd9f2d570ee2a92f09" name="libvirt-daemon-driver-storage-core" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="f720c2d52e35cdb06524c26384d113c2e7d96f56ec40ac9e615877bcbc9e4489" name="libvirt-daemon-driver-storage-core" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="27debdac2b35c4fa19dae345981e03572fb4ee5c8548314d98acce3a871aaf3b" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="67b80d89363770fe8aa9e8a80f5316643cd291e14833facc7ec1b34a09c7fdb0" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="2bbb1aac4507477ae57c898a4238cf17ccdc1a3d149eae19afce0707c3d4e046" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="da6f695aed5a0099372b2cbbc0f02d027ac7045d8596bf42a92b04ca5168ec58" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="eabab9109f8decdf35d189c2cc10593bbddeba97e44b8d236c00a043d2b8236b" name="libvirt-daemon-driver-storage-disk" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="70d274f8d3a3b380f8fc8dc63fe40eb6073b034f1725773848b43a59210faecf" name="libvirt-daemon-driver-storage-disk" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="622fd26cb17763622f28f6051397850c0ec66cb953aa28171fd82a063e1410ab" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="59b8a4b89edaf77cf393f583153fafd5ddc470d5c14d25817022c6defae98ae5" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="97230e40cfc738eeb177d9517208207800a51524c79d110508a6af2077d054cf" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="327207f49b9e2f520b4477677948bb94de6355838caba09a693da2d60229a783" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="9959d187a17d802d70f6a1f4b85634d0b38d7258f0b733343d8d54b1509a8e46" name="libvirt-daemon-driver-storage-iscsi" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="b5a93652c6ace5dc1bfbe4455660347f1ed9bf5757cc3281d27d31935851ff2e" name="libvirt-daemon-driver-storage-iscsi" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="a224554c27770c0841c156e0617bbb3c5de6972fe7fabcae766af3758b90dbe2" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="958781d6dd19e0e81b6af7ef5c7b012c3d7367b52ae4ff185584c161e3d1c8da" name="libvirt-daemon-driver-storage-iscsi-direct" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="67ebc29e37ddee379c92a4b2e07857c3d8705099830195c2719f0fb9bd4bb30b" name="libvirt-daemon-driver-storage-iscsi-direct" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="68f7b8b6742f44605555ccc39342ea2b6328f605067cd6bf498f001deef378b6" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="c9f8f58dfb6528ea55ddf5617d63912e7ebb8269609f9b4ee25004d9bde9ab6f" name="libvirt-daemon-driver-storage-iscsi-direct" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="4a11fa3dd42ec7b1d4017e2b98dd731488359330fda5ce8fc4c54cee8bce6eda" name="libvirt-daemon-driver-storage-iscsi-direct" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="9663f012d8388c53131b1a84ea96e03af70c32ae37d92777fd56b0ad5dafd372" name="libvirt-daemon-driver-storage-iscsi-direct" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="edaefab05b18f3cab644db644511dc1d7f7a8f17c3f1574798304ed4cff92efc" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="d2cb1be5734dea2148d4e0de738570ad9721e2da653774d37b703c4f730b210b" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="a7b0a4156cfbc4b8f92e2480307c9a7bc8ddefbf9f798357f7ca6aa412a1f752" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="f8c2ba725e26d9565f947ad8e380a5f5bf72be66ed23c0e6a7f6045bc5ee17a5" name="libvirt-daemon-driver-storage-logical" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="5e75f29480dc017814b97cd9751c7427f39bdef7b08ed8dbc4a2ecb70f81ee22" name="libvirt-daemon-driver-storage-logical" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="9853bb2199464bbb9c68fe216e7e1e616a3898877a9402788f0f34629fa0f2ba" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="1a3def10a4890e836cb56b64114cd66183485c24da52f8c3603e3e554b28e475" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="52d1875d1365e57e2857aab87ac6faa2e434eb447d702467d6d73147b3a8b3fd" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="b8f8c67dcc5fc3dd6f9d9d42c174a901f165bbfe3ea8f065ddd4e5bb74dda2d5" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="d924730fcaa486c2efee97aef9fc710d73783cee53d18d157cd92b49500481bb" name="libvirt-daemon-driver-storage-mpath" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="090f94c40d642313d082c977c502f918a468709948075ccc8089e9e2c6b8c901" name="libvirt-daemon-driver-storage-mpath" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="60084006517f209a80fb29308b0af5135c442542ea65af1e50ac4fad2a5d830c" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="93e2d6034614cdb58c8b95c96cd3527e85cb375c0322571fea30c6d8f51832a5" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="7cf6868977861ac6e0aa4d3bf2b0d891ec85a5da975757166744a8c383517ae1" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="812e01690010fcd4afd7695f219bb6e27faed541e3bfa5eb4abab1c6f84ca495" name="libvirt-daemon-driver-storage-rbd" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="af24ae8fcbc43386f05eb025132ce2aa6e212cf43a048a196c6911bbbfc5c889" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="4049bb3a95bda511411036976a091a243e8b7287025bab63b18f46f27a901f63" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="606c9df2a0669fa53ee382aa85cff20b3bcce504698acfcc2d7ddba3ac930470" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="37be79049022ee2d2f1040c4840e8b24d45d07838df4b7bf737c9407da80a7d5" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="cfb23b26ab9b31f1ef51b835d0d8b2706920fceaad573ba4f1898a88306074e6" name="libvirt-daemon-driver-storage-scsi" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="2eecc5da2f9904f4b24550f34517b3bb5160b112402bc06ae4f6950808109da0" name="libvirt-daemon-driver-storage-scsi" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="e708613fd39e80d541eca2da2c0ab0db9d40718bad11c80f1bdffda5c29bb45e" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="3c28f1b718d20e10ee60b984edb7570c6427539e5958f57ebea2abdcc91763e3" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="808cc76605cfc0b8c4cd03b6d1514a2aaf984730f3784abff7ff36fa3bdfeadb" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="9dd99fb9fdaaddef33b8c0198dd163cca3f004376b07cb74e1a37d8b207da8ab" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="58278e2762a3c18bde8b5ad48f39f9589799fe8a1a79efeed39f86366c174c49" name="libvirt-daemon-qemu" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="458935cbba92117f97024ab757bde9a3feebbbe2eb295aa4ca6436e9490ae794" name="libvirt-daemon-qemu" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="1d40a5ad2a14547cde3433abd32755a377704a7d6dec2e96b181a6d42268ec68" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="bba9617e21b4c15df175597a51194143c6098e1692b128080312c91f91ad3f4e" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="49d0eed1d50b0a30b62abcd3c8f8845dfc3ccf2d4e3808fe61a0c943125852c4" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="896befd3318fc183fa96bd1622c9d95d1b087b020acc4eda403b521bf1149f89" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.11.2"/>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
  <changelog author="jfehlig@suse.com" date="1711022400">- CVE-2024-2494: remote: check for negative array lengths before
  allocation
  8a3f8d95-CVE-2024-2494.patch
  bsc#1221815</changelog>
  <changelog author="jfehlig@suse.com" date="1711108800">- node_device_conf: Avoid memleak in virNodeDeviceGetPCIVPDDynamicCap()
  64d32118-fix-nodedev-memleak.patch
  bsc#1221749</changelog>
</package>
<package pkgid="3f4bbb81cb5e19dee40156c51d2e76250fd8d56592e5170bbf616f27f6189f2c" name="libvirt-libs" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="2802dbae13cf15154739f114c9c2442b2b55609030bd7b1c10a2dcb3307ba23d" name="libvirt-libs" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="0e2d0bac00fd4bebcf4ce3425e6940862a0cc8e46cd4fb06dc4b83a68a564911" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1642507200">- sysconfig files have not been distributed for many months. Add
  upstream patches that improve documentation and moves service
  default settings to the associated systemd service file.
  3be5ba11-libvirt-guests-install.patch,
  16172741-libvirt-guests-manpage.patch,
  8eb44616-remove-sysconfig-files.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1643112000">- libxl: Add lock process indicator to saved VM state
  31e937fb-libxl-save-lock-indicator.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1643198400">- Revert commit 938382b60a since it changes semantics on some
  public APIs
  105dace2-revert-virProcessGetStatInfo.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1644235200">- libxl: Mark auto-allocated graphics ports to used on reconnect
  e0241f33-libxl-mark-allocated-graphics-ports.patch
- libxl: Release all auto-allocated graphics ports
  18ec405a-libxl-release-graphics-ports.patch
  bsc#1191668</changelog>
  <changelog author="jfehlig@suse.com" date="1644321600">- qemu: fix inactive snapshot revert
  76deb656-qemu-fix-snapshot-revert.patch
  boo#1195690</changelog>
  <changelog author="jfehlig@suse.com" date="1645185600">- libxl: Fix libvirtd crash on domain restore
  454b927d-libxl-fix-dom-restore.patch
  bsc#1196115</changelog>
  <changelog author="jfehlig@suse.com" date="1647086400">- qemu: Fixes and improvements for SEV(-ES) guests
  d248e3dc-virsh-domsetlaunchsecstate-report-error.patch,
  07ddb4c6-qemuDomainSetLaunchSecurityState-check-params.patch,
  29605313-qemuDomainSetLaunchSecurityState-nocache.patch,
  82be0ffe-conf-validate-serial-port-model.patch,
  aab943a6-support-firmware-debug.patch,
  7714034e-qemu-debug-console-tests.patch,
  3ef9b51b-qemu-fix-pflash-formatting.patch,
  5adfb347-qemu-honor-user-nvram-path.patch,
  08101bde-qemu-inline-nvram-path-code.patch,
  24adb6c7-qemu-dont-regen-nvram-path.patch,
  392292cd-tests-dont-use-autogen-nvram-path.patch,
  32b9d8b0-qemu-support-fw-descriptor-mode.patch,
  823a62ec-qemu-fix-undefine-crash.patch
  bsc#1196806</changelog>
  <changelog author="jfehlig@suse.com" date="1648555200">- CVE-2022-0897: nwfilter: fix crash when counting number of
  network filters
  a4947e8f-nwfilter-CVE-2022-0897.patch
  bsc#1197636</changelog>
  <changelog author="jfehlig@suse.com" date="1648728000">- qemu: Improve save operation by increasing pipe size
  c61d1e9b-virfile-set-pipe-size.patch,
  47d6d185-virfile-fix-indent.patch,
  cd7acb33-virfile-report-error.patch
  bsc#1196625</changelog>
  <changelog author="jfehlig@suse.com" date="1654171200">- qemu: Support memory allocation threads
  ba7f9812-conf-intro-mem-alloc-threads.patch,
  a30dac15-qemu-detect-prealloc-threads.patch,
  75a4e016-qemu-validate-prealloc-threads.patch,
  b8d6ecc7-qemu-generate-prealloc-threads.patch
  bsc#1197084</changelog>
  <changelog author="jfehlig@suse.com" date="1655467200">- qemu: Don't assume that /usr/libexec/qemu-kvm exists
  c890c496-qemu-cleanup-virQEMUCapsFindBinaryForArch.patch,
  0a301b19-qemu-dont-assume-qemukvm.patch,
  fb7016a7-qemu-dissolve-virQEMUCapsFindBinaryForArch.patch
  bsc#1158430, boo#1196087</changelog>
  <changelog author="jfehlig@suse.com" date="1661256000">- Fix downstream patches to adhere to upstream coding standards
  and pass 'make syntax-check'</changelog>
  <changelog author="jfehlig@suse.com" date="1661342400">- spec: Include aarch64 in the list of architectures that 'Require'
  dmidecode
  bsc#1202608
- spec: Suppress error messages about nonexistent or unreadable
  files from grep</changelog>
  <changelog author="jfehlig@suse.com" date="1662033600">- vmx: Require networkName for bridged and custom NICs
  db0564b4-vmx-Require-networkName.patch
  bsc#1202630</changelog>
  <changelog author="jfehlig@suse.com" date="1665144000">- apparmor: Fix QEMU access for UEFI variable files
  7aec69b7-apparmor-Fix-QEMU-access-for-UEFI.patch
  boo#1203976</changelog>
  <changelog author="jfehlig@suse.com" date="1667563200">- qemu: Support specifying the virtual CPU address size in bits
  95c95f1b-virml-Introduce-VIR_XML_PROP_NONNEGATIVE-flag.patch,
  e6c29f09-conf-Add-support-for-specifying-CPU-max-physical-add.patch,
  c647bf29-capabilities-Report-number-of-host-CPU-physical-addr.patch,
  1c1a7cdd-qemu-Add-support-for-max-physical-address-size.patch,
  b5f63691-schema-Remove-optional-nesting-in-hostcpu-rng.patch,
  65e8ac6f-schema-Don-t-enforce-ordering-of-hostcpu-capabilitie.patch,
  231af0a0-schema-Add-maxphysaddr-element-to-hostcpu.patch,
  d81ae1f-docs-Fix-missing-slashes-in-the-maxphysaddr-example.patch,
  85aafea4-qemu-Remove-host-passthrough-validation-check-for-ho.patch
  bsc#1199583</changelog>
  <changelog author="jfehlig@suse.com" date="1672142400">- Fix lxc container initialization with systemd and hybrid cgroups
  suse-fix-lxc-container-init.patch
  boo#1183247</changelog>
  <changelog author="jfehlig@suse.com" date="1677758400">- Apparmor: Add support for SUSE edk2 firmware paths
  4959490e-support-SUSE-edk2-firmware-paths.patch
  boo#1208567</changelog>
  <changelog author="jfehlig@suse.com" date="1681387200">- qemu: Fix potential crash during driver cleanup
  15277033-qemu-Fix-potential-crash-during-driver-cleanup.patch
  bsc#1209861</changelog>
  <changelog author="jfehlig@suse.com" date="1685448000">- CVE-2023-2700: virpci: Resolve leak in virPCIVirtualFunctionList
  6425a311-virpci-Resolve-leak-in-virPCIVirtualFunctionList.patch
  bsc#1211390</changelog>
</package>
<package pkgid="3c71cd2d87348583e48420d4ae1c38bd8f198115f27a70ad2b187712a0f31107" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.26.1"/>
  <changelog author="kallan@suse.com" date="1598616000">- Update to 11.1.5 (build 16724464) (boo#1175573)
  + This source release rolls up the SDMP fixes release post 11.1.0.
  + Fix serveral Coverity reported issues.
  + Address github issues:
    https://github.com/vmware/open-vm-tools/issues/451
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/issues/428
- Drop unnecessary patch:
  - gcc10-warning.patch
  - sdmp-get-version.patch
  - sdmp-netstat-to-ss.patch
  - sdmp-warnings.patch</changelog>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
</package>
<package pkgid="feeecc23452cb516e0003738a22f98544f8279e4ec2265b296d1798a5caa6623" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="10189a67a3b283cebd92619163c5199bdb07f0b057fd549e52029e96b954585b" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.33.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
</package>
<package pkgid="0836c41ffca5d5ff77e60de688617872de3f64c1789c5e6ab36532fb121195a7" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.37.1"/>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
</package>
<package pkgid="186b8689f8d2e24fb4d1d91c149a37954771a2605cb96ffae4472882563476f2" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.40.1"/>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
</package>
<package pkgid="31dd6658df7ec95b4f49f7cbf77ed659f01bc7af0f4227a78399c40831498359" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.43.1"/>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="96941eca5837a0b52c68353985dd0833c86a12289dd3e650b8fa5c8b4da88e1c" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.3.5" rel="150300.46.1"/>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="cbc50a32d9a857b767383c5b1304fa60411a1ea75df04cac9bf806135acf596e" name="libvmtools0" arch="x86_64">
  <version epoch="0" ver="12.4.0" rel="150300.49.11"/>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
</package>
<package pkgid="5a28a20f1cb982a6db609982804141d2ea6bc90c3d7841d9568de8d69b91dd9c" name="libwayland-client0" arch="aarch64">
  <version epoch="0" ver="1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="939cfd05b324aeea90b93e7bf578686d135c31cd82121ec0c27555d490a68c79" name="libwayland-client0" arch="s390x">
  <version epoch="0" ver="1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="5ae784cdf216f76262611fa626547e80c55e2abee245902692ba96ad711531a5" name="libwayland-client0" arch="x86_64">
  <version epoch="0" ver="1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="1a3ddd6726f7d4e65b9e880b7aafa576f6484553aa1fe1d905046f85d8768f76" name="libwayland-cursor0" arch="aarch64">
  <version epoch="0" ver="1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="c343317c41d3ca56a29e473cc4734e9e193e41c0caf5f4a6ae5b4aaf73e3684d" name="libwayland-cursor0" arch="s390x">
  <version epoch="0" ver="1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="095ec4288f352f23052221c31eeebc5fe9b9dacf737b3df3ebd527bcb6b748f5" name="libwayland-cursor0" arch="x86_64">
  <version epoch="0" ver="1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="e5ff1df928af4e79bb2e2dd5acec3b55ffcc72efe1fea5904b8557a14864fd2d" name="libwayland-egl1" arch="aarch64">
  <version epoch="0" ver="99~1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="e71969157ccdd24798eaffc2d4281abbafe2389a2ede8b386f37d072fb7fd8a2" name="libwayland-egl1" arch="s390x">
  <version epoch="0" ver="99~1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="f1bfc1f40dde5386dd7844b01421afdd305e3d5040f4990444a25f19c822da8d" name="libwayland-egl1" arch="x86_64">
  <version epoch="0" ver="99~1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="440838d775129ba6783974bb45b7f6529551d28cfd1689fd95f0d7663a3eabf7" name="libwayland-server0" arch="aarch64">
  <version epoch="0" ver="1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="513f1f51413954cbacb96a9de9b8205a9b9f8a135009bd8b7ac770d987f34ac6" name="libwayland-server0" arch="s390x">
  <version epoch="0" ver="1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="c28dca84ecbcd2e5c4be1b2cccfedd5254c8bc4effa37ce41d53b665b7f081f6" name="libwayland-server0" arch="x86_64">
  <version epoch="0" ver="1.21.0" rel="150400.3.6.1"/>
  <changelog author="emil.l.velikov@gmail.com" date="1519732800">- Remove unneeded fdupes dependency/handling</changelog>
  <changelog author="jengelh@inai.de" date="1523275200">- Update to new upstream release 1.15
  * wl_subcompositor.get_subsurface is now documented to be
    double buffered.
  * wayland-scanner can now generate either public or private
    symbols.
  * libwayland-egl is now part of libwayland (and will presumably
    be removed Mesa soon)
  * The WAYLAND_DISPLAY environment variable can now contain
    absolute paths (where previously it was prefixed by
    XDG_RUNTIME_DIR) - anything that reads WAYLAND_DISPLAY
    outside of libwayland will have to deal with that change
    independently.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1527076800">- Update wayland.keyring to contain Derek Foreman
  derekf@osg.samsung.com public key.</changelog>
  <changelog author="sndirsch@suse.com" date="1534161600">- devel package: add Provides/Obsoletes for libwayland-egl-devel
  for the devel files, which were previously built by Mesa; see also
  https://build.opensuse.org/request/show/613048</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 1.16
  * The client definition of wl_global is removed.
  * Some long standing oddness has been fixed with destroy signals.
  * The code generator now supports referencing foreign enums.</changelog>
  <changelog author="sndirsch@suse.com" date="1542628800">- add Provides/Obsoletes for libwayland-egl-devel for the devel
  files, which were previously built by Mesa, also on
  sle15-sp1/Leap 15.1 due to wayland update on these products
  (boo#1116042)</changelog>
  <changelog author="sndirsch@suse.com" date="1542715200">- Downgrades do not work in SLES service packs, because the SP0
  repo remains enabled for SP1. (This is unlike Leap, where a 15.1
  system will have no 15.0 directories.) As such, to force the
  upgrade from Mesa:libwayland-egl1 to wayland:libwayland-egl1,
  the number in wayland is bumped to &gt;18 for those distros.</changelog>
  <changelog author="jengelh@inai.de" date="1553169600">- Update to new upstream release 1.17
  * There is now a protocol to express an internal server error
    message, and a new version of the wl_seat protocol with no
    changes other than keymaps must be private.</changelog>
  <changelog author="jengelh@inai.de" date="1581508800">- Update to release 1.18
  * Add API to tag proxy objects to allow applications and
    toolkits to share the same Wayland connection
  * Track wayland-server timers in user-space to prevent creating
    too many FDs
  * Add wl_global_remove, a new function to mitigate race
    conditions with globals</changelog>
  <changelog author="alarrosa@suse.com" date="1582200000">- Replace public key in keyring with
  34FF9526CFEF0E97A340E2E40FDE7BE0E88F5E48
  (Simon Ser &lt;contact at emersion.fr&gt;).</changelog>
  <changelog author="jengelh@inai.de" date="1611748800">- Update to release 1.19
  * This release mostly contains bug fixes and minor
    protocol updates.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1636718400">- Switch to meson buildsystem: Add meson BuildRequires and macros.
- Add generic c_compiler and c++_compiler BuildRequires, needed now
  with the meson buildsystem.
- Use ldconfig_scriptlets macro for post(un) handling for
  Tumbleweed and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1639051200">- Update to release 1.20
  * A few protocol additions: wl_surface.offset allows clients to
    update a surface's buffer offset independently from the
    buffer, wl_output.name and description allow clients to
    identify outputs without depending on xdg-output-unstable-v1.
  * In protocol definitions, events have a new "type" attribute
    and can now be marked as destructors.
  * A number of bug fixes, including a race condition when
    destroying proxies in multi-threaded clients.</changelog>
  <changelog author="sndirsch@suse.com" date="1641816000">- obsolete/provide libwayland-egl-devel 18.0.2 also on sle15-sp4</changelog>
  <changelog author="alynx.zhou@suse.com" date="1641902400">- Add wayland-shm-Close-file-descriptors-not-needed.patch: For
  platforms that support mremap(), we don't need to hold file
  descriptors all the time, because programs like Xwayland will
  hold a lot of file descriptors and may crash, this patch close
  file descriptors earlier for those platforms (bsc#1194190).</changelog>
  <changelog author="sndirsch@suse.com" date="1643112000">- There is a file conflict in current wayland-devel-32bit and
  prvevious libwayland-egl-devel-32bit package; therefore add
  a conflicts to baselibs.conf</changelog>
  <changelog author="dmueller@suse.com" date="1653393600">- modernize spec file
  * use licensedir
  * use bcond
  * use https:// urls
  * spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1656590400">- Update to release 1.21
  * This new release adds a new wl_pointer high-resolution scroll
    event, adds a few new convenience functions, and contains a
    collection of bug fixes.
- Drop wayland-shm-Close-file-descriptors-not-needed.patch</changelog>
  <changelog author="sndirsch@suse.com" date="1680868800">- U_util-Limit-size-of-wl_map.patch
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch
  * fixes Reference-count overflow in libwayland-server SHM
    handling (CVE-2021-3782, bsc#1190486)</changelog>
  <changelog author="joan.torres@suse.com" date="1687780800">- Update package to version 1.21
  * (see https://jira.suse.com/browse/PED-2423).
- Drop no longer needed patches (merged upstream):
  U_util-Limit-size-of-wl_map.patch and
  U_util-set-errno-when-hitting-WL_MAP_MAX_OBJECTS.patch.</changelog>
</package>
<package pkgid="6c4f68f84040cea619795a144acbc09a9ad0a8ccfdf64a2151293b02855f5bff" name="libxcrypt" arch="src">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="4549acde4fe2154fd01709cf3995614c28bcb07035a20b2663c75776749a32ed" name="libxcrypt-devel" arch="aarch64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="da5fff4ba50f79949492f7938735a3883eea5b92309d42d582239e61882b562f" name="libxcrypt-devel" arch="s390x">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="b1753a8f7588c795cb5ba9cae4fcfa7230ce315ba1fab64a77f5aefdb62ead08" name="libxcrypt-devel" arch="x86_64">
  <version epoch="0" ver="4.4.15" rel="150300.4.7.1"/>
  <changelog author="schwab@suse.de" date="1525867200">- ABI compatible replacement for libcypt from glibc</changelog>
  <changelog author="schwab@suse.de" date="1527076800">- Update to libxcrypt 4.0.1</changelog>
  <changelog author="schwab@suse.de" date="1533124800">- Update to libxcrypt 4.1.0
  * Fix spelling of SUSE.
  * Lower the minimum required automake version to 1.14.
  * Fix build with USE_SWAPCONTEXT turned off.
  * Extend --enable-weak-hashes configure option to accept optional
    "glibc" parameter.
  * Fix the leak of obtained random bytes.
  * Check expected output strings for deterministic methods.
  * Fix memory leak in crypt_sha1_rn.
  * Fix read of random bytes out of bounds in gensalt_sha1_rn.
  * Make it possible to disable individual hashes at configure time.
  * Make salt validation pickier.
  * Replace crypt-sunmd5.c with BSD-licensed cleanroom reimplementation.
  * Make crypt_gensalt for $sha1 deterministic.
  * Fix incorrect output-size computation in crypt_sha1_rn.
  * Add docs for SHA1, MD5/Sun, NTHASH.
  * Introduce CRYPT_GENSALT_IMPLEMENTS_* feature test macros.
  * Install libcrypt.pc symlink along with libxcrypt.pc.
  * Extend --enable-obsolete-api configure option.
  * Extend overall test coverage.</changelog>
  <changelog author="jengelh@inai.de" date="1533556800">- Fix RPM groups for Factory.</changelog>
  <changelog author="schwab@suse.de" date="1533729600">- Add conflicts with glibc-devel &lt; 2.28</changelog>
  <changelog author="schwab@suse.de" date="1539086400">- Set compatibility level to suse</changelog>
  <changelog author="mliska@suse.cz" date="1550145600">- Update to version 4.4.3:
  * Add libxcrypt.so, libxcrypt.a and xcrypt.h.
  * Add new man3 manual pages.</changelog>
  <changelog author="schwab@suse.de" date="1550577600">- format-overflow.patch: Fix -Werror=format-overflow</changelog>
  <changelog author="mliska@suse.cz" date="1561032000">- Disable LTO due to symbol versioning (boo#1138833).</changelog>
  <changelog author="schwab@suse.de" date="1575720000">- Update to version 4.4.10
  * Fix alignment problem for GOST 34.11 (Streebog) in gost-yestcrypt.
  * The crypt_* functions will now all fail and set errno to ERANGE if
    their 'phrase' argument is longer than CRYPT_MAX_PASSPHRASE_SIZE
    characters (this is currently 512)
  * The NT hashing method no longer truncates passphrases at 128
    characters; Windows does not do this.
- format-overflow.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1576152000">- gcc10.patch: fix build with gcc10 (bsc#1158192)</changelog>
  <changelog author="schwab@suse.de" date="1579694400">- Update to version 4.4.11
  * Fixes for GCC v10.x
  * Change how the known-answer tests are parallelized
- gcc10.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1580385600">- Update to version 4.4.12
  * Another fix for GCC v10.x, which occurs on s390 architectures only.</changelog>
  <changelog author="schwab@suse.de" date="1583150400">- Update to version 4.4.15
  * The compatibility symbols crypt_gensalt_r, xcrypt, xcrypt_r,
    xcrypt_gensalt, and xcrypt_gensalt_r are deprecated further
  * Speed up ka-sunmd5 by skipping most of the test phrases
- Package README.md and TODO.md (bsc#1165389)</changelog>
  <changelog author="schwab@suse.de" date="1598961600">- Add compatibility provides for SLE15</changelog>
  <changelog author="dmueller@suse.com" date="1612612800">- add compatibility provides for Step 15 as well (bsc#1181571)</changelog>
  <changelog author="pgajdos@suse.com" date="1702382400">- fix variable name for datamember in 'struct crypt_data' [bsc#1215496]
- added patches
  fix https://github.com/besser82/libxcrypt/commit/b212d601549a0fc84cbbcaf21b931f903787d7e2
  + libxcrypt-man-fix-variable-name.patch</changelog>
</package>
<package pkgid="46b12512ae31a7a7f40da659b180c44f97f9ca6178f6406e2aa897ccc6ee500a" name="libxkbcommon" arch="src">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="0fdf15a9cae691e18859552ab45780c29fec5e3152a39ae8d02b0a02b1181f18" name="libxkbcommon" arch="src">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="5dbabe85ad7b95c1ce1d29187fc1389d38960858444e3511e6f18620ae034cbb" name="libxkbcommon0" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="1abe6db607b61999611b997cda238ff062a43c9afc9bbef10320e3ebd4398f3d" name="libxkbcommon0" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="c3792c33b70e3dd9afb6f0859c60cd62f148a9492f1dd78bc412d4e49b72de61" name="libxkbcommon0" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150400.3.2.2"/>
  <changelog author="jengelh@inai.de" date="1478865600">- Update to new upstream release 0.7.0
  * Added support for different "modes" of calculating consumed
    modifiers. The existing mode, based on the XKB standard, has
    proven to be unintuitive in various shortcut implementations.
  * A new mode, based on the calculation used by the GTK toolkit,
    is added. This mode is less eager to declare a modifier as
    consumed.</changelog>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
</package>
<package pkgid="aea0fadbafdb37aecf888d7a9beb54f54258e8f5eba864b6b70d5e1ccb034dc2" name="libxkbcommon0" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="c7dcd6970c885878f400d77ca82f281e1d03762494b6ae835319226e698671f9" name="libxkbcommon0" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="10d866df199515d20d7e65f582e510d6384a7fa299bb0e86a7bbdf4f716a2636" name="libxkbcommon0" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150400.3.5.1"/>
  <changelog author="jengelh@inai.de" date="1484740800">- Update to new upstream release 0.7.1
  * Fixed various reported problems when the current locale is
    tr_TR.UTF-8.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 0.7.2
  * Added new keysym definitions from xproto.
  * New APIs: XKB_KEY_XF86Keyboard, XKB_KEY_XF86WWAN,
    XKB_KEY_XF86RFKill, XKB_KEY_XF86AudioPreset.</changelog>
  <changelog author="jayvdb@gmail.com" date="1508414400">- Allow building x11 subpackage on any distribution</changelog>
  <changelog author="jengelh@inai.de" date="1513339200">- Update to new upstream release 0.8.0
  * Added xkb_keysym_to_{upper,lower} to perform case-conversion
    directly on keysyms. This is useful in some odd cases, but
    working with the Unicode representations should be preferred
    when possible.
  * Added Unicode conversion rules for the signifblank and
    permille keysyms.
  * Fixed a bug in the parsing of XKB key type definitions where
    the number of levels were determined by the number of level
  * names*. Keymaps which omit level names were hence
    miscompiled. This regressed in version 0.4.3. Keymaps from
    xkeyboard-config were not affected since they don't omit
    level names.</changelog>
  <changelog author="jengelh@inai.de" date="1533643200">- Update to new upstream release 0.8.2 (boo#1105832)
  * Fix a few NULL-dereferences, out-of-bounds access and undefined
    behavior in the XKB text format parser.
  * CVEs fixed:     CVE-2018-15853, CVE-2018-15854, CVE-2018-15855,
    CVE-2018-15856, CVE-2018-15857, CVE-2018-15858, CVE-2018-15859,
    CVE-2018-15861, CVE-2018-15862, CVE-2018-15863, CVE-2018-15864
- run make check</changelog>
  <changelog author="jengelh@inai.de" date="1549627200">- Update to new upstream release 0.8.3
  * New APIs: XKB_KEY_XF86MonBrightnessCycle,
    XKB_KEY_XF86RotationLockToggle.</changelog>
  <changelog author="jengelh@inai.de" date="1550836800">- Update to new upstream release 0.8.4
  * Only changes to the build procedure.</changelog>
  <changelog author="jengelh@inai.de" date="1571572800">- Update to release 0.9.0
  * Move ~/.xkb to before XKB_CONFIG_ROOT. This enables the user
    to have full control of the keymap definitions, instead of
    only augmenting them.</changelog>
  <changelog author="jengelh@inai.de" date="1571659200">- Update to release 0.9.1
  * Fix context creation failing when run in privileged processes
    as defined by `secure_getenv(3)`, e.g. GDM.</changelog>
  <changelog author="jengelh@inai.de" date="1579435200">- Update to release 0.10.0
  * Fix quadratic complexity in the XKB file parser.
  * Add $XDG_CONFIG_HOME/xkb to the default search path. If
    $XDG_CONFIG_HOME is not set, $HOME/.config/xkb is used. If
    $HOME is not set, the path is not added. The XDG path is
    looked up before the existing default search path $HOME/.xkb.
  * Add support for include statements in XKB rules files.
  * Fix bug where the merge mode only applied to the first vmod
    in a "virtual_modifiers" statement.
  * Reject interpret modifier predicate with more than one value.
  * Correctly handle capitalization of the ssharp keysym.</changelog>
  <changelog author="jengelh@inai.de" date="1599393600">- Update to release 1.0.0
  * Now it is possible to add custom layouts and options at the
    system (/etc) and user (~/.config) level, at least when
    libxkbcommon is in use.
  * libxkbregistry is a C library that lists available XKB
    models, layouts and variants for a given ruleset. This is a
    separate library (.so/.pc files) and aimed at tools that
    provide a listing of available keyboard layouts to the user.
  * Add an `xkbcli` command-line utility.</changelog>
  <changelog author="jengelh@inai.de" date="1599912000">- Update to release 1.0.1
  * Make the table output of `xkbcli how-to-type` aligned.</changelog>
  <changelog author="jengelh@inai.de" date="1605873600">- Update to release 1.0.2
  * Fix a bug where a keysym that cannot be resolved in a keymap
    gets compiled to a garbage keysym. Now it is set to
    XKB_KEY_NoSymbol instead.
  * Improve the speed of xkb_x11_keymap_new_from_device() on
    repeated calls in the same xkb_context().</changelog>
  <changelog author="jengelh@inai.de" date="1606132800">- Update to release 1.0.3
  * Fix (hopefully) a segfault in xkb_x11_keymap_new_from_device()
    in some unclear situation (bug introduced in 1.0.2).
  * Fix keymaps created with xkb_x11_keymap_new_from_device() do
    not have level names (bug introduced in 0.8.0).</changelog>
  <changelog author="dimstar@opensuse.org" date="1611144000">- Fix dependency of libxkbregistry-devel: the devel package must
  require the library libxkbregistry0.</changelog>
  <changelog author="jengelh@inai.de" date="1614859200">- Update to release 1.1.0
  * Update keysym definitions to latest xorgproto. In particular,
    this adds many special keysyms corresponding to Linux evdev
    keycodes.
  * New XKB_KEY_* definitions.</changelog>
  <changelog author="jengelh@inai.de" date="1617451200">- Update to release 1.2.0
  * `xkb_x11_keymap_new_from_device()` is much faster. It now
    performs only 2 roundtrips to the X server, instead of dozens
    (in first-time calls).
  * Case-sensitive `xkb_keysym_from_name()` is much faster.
  * Keysym names of the form `0x12AB` and `U12AB` are parsed more
    strictly.
  * Compose files now have a size limit (65535 internal nodes).
  * Compose table loading (`xkb_compose_table_new_from_locale()`
    and similar) is much faster.</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Update to release 1.2.1 [boo#1184688]
  * Fix `xkb_x11_keymap_new_from_device()` failing when the
    keymap contains key types with missing level names, like the
    one used by the `numpad:mac` option in xkeyboard-config.
    (Regressed in 1.2.0.)</changelog>
  <changelog author="jengelh@inai.de" date="1619870400">- Update to release 1.3.0
  * `xkbcli list` was changed to output YAML instead of a
    custom format.
  * Fix segmentation fault in case-insensitive
    `xkb_keysym_from_name` for certain values like the empty
    string.</changelog>
  <changelog author="meissner@suse.com" date="1704801600">- enable 32bit libxkbregistry0 and libxkbregistry0-devel
  for use by Wine. (bsc#1218639)</changelog>
</package>
<package pkgid="1ddf550f86cf56a00108aec0541bbdc84fdc3a07cd1212b7d8ede3deecc2277b" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="c0917e9972c3938ca3c41fac80a6dd5f0e334c96997cbb1a0eb5dd5238988960" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="6af84feb02e15c49ec71068c124fc6f95405a9e088491c5316a44d0675237a23" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="0686e80a7cd2121d5cde4345002733e15cbffb06b760612b946718b14aaf9645" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="6e1c6c2dc836f21357b397db347366c1c53be31b7b859ed6163d16d942ba98f4" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="10515acb8f7ca0cbaf48daf72ed1d10e8dad06088c3796c24fd5de35e25fec26" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="89ae7302009f732fdafcc5a95aefe4daa779b279b356ed818c136885d7bb08a0" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="ed80081b6dcf2c0e65a9606bf4e496e419775b93f37c39ddbccffb317e22be35" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="76c470930b0014efc45444f7b312706798ee5f6e61a512169ee8b5e0c8d13507" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="e35366d065e3aee89f249c83eddd131d39562c4e1334777c062d30722dffc1f6" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="7e1cf01b35f6130cd2b951d851abafa987e148866b95cb26aa6ba92d7f51e424" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="dea006060edd848cd79c9ed834b7ff9263458d900173c4e3dae1c553342cd78a" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="33b80b660e03adca240b002620cd432d7ae7cee80d884372648d6028b0be9473" name="libxml2-2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="23378106e2679a937867c291ee13f72270da9cf35ba50fd08edf80f79ad85783" name="libxml2-2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="d02b209e69cdf04d82c8b8f61293e1e84bd5cd42739020b6472c15c5cb625a7e" name="libxml2-2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="d675986f509767ba1c4bb8a12be997b8df5b0fce3bc90afb3aad3076aa125349" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="4d42cf5b5980d4b030c79168e645e7f0d354ffd7239a30f0418a19b31dec5c1d" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="edbe3c67ec02b51684b1b83e2744573d176f8c738739769f3f913d5a0dd03342" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="3d7badd4194cc574f55c23abca1027771df69de6f1518c91a91dec5df51e6e0f" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="385bc82b570d186626af0e0eac02f399e3b6653238bae39f5c4c13b3b35f3dc5" name="libxml2" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="24331ffa24f9eb8c72658d70c4f72ebb4922a2d4be714725004f4e23f53126fc" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="098b2e6366b524ec7b19c18f4d88c20f4c043ee7b8413c22265e750f576935f4" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="99ba8a6e2193927d06b2b9cd4d0456dd8c69357d500bca42840a99afd0037194" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="535ad576c07eeab813875b8233314623530b65cb3ed024b4b1187594c3d83118" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="9162a9d54b90e129a354a5bd4b4014e4afd978705f58dfa3421f7d46c8abb282" name="libxml2-python" arch="src">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="89cfee990d037245ad393a58838965a4c4428b383d81460e789f2d22806818d7" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="78f886170f5bdf8f44892527565f424a1d0237a36946e02854616783189e47e4" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="162c6535dc1c63f65198270a248f96b67f9a17349a0b189fe4cd21b63a4074f5" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="1b4935b91ed6f5bf2fd244523c39cad196dbc00d0da28a591bc129e3355a3c41" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="6ec77b6684b74a20933ad30bf30bd4a28fa0f4a72a4b9882675ed56f6c703018" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="636b34f4eda670cac89ce9edf8ffb081d9864062c6f49a56a5df8ebca05c8643" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="26634f53eb00f72910e9e7f4f616d16931b2b111385f124c815b2fc13784483c" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="791fb2be771389e2d70c6176a1c6cff8832c0b02e82c65aee43125d0c3ee8555" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="00a833910da8b2ebf098ac88f0eeb42f56acee3c7e17e3cf078f87e9e37eefeb" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="894fc8d72af7e0c0fff25fc81e3249d0d5676ccf283b4baf776d211415f13309" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="bbf3f9c555bb0fed7e76cccdc30de40a8bbe7be2af40e77011e2f5a9502ba8d9" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="579b61698f9ae16edd20779db6e704b99e1d5b2d18e25221ea262b15eb351ddf" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="79a53626222f1c8916b93dcdb09fe55c551ec85ff21bda18e521e8c7dc9b94f1" name="libxml2-tools" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="b7a11a189315752c211f31d3eee2a7a923835a3ac6602bf9d2750e43a18e6569" name="libxml2-tools" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="f04277d52833769166d8a8549016204086a5afb5bd07aad8eefc4dc2b3a6e4d5" name="libxml2-tools" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="1be8c3951dc591389a9df4c8f16b7f23b376062483884212b37ff5ab730ee8e4" name="libxmlsec1-1" arch="x86_64">
  <version epoch="0" ver="1.2.37" rel="150400.14.3.4"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1592481600">- Update to 1.2.30:
  * Enabled XML_PARSE_HUGE for all xml parsers.
  * Various build and tests fixes and improvements.
  * Move remaining private header files away from xmlsec/include/ folder.</changelog>
  <changelog author="dimstar@opensuse.org" date="1608206400">- Update to version 1.2.31:
  + Unload error strings in OpenSSL shutdown.
  + Make userData available when executing preExecCallback
    function.
  + Add an option to use secure memset.
- Pass --disable-md5 to configure: The cryptographic strength of
  the MD5 algorithm is sufficiently doubtful that its use is
  discouraged at this time. It is not listed as an algorithm in
  [XMLDSIG-CORE1]
  https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Relax the crypto policies for the test-suite. This allows the
  tests using certificates with small key lengths to pass.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620561600">- update to 1.2.32:
  + Remove MD5 for NSS 3.59 and above
  + Fix PKCS12_parse return code handling
  + Fix OpenSSL lookup
  + xmlSecX509DataGetNodeContent(): don't return 0 for non-empty
    elements - fix for LibreOffice
- add upstream signing key and validate source signature
- put license text into all subpackages
- treat all compiler warnings as errors</changelog>
  <changelog author="dmueller@suse.com" date="1638100800">- update to 1.2.33:
  * Fix decrypting session key for two recipients
  * Added --privkey-openssl-engine option to enhance openssl engine support</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- update to 1.2.34:
  * Support for OpenSSL compiled with OPENSSL_NO_ERR.
  * Full support for LibreSSL 3.5.0 and above
  * Several other small fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662638400">- Add export CFLAGS/CXXFLAGS="-Wno-error=deprecated-declarations"
  inbefore configure. We pass --enable-werror to configure, and
  that leads to warnings about deprecations failing build. As
  deprecations is mainly a consern for upstream, stop failing on
  those.</changelog>
  <changelog author="pmonreal@suse.com" date="1667563200">- Update to 1.2.36:
  * Retired the XMLSec mailing list "xmlsec@aleksey.com" and the
    XMLSec Online Signature Verifier.
- Update to 1.2.35:
  * Migration to OpenSSL 3.0 API (based on PR by @snargit). Note
    that OpenSSL engines are disabled by default when XMLSec
    library is compiled against OpenSSL 3.0. To re-enable OpenSSL
    engines, use "--enable-openssl3-engines" configure flag (there
    will be a lot of deprecation warnings).
  * The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now
    deprecated and will be removed in the future versions of
    XMLSec Library.
  * Refactored all the integer casts to ensure cast-safety. Fixed
    all warnings and enabled "-Werror" and "-pedantic" flags on
    CI builds.
  * Added configure flag to use size_t for xmlSecSize (currently
    disabled by default for backward compatibility).
  * Moved all CI builds to GitHub actions.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.2.37:
  Fixed two regressions from 1.2.36 release</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well</changelog>
</package>
<package pkgid="a75b3b3a62bf77e839ef2bcb32ec702fc7222a8bba7a96b4451bddc04bf848bd" name="libxmlsec1-openssl1" arch="x86_64">
  <version epoch="0" ver="1.2.37" rel="150400.14.3.4"/>
  <changelog author="pmonrealgonzalez@suse.com" date="1490270400">- Fixed dependencies with libraries (bsc#1012246):
  * libxmlsec1-openssl.so
  * libxmlsec1-gcrypt.so
  * libxmlsec1-gnutls.so
  * libxmlsec1-nss.so</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1492689600">- Version update to 1.2.24:
  * Added ECDSA-SHA1, ECDSA-SHA256, ECDSA-SHA512 support
  for xmlsec-nss.
  * Fixed XMLSEC_KEYINFO_FLAGS_X509DATA_DONT_VERIFY_CERTS
  handling.
  * Disabled external entities loading by xmlsec utility app by
  default to prevent XXE attacks.
  * Improved OpenSSL version and features detection.
  * Cleaned up, simplified, and standardized internal error
  reporting.
  * Fixed a few Coverity-discovered bugs.
  * Marked as deprecated all the functions in xmlsec/soap.h file
  and a couple other functions no longer required by xmlsec.
  These functions will be removed in the future releases.
  * Several other small fixes (see commit log for more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1512043200">- Version update to 1.2.25:
  * Various small fixes
  * Coverity cleanups
  * Removed support for old openssl</changelog>
  <changelog author="vmiklos@collabora.co.uk" date="1528200000">- Version update to 1.2.26:
  * Added xmlsec-mscng module based on Microsoft Cryptography API: Next
    Generation
  * Added support for GOST 2012 and fixed CryptoPro CSP provider for GOST R
    34.10-2001 in xmlsec-mscrypto
  * Added LibreSSL 2.7 support
  * Upgraded documentation build process to support the latest gtk-doc</changelog>
  <changelog author="kallan@suse.com" date="1534248000">- Fixed (bsc#1104876).  Added: Requires: %{libname} = %{version} to each module
  in the spec file. This will ensure that when one of the modules is installed
  the corresponding version of libxmlsec1-1 will also be installed/upgraded.</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Add rplintrc to avoid bogus errors:
  * xmlsec1-rpmlintrc</changelog>
  <changelog author="tchvatal@suse.com" date="1540987200">- Version update to 1.2.27:
  * Added AES-GCM support for OpenSSL and MSCNG (snargit).
  * Added DSA-SHA256 and ECDSA-SHA384 support for NSS (vmiklos).
  * Added RSA-OAEP support for MSCNG (vmiklos).
  * Continuous build integration in Travis and Appveyor.
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1540987201">- Drop the gnutls backend as based on the tests it is quite borked:
  * We still have nss and openssl backend for people to use</changelog>
  <changelog author="tchvatal@suse.com" date="1544184000">- Make sure to recommend at least one backend when you install
  just xmlsec1</changelog>
  <changelog author="tchvatal@suse.com" date="1556193600">- Update to 1.2.28:
  * Added BoringSSL support (chenbd).
  * Added gnutls-3.6.x support (alonbl).
  * Added DSA and ECDSA key size getter for MSCNG (vmiklos).
  * Added --enable-mans configuration option (alonbl).
  * Added coninuous build integration for MacOSX (vmiklos).
  * Several other small fixes (more details).</changelog>
  <changelog author="tchvatal@suse.com" date="1592481600">- Update to 1.2.30:
  * Enabled XML_PARSE_HUGE for all xml parsers.
  * Various build and tests fixes and improvements.
  * Move remaining private header files away from xmlsec/include/ folder.</changelog>
  <changelog author="dimstar@opensuse.org" date="1608206400">- Update to version 1.2.31:
  + Unload error strings in OpenSSL shutdown.
  + Make userData available when executing preExecCallback
    function.
  + Add an option to use secure memset.
- Pass --disable-md5 to configure: The cryptographic strength of
  the MD5 algorithm is sufficiently doubtful that its use is
  discouraged at this time. It is not listed as an algorithm in
  [XMLDSIG-CORE1]
  https://www.w3.org/TR/xmlsec-algorithms/#bib-XMLDSIG-CORE1</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Relax the crypto policies for the test-suite. This allows the
  tests using certificates with small key lengths to pass.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1620561600">- update to 1.2.32:
  + Remove MD5 for NSS 3.59 and above
  + Fix PKCS12_parse return code handling
  + Fix OpenSSL lookup
  + xmlSecX509DataGetNodeContent(): don't return 0 for non-empty
    elements - fix for LibreOffice
- add upstream signing key and validate source signature
- put license text into all subpackages
- treat all compiler warnings as errors</changelog>
  <changelog author="dmueller@suse.com" date="1638100800">- update to 1.2.33:
  * Fix decrypting session key for two recipients
  * Added --privkey-openssl-engine option to enhance openssl engine support</changelog>
  <changelog author="dmueller@suse.com" date="1653307200">- update to 1.2.34:
  * Support for OpenSSL compiled with OPENSSL_NO_ERR.
  * Full support for LibreSSL 3.5.0 and above
  * Several other small fixes</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1662638400">- Add export CFLAGS/CXXFLAGS="-Wno-error=deprecated-declarations"
  inbefore configure. We pass --enable-werror to configure, and
  that leads to warnings about deprecations failing build. As
  deprecations is mainly a consern for upstream, stop failing on
  those.</changelog>
  <changelog author="pmonreal@suse.com" date="1667563200">- Update to 1.2.36:
  * Retired the XMLSec mailing list "xmlsec@aleksey.com" and the
    XMLSec Online Signature Verifier.
- Update to 1.2.35:
  * Migration to OpenSSL 3.0 API (based on PR by @snargit). Note
    that OpenSSL engines are disabled by default when XMLSec
    library is compiled against OpenSSL 3.0. To re-enable OpenSSL
    engines, use "--enable-openssl3-engines" configure flag (there
    will be a lot of deprecation warnings).
  * The OpenSSL before 1.1.0 and LibreSSL before 2.7.0 are now
    deprecated and will be removed in the future versions of
    XMLSec Library.
  * Refactored all the integer casts to ensure cast-safety. Fixed
    all warnings and enabled "-Werror" and "-pedantic" flags on
    CI builds.
  * Added configure flag to use size_t for xmlSecSize (currently
    disabled by default for backward compatibility).
  * Moved all CI builds to GitHub actions.</changelog>
  <changelog author="dmueller@suse.com" date="1670068800">- update to 1.2.37:
  Fixed two regressions from 1.2.36 release</changelog>
  <changelog author="dmueller@suse.com" date="1675252800">- switch to pkgconfig(zlib) to allow alternative providers as well</changelog>
</package>
<package pkgid="596027aa356b3044809bd672f1068877b9bff58638139beef20d5816b06da426" name="libyajl" arch="src">
  <version epoch="0" ver="2.1.0" rel="150000.4.6.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1278936000">- initial package (1.0.9)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1291204800">- update to 1.0.11: no user-visible changes
- changes from 1.0.10:
  * yajl version number now programatically accessible</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1292932800">- merge yajl package from darix:
  * lib -&gt; LIBDIR patch
  * -devel-static subpackage</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1297252800">- fix license, changed from erroneous BSD3c to MIT, as stated on
  http://pyyaml.org/wiki/LibYAML, sort of fixes bnc#670525</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1297252801">- revert last change, it is BSD3c indeed, and totally unrelated to
  bnc#670525</changelog>
  <changelog author="coolo@novell.com" date="1302264000">- add baselibs.conf for 32bit library support</changelog>
  <changelog author="jfehlig@novell.com" date="1302696000">- Add filters to rpmlintrc
- spec file: Document githash usage in tarbal name</changelog>
  <changelog author="jfehlig@novell.com" date="1302696001">- Add filters to rpmlintrc
- spec file: Document githash usage in tarbal name</changelog>
  <changelog author="jfehlig@novell.com" date="1307016000">- Add man pages for json_{reformat,verify}</changelog>
  <changelog author="mrueckert@suse.de" date="1313150400">- update to 2.0.1
  - lth generator flag to allow client to specify they want escaped
    solidi '/'.  issue #28
  - lth crash fix when yajl_parse() is never called. issue #27
- additional changes from 2.0.0
  - lth YAJL is now ISC licensed:
    http://en.wikipedia.org/wiki/ISC_license
  - lth 20-35% (osx and linux respectively) parsing performance
    improvement attained by tweaking string scanning (idea:
    @michaelrhanson).
  - Florian Forster &amp; lth - yajl_tree interface introduced as a
    higher level interface to the parser (eats JSON, poops a memory
    representation)
  - lth require a C99 compiler
  - lth integers are now represented with long long (64bit+) on all
    platforms.
  - lth size_t now used throughout to represent buffer lengths, so
    you can safely manage buffers greater than 4GB.
  - gno semantic improvements to yajl's API regarding partial value
    parsing and trailing garbage
  - lth new configuration mechanism for yajl, see yajl_config() and
    yajl_gen_config()
  - gno more allocation checking in more places
  - gno remove usage of strtol, replace with custom implementation
    that cares not about your locale.
  - lth yajl_parse_complete renamed to yajl_complete_parse.
  - lth add a switch to validate utf8 strings as they are
    generated.
  - lth tests are a lot quieter in their output.
  - lth addition of a little in tree performance benchmark,
    `perftest` in perf/perftest.c
- additional changes from 1.0.12
  - Conrad Irwin - Parse null bytes correctly
  - Mirek Rusin - fix LLVM warnings
  - gno - Don't generate numbers for keys. closes #13
  - lth - various win32 fixes, including build documentation
    improvements
  - John Stamp - Don't export private symbols.
  - John Stamp - Install yajl_version.h, not the template.
  - John Stamp - Don't use -fPIC for static lib.  Cmake will
    automatically add it for the shared.
  - lth 0 fix paths embedded in dylib upon installation on osx.
    closes #11
- refreshed optflags patch</changelog>
  <changelog author="mrueckert@suse.de" date="1313496000">- bump baselibs.conf</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libyajl-devel to baselibs</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="ku.b@gmx.de" date="1415188800">- update to 2.1.0
- 2.1.0
  - @nonodename, @patperry - fixed some compiler warnings
  - @yep, @emaste - documentation improvements
  - @sgravrock - build fix for NetBSD (and whenever sh != bash)
  - @rotty, @brimstone3, @lloyd - allow client to reset generator
  - @sgravrock - remove bash dependencies
  - @lloyd - add api tests
  - @rflynn - remove ruby dependency
  - @cloderic - nmake install works on windows
  - @shahbag - build fix for qnx
  - @breese - debugging improvements
  - @lloyd - json_verify supports -s flag for stream processing
  - @lloyd - json_reformat supports -s flag for stream processing
- 2.0.4
  - @jcekstrom - additional checking in integer parsing
  - @jcekstrom - fix a bug in yajl_tree that would cause valid json integersto fail to parse
  - @plaguemorin - fix a memory leak in yajl_tree (error strings were being leaked)
  - @7AC - reset errno
  - @ConradIrwin - include flags to reformatter to allow toggling of escape solidus option
- 2.0.3
  - John Stamp generation of a pkgconfig file at build time.
  - @robzuber bugfix in yajl_tree_get()
  - @lloyd - fix for compilation on 64 bit windows
- 2.0.2
  - lth fix typos in yajl_tree.h macros YAJL_IS_INTEGER and YAJL_IS_DOUBLE,
    contributed by Artem S Vybornov.
  - lth add #ifdef __cplusplus wrappers to yajl_tree to allow proper
    usage from many populer C++ compilers.
- fix array access</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Use correct url for download
- Add dependency on doxygen for doc generation
- Cleanup spec file with spec-clener</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]
- Move other docu to -devel package where it better fits</changelog>
  <changelog author="jtomasiak@suse.com" date="1652443200">- add libyajl-CVE-2022-24795.patch (CVE-2022-24795, bsc#1198405)</changelog>
  <changelog author="jfehlig@suse.com" date="1688731200">- add libyajl-CVE-2023-33460.patch (CVE-2023-33460, bsc#1212928)</changelog>
</package>
<package pkgid="6445f5138ad6b9d59b3908cd5b891fc0fff25522f595589ab46cc27d1617ed2a" name="libyajl2" arch="aarch64">
  <version epoch="0" ver="2.1.0" rel="150000.4.6.1"/>
  <changelog author="jfehlig@novell.com" date="1307016000">- Add man pages for json_{reformat,verify}</changelog>
  <changelog author="mrueckert@suse.de" date="1313150400">- update to 2.0.1
  - lth generator flag to allow client to specify they want escaped
    solidi '/'.  issue #28
  - lth crash fix when yajl_parse() is never called. issue #27
- additional changes from 2.0.0
  - lth YAJL is now ISC licensed:
    http://en.wikipedia.org/wiki/ISC_license
  - lth 20-35% (osx and linux respectively) parsing performance
    improvement attained by tweaking string scanning (idea:
    @michaelrhanson).
  - Florian Forster &amp; lth - yajl_tree interface introduced as a
    higher level interface to the parser (eats JSON, poops a memory
    representation)
  - lth require a C99 compiler
  - lth integers are now represented with long long (64bit+) on all
    platforms.
  - lth size_t now used throughout to represent buffer lengths, so
    you can safely manage buffers greater than 4GB.
  - gno semantic improvements to yajl's API regarding partial value
    parsing and trailing garbage
  - lth new configuration mechanism for yajl, see yajl_config() and
    yajl_gen_config()
  - gno more allocation checking in more places
  - gno remove usage of strtol, replace with custom implementation
    that cares not about your locale.
  - lth yajl_parse_complete renamed to yajl_complete_parse.
  - lth add a switch to validate utf8 strings as they are
    generated.
  - lth tests are a lot quieter in their output.
  - lth addition of a little in tree performance benchmark,
    `perftest` in perf/perftest.c
- additional changes from 1.0.12
  - Conrad Irwin - Parse null bytes correctly
  - Mirek Rusin - fix LLVM warnings
  - gno - Don't generate numbers for keys. closes #13
  - lth - various win32 fixes, including build documentation
    improvements
  - John Stamp - Don't export private symbols.
  - John Stamp - Install yajl_version.h, not the template.
  - John Stamp - Don't use -fPIC for static lib.  Cmake will
    automatically add it for the shared.
  - lth 0 fix paths embedded in dylib upon installation on osx.
    closes #11
- refreshed optflags patch</changelog>
  <changelog author="mrueckert@suse.de" date="1313496000">- bump baselibs.conf</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libyajl-devel to baselibs</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="ku.b@gmx.de" date="1415188800">- update to 2.1.0
- 2.1.0
  - @nonodename, @patperry - fixed some compiler warnings
  - @yep, @emaste - documentation improvements
  - @sgravrock - build fix for NetBSD (and whenever sh != bash)
  - @rotty, @brimstone3, @lloyd - allow client to reset generator
  - @sgravrock - remove bash dependencies
  - @lloyd - add api tests
  - @rflynn - remove ruby dependency
  - @cloderic - nmake install works on windows
  - @shahbag - build fix for qnx
  - @breese - debugging improvements
  - @lloyd - json_verify supports -s flag for stream processing
  - @lloyd - json_reformat supports -s flag for stream processing
- 2.0.4
  - @jcekstrom - additional checking in integer parsing
  - @jcekstrom - fix a bug in yajl_tree that would cause valid json integersto fail to parse
  - @plaguemorin - fix a memory leak in yajl_tree (error strings were being leaked)
  - @7AC - reset errno
  - @ConradIrwin - include flags to reformatter to allow toggling of escape solidus option
- 2.0.3
  - John Stamp generation of a pkgconfig file at build time.
  - @robzuber bugfix in yajl_tree_get()
  - @lloyd - fix for compilation on 64 bit windows
- 2.0.2
  - lth fix typos in yajl_tree.h macros YAJL_IS_INTEGER and YAJL_IS_DOUBLE,
    contributed by Artem S Vybornov.
  - lth add #ifdef __cplusplus wrappers to yajl_tree to allow proper
    usage from many populer C++ compilers.
- fix array access</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Use correct url for download
- Add dependency on doxygen for doc generation
- Cleanup spec file with spec-clener</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]
- Move other docu to -devel package where it better fits</changelog>
  <changelog author="jtomasiak@suse.com" date="1652443200">- add libyajl-CVE-2022-24795.patch (CVE-2022-24795, bsc#1198405)</changelog>
  <changelog author="jfehlig@suse.com" date="1688731200">- add libyajl-CVE-2023-33460.patch (CVE-2023-33460, bsc#1212928)</changelog>
</package>
<package pkgid="181f8b49d533564638d6d7bf68b64211135ceb64e99aad5c197b6a8ba31c9317" name="libyajl2" arch="s390x">
  <version epoch="0" ver="2.1.0" rel="150000.4.6.1"/>
  <changelog author="jfehlig@novell.com" date="1307016000">- Add man pages for json_{reformat,verify}</changelog>
  <changelog author="mrueckert@suse.de" date="1313150400">- update to 2.0.1
  - lth generator flag to allow client to specify they want escaped
    solidi '/'.  issue #28
  - lth crash fix when yajl_parse() is never called. issue #27
- additional changes from 2.0.0
  - lth YAJL is now ISC licensed:
    http://en.wikipedia.org/wiki/ISC_license
  - lth 20-35% (osx and linux respectively) parsing performance
    improvement attained by tweaking string scanning (idea:
    @michaelrhanson).
  - Florian Forster &amp; lth - yajl_tree interface introduced as a
    higher level interface to the parser (eats JSON, poops a memory
    representation)
  - lth require a C99 compiler
  - lth integers are now represented with long long (64bit+) on all
    platforms.
  - lth size_t now used throughout to represent buffer lengths, so
    you can safely manage buffers greater than 4GB.
  - gno semantic improvements to yajl's API regarding partial value
    parsing and trailing garbage
  - lth new configuration mechanism for yajl, see yajl_config() and
    yajl_gen_config()
  - gno more allocation checking in more places
  - gno remove usage of strtol, replace with custom implementation
    that cares not about your locale.
  - lth yajl_parse_complete renamed to yajl_complete_parse.
  - lth add a switch to validate utf8 strings as they are
    generated.
  - lth tests are a lot quieter in their output.
  - lth addition of a little in tree performance benchmark,
    `perftest` in perf/perftest.c
- additional changes from 1.0.12
  - Conrad Irwin - Parse null bytes correctly
  - Mirek Rusin - fix LLVM warnings
  - gno - Don't generate numbers for keys. closes #13
  - lth - various win32 fixes, including build documentation
    improvements
  - John Stamp - Don't export private symbols.
  - John Stamp - Install yajl_version.h, not the template.
  - John Stamp - Don't use -fPIC for static lib.  Cmake will
    automatically add it for the shared.
  - lth 0 fix paths embedded in dylib upon installation on osx.
    closes #11
- refreshed optflags patch</changelog>
  <changelog author="mrueckert@suse.de" date="1313496000">- bump baselibs.conf</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libyajl-devel to baselibs</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="ku.b@gmx.de" date="1415188800">- update to 2.1.0
- 2.1.0
  - @nonodename, @patperry - fixed some compiler warnings
  - @yep, @emaste - documentation improvements
  - @sgravrock - build fix for NetBSD (and whenever sh != bash)
  - @rotty, @brimstone3, @lloyd - allow client to reset generator
  - @sgravrock - remove bash dependencies
  - @lloyd - add api tests
  - @rflynn - remove ruby dependency
  - @cloderic - nmake install works on windows
  - @shahbag - build fix for qnx
  - @breese - debugging improvements
  - @lloyd - json_verify supports -s flag for stream processing
  - @lloyd - json_reformat supports -s flag for stream processing
- 2.0.4
  - @jcekstrom - additional checking in integer parsing
  - @jcekstrom - fix a bug in yajl_tree that would cause valid json integersto fail to parse
  - @plaguemorin - fix a memory leak in yajl_tree (error strings were being leaked)
  - @7AC - reset errno
  - @ConradIrwin - include flags to reformatter to allow toggling of escape solidus option
- 2.0.3
  - John Stamp generation of a pkgconfig file at build time.
  - @robzuber bugfix in yajl_tree_get()
  - @lloyd - fix for compilation on 64 bit windows
- 2.0.2
  - lth fix typos in yajl_tree.h macros YAJL_IS_INTEGER and YAJL_IS_DOUBLE,
    contributed by Artem S Vybornov.
  - lth add #ifdef __cplusplus wrappers to yajl_tree to allow proper
    usage from many populer C++ compilers.
- fix array access</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Use correct url for download
- Add dependency on doxygen for doc generation
- Cleanup spec file with spec-clener</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]
- Move other docu to -devel package where it better fits</changelog>
  <changelog author="jtomasiak@suse.com" date="1652443200">- add libyajl-CVE-2022-24795.patch (CVE-2022-24795, bsc#1198405)</changelog>
  <changelog author="jfehlig@suse.com" date="1688731200">- add libyajl-CVE-2023-33460.patch (CVE-2023-33460, bsc#1212928)</changelog>
</package>
<package pkgid="9d868f581d56407bba87dfdabc6d4f597623039b3826c243825681610d3ae66c" name="libyajl2" arch="x86_64">
  <version epoch="0" ver="2.1.0" rel="150000.4.6.1"/>
  <changelog author="jfehlig@novell.com" date="1307016000">- Add man pages for json_{reformat,verify}</changelog>
  <changelog author="mrueckert@suse.de" date="1313150400">- update to 2.0.1
  - lth generator flag to allow client to specify they want escaped
    solidi '/'.  issue #28
  - lth crash fix when yajl_parse() is never called. issue #27
- additional changes from 2.0.0
  - lth YAJL is now ISC licensed:
    http://en.wikipedia.org/wiki/ISC_license
  - lth 20-35% (osx and linux respectively) parsing performance
    improvement attained by tweaking string scanning (idea:
    @michaelrhanson).
  - Florian Forster &amp; lth - yajl_tree interface introduced as a
    higher level interface to the parser (eats JSON, poops a memory
    representation)
  - lth require a C99 compiler
  - lth integers are now represented with long long (64bit+) on all
    platforms.
  - lth size_t now used throughout to represent buffer lengths, so
    you can safely manage buffers greater than 4GB.
  - gno semantic improvements to yajl's API regarding partial value
    parsing and trailing garbage
  - lth new configuration mechanism for yajl, see yajl_config() and
    yajl_gen_config()
  - gno more allocation checking in more places
  - gno remove usage of strtol, replace with custom implementation
    that cares not about your locale.
  - lth yajl_parse_complete renamed to yajl_complete_parse.
  - lth add a switch to validate utf8 strings as they are
    generated.
  - lth tests are a lot quieter in their output.
  - lth addition of a little in tree performance benchmark,
    `perftest` in perf/perftest.c
- additional changes from 1.0.12
  - Conrad Irwin - Parse null bytes correctly
  - Mirek Rusin - fix LLVM warnings
  - gno - Don't generate numbers for keys. closes #13
  - lth - various win32 fixes, including build documentation
    improvements
  - John Stamp - Don't export private symbols.
  - John Stamp - Install yajl_version.h, not the template.
  - John Stamp - Don't use -fPIC for static lib.  Cmake will
    automatically add it for the shared.
  - lth 0 fix paths embedded in dylib upon installation on osx.
    closes #11
- refreshed optflags patch</changelog>
  <changelog author="mrueckert@suse.de" date="1313496000">- bump baselibs.conf</changelog>
  <changelog author="jengelh@medozas.de" date="1316174400">- Add libyajl-devel to baselibs</changelog>
  <changelog author="jengelh@medozas.de" date="1327838400">- Remove redundant tags/sections per specfile guideline suggestions</changelog>
  <changelog author="ku.b@gmx.de" date="1415188800">- update to 2.1.0
- 2.1.0
  - @nonodename, @patperry - fixed some compiler warnings
  - @yep, @emaste - documentation improvements
  - @sgravrock - build fix for NetBSD (and whenever sh != bash)
  - @rotty, @brimstone3, @lloyd - allow client to reset generator
  - @sgravrock - remove bash dependencies
  - @lloyd - add api tests
  - @rflynn - remove ruby dependency
  - @cloderic - nmake install works on windows
  - @shahbag - build fix for qnx
  - @breese - debugging improvements
  - @lloyd - json_verify supports -s flag for stream processing
  - @lloyd - json_reformat supports -s flag for stream processing
- 2.0.4
  - @jcekstrom - additional checking in integer parsing
  - @jcekstrom - fix a bug in yajl_tree that would cause valid json integersto fail to parse
  - @plaguemorin - fix a memory leak in yajl_tree (error strings were being leaked)
  - @7AC - reset errno
  - @ConradIrwin - include flags to reformatter to allow toggling of escape solidus option
- 2.0.3
  - John Stamp generation of a pkgconfig file at build time.
  - @robzuber bugfix in yajl_tree_get()
  - @lloyd - fix for compilation on 64 bit windows
- 2.0.2
  - lth fix typos in yajl_tree.h macros YAJL_IS_INTEGER and YAJL_IS_DOUBLE,
    contributed by Artem S Vybornov.
  - lth add #ifdef __cplusplus wrappers to yajl_tree to allow proper
    usage from many populer C++ compilers.
- fix array access</changelog>
  <changelog author="mpluskal@suse.com" date="1430049600">- Use correct url for download
- Add dependency on doxygen for doc generation
- Cleanup spec file with spec-clener</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]
- Move other docu to -devel package where it better fits</changelog>
  <changelog author="jtomasiak@suse.com" date="1652443200">- add libyajl-CVE-2022-24795.patch (CVE-2022-24795, bsc#1198405)</changelog>
  <changelog author="jfehlig@suse.com" date="1688731200">- add libyajl-CVE-2023-33460.patch (CVE-2023-33460, bsc#1212928)</changelog>
</package>
<package pkgid="777f51d7867eac847a2022632b3000a3b49914828f0516d8e77f12df5e041a9d" name="libz1" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="867d936041d93e7bba5fa0cd835656331a7c1d2dc57877fa2f039b01437f205c" name="libz1" arch="s390x">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="f5f6281c54cd1bb2d7a4bb382d9fa9c2b08ada3246cda3019ef99a238b3f32ec" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="150000.3.42.1"/>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
</package>
<package pkgid="6eab83f28c3664da766130270fb508c9c617984cdc6958c00a52d3bbe8878408" name="libz1" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="3e805d83068520a349006758156a645827ba002042156b63c6e52fed4511575c" name="libz1" arch="s390x">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="da49de86280f07d3ae7020f21eb5271832154b624a44f867b37121156205cd0f" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="150000.3.45.1"/>
  <changelog author="tchvatal@suse.com" date="1552996800">- Try to safely abort if we get NULL ptr bsc#1110304 bsc#1129576:
  * zlib-power8-fate325307.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
</package>
<package pkgid="614ee914bed3573a86773eba8d291edc626acd1620cea64aaa760d1c8c0a27db" name="libz1" arch="aarch64">
  <version epoch="0" ver="1.2.11" rel="150000.3.48.1"/>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="5d97464cad9f6688a1056caec6ab607524a5952289a97481f7d8f4ae75b6bc20" name="libz1" arch="s390x">
  <version epoch="0" ver="1.2.11" rel="150000.3.48.1"/>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="975a5f13813eee8a5b44a35a7b9a54fbd097986491fe4a038f0f7634c12b3c2f" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="150000.3.48.1"/>
  <changelog author="tchvatal@suse.com" date="1559822400">- Add patchset for s390 improvements jsc#SLE-5807 bsc#1136717:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Do not enable the previous patchset on s390 but just s390x
  bsc#1137624</changelog>
  <changelog author="mliska@suse.cz" date="1562068800">- Use FAT LTO objects in order to provide proper static library.</changelog>
  <changelog author="brogers@suse.com" date="1562846400">- Tweak zlib-power8-fate325307.patch to have type of crc32_vpmsum
  conform to usage
  bsc#1141059</changelog>
  <changelog author="tchvatal@suse.com" date="1563364800">- Update the s390 patchset bsc#1137624:
  * 410.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1571659200">- Add SUSE specific patch to fix bsc#1138793, we simply don't want
  to test if the app was linked with exactly same version of zlib
  like the one that is present on the runtime:
  * zlib-no-version-check.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1572350400">- Update the zlib-no-version-check.patch to be even more forgiving
  with the versions on the zlib to allow updates without rebuilds</changelog>
  <changelog author="tchvatal@suse.com" date="1587643200">- Update 410.patch to contain latest fixes from IBM bsc#1166260
  * The build behaviour changed</changelog>
  <changelog author="lidong.zhong@suse.com" date="1596715200">- Permit a deflateParams() parameter change as soon as possible(bsc#1174736)
  * bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  Fix DFLTCC not flushing EOBS when creating raw streams(bsc#1174551)
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1598529600">- Set -DDFLTCC_LEVEL_MASK=0x7e on s390/s390x jsc#13776</changelog>
  <changelog author="tchvatal@suse.com" date="1598616000">- Add patch to fix compression level switching
  bsc#1175811 bsc#1175830 bsc#1175831
  * zlib-compression-switching.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1614859200">- Fix hw compression on z15 bsc#1176201
- Add zlib-s390x-z15-fix-hw-compression.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1638532800">- Update 410.patch to include new fixes from upstream,
  fixes bsc#1192688
- Refresh bsc1174736-DFLTCC_LEVEL_MASK-set-to-0x1ff.patch
  to match upstream commit
- Drop patches which changes have been merged in 410.patch:
  * zlib-compression-switching.patch
  * zlib-390x-z15-fix-hw-compression.patch
  * bsc1174551-fxi-imcomplete-raw-streams.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1648209600">- CVE-2018-25032: Fix memory corruption on deflate, bsc#1197459
  * bsc1197459.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1660219200">- Fix heap-based buffer over-read or buffer overflow in inflate via
  large gzip header extra field (bsc#1202175, CVE-2022-37434,
  CVE-2022-37434-extra-header-1.patch,
  CVE-2022-37434-extra-header-2.patch).</changelog>
  <changelog author="danilo.spinella@suse.com" date="1665403200">- Fix bsc#1203652, inflate() does not update strm.adler if DFLTCC is used
  * bsc1203652.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1671710400">- Follow up fix for bsc#1203652 due to libxml2 breakage
  * bsc1203652-2.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1679400000">- Add DFLTCC support for using inflate() with a small window,
  fixes bsc#1206513
  * bsc1206513.patch</changelog>
  <changelog author="danilo.spinella@suse.com" date="1683028800">- Fix deflateBound() before deflateInit(), bsc#1210593
  bsc1210593.patch</changelog>
  <changelog author="oss@danyspin97.org" date="1697716800">- Fix CVE-2023-45853, integer overflow and resultant heap-based buffer
  overflow in zipOpenNewFileInZip4_6, bsc#1216378
  * CVE-2023-45853.patch</changelog>
</package>
<package pkgid="ea3c415e3a6f9051643eff0ac971510fc507fc475883b6760bf43251a4209969" name="libzck1" arch="aarch64">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="4221d63f17a773a1eba07e5c6868eb06edef4aa6910fbdbe54686f652fee3d6b" name="libzck1" arch="s390x">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="d38b1fe6a42bf61feb885c48f5b7e067b60d6a3bba08abd60ab920bfbfd6aa51" name="libzck1" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="150400.3.4.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
</package>
<package pkgid="b1e1194a07b15def9ad047df1c35b5b696e0cda319c9bf8a2734e2c06530d060" name="libzck1" arch="aarch64">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="3bf8a4ae69befc7ff94157d51adbc143d93c11e12ee56fcde8c7929f0d06850e" name="libzck1" arch="s390x">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="2bcb4da09db4f7ce96345a1b6c7226d417f5983857b16eec0f529ad325299de5" name="libzck1" arch="x86_64">
  <version epoch="0" ver="1.1.16" rel="150400.3.7.1"/>
  <changelog author="ngompa13@gmail.com" date="1530792000">- Initial packaging based on Mageia package</changelog>
  <changelog author="ngompa13@gmail.com" date="1531828800">- Update to 0.7.6
  + SHA-512 and SHA-512/128 support
  + New default chunk checksum type SHA-512/128
  + Automatic chunking moved into libzck and is now default
  + New option to disable automatic chunking
  + Bugfixes</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Do not manually specify dependencies which are automatically
  generated
- Make requirements of devel package less strict</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222400">- Rebase to 0.9.11
  + Fix small bug where creating a zck_dl context fails when zck
    context is NULL
  + Fix security bugs found by Coverity
  + Fix test failures for zstd &lt;= 1.3.4
  + Add gen_xml_dictionary to libexecdir with zck_ prefix
  + Fix intermittent bug where auto-chunking wasn't deterministic
  + ABI (but not API change) - Use bool from stdbool.h
  + Allow specification of output file in zck
  + Set minimum and maximum chunk sizes for both automatic and
    manual chunking
  + New error handling functions
  + File format changes
  + API changes
- Make requirements between subpackages stricter to avoid issues
  due to inter-subpackage ABI/API changes</changelog>
  <changelog author="ngompa13@gmail.com" date="1538222401">- Bump meson build dependency to match meson.build requirement</changelog>
  <changelog author="aloisio@gmx.com" date="1540814400">- Update to version 0.9.13
  * Add read support for zchunk files with optional flags
  * Fix tests for zstd-1.3.6</changelog>
  <changelog author="ngompa13@gmail.com" date="1545048000">- Update to version 0.9.17
  + Turn off some tests for big-endian architectures since zstd
    isn't deterministic on them
  + Add zck_gen_zdict binary to generate optimal zdict for a zchunk file
  + Add functions to API to simplify extracting a single chunk
  + Change default zstd compression to 9 for a 6x speed increase in
    compression speed for a 5% increase in compression size
  + Switch from optional flags to more robust optional elements
  + Sanity check hex hashes passed in as an option</changelog>
  <changelog author="ngompa13@gmail.com" date="1548244800">- Update to version 1.0.2
  + Use hash table for finding identical chunks, speeding up process
    considerably
  + Add test case to verify that identical chunk checking is working</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331200">- Backport patch from upstream to fix bugs discovered by Coverity
  + Add patch: 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1548331201">- Update to version 1.0.3
  + Fix some small bugs found by Coverity
  + Fix memory leak and off-by-one errors
- Drop patches part of 1.0.3 release
  + 0001-Fix-some-small-bugs-found-by-Coverity.patch</changelog>
  <changelog author="ngompa13@gmail.com" date="1554033600">- Update to version 1.1.0
  + Fix multipart boundary bug when dealing with lighttpd servers
  + Optimize chunk matching while downloading, significantly reducing CPU usage</changelog>
  <changelog author="mpluskal@suse.com" date="1576670400">- Update to version 1.1.4:
  * Simplify regex for detecting part header info
  * Fix coverity warnings
  * Open files with permissions 0666 and let umask(2) do its job.
  * Multipart boundary field can be quoted.</changelog>
  <changelog author="ngompa13@gmail.com" date="1579435200">- Update to version 1.1.5
  + Handle write errors correctly</changelog>
  <changelog author="dimstar@opensuse.org" date="1609761600">- Add d2eae512bee09a4047cfe586de12f644d73b0736.patch: Fix build
  with zstd 1.4.7+.</changelog>
  <changelog author="rpm@fthiessen.de" date="1619438400">- Update to version 1.1.9
  * Handle zstd 1.4.7+
  * Update documentation
  * unzck: require a *.zck extension
  * General bug fixes
- Dropped upstream merged
  d2eae512bee09a4047cfe586de12f644d73b0736.patch
- Add fix-test-argp.patch: Fix argp detection</changelog>
  <changelog author="rpm@fthiessen.de" date="1620043200">- Update to version 1.1.11
  * Fix memory leak of zck-&gt;prep_digest
  * Fix argp detection
  * Handle certain rare web servers that don't start with \r\n
- Drop upstream merged fix-test-argp.patch</changelog>
  <changelog author="ismail@i10z.com" date="1621080000">- Update to version 1.1.12
  * Update testsuite for zstd 1.5</changelog>
  <changelog author="ismail@i10z.com" date="1621598400">- Update to version 1.1.14
  * Final fixes for zstd 1.5 support</changelog>
  <changelog author="rpm@fthiessen.de" date="1624536000">- Update to version 1.1.16
  * Fix major bug when compressing with dictionary</changelog>
  <changelog author="ali.abdallah@suse.com" date="1697716800">- Fix CVE-2023-46228, bsc#1216268
  * Handle overflow errors in malformed zchunk files.
- Added patch:
  * CVE-2023-46228.patch</changelog>
</package>
<package pkgid="deeb52655c34786e5703051811baca16c473e3176223dcd4312032d4edf7d89f" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="e0c6f897bce261ea63171a66fd9cd507bdd1f99c854e639706d789f62bf24040" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="e266c198877a2ce39c29d12fc849b8ec88d846306eebbc305562ab937d59f750" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="3d1da0ce2f4978795a0a9ca168e6379dc610931f3efa8d78258a2129169b7326" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.11" rel="150400.3.25.2"/>
  <changelog author="ma@suse.de" date="1645704000">- Hint on ptf&lt;&gt;patch resolver conflicts (bsc#1194848)
- version 17.29.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1647259200">- Fix package signature check (bsc#1184501)
  Pay attention that header and payload are secured by a valid
  signature and report more detailed which signature is missing.
- Retry umount if device is busy (bsc#1196061, closes #381)
  A previously released ISO image may need a bit more time to
  release it's loop device. So we wait a bit and retry.
- Fix serializing/deserializing type mismatch in zypp-rpm
  protocol (bsc#1196925)
- Fix handling of ISO media in releaseAll (bsc#1196061)
- Hint on common ptf resolver conflicts (bsc#1194848)
- version 17.29.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
</package>
<package pkgid="90e4c2b315247bb439083ea0cc07f99d536cefd751c3e041f14cef6735a73247" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="18afe7e4a0eba26b5bc446fbb40053c4011a5d3796f7e61e99e93c8f6f8a4493" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="021597161e769b08d075de06eaef87f6a1e1ae5c18f232d8984cf40f2db05949" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="2d74f4e1a00f6689a61ddda4ddf09b40b344e62595357018d21d0b86f727c23e" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.30.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="0f322477ed3b45ed44f95fb40c8eaee85fb6d2912d827952c2f6e8ce4c450a6f" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="dbc2d352983e444d81bfa905a9a5e618fda306ce7d9253ceffa0fee3aa02b10b" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="5d10516847ac29a7dc3deb7ef3a4dffacb3dd4307b27e87d93f4a324f71e2511" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="f83012dee3d3af42513f61caf297bb03db25afded2e6bdaea6f294226510e05a" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.13" rel="150400.3.32.1"/>
  <changelog author="ma@suse.de" date="1647864000">- Fix possible hang in singletrans mode (bsc#1197134)
- Do 2 retries if mount is still busy.
- version 17.29.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
</package>
<package pkgid="e6c9d7e627adae6e84e0384ab638d4bd728bb49284d598ab6d64ebb79acf27b0" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="55e3dcf747e4fe16a7bed3e3d0d4ccf801585d42f2c264fd23d57035a6e10265" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="cffe05155518f147225108fa735656c3c1c46e04cd9e2aad1a136b4aa2269a9c" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="dca51b0b959645a90191dbcec05ca2fb37bec92895f42cf623c9c336d2549c78" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.14" rel="150400.3.35.1"/>
  <changelog author="ma@suse.de" date="1648209600">- ZConfig: Update solver settings if target changes (bsc#1196368)
- version 17.30.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1653912000">- PluginRepoverification: initial version hooked into
  repo::Downloader and repo refresh.
- Immediately start monitoring the download.transfer_timeout.
  Do not wait until the first data arrived. (bsc#1199042)
- singletrans: no dry-run commit if doing just download-only.
- Work around cases where sat repo.start points to an invalid
  solvable.  May happen if (wrong arch) solvables were removed
  at the  beginning of the repo.
- fix misplaced #endif SINGLE_RPMTRANS_AS_DEFAULT_FOR_ZYPPER
  (fixes #388)
- version 17.30.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1655294400">- appdata plugin: Pass path to the repodata/ directory inside the
  cache (bsc#1197684)
- zypp-rpm: flush rpm script output buffer before sending
  endOfScriptTag.
- version 17.30.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1657022400">- Fix building with GCC 12.x release (#396)
- version 17.30.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1658232000">- Add PoolItem::statusReinit to reset the status it's initial
  state in the ResPool (might help bsc#1199895)
  This may either be 'KEEP_STATE bySOLVER' or 'LOCKED byUSER' if
  the PoolItem matched a hard lock defined in /etc/zypp/locks.
- Fix building with GCC 13 on i586 (fixes #407, fixes #396)
- Be prepared to receive exceptions from curl_easy_cleanup
  (bsc#1201092)
- Don't auto-flag kernel-firmware as 'reboot-needed' (bsc#1200993)
- Remove Medianetwork and dependend code.
  This commit removes the MediaNetwork tech preview and all related
  code. First reason for this is that MediaNetwork was just meant
  as a way to test the new CURL based downloader and second: since
  the Provide API is going to completely replace the current media
  backend it would be extra work to ensure that changes on the
  Downloader do not break MediaNetwork.
- version 17.31.0 (22)</changelog>
  <changelog author="ma@suse.de" date="1662120000">- UsrEtc: Store logrotate files in %{_distconfdir} if defined
  (fixes #402)
- Log backtrace on SIGABRT too.
- Need to explicitly enable building experimental code. Otherwise
  an old Notcurses++ package which happens to be present in the
  buildenv breaks the build (fixes #412).
- Work around libyui/libyui#78 on code 15.4 and older.
- Stop using std::*ary_function; deprecated and removed in c++17.
- Don't expose header files which use types not available in
  c++11.  In 15.3 and older, YAST and PK compile with -std=c++11.
- Remove no longer needed %post code (bsc#1203649)
- Enable zck support for SLE15-SP4 and newer. On Leap it is enabled
  since 15.1 (bsc#1189282)
- version 17.31.1 (22)</changelog>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
</package>
<package pkgid="67058d7ab911ac67f1c6dde1e0517c13cd9000a6a5e4fcf23f0a815773d81446" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.20" rel="150400.3.40.1"/>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
</package>
<package pkgid="8119720a125869a06cde15cb6913270f2fcd1540f2a2cf84c3e540ccc1a85a00" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.20" rel="150400.3.40.1"/>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
</package>
<package pkgid="d263fd3d7a0f1c777b33258d14de0f1fb67b13c5671c6d1ffc974a3ae9ddabd4" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.20" rel="150400.3.40.1"/>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
</package>
<package pkgid="042630e7358c93743697b6cb0d8902a2d0a5b5a96c028ab348e09644bbcb366b" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.20" rel="150400.3.40.1"/>
  <changelog author="ma@suse.de" date="1664971200">- Resolver: Fix missing --[no]-recommends initialization in
  update (fixes #openSUSE/zypper#459, bsc#1201972)
- Log ONLY_NAMESPACE_RECOMMENDED because this is what corresponds
  to --[no]-recommends.
- version 17.31.2 (22)</changelog>
  <changelog author="ma@suse.de" date="1665748800">- Improve download of optional files (fixes #416)
- Do not use geoip rewrites if the repo has explicit country
  settings.
- Implement geoIP feature for zypp.
  This patch adds a feature to rewrite request URLs to the repo
  servers by querying a geoIP file from download.opensuse.org. This
  file can return a redirection target depending on the clients IP
  adress, this way we can directly contact a local mirror of d.o.o
  instead. The redir target stays valid for 24hrs.
  This feature can be disabled in zypp.conf by setting
  'download.use_geoip_mirror = false'.
- Use a dynamic fallback for BLKSIZE in downloads.
  When not receiving a blocklist via metalink file from the server
  MediaMultiCurl used to fallback to a fixed, relatively small
  BLKSIZE. This patch changes the fallback into a dynamic value
  based on the filesize using a similar metric as the MirrorCache
  implementation on the server side.
- Skip media.1/media download for http repo status calc.
  This patch allows zypp to skip a extra media.1/media download to
  calculate if a repository needs to be refreshed. This
  optimisation only takes place if the repo does specify only
  downloading base urls.
- version 17.31.3 (22)</changelog>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
</package>
<package pkgid="0a2dda9365101da0fddf9380e9b041b09705cbab8434ca42b84bec9bb9a4e933" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="85caf8c38b1a3a921e6541f72fd5c314e5c5a8eb4a1df1bcfdc91af71bd93fef" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="8b49afae239983438bd38763e487d0440d1d1a511d5265588be0e71b4db74d36" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="b02fdd271fa5facd65451534b2a1775e52537f26f368f4014a44b58a0d3b49e6" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.22" rel="150400.3.43.1"/>
  <changelog author="ma@suse.de" date="1666008000">- Do not clean up MediaSetAccess before using the geoip file
  (fixes #424)
- version 17.31.4 (22)</changelog>
  <changelog author="ma@suse.de" date="1667822400">- Create '.no_auto_prune' in the package cache dir to prevent auto
  cleanup of orphaned repositories (bsc#1204956)
- properly reset range requests (bsc#1204548)
- version 17.31.5 (22)</changelog>
  <changelog author="ma@suse.de" date="1669377600">- Avoid calling getsockopt when we know the info already.
  This patch hopefully fixes logging on WSL, getsockopt seems to
  not be fully supported but the code required it when accepting
  new socket connections. (for bsc#1178233)
- Enhance yaml-cpp detection (fixes #428)
- No need to redirect 'history.logfile=/dev/null' into the target.
- MultiCurl: Make sure to reset the progress function when
  falling back.
- version 17.31.6 (22)</changelog>
  <changelog author="ma@suse.de" date="1671883200">- Hint to "zypper removeptf" to remove PTFs.
- Removing a PTF without enabled repos should always fail
  (bsc#1203248)
  Without enabled repos, the dependent PTF-packages would be
  removed (not replaced!) as well. To remove a PTF "zypper install
  - - -PTF" or a dedicated "zypper removeptf PTF" should be used.
  This will update the installed PTF packages to theit latest
  version.
- version 17.31.7 (22)</changelog>
  <changelog author="ma@suse.de" date="1676289600">- ProgressData: enforce reporting the INIT||END state
  (bsc#1206949)
- ps: fix service detection on newer Tumbleweed systems
  (bsc#1205636)
- version 17.31.8 (22)</changelog>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
</package>
<package pkgid="4f1cbb991ba722f5f616bef4fbc019fe32be449e32b0f08269d51c2257ad64ac" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="50d714e255864e27e828688f1f97e4178d04c199a9e1f726623c32b716cc3229" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="036cad81d2ccad0b755ee6906a7961b8c352db9447c2c3369a38cc35d8b5eced" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="42006bd229abae16ede14f5a60032f33924c10f30bc4619289e632b7502fcbf8" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.27" rel="150400.3.49.1"/>
  <changelog author="ma@suse.de" date="1680264000">- Workround bsc#1195633 while libsolv &lt;= 0.7.23 is used.
- Fix potential endless loop in new ZYPP_MEDIANETWORK.
- ZYPP_METALINK_DEBUG=1: Log URL and priority of the mirrors
  parsed from a metalink file.
- multicurl: propagate ssl settings stored in repo url
  (boo#1127591)
  Closes #335.
- Teach MediaNetwork to retry on HTTP2 errors.
- fix CapDetail to return Rel::NONE if an EXPRESSION is used as a
  NAMED cap.
- Capability: support parsing richdeps from string.
- defaultLoadSystem: default to LS_NOREFRESH if not root.
- Detect x86_64_v[234]: Fix LZCNT bit used in detection (fixes
  [#439])
  Merges rpm-software-management/rpm#2412: The bit for LZCNT is in
  CPUID 0x80000001, not 1.
- Detect x86_64_v[234] architecture levels (fixes #439)
- Support x86_64_v[234] architecture levels (for #439)
- version 17.31.9 (22)</changelog>
  <changelog author="ma@suse.de" date="1681387200">- BuildRequires: libsolv-devel &gt;= 0.7.24 for x86_64_v[234]
  support.
- version 17.31.10 (22)</changelog>
  <changelog author="aschnell@suse.com" date="1682337600">- fix build with boost 1.82</changelog>
  <changelog author="ma@suse.de" date="1682683200">- MediaCurl: Fix endless loop if wrong credentials are stored in
  credentials.cat (bsc#1210870)
  Since libzypp-17.31.7 wrong credentials stored in credentials.cat
  may lead to an endless loop. Rather than asking for the right
  credentials, the stored ones are used again and again.
- zypp.conf: Introduce 'download.connect_timeout' [60 sec.]
  (bsc#1208329)
  Maximum time in seconds that you allow the connection phase to
  the server to take. This only limits the connection phase, it has
  no impact once it has connected. (see also CURLOPT_CONNECTTIMEOUT)
- commit: Try to provide /dev fs if not present (fixes #444)
- fix build with boost 1.82.
- version 17.31.11 (22)</changelog>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
</package>
<package pkgid="c92b51adbbd0e515d91a61e30211a8c6ed1ef4591742db08375aa8c6990da349" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="ceb75ba8dba04ca7fd2317e35b45dd7365056e25e26039e56a74fb36bedb5e58" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="910953ec6f4146a5b98e2622a5590ec8c1e6139c56dfad8d37d45525eb0a0b48" name="libzypp" arch="src">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="b0236be039516713673c03c2ff3c3e0435b28046484d08cfceb7df26b097a4e8" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.31.31" rel="150400.3.52.2"/>
  <changelog author="ma@suse.de" date="1685966400">- Do not unconditionally release a medium if provideFile failed
  (bsc#1211661)
- libzypp.spec.cmake: remove duplicate file listing.
- version 17.31.12 (22)</changelog>
  <changelog author="ma@suse.de" date="1686571200">- curl: Trim user agent string (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. Violation
  results in curl error: 92: HTTP/2 PROTOCOL_ERROR.
- version 17.31.13 (22)</changelog>
  <changelog author="ma@suse.de" date="1686830400">- build: honor libproxy.pc's includedir (bsc#1212222)
- Curl: trim all custom headers (bsc#1212187)
  HTTP/2 RFC 9113 forbids fields ending with a space. So we make
  sure all custom headers are trimmed. This also includes headers
  returned by URL-Resolver plugins.
- version 17.31.14 (22)</changelog>
  <changelog author="ma@suse.de" date="1687953600">- Fix build against protobuf &gt;= 22 (fixes #465, closes #466)
  Port away from protobuf_generate_cpp. Upstream protobuf does not
  export protobuf_generate_cpp by default anymore.
  Use protobuf_generate instead, which is also available on older
  versions.
- Remove SUSE &lt; SLE11 constructs (fixes #464).
- version 17.31.15 (22)</changelog>
  <changelog author="ma@suse.de" date="1690200000">- Fix negative ZYPP_LOCK_TIMEOUT not waiting forever (bsc#1213231)
- Don't cleanup orphaned dirs if read-only mode was promised
  (bsc#1210740)
- version 17.31.16 (22)</changelog>
  <changelog author="ma@suse.de" date="1690545600">- Fix wrong filesize exceeded dl abort in zyppng::Downloader
  (bsc#1213673)
  In some cases when downloading very small files we can run into
  issues when the URL is protected by credentials.
- version 17.31.17 (22)</changelog>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
</package>
<package pkgid="69552df4666eec03b818a24a4d600d548d1b125ed4947942e787bf1e9dc92cf4" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.32.4" rel="150400.3.61.1"/>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
</package>
<package pkgid="23944f0d2395d1a516f0dc2edfdb74d25f239b86f8ae4a8bfa92384232e43035" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.32.4" rel="150400.3.61.1"/>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
</package>
<package pkgid="4c95e732e08187d5dc27fb7f0b1b4b639daa8a0cb2ee722cba1630837f7b7b8a" name="libzypp" arch="src">
  <version epoch="0" ver="17.32.4" rel="150400.3.61.1"/>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
</package>
<package pkgid="62b554dbed5a151ea9d03a5b4f7729026404de87ad03e22551e1e525ce46cf34" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.32.4" rel="150400.3.61.1"/>
  <changelog author="ma@suse.de" date="1691150400">- SINGLE_RPMTRANS: Respect ZYPP_READONLY_HACK when checking the
  zypp-rpm lock (fixes openSUSE/openSUSE-repos#29)
- version 17.31.18 (22)</changelog>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
</package>
<package pkgid="8f56cbeb9a2d54a73df98f5c0c8015ab1351d53fcd6f4211b9512e1d65134b3b" name="libzypp" arch="aarch64">
  <version epoch="0" ver="17.32.5" rel="150400.3.64.1"/>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
</package>
<package pkgid="a028748a54b4e97cd279baf064ac55cf3e5545708ecbdb594c1820a9428f17f5" name="libzypp" arch="s390x">
  <version epoch="0" ver="17.32.5" rel="150400.3.64.1"/>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
</package>
<package pkgid="409511ce32ec01b71ded98d2e773fd339c985595601b25689a98ca72c7131b6e" name="libzypp" arch="src">
  <version epoch="0" ver="17.32.5" rel="150400.3.64.1"/>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
</package>
<package pkgid="b0a3460c66cce8b854d6ac9984265350e8dfbc7ddbbe20711afd5dc39523f31b" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.32.5" rel="150400.3.64.1"/>
  <changelog author="ma@suse.de" date="1692187200">- Fix zypp-tui/output/Out.h to build with clang.
- Fix zypp/Arch.h for clang (fixes #478)
  Clang seems to have issues with picking the overload in
  std::men_fn if there is a static overload of a member function.
  We need to explicitely specify the correct type of the function
  pointer. To make sure this would not break compiling a
  application with clang that builds against libzypp this patch
  works around the problem.
- version 17.31.19 (22)</changelog>
  <changelog author="ma@suse.de" date="1692878400">- Fixup changes for 17.31.16. Remove faulty reference to a bug
  actually fixed in 2019.
- version 17.31.20 (22)</changelog>
  <changelog author="ma@suse.de" date="1695297600">- Attempt to delay %transfiletrigger(postun|in) execution if rpm
  supports it (bsc#1041742)
  Decide during installation whether rpm is capable of delayed
  %posttrans %transfiletrigger(postun|in) execution or whether we
  can just handle the packages %posttrans. On TW a delayed
  %transfiletrigger handling is possible since rpm-4.17.
- Make sure the old target is deleted before a new one is created
  (bsc#1203760)
- version 17.31.21 (22)</changelog>
  <changelog author="ma@suse.de" date="1697112000">- Preliminary disable 'rpm --runposttrans' usage for chrooted
  systems (bsc#1216091)
  This limits the %transfiletrigger(postun|in) support in the
  default installer if --root is used (as described in bsc#1041742).
  The chrooted execution of the scripts in 'rpm --runposttrans'
  broke in rpm-4.18. It's expected to be fixed in rpm-4.19.
  Then we'll enable the feature again.
- fix comment typo on zypp.conf (boo#1215979)
- version 17.31.22 (22)</changelog>
  <changelog author="ma@suse.de" date="1698235200">- Stop using boost version 1 timer library (fixes #489,
  bsc#1215294)
- version 17.31.23 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555200">- Open rpmdb just once during execution of %posttrans scripts
  (bsc#1216412)
- Avoid using select() since it does not support fd numbers &gt;
  1024 (fixes #447)
- tools/DownloadFiles: use standard zypp progress bar (fixes #489)
- Revert "Color download progress bar" (fixes #475)
  Cyan is already used for the output of RPM scriptlets. Avoid this
  colorific collision between download progress bar and scriptlet
  output.
- Fix ProgressBar's calculation of the printed tag position (fixes #494)
- Switch zypp::Digest to Openssl 3.0 Provider API (fixes #144)
- Fix usage of deprecated CURL features (fixes #486)
- version 17.31.24 (22)</changelog>
  <changelog author="ma@suse.de" date="1702555201">- Fix build issue with zchunk build flags (fixes #500)
- version 17.31.25 (22)</changelog>
  <changelog author="ma@suse.de" date="1703160000">- Call zypp commit plugins during transactional update (fixes #506)
- Add support for loongarch64 (fixes #504)
- Teach MediaMultiCurl to download HTTP Multibyte ranges.
- Teach zsync downloads to MultiCurl.
- Expand RepoVars in URLs downloading a .repo file (bsc#1212160)
  Convenient and helps documentation as it may refer to a single
  command for a bunch of distributions. Like e.g. "zypper ar
  'https://server.my/$releasever/my.repo'".
- version 17.31.26 (22)</changelog>
  <changelog author="ma@suse.de" date="1703246400">- CheckAccessDeleted: fix 'running in container' filter
  (bsc#1218291)
- version 17.31.27 (22)</changelog>
  <changelog author="ma@suse.de" date="1704801600">- Fix to build with libxml 2.12.x (fixes #505)
- version 17.31.28 (22)</changelog>
  <changelog author="ma@suse.de" date="1706011200">- CheckAccessDeleted: fix running_in_container detection
  (bsc#1218782)
- Detect CURLOPT_REDIR_PROTOCOLS_STR availability at runtime
  (bsc#1218831)
- Make Wakeup class EINTR safe.
- Add a way to cancel media operations on shutdown
  (openSUSE/zypper#522)
  This patch adds a mechanism to signal libzypp that a shutdown was
  requested, usually when CTRL+C was pressed by the user. Currently
  only the media backend will utilize this, but can be extended to
  all code paths that use g_poll() to wait for events.
- Manually poll fds for curl in MediaCurl.
  Using curl_easy_perform does not give us the required control on
  when we want to cancel a download. Switching to the MultiCurl
  implementation with a external poll() event loop will give us
  much more freedom and helps us to improve our Ctrl+C handling.
- Move reusable curl poll code to curlhelper.h.
- version 17.31.29 (22)</changelog>
  <changelog author="ma@suse.de" date="1707220800">- applydeltaprm: Create target directory if it does not exist
  (bsc#1219442)
- Add ProblemSolution::skipsPatchesOnly (for openSUSE/zypper#514)
- Fix problems with EINTR in ExternalDataSource::getline (fixes
  bsc#1215698)
- version 17.31.30 (22)</changelog>
  <changelog author="ma@suse.de" date="1707307200">- tui: allow to access the underlying ostream of out::Info.
- Add MLSep: Helper to produce not-NL-terminated multi line
  output.
- version 17.31.31 (22)</changelog>
  <changelog author="ma@suse.de" date="1708430400">- ProblemSolution::skipsPatchesOnly overload to handout the
  patches.
- Remove https-&gt;http redirection exceptions for
  download.opensuse.org.
- version 17.31.32 (22)</changelog>
  <changelog author="ma@suse.de" date="1711108800">- Add resolver option 'removeOrphaned' for distupgrade
  (bsc#1221525)
- New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
- Tests: fix vsftpd.conf where SUSE and Fedora use different
  defaults (fixes #522)
- Add default stripe minimum (#529)
- Don't expose std::optional where YAST/PK explicitly use c++11.
- Digest: Avoid using the deprecated OPENSSL_config.
- version 17.32.0 (32)</changelog>
  <changelog author="ma@suse.de" date="1711627200">- Add resolver option 'removeUnneeded' to file weak remove jobs
  for unneeded packages (bsc#1175678)
- version 17.32.1 (32)</changelog>
  <changelog author="ma@suse.de" date="1712059200">- Fixup New VendorSupportOption flag VendorSupportSuperseded
  (jsc#OBS-301, jsc#PED-8014)
  Fixed the name of the keyword to "support_superseded" as it was
  agreed on in jsc#OBS-301.
- version 17.32.2 (32)</changelog>
  <changelog author="ma@suse.de" date="1712836800">- Update RepoStatus fromCookieFile according to the files mtime
  (bsc#1222086)
- TmpFile: Don't call chmod if makeSibling failed.
- version 17.32.3 (32)</changelog>
  <changelog author="ma@suse.de" date="1713355200">- Fix creation of sibling cache dirs with too restrictive mode
  (bsc#1222398)
  Some install workflows in YAST may lead to too restrictive (0700)
  raw cache directories in case of newly created repos. Later
  commands running with user privileges may not be able to access
  these repos.
- version 17.32.4 (32)</changelog>
  <changelog author="ma@suse.de" date="1713528000">- Don't try to refresh volatile media as long as raw metadata are
  present (bsc#1223094)
- version 17.32.5 (32)</changelog>
</package>
<package pkgid="ca0f38a8228ff472be9123d190558bd0a2b599d3f23372071e742d2098369df3" name="linux-glibc-devel" arch="aarch64">
  <version epoch="0" ver="5.14" rel="150400.6.6.1"/>
  <changelog author="schwab@suse.de" date="1557230400">- Update to kernel headers 5.1</changelog>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="911d835febce4514e958ae8948857d758f74efdffa9b2b77d8f4335736cf8d1f" name="linux-glibc-devel" arch="s390x">
  <version epoch="0" ver="5.14" rel="150400.6.6.1"/>
  <changelog author="schwab@suse.de" date="1557230400">- Update to kernel headers 5.1</changelog>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="8de423a78b677c62f1dbfbec8d828f32a43ca2f40b79e9a9158df41c1678e87f" name="linux-glibc-devel" arch="src">
  <version epoch="0" ver="5.14" rel="150400.6.6.1"/>
  <changelog author="schwab@suse.de" date="1557230400">- Update to kernel headers 5.1</changelog>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="22ba49f5bc0268f057f3a19883e304c0ef1e5539d1ef08f592fed01fbe14bb34" name="linux-glibc-devel" arch="x86_64">
  <version epoch="0" ver="5.14" rel="150400.6.6.1"/>
  <changelog author="schwab@suse.de" date="1557230400">- Update to kernel headers 5.1</changelog>
  <changelog author="schwab@suse.de" date="1562587200">- Update to kernel headers 5.2</changelog>
  <changelog author="schwab@suse.de" date="1568808000">- Update to kernel headers 5.3
- Make it arch dependent due to difference in installed headers</changelog>
  <changelog author="schwab@suse.de" date="1575028800">- Update to kernel headers 5.4</changelog>
  <changelog author="schwab@suse.de" date="1580126400">- Update to kernel headers 5.5</changelog>
  <changelog author="schwab@suse.de" date="1585656000">- Update to kernel headers 5.6</changelog>
  <changelog author="schwab@suse.de" date="1592222400">- Update to kernel headers 5.7</changelog>
  <changelog author="schwab@suse.de" date="1596456000">- Update to kernel headers 5.8</changelog>
  <changelog author="schwab@suse.de" date="1602504000">- Update to kernel headers 5.9</changelog>
  <changelog author="schwab@suse.de" date="1607947200">- Update to kernel headers 5.10</changelog>
  <changelog author="schwab@suse.de" date="1613563200">- Update to kernel headers 5.11</changelog>
  <changelog author="schwab@suse.de" date="1619524800">- Update to kernel headers 5.12</changelog>
  <changelog author="schwab@suse.de" date="1621512000">- Add cross-*-linux-glibc-devel packages</changelog>
  <changelog author="schwab@suse.de" date="1624881600">- Update to kernel headers 5.13</changelog>
  <changelog author="schwab@suse.de" date="1630497600">- Update to kernel headers 5.14</changelog>
  <changelog author="msuchanek@suse.de" date="1633953600">- Update from current 15 SP4 kernel
  + linux-stable-version-update.patch					(stable-5.14.11)
  + binder-fix-freeze-race.patch					(stable-5.14.9)
  + bpf-Fix-a-typo-of-reuseport-map-in-bpf.h.patch			(stable-5.14.4)
  + fq_codel-reject-silly-quantum-parameters.patch			(stable-5.14.7)
  + habanalabs-add-in-device-creation-status.patch			(stable-5.14.8)
  + serial-8250-Define-RX-trigger-levels-for-OxSemi-950-.patch		(stable-5.14.6)
  + dmanegine-idxd-add-software-command-status.patch			(jsc#SLE-18899)
  + dmaengine-idxd-fix-setting-up-priv-mode-for-dwq.patch		(jsc#SLE-18899)
  + ethtool-add-two-link-extended-substates-of-bad-signa.patch		(bsc#1190336)
  + ethtool-add-two-coalesce-attributes-for-CQE-mode.patch		(jsc#SLE-19253)
  + msft-hv-2440-hyper-v-Replace-uuid.h-with-types.h.patch		(git-fixes)
  + RDMA-mlx5-Add-DCS-offload-support.patch				(jsc#SLE-19250)
  + remove-the-lightnvm-subsystem.patch					(bsc#1190569)
  + scsi-fc-Add-EDC-ELS-definition.patch				(bsc#1190576)
  + uapi-add-a-compatibility-layer-between-linux-uio-h-and-glibc	(bsc#1053501)
  + md-display-timeout-error.patch					(bsc#763402)</changelog>
  <changelog author="dfaggioli@suse.com" date="1642161600">- Export the macros necessary for making core-scheduling usable (bsc#1194659)
  + uapi-linux-prctl-provide-macro-definitions-for-the-PR_SCHED_CORE-type-argument</changelog>
  <changelog author="msuchanek@suse.com" date="1644235200">- Delete RDMA-mlx5-Add-DCS-offload-support.patch (bsc#1191550)
- Update from current 15 SP4 kernel (jsc#SLE-17360)
  * Refresh linux-stable-version-update.patch
  + kvm-sev-add-support-for-sev-intra-host-migration			(jsc#SLE-19924)
  + PCI-Add-PCI_EXP_DEVCTL_PAYLOAD_-macros.patch			(stable-5.14.19)
  + ethtool-fix-ethtool-msg-len-calculation-for-pause-st.patch		(stable-5.14.19)
  + uapi-fix-linux-nfc.h-userspace-compilation-errors.patch		(git-fixes)
  + nfc-uapi-use-kernel-size_t-to-fix-user-space-builds.patch		(git-fixes)
  + cifs-remove-pathname-for-file-from-SPDX-header.patch		(bsc#1193629)
  + uapi-Fix-undefined-__always_inline-on-non-glibc-syst.patch		(git-fixes)
  + tty-Partially-revert-the-removal-of-the-Cyclades-pub.patch		(git-fixes)
  + um-virt-pci-fix-uapi-documentation					(git-fixes)
  + net-sched-act_skbmod-Add-SKBMOD_F_ECN-option-support.patch		(bsc#1189998)
  + stddef-Introduce-struct_group-helper-macro.patch			(jsc#SLE-18978)
  + net-smc-add-support-for-user-defined-EIDs				(jsc#SLE-18331)
  + net-smc-add-generic-netlink-support-for-system-EID			(jsc#SLE-18331)
  + net-smc-add-netlink-support-for-SMC-Rv2				(jsc#SLE-18331)
  + net_sched-refactor-TC-action-init-API.patch				(bsc#1189998)
  + 0001-mm-mempolicy-add-MPOL_PREFERRED_MANY-for-multiple-pr.patch	(jsc#SLE-23098)
  + 0003-mm-mempolicy-wire-up-syscall-set_mempolicy_home_node.patch	(jsc#SLE-23098)
  + devlink-report-maximum-number-of-snapshots-with-regi.patch		(jsc#SLE-19253)
  + x86-arch_prctl-add-controls-for-dynamic-xstate-components.patch	(jsc#SLE-18931)
  + 0005-efi-generate-secret-key-in-EFI-boot-environment.patch		(fate#316350)
  + mptcp-add-missing-documented-NL-params				(git-fixes)
  + stddef-Introduce-DECLARE_FLEX_ARRAY-helper.patch			(git-fixes)</changelog>
  <changelog author="msuchanek@suse.com" date="1663243200">- Add the rest of 1.0 IAA operation definitions to the user header (jsc#PED-813).
  + dmaengine-idxd-update-IAA-definitions-for-user-heade.patch</changelog>
  <changelog author="tiwai@suse.com" date="1683288000">- Add linux/sev-guest.h (bsc#1211096):
  virt-Add-SEV-SNP-guest-driver
  virt-sevguest-Add-support-to-derive-key
  virt-sevguest-Add-support-to-get-extended-report</changelog>
</package>
<package pkgid="aee35716c44e8f441a6818da7fade228bcecf1d5ffa9f6b261cc9ea647c42887" name="login_defs" arch="noarch">
  <version epoch="0" ver="4.8.1" rel="150400.3.3.1"/>
  <changelog author="sbrabec@suse.com" date="1564142400">- Fix incorrect variable name in usermod
  (shadow-usermod-variable.patch).
- shadow-login_defs-comments.patch:
  * Drop SHA_CRYPT_*_ROUNDS that are in the upstream login.defs.
  * Add missing LASTLOG_UID_MAX.
  * Refresh shadow-login_defs-suse.patch.
- Port shadow-login_defs-check.sh to match the current spec file
  and login.defs.</changelog>
  <changelog author="kukuk@suse.de" date="1566216000">- encryption_method_nis.patch: drop, DES should really not be used
  anymore anywhere, even with NIS
- shadow-login_defs-suse.patch: remove encryption NIS entry</changelog>
  <changelog author="mvetter@suse.com" date="1567425600">- bsc#1144060: Add pam_keyinit.so to /etc/pam.d configuration files
  to support kernel keyring feature
- Update pamd.tar.bz2 with pam configuration files accordingly</changelog>
  <changelog author="kukuk@suse.de" date="1570449600">- libeconf.patch: Add support for libeconf and /usr/etc for
  login.defs.
- Move first configuration files and pam config files to /usr/etc</changelog>
  <changelog author="mvetter@suse.com" date="1576584000">- Update to 4.8:
  * Initial optional bcrypt support.
  * Make build/install of 'su' optional.
  * Fix for vipw not resuming correctly when suspended
  * Sync password field descriptions in manpages
  * Check for valid shell argument in useradd
  * Allow translation of new strings through POTFILES.in
  * Migrate to itstool for translations
  * Migrate to new SELinux api
  * Support --enable-vendordir
  * pwck: Only check homedir if set and not a system user
  * Support nonstandard usernames
  * sget{pw,gr}ent: check for data at EOL
  * Add YYY-MM-DD support in chage
  * Fix failing chmod calls for suidubins
  * Fix --sbindir and --bindir for binary installations
  * Fix LASTLOG_UID_MAX in login.defs
  * Fix configure error with dash
- Remove because upstreamed:
  * libeconf.patch
  * shadow-usermod-variable.patch
- Rebase:
  * shadow-login_defs-unused-by-pam.patch
  * chkname-regex.patch
  * shadow-util-linux.patch
  * shadow-login_defs-comments.patch
- Add shadow-4.8-selinux-include.patch
  See https://github.com/shadow-maint/shadow/pull/200</changelog>
  <changelog author="mvetter@suse.com" date="1579176000">- bsc#1160729: Make valid shell check only a warning
  * Add shadow-4.8-shell-check.patch</changelog>
  <changelog author="mvetter@suse.com" date="1579521600">- Set 0755 for chpasswd, groupadd, groupdel, groupmod, newusers,
  useradd, userdel, usermod explicitly.</changelog>
  <changelog author="mvetter@suse.com" date="1579867200">- Update to 4.8.1:
  * selinux: include stdio
  * man: don't suggest making groupmems user-writeable
  * Makefile: bail out on error in for loops
  * Adding logging of SSH_ORIGINAL_COMMAND to nologin
  * add new HOME_MODE login.defs option
  * Add tty logging to useradd
  * Useradd: make non-executable shell check only a warning
  * Update Dutch translation
  * user_busy: Do not mistake a regular user process for a namespaced one
  * Revert "Honor --sbindir and --bindir for binary installation"
- Remove shadow-4.8-shell-check.patch: included
- Remove shadow-4.8-selinux-include.patch: upstreamed</changelog>
  <changelog author="fvogt@suse.com" date="1590148800">- Use pure #!/bin/sh in:
  * useradd.local
  * userdel-post.local
  * userdel-pre.local</changelog>
  <changelog author="sbrabec@suse.com" date="1599566400">- login.defs: Add support for new util-linux-2.36 login variable
  MOTD_FIRSTONLY (shadow-util-linux.patch).
- shadow-login_defs-comments.patch: Remove duplicated
  LASTLOG_UID_MAX.
- shadow-login_defs-check.sh: Update for new build system.
- shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is
  not used in SUSE Linux.
- Refresh shadow-login_defs-suse.patch and
  shadow-login_defs-comments.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1602158400">- shadow-login_defs-check.sh: Fix the regexp to get a real variable
  list (boo#1164274).</changelog>
  <changelog author="werner@suse.de" date="1602244800">- Add support for /usr/etc/skel to useradd.local script (boo#1173321)</changelog>
  <changelog author="werner@suse.de" date="1604318400">- Change again useradd.local script to let it work even for system
  accounts and work together with SELinux (bsc#1178296)
- Change patch useradd-script.patch to support the four arguments
  used by the useradd.local script (bsc#1178296)</changelog>
  <changelog author="werner@suse.de" date="1605096000">- Add patch useradd-userkeleton.patch to extend original C code
  of useradd to handle /usr/etc/skel (boo#1173321)
- Remove /usr/etc/skel support in useradd.local script</changelog>
  <changelog author="fvogt@suse.com" date="1605096001">- Amend patches/useradd-userkeleton.patch to also write into
  existing directories and prefer files from /etc</changelog>
  <changelog author="kukuk@suse.com" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="sbrabec@suse.com" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- shadow-util-linux.patch:
  * Add support for LOGIN_KEEP_USERNAME from util-linux &gt;= 2.37.
- Refresh shadow-login_defs-suse.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="mvetter@suse.com" date="1694174400">- bsc#1214806 (CVE-2023-4641):
  Fix potential password leak
- Add shadow-CVE-2023-4641.patch</changelog>
</package>
<package pkgid="e69a7b88f81aa4e27fcee87fb9fabd6955a1f40fa926cd05a02c793f2b82a164" name="login_defs" arch="noarch">
  <version epoch="0" ver="4.8.1" rel="150400.3.6.1"/>
  <changelog author="mvetter@suse.com" date="1579176000">- bsc#1160729: Make valid shell check only a warning
  * Add shadow-4.8-shell-check.patch</changelog>
  <changelog author="mvetter@suse.com" date="1579521600">- Set 0755 for chpasswd, groupadd, groupdel, groupmod, newusers,
  useradd, userdel, usermod explicitly.</changelog>
  <changelog author="mvetter@suse.com" date="1579867200">- Update to 4.8.1:
  * selinux: include stdio
  * man: don't suggest making groupmems user-writeable
  * Makefile: bail out on error in for loops
  * Adding logging of SSH_ORIGINAL_COMMAND to nologin
  * add new HOME_MODE login.defs option
  * Add tty logging to useradd
  * Useradd: make non-executable shell check only a warning
  * Update Dutch translation
  * user_busy: Do not mistake a regular user process for a namespaced one
  * Revert "Honor --sbindir and --bindir for binary installation"
- Remove shadow-4.8-shell-check.patch: included
- Remove shadow-4.8-selinux-include.patch: upstreamed</changelog>
  <changelog author="fvogt@suse.com" date="1590148800">- Use pure #!/bin/sh in:
  * useradd.local
  * userdel-post.local
  * userdel-pre.local</changelog>
  <changelog author="sbrabec@suse.com" date="1599566400">- login.defs: Add support for new util-linux-2.36 login variable
  MOTD_FIRSTONLY (shadow-util-linux.patch).
- shadow-login_defs-comments.patch: Remove duplicated
  LASTLOG_UID_MAX.
- shadow-login_defs-check.sh: Update for new build system.
- shadow-util-linux.patch: Restore lost chunk: SYSLOG_SU_ENAB is
  not used in SUSE Linux.
- Refresh shadow-login_defs-suse.patch and
  shadow-login_defs-comments.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1602158400">- shadow-login_defs-check.sh: Fix the regexp to get a real variable
  list (boo#1164274).</changelog>
  <changelog author="werner@suse.de" date="1602244800">- Add support for /usr/etc/skel to useradd.local script (boo#1173321)</changelog>
  <changelog author="werner@suse.de" date="1604318400">- Change again useradd.local script to let it work even for system
  accounts and work together with SELinux (bsc#1178296)
- Change patch useradd-script.patch to support the four arguments
  used by the useradd.local script (bsc#1178296)</changelog>
  <changelog author="werner@suse.de" date="1605096000">- Add patch useradd-userkeleton.patch to extend original C code
  of useradd to handle /usr/etc/skel (boo#1173321)
- Remove /usr/etc/skel support in useradd.local script</changelog>
  <changelog author="fvogt@suse.com" date="1605096001">- Amend patches/useradd-userkeleton.patch to also write into
  existing directories and prefer files from /etc</changelog>
  <changelog author="kukuk@suse.com" date="1611230400">- Split login.defs configuration file into own sub-package, which
  allows to install util-linux or pam on small embedded/edge
  systems or container without the need to pull in the full shadow
  suite.</changelog>
  <changelog author="sbrabec@suse.com" date="1611835200">- Do not require libeconf-devel on products without /usr/etc.</changelog>
  <changelog author="sbrabec@suse.com" date="1637150400">- shadow-util-linux.patch:
  * Add support for LOGIN_KEEP_USERNAME from util-linux &gt;= 2.37.
- Refresh shadow-login_defs-suse.patch.</changelog>
  <changelog author="sbrabec@suse.com" date="1641988800">- The legacy code does not support /etc/login.defs.d used by YaST.
  Enable libeconf to read it (bsc#1192954).</changelog>
  <changelog author="fstrba@suse.com" date="1668772800">- Added patch:
  * shadow-4.8.1-AUDIT_NO_ID.patch
    + fix bsc#1205502: useradd audit event user id field cannot
    be interpreted</changelog>
  <changelog author="mvetter@suse.com" date="1681819200">- bsc#1210507 (CVE-2023-29383):
  Check for control characters
- Add shadow-CVE-2023-29383.patch</changelog>
  <changelog author="mvetter@suse.com" date="1688472000">- bsc#1206627: Add --prefix support to passwd, chpasswd and chage
  Needed for YaST
- Add shadow-4.8.1-add-prefix-passwd-chpasswd-chage.patch</changelog>
  <changelog author="mvetter@suse.com" date="1689076800">- bsc#1213189: Change lock mechanism to file locking to prevent
  lock files after power interruptions
- Add shadow-4.8.1-lock-mechanism.patch</changelog>
  <changelog author="mvetter@suse.com" date="1694174400">- bsc#1214806 (CVE-2023-4641):
  Fix potential password leak
- Add shadow-CVE-2023-4641.patch</changelog>
  <changelog author="mvetter@suse.com" date="1709726400">- bsc#1176006: Fix chage date miscalculation
  Add shadow-bsc1176006-chage-date.patch
- bsc#1188307: Fix passwd segfault
  Add shadow-bsc1188307-passwd-segfault.patch
- bsc#1203823: Remove pam_keyinit from PAM config files
  Remove pam_keyinit from PAM configuration.
  This was introduced for bsc#1144060.</changelog>
</package>
<package pkgid="fd241ab2ef213cb40f16c8fa5e760ade7c804e06f5fd5264850079f1e3fc09c9" name="lshw" arch="aarch64">
  <version epoch="0" ver="B.02.19.2+git.20230320" rel="150200.3.15.4"/>
  <changelog author="mpluskal@suse.com" date="1571918400">- Update to version B.02.18+git.20190613 (fate#326432 jsc#SLE-7715):
  * devtree: Add DIMM running speed
  * spd: Print dimm rank information
  * Display proper logical name of network device
- Drop no longer needed lswh-logical-name-iface.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1580904000">- Fix bsc#1162690:
  * lshw-add-notime-option-to-manpage.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581076800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mpluskal@suse.com" date="1582200000">- Disable LTO as it causes random build failures on some
  architectures (bsc#1164297)</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Update to version B.02.18+git.20191228:
  * fix #755: handle invalid FAT
  * code clean-up
  * volumes: Add support for detecting Apple APFS fstype
  * partitions: Add Apple APFS GUID
  * specfile: Fix version issue
  * Do not show modified time with -notime option
  * Update help message and man page
- Drop upstreamed patches:
  * lshw-help-man.patch
  * lshw-modified-time.patch
- Add lshw-nvme.patch to support nvme devices bsc#1161323</changelog>
  <changelog author="mpluskal@suse.com" date="1585569600">- Update to version B.02.19.2:
  * New release tagged, no significant changes from previous
    version (git snapsho)
- Drop no longer needed patches:
  * lshw-display-latest-version.patch
  * lshw-add-notime-option-to-manpage.patch
  * lshw-nvme.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1587643200">- Disable LTO for aarch64 &amp; PowerPC, bypass boo#1168865</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1587729600">- Reenable LTO for powerpc and aarch64
- Fix PowerPC and aarch64 LTO: boo#1168865 and boo#1169668
  * lshw-fix-segfault-in-apfs-volume-code.patch
- Fix aarch64 SIGABRT: (boo#1169668)
  * lshw-fix-mmc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1598875200">- Fix detection of ppc products - boo#1172156
  * lshw-fix-ppc.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Display UUID on Power VM LPAR (bsc#1181411 ltc#191040)
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1622030400">- Update to version B.02.19+git.20210429:
  * Fix getting size of memory banks &lt;32GiB
  * devtree: Add UUID property
  * code clean-up
  * improve portability (esp. musl)
  * fix potential crash
  * add static target to Makefile
  * Avoid crash on device-tree parsing
  * Add JEDEC manufacturer
  * Report correct memory size on SMBIOS &lt; 2.7
  * fix man page after previous update
- Drop no longer needed patches:
  * lshw-fix-segfault-in-apfs-volume-code.patch
  * lshw-fix-mmc.patch
  * lshw-fix-ppc.patch
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version B.02.19+git.20210619:
  * Fix typos in translatable messages
- jsc#SLE-19399</changelog>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
</package>
<package pkgid="b868457678ef6316ce45592d2e6a6bfd2a690273f7b74d42367f5c8aef70f379" name="lshw" arch="s390x">
  <version epoch="0" ver="B.02.19.2+git.20230320" rel="150200.3.15.4"/>
  <changelog author="mpluskal@suse.com" date="1571918400">- Update to version B.02.18+git.20190613 (fate#326432 jsc#SLE-7715):
  * devtree: Add DIMM running speed
  * spd: Print dimm rank information
  * Display proper logical name of network device
- Drop no longer needed lswh-logical-name-iface.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1580904000">- Fix bsc#1162690:
  * lshw-add-notime-option-to-manpage.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581076800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mpluskal@suse.com" date="1582200000">- Disable LTO as it causes random build failures on some
  architectures (bsc#1164297)</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Update to version B.02.18+git.20191228:
  * fix #755: handle invalid FAT
  * code clean-up
  * volumes: Add support for detecting Apple APFS fstype
  * partitions: Add Apple APFS GUID
  * specfile: Fix version issue
  * Do not show modified time with -notime option
  * Update help message and man page
- Drop upstreamed patches:
  * lshw-help-man.patch
  * lshw-modified-time.patch
- Add lshw-nvme.patch to support nvme devices bsc#1161323</changelog>
  <changelog author="mpluskal@suse.com" date="1585569600">- Update to version B.02.19.2:
  * New release tagged, no significant changes from previous
    version (git snapsho)
- Drop no longer needed patches:
  * lshw-display-latest-version.patch
  * lshw-add-notime-option-to-manpage.patch
  * lshw-nvme.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1587643200">- Disable LTO for aarch64 &amp; PowerPC, bypass boo#1168865</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1587729600">- Reenable LTO for powerpc and aarch64
- Fix PowerPC and aarch64 LTO: boo#1168865 and boo#1169668
  * lshw-fix-segfault-in-apfs-volume-code.patch
- Fix aarch64 SIGABRT: (boo#1169668)
  * lshw-fix-mmc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1598875200">- Fix detection of ppc products - boo#1172156
  * lshw-fix-ppc.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Display UUID on Power VM LPAR (bsc#1181411 ltc#191040)
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1622030400">- Update to version B.02.19+git.20210429:
  * Fix getting size of memory banks &lt;32GiB
  * devtree: Add UUID property
  * code clean-up
  * improve portability (esp. musl)
  * fix potential crash
  * add static target to Makefile
  * Avoid crash on device-tree parsing
  * Add JEDEC manufacturer
  * Report correct memory size on SMBIOS &lt; 2.7
  * fix man page after previous update
- Drop no longer needed patches:
  * lshw-fix-segfault-in-apfs-volume-code.patch
  * lshw-fix-mmc.patch
  * lshw-fix-ppc.patch
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version B.02.19+git.20210619:
  * Fix typos in translatable messages
- jsc#SLE-19399</changelog>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
</package>
<package pkgid="882669a5c5297b02a7cacb23dc2c2dade536757b960899f1afa8ac23e3fbbbd6" name="lshw" arch="src">
  <version epoch="0" ver="B.02.19.2+git.20230320" rel="150200.3.15.4"/>
  <changelog author="mpluskal@suse.com" date="1571918400">- Update to version B.02.18+git.20190613 (fate#326432 jsc#SLE-7715):
  * devtree: Add DIMM running speed
  * spd: Print dimm rank information
  * Display proper logical name of network device
- Drop no longer needed lswh-logical-name-iface.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1580904000">- Fix bsc#1162690:
  * lshw-add-notime-option-to-manpage.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581076800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mpluskal@suse.com" date="1582200000">- Disable LTO as it causes random build failures on some
  architectures (bsc#1164297)</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Update to version B.02.18+git.20191228:
  * fix #755: handle invalid FAT
  * code clean-up
  * volumes: Add support for detecting Apple APFS fstype
  * partitions: Add Apple APFS GUID
  * specfile: Fix version issue
  * Do not show modified time with -notime option
  * Update help message and man page
- Drop upstreamed patches:
  * lshw-help-man.patch
  * lshw-modified-time.patch
- Add lshw-nvme.patch to support nvme devices bsc#1161323</changelog>
  <changelog author="mpluskal@suse.com" date="1585569600">- Update to version B.02.19.2:
  * New release tagged, no significant changes from previous
    version (git snapsho)
- Drop no longer needed patches:
  * lshw-display-latest-version.patch
  * lshw-add-notime-option-to-manpage.patch
  * lshw-nvme.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1587643200">- Disable LTO for aarch64 &amp; PowerPC, bypass boo#1168865</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1587729600">- Reenable LTO for powerpc and aarch64
- Fix PowerPC and aarch64 LTO: boo#1168865 and boo#1169668
  * lshw-fix-segfault-in-apfs-volume-code.patch
- Fix aarch64 SIGABRT: (boo#1169668)
  * lshw-fix-mmc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1598875200">- Fix detection of ppc products - boo#1172156
  * lshw-fix-ppc.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Display UUID on Power VM LPAR (bsc#1181411 ltc#191040)
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1622030400">- Update to version B.02.19+git.20210429:
  * Fix getting size of memory banks &lt;32GiB
  * devtree: Add UUID property
  * code clean-up
  * improve portability (esp. musl)
  * fix potential crash
  * add static target to Makefile
  * Avoid crash on device-tree parsing
  * Add JEDEC manufacturer
  * Report correct memory size on SMBIOS &lt; 2.7
  * fix man page after previous update
- Drop no longer needed patches:
  * lshw-fix-segfault-in-apfs-volume-code.patch
  * lshw-fix-mmc.patch
  * lshw-fix-ppc.patch
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version B.02.19+git.20210619:
  * Fix typos in translatable messages
- jsc#SLE-19399</changelog>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
</package>
<package pkgid="110d593c4288027e71f505879ebd154ba828b0c43df8d31b4f5f91795cf82976" name="lshw" arch="x86_64">
  <version epoch="0" ver="B.02.19.2+git.20230320" rel="150200.3.15.4"/>
  <changelog author="mpluskal@suse.com" date="1571918400">- Update to version B.02.18+git.20190613 (fate#326432 jsc#SLE-7715):
  * devtree: Add DIMM running speed
  * spd: Print dimm rank information
  * Display proper logical name of network device
- Drop no longer needed lswh-logical-name-iface.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1580904000">- Fix bsc#1162690:
  * lshw-add-notime-option-to-manpage.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1581076800">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="mpluskal@suse.com" date="1582200000">- Disable LTO as it causes random build failures on some
  architectures (bsc#1164297)</changelog>
  <changelog author="mpluskal@suse.com" date="1584360000">- Update to version B.02.18+git.20191228:
  * fix #755: handle invalid FAT
  * code clean-up
  * volumes: Add support for detecting Apple APFS fstype
  * partitions: Add Apple APFS GUID
  * specfile: Fix version issue
  * Do not show modified time with -notime option
  * Update help message and man page
- Drop upstreamed patches:
  * lshw-help-man.patch
  * lshw-modified-time.patch
- Add lshw-nvme.patch to support nvme devices bsc#1161323</changelog>
  <changelog author="mpluskal@suse.com" date="1585569600">- Update to version B.02.19.2:
  * New release tagged, no significant changes from previous
    version (git snapsho)
- Drop no longer needed patches:
  * lshw-display-latest-version.patch
  * lshw-add-notime-option-to-manpage.patch
  * lshw-nvme.patch</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1587643200">- Disable LTO for aarch64 &amp; PowerPC, bypass boo#1168865</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1587729600">- Reenable LTO for powerpc and aarch64
- Fix PowerPC and aarch64 LTO: boo#1168865 and boo#1169668
  * lshw-fix-segfault-in-apfs-volume-code.patch
- Fix aarch64 SIGABRT: (boo#1169668)
  * lshw-fix-mmc.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1598875200">- Fix detection of ppc products - boo#1172156
  * lshw-fix-ppc.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1611662400">- Display UUID on Power VM LPAR (bsc#1181411 ltc#191040)
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1622030400">- Update to version B.02.19+git.20210429:
  * Fix getting size of memory banks &lt;32GiB
  * devtree: Add UUID property
  * code clean-up
  * improve portability (esp. musl)
  * fix potential crash
  * add static target to Makefile
  * Avoid crash on device-tree parsing
  * Add JEDEC manufacturer
  * Report correct memory size on SMBIOS &lt; 2.7
  * fix man page after previous update
- Drop no longer needed patches:
  * lshw-fix-segfault-in-apfs-volume-code.patch
  * lshw-fix-mmc.patch
  * lshw-fix-ppc.patch
  * lshw-devtree-Add-UUID-property.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1624536000">- Update to version B.02.19+git.20210619:
  * Fix typos in translatable messages
- jsc#SLE-19399</changelog>
  <changelog author="mpluskal@suse.com" date="1628078400">- Update versioning to to allow easy transition on SLE
- Disable parallel build to avoid random failures</changelog>
  <changelog author="mpluskal@suse.com" date="1634212800">- Update to version B.02.19.2+git.20211013:
  * add some includes
  * fix typo
  * cosmetic fixes
  * support for new ethtool capabilities
  * code clean-up
  * code clean-up
  * allow pkg-config override
  * allow pkg-config override
  * Remove unnecessary space before closing parenthesis
  * Translate all words of a phrase together
  * Fix another typo</changelog>
  <changelog author="mpluskal@suse.com" date="1636632000">- Update to version B.02.19.2+git.20211102:
  * merge Github PR#77
  * use max (9) Gzip compression
  * Add Catalan translation
  * Update POT file
  * Add more network speeds</changelog>
  <changelog author="mpluskal@suse.com" date="1642766400">- Update to version B.02.19.2+git.20211222:
  * Add Spanish translation
  * Fix mistakes in Catalan translation</changelog>
  <changelog author="mpluskal@suse.com" date="1648468800">- Update to version B.02.19.2+git.20220310:
  * Github PR85  Set product name for all netdevs sharing the same PCI number</changelog>
  <changelog author="mpluskal@suse.com" date="1658836800">- Update to version B.02.19.2+git.20220628 (jsc#526):
  * make version check optional</changelog>
  <changelog author="mpluskal@suse.com" date="1669291200">- Update to version B.02.19.2+git.20220831:
  * PA-RISC: handle pushd failure</changelog>
  <changelog author="mpluskal@suse.com" date="1679572800">- Update to version B.02.19.2+git.20230320 (bsc#1209531):
  * fix NVMe multipath detection
  * NVMe: fix logical name with native multipath</changelog>
</package>
<package pkgid="93eb8eaf34f3111ecd625c431e659c60e6adafe2f2f5d50f7dd2782709730a1a" name="lvm2" arch="aarch64">
  <version epoch="0" ver="2.03.05" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="5b7ddcafbdf39de02f5a282832cb05ea2046b9f83835a6525b2c784adacd3b43" name="lvm2" arch="s390x">
  <version epoch="0" ver="2.03.05" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="6a37e794c992295dc03c2dd017039961c54a8dce41aac4d00051da92bd15b752" name="lvm2" arch="src">
  <version epoch="0" ver="2.03.05" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="c95c41a2e7a6d668e1c5569f93c8eabbf0fde646307741e6de69def6ef8d98d4" name="lvm2" arch="x86_64">
  <version epoch="0" ver="2.03.05" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="2e9891d26babc08fe7887f0243aea05a07baefe793d75a44603d4185153f40b0" name="lvm2" arch="aarch64">
  <version epoch="0" ver="2.03.05" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="48208b5c57d216210050b621aaf14ace4c3e45f27c4e43a3f0e3741db554a413" name="lvm2" arch="s390x">
  <version epoch="0" ver="2.03.05" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="e03551afc6961de015082d8cb4800cdca88118a90250eab9bab2251b07636b11" name="lvm2" arch="src">
  <version epoch="0" ver="2.03.05" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="1467f45286917189b707374a7c3b1d848ab5c42e0e6d8e69e837cf1309148935" name="lvm2" arch="x86_64">
  <version epoch="0" ver="2.03.05" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="d2d941fdc4f0665bb1d15dd7bdf808ad14f6179b9caf5ffdfec819d55dfb72b9" name="lvm2-device-mapper" arch="src">
  <version epoch="0" ver="2.03.05" rel="150400.188.1"/>
  <changelog author="ghe@suse.com" date="1602504000">- Update lvm2.spec file (bsc#1174336)
  - enable lvmlockd remote refresh using libdlmcontrol
  - update libdlm dependency relationship</changelog>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
</package>
<package pkgid="b234f3f2ed8c8d1a8cc8a8087414891dbff80e57d5e414ed0dcb2114b717fd2f" name="lvm2-device-mapper" arch="src">
  <version epoch="0" ver="2.03.05" rel="150400.191.1"/>
  <changelog author="heming.zhao@suse.com" date="1605960000">- lvcreate not wiping the lvm signature without prompting with --yes parameter (bsc#1177734)
  + bug-1177734_raid-no-wiping-when-zeroing-raid-metadata-device.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1606305600">- Update lvm2.spec file (bsc#1177533)
  - in %postun, disable restart blk-availability.service &amp; lvm2-monitor.service</changelog>
  <changelog author="heming.zhao@suse.com" date="1609848000">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev
- comment out lvm.conf item preferred_names by default (bsc#1179738)
  - comment out preferred_names</changelog>
  <changelog author="heming.zhao@suse.com" date="1611403200">- back port lvmlockd adopt orphan locks feature into sles15sp2 (bsc#1181319)
  + bug-1181319_01-Revert-lvmlockd-use-commonly-used-define-NOTIFYDBUS_.patch
  + bug-1181319_02-lvmlockctl-ensure-result-value-is-always-defined.patch
  + bug-1181319_03-lvmlockctl-use-inline-initilizers.patch
  + bug-1181319_04-lvmlockd-replace-lock-adopt-info-source.patch
  + bug-1181319_05-cov-check-sscanf-result.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1612180800">- revert commit which caused a regression:
  lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  - change lvm.conf item external_device_info_source from none to udev</changelog>
  <changelog author="ghe@suse.com" date="1618833600">- Add metadata-based autoactivation property for VG and LV (bsc#1178680)
  + bug-1178680_add-metadata-based-autoactivation-property-for-VG-an.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619006400">- LVM cannot be disabled on boot (bsc#1184687)
  + bug-1184687_Add-nolvm-for-kernel-cmdline.patch
- Update patch for avoiding apply warning message
  + bug-1012973_simplify-special-case-for-md-in-69-dm-lvm-metadata.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1619179200">- Honor lvm.conf event_activation=0 on "pvscan --cache -aay" (bsc#1185190)
  + bug-1185190_01-pvscan-support-disabled-event_activation.patch
  + bug-1185190_02-config-improve-description-for-event_activation.patch</changelog>
  <changelog author="wolfgang.frisch@suse.com" date="1621944000">- Link test as position independent executable (bsc#1184124).
  + bug-1184124-link-tests-as-PIE.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1632830400">- vgextend crash when extending VG with missing PV (bsc#1191019)
  + bug-1191019_vgextend-check-missing-device-during-block-size-chec.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1639656000">- starting with 12SP4 lvconvert no longer takes stripes option (bsc#1183905)
  + bug-1183905_lvconvert-allow-stripes-stripesize-in-mirror-convers.patch
- LVM vgimportclone on hardware snapshot does not work (bsc#1193181)
  + bug-1193181_vgimportclone_on_hardware_snapshot_does_not_work.patch</changelog>
  <changelog author="mwilck@suse.com" date="1643716800">- udev: create symlinks and watch even in suspended state (bsc#1195231)
  + bug-1195231-udev-create-symlinks-and-watch-even-in-suspended-sta.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1647172800">- lvm2 should use 'external_device_info_source="udev"' by default (bsc#1179691)
  + change lvm.conf item external_device_info_source from none to udev
  + bug-1179691_config-set-external_device_info_source-none.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1659528000">- lvm reports udev database has incomplete information on devices (bsc#1202011)
  + bug-1202011_vgchange-monitor-don-t-use-udev-info.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1662120000">- lvm2.spec %post deletes libdevmapper and triggers kernel panic (bsc#1198523)
  - change %post behaviour, only do deleting job for non-link folder</changelog>
  <changelog author="heming.zhao@suse.com" date="1664193600">- lvmlockd is not supporting sanlock (bsc#1203482)
  - set 1 for _supportsanlock in lvm2.spec for enabling sanlock.</changelog>
  <changelog author="heming.zhao@suse.com" date="1667217600">- dracut-initqueue timeouts with 5.3.18-150300.59.63 kernel on ppc64le (bsc#1199074)
  - in lvm2.spec, change device_mapper_version from 1.02.163 to %{lvm2_version}_1.02.163</changelog>
  <changelog author="amit.chaudhary@suse.com" date="1667822400">- killed lvmlockd doesn't clear/adopt locks leading to inability to start volume group (bsc#1203216)
  - bug-1203216_lvmlockd-purge-the-lock-resources-left-in-previous-l.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1692532800">- blkdeactivate calls wrong mountpoint cmd (bsc#1214071)
  + bug-1214071-blkdeactivate_calls_wrong_mountpoint.patch</changelog>
  <changelog author="glass.su@suse.com" date="1700654400">- Error creating linux volume on SAN device lvmlockd (bsc#1215229)
  + bug-1215229_lvmlockd-use-4K-sector-size-when-any-dev-is-4K.patch</changelog>
</package>
<package pkgid="9955eb36f8bde2a1a83a86994fd05394e88f3ad5e19bcc785c0219aba6ee23fe" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.1" rel="150300.24.27.1"/>
  <changelog author="colyli@suse.com" date="1581076800">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
</package>
<package pkgid="2e4a393b3036d0d2a63d067dda5ce6bdb5fa462e1041433429ecc69adb62be5d" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.1" rel="150300.24.27.1"/>
  <changelog author="colyli@suse.com" date="1581076800">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
</package>
<package pkgid="a3e0b641c32bae704333439cffe759166e63523a3cc8e8fdb09f84cbdcde4f8c" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="150300.24.27.1"/>
  <changelog author="colyli@suse.com" date="1581076800">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
</package>
<package pkgid="ddee3e1cc01fcaf114259b9eaa76b8e714188e2a44a78c8c7306bb0808753d6b" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150300.24.27.1"/>
  <changelog author="colyli@suse.com" date="1581076800">- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0026-Enable-probe_roms-to-scan-more-than-6-roms.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
</package>
<package pkgid="124860bb7e2809acebf0a212626c0a6ecbd068e6366b188ebe1df06636801ddf" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.1" rel="150300.24.30.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
  <changelog author="mwilck@suse.com" date="1692619200">- make sure initramfs is rebuilt in %posttrans (bsc#1214427)</changelog>
</package>
<package pkgid="b2f0b23195fc80133d18b445de993de5bff47c30f680781bb1e802aff39f8e55" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.1" rel="150300.24.30.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
  <changelog author="mwilck@suse.com" date="1692619200">- make sure initramfs is rebuilt in %posttrans (bsc#1214427)</changelog>
</package>
<package pkgid="62ecfd2983cad6bb92026017668b1c2e18bda9e71e16127111ef42c3060d162b" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="150300.24.30.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
  <changelog author="mwilck@suse.com" date="1692619200">- make sure initramfs is rebuilt in %posttrans (bsc#1214427)</changelog>
</package>
<package pkgid="2736da16067842c6a58d2e88847f82dd4e4489bb01e4a68f5e9346cd6d1fbc1a" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150300.24.30.1"/>
  <changelog author="colyli@suse.com" date="1583236800">- Rename the following patches, they will be listed with new
  re-ordered prefix number in following commit,
    0001-Document-PART-POLICY-lines.patch
    0001-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
    0002-policy-support-devices-with-multiple-paths.patch
    0003-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
    0004-Monitor-add-system-timer-to-run-oneshot-periodically.patch
    0005-imsm-update-metadata-correctly-while-raid10-double-d.patch
    0006-Grow-avoid-overflow-in-compute_backup_blocks.patch
    0007-Grow-report-correct-new-chunk-size.patch
    0008-policy.c-prevent-NULL-pointer-referencing.patch
    0009-Detail.c-do-not-skip-first-character-when-calling-xs.patch
    0010-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
    0011-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
    0012-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
    0013-udev-add-no-devices-option-for-calling-mdadm-detail.patch
    0021-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
    0022-mdcheck-use-to-pass-variable-to-mdcheck.patch
    0023-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
    0024-Create-add-support-for-RAID0-layouts.patch
    0025-Assemble-add-support-for-RAID0-layouts.patch
    0026-Enable-probe_roms-to-scan-more-than-6-roms.patch
    1002-mdadm.8-add-note-information-for-raid0-growing-opera.patch</changelog>
  <changelog author="colyli@suse.com" date="1583236801">- Update for latest mdadm-4.1+ patches, this is required by
  jsc#SLE-10078 and jsc#SLE-9348. Mostly the purpose is for
  latest Intel IMSM raid support.
  The following patches also include previous patches with
  new re-ordered prefix numbers.
- Makefile: install mdadm_env.sh to /usr/lib/mdadm (bsc#1111960)
  0000-Makefile-install-mdadm_env.sh-to-usr-lib-mdadm.patch
- Assemble: keep MD_DISK_FAILFAST and MD_DISK_WRITEMOSTLY flag
  (jsc#SLE-10078, jsc#SLE-9348)
  0001-Assemble-keep-MD_DISK_FAILFAST-and-MD_DISK_WRITEMOST.patch
- Document PART-POLICY lines (jsc#SLE-10078, jsc#SLE-9348)
  0002-Document-PART-POLICY-lines.patc
- policy: support devices with multiple paths.
  (jsc#SLE-10078, jsc#SLE-9348)
  0003-policy-support-devices-with-multiple-paths.patch
- mdcheck: add systemd unit files to run mdcheck. (bsc#1115407)
  0004-mdcheck-add-systemd-unit-files-to-run-mdcheck.patch
- Monitor: add system timer to run --oneshot periodically (bsc#1115407)
  0005-Monitor-add-system-timer-to-run-oneshot-periodically.patch
- imsm: update metadata correctly while raid10 double
  (jsc#SLE-10078, jsc#SLE-9348)
  0006-imsm-update-metadata-correctly-while-raid10-double-d.patch
- Assemble: mask FAILFAST and WRITEMOSTLY flags when finding
  (jsc#SLE-10078, jsc#SLE-9348)
  0007-Assemble-mask-FAILFAST-and-WRITEMOSTLY-flags-when-fi.patch
- Grow: avoid overflow in compute_backup_blocks()
  (jsc#SLE-10078, jsc#SLE-9348)
  0008-Grow-avoid-overflow-in-compute_backup_blocks.patch
- Grow: report correct new chunk size. (jsc#SLE-10078, jsc#SLE-9348)
  0009-Grow-report-correct-new-chunk-size.patch
- policy.c: prevent NULL pointer referencing (bsc#1106078)
  0010-policy.c-prevent-NULL-pointer-referencing.patch
- policy.c: Fix for compiler error (jsc#SLE-10078, jsc#SLE-9348)
  0012-policy.c-Fix-for-compiler-error.patch
- imsm: finish recovery when drive with rebuild fails (bsc#1126975)
  0013-imsm-finish-recovery-when-drive-with-rebuild-fails.patch
- imsm: fix reshape for &gt;2TB drives (jsc#SLE-10078, jsc#SLE-9348)
  0014-imsm-fix-reshape-for-2TB-drives.patch
- Fix spelling typos. (jsc#SLE-10078, jsc#SLE-9348)
  0015-Fix-spelling-typos.patch
- Detail.c: do not skip first character when calling xstrdup in
  Detail() (bsc#1123814)
  0016-Detail.c-do-not-skip-first-character-when-calling-xs.patch
- Fix reshape for decreasing data offset (jsc#SLE-10078, jsc#SLE-9348)
  0018-Fix-reshape-for-decreasing-data-offset.patch
- mdadm/tests: add one test case for failfast of raid1
  (jsc#SLE-10078, jsc#SLE-9348)
  0019-mdadm-tests-add-one-test-case-for-failfast-of-raid1.patch
- mdmon: don't attempt to manage new arrays when terminating
  (bsc#1127526)
  0020-mdmon-don-t-attempt-to-manage-new-arrays-when-termin.patch
- mdmon: wait for previous mdmon to exit during takeover
  (jsc#SLE-10078, jsc#SLE-9348)
  0021-mdmon-wait-for-previous-mdmon-to-exit-during-takeove.patch
- Assemble: Fix starting array with initial reshape checkpoint
  (jsc#SLE-10078, jsc#SLE-9348)
  0022-Assemble-Fix-starting-array-with-initial-reshape-che.patch
- add missing units to --examine (jsc#SLE-10078, jsc#SLE-9348)
  0023-add-missing-units-to-examine.patch
- imsm: fix spare activation for old matrix arrays
  (jsc#SLE-10078, jsc#SLE-9348)
  0024-imsm-fix-spare-activation-for-old-matrix-arrays.patch
- Create: Block rounding size to max (jsc#SLE-10078, jsc#SLE-9348)
  0025-Create-Block-rounding-size-to-max.patch
- udev: Add udev rules to create by-partuuid for md device
  (jsc#SLE-10078, jsc#SLE-9348)
  0026-udev-Add-udev-rules-to-create-by-partuuid-for-md-dev.patch
- mdmon: fix wrong array state when disk fails during mdmon
  (jsc#SLE-10078, jsc#SLE-9348)
  0027-mdmon-fix-wrong-array-state-when-disk-fails-during-m.patch
- Enable probe_roms to scan more than 6 roms. (bsc#1156040)
  0028-Enable-probe_roms-to-scan-more-than-6-roms.patch
- super-intel: Fix issue with abs() being irrelevant
  (jsc#SLE-10078, jsc#SLE-9348)
  0029-super-intel-Fix-issue-with-abs-being-irrelevant.patch
- mdadm.h: Introduced unaligned {get,put}_unaligned{16,32}()
  (jsc#SLE-10078, jsc#SLE-9348)
  0030-mdadm.h-Introduced-unaligned-get-put-_unaligned-16-3.patch
- super-intel: Use put_unaligned in split_ull
  (jsc#SLE-10078, jsc#SLE-9348)
  0031-super-intel-Use-put_unaligned-in-split_ull.patch
- mdadm: load default sysfs attributes after assemblation
  (jsc#SLE-10078, jsc#SLE-9348)
  0032-mdadm-load-default-sysfs-attributes-after-assemblati.patch
- mdadm.h: include sysmacros.h unconditionally
  (jsc#SLE-10078, jsc#SLE-9348)
  0033-mdadm.h-include-sysmacros.h-unconditionally.patch
- mdadm: add --no-devices to avoid component devices detail
  (bsc#1139709)
  0034-mdadm-add-no-devices-to-avoid-component-devices-deta.patch
- udev: add --no-devices option for calling 'mdadm (bsc#1139709)
  0035-udev-add-no-devices-option-for-calling-mdadm-detail.patch
- imsm: close removed drive fd. (jsc#SLE-10078, jsc#SLE-9348)
  0036-imsm-close-removed-drive-fd.patch
- mdadm: check value returned by snprintf against errors
  (jsc#SLE-10078, jsc#SLE-9348)
  0037-mdadm-check-value-returned-by-snprintf-against-error.patch
- mdadm: Introduce new array state 'broken' for raid0/linear
  (jsc#SLE-10078, jsc#SLE-9348)
  0038-mdadm-Introduce-new-array-state-broken-for-raid0-lin.patch
- mdadm: force a uuid swap on big endian (jsc#SLE-10078, jsc#SLE-9348)
  0039-mdadm-force-a-uuid-swap-on-big-endian.patch
- mdadm/md.4: add the descriptions for bitmap sysfs nodes
  (jsc#SLE-10078, jsc#SLE-9348)
  0040-mdadm-md.4-add-the-descriptions-for-bitmap-sysfs-nod.patch
- Init devlist as an array (jsc#SLE-10078, jsc#SLE-9348)
  0041-Init-devlist-as-an-array.patch
- Don't need to check recovery after re-add when no I/O writes
  (jsc#SLE-10078, jsc#SLE-9348)
  0042-Don-t-need-to-check-recovery-after-re-add-when-no-I-.patch
- udev: allow for udev attribute reading bug.
  (jsc#SLE-10078, jsc#SLE-9348)
  0043-udev-allow-for-udev-attribute-reading-bug.patch
- imsm: save current_vol number (jsc#SLE-10078, jsc#SLE-9348)
  0044-imsm-save-current_vol-number.patch
- imsm: allow to specify second volume size
  (jsc#SLE-10078, jsc#SLE-9348)
  0045-imsm-allow-to-specify-second-volume-size.patch
- mdcheck: when mdcheck_start is enabled, enable (bsc#1153258)
  0046-mdcheck-when-mdcheck_start-is-enabled-enable-mdcheck.patch
- mdcheck: use ${} to pass variable to mdcheck (bsc#1153258)
  0050-mdcheck-use-to-pass-variable-to-mdcheck.patch
- SUSE-mdadm_env.sh: handle MDADM_CHECK_DURATION (bsc#1153258)
  0051-SUSE-mdadm_env.sh-handle-MDADM_CHECK_DURATION.patch
- super-intel: don't mark structs 'packed' unnecessarily
  (jsc#SLE-10078, jsc#SLE-9348)
  0052-super-intel-don-t-mark-structs-packed-unnecessarily.patch
- Manage: Remove the legacy code for md driver prior to 0.90.03
  (jsc#SLE-10078, jsc#SLE-9348)
  0053-Manage-Remove-the-legacy-code-for-md-driver-prior-to.patch
- Remove last traces of HOT_ADD_DISK (jsc#SLE-10078, jsc#SLE-9348)
  0054-Remove-last-traces-of-HOT_ADD_DISK.patch
- Fix up a few formatting issues (jsc#SLE-10078, jsc#SLE-9348)
  0055-Fix-up-a-few-formatting-issues.patch
- Remove unused code (jsc#SLE-10078, jsc#SLE-9348)
  0056-Remove-unused-code.patch
- imsm: return correct uuid for volume in detail
  (jsc#SLE-10078, jsc#SLE-9348)
  0057-imsm-return-correct-uuid-for-volume-in-detail.patch
- imsm: Change the way of printing nvme drives in
  (jsc#SLE-10078, jsc#SLE-9348)
  0058-imsm-Change-the-way-of-printing-nvme-drives-in-detai.patch
- Create: add support for RAID0 layouts. (bsc#1162479)
  0059-Create-add-support-for-RAID0-layouts.patch
- Assemble: add support for RAID0 layouts. (bsc#1162479)
  0060-Assemble-add-support-for-RAID0-layouts.patch
- Respect $(CROSS_COMPILE) when $(CC) is the default
  (jsc#SLE-10078, jsc#SLE-9348)
  0061-Respect-CROSS_COMPILE-when-CC-is-the-default.patch
- Change warning message (jsc#SLE-10078, jsc#SLE-9348)
  0062-Change-warning-message.patch
- mdcheck service can't start succesfully because of syntax
  (jsc#SLE-10078, jsc#SLE-9348)
  0063-mdcheck-service-can-t-start-succesfully-because-of-s.patch
- imsm: Update grow manual. (jsc#SLE-10078, jsc#SLE-9348)
  0064-imsm-Update-grow-manual.patch
- Add support for Tebibytes (jsc#SLE-10078, jsc#SLE-9348)
  0065-Add-support-for-Tebibytes.patch
- imsm: fill working_disks according to metadata.
  (jsc#SLE-10078, jsc#SLE-9348)
  0066-imsm-fill-working_disks-according-to-metadata.patch
- mdadm.8: add note information for raid0 growing operation
  (bsc#1129900)
  0067-mdadm.8-add-note-information-for-raid0-growing-opera.patch
- Remove the legacy whitespace (jsc#SLE-10078, jsc#SLE-9348)
  0068-Remove-the-legacy-whitespace.patch
- imsm: pass subarray id to kill_subarray function
  (jsc#SLE-10078, jsc#SLE-9348)
  0069-imsm-pass-subarray-id-to-kill_subarray-function.patch
- imsm: Remove --dump/--restore implementation
  (jsc#SLE-10078, jsc#SLE-9348)
  0070-imsm-Remove-dump-restore-implementation.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
  <changelog author="mwilck@suse.com" date="1692619200">- make sure initramfs is rebuilt in %posttrans (bsc#1214427)</changelog>
</package>
<package pkgid="aa40527bc5bae2f3460701e04d9d9c8fe805ea38c4b64450d410498fa664cd03" name="mdadm" arch="aarch64">
  <version epoch="0" ver="4.1" rel="150300.24.33.1"/>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
  <changelog author="mwilck@suse.com" date="1692619200">- make sure initramfs is rebuilt in %posttrans (bsc#1214427)</changelog>
  <changelog author="mwilck@suse.com" date="1693483200">- block array creation with long names (CVE-2023-28736, bsc#1214244)
- 1017-mdadm-block-creation-with-long-names.patch</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- fix for uncontrolled resource consumption (CVE-2023-28938, bsc#1214245)
- 1018-Fix-memory-leak-after-mdadm-detail.patch</changelog>
</package>
<package pkgid="11615eb038650a6129ef059e9495884c8d42d4c1713ca20b26ccc4b36e3c202e" name="mdadm" arch="s390x">
  <version epoch="0" ver="4.1" rel="150300.24.33.1"/>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
  <changelog author="mwilck@suse.com" date="1692619200">- make sure initramfs is rebuilt in %posttrans (bsc#1214427)</changelog>
  <changelog author="mwilck@suse.com" date="1693483200">- block array creation with long names (CVE-2023-28736, bsc#1214244)
- 1017-mdadm-block-creation-with-long-names.patch</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- fix for uncontrolled resource consumption (CVE-2023-28938, bsc#1214245)
- 1018-Fix-memory-leak-after-mdadm-detail.patch</changelog>
</package>
<package pkgid="042cb79488342ad1d235abd69564a9e4d4a19572fc56f5f103def31f6852eff0" name="mdadm" arch="src">
  <version epoch="0" ver="4.1" rel="150300.24.33.1"/>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
  <changelog author="mwilck@suse.com" date="1692619200">- make sure initramfs is rebuilt in %posttrans (bsc#1214427)</changelog>
  <changelog author="mwilck@suse.com" date="1693483200">- block array creation with long names (CVE-2023-28736, bsc#1214244)
- 1017-mdadm-block-creation-with-long-names.patch</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- fix for uncontrolled resource consumption (CVE-2023-28938, bsc#1214245)
- 1018-Fix-memory-leak-after-mdadm-detail.patch</changelog>
</package>
<package pkgid="748c5c55e0d257fb85b7b93f64e027bb498c2d0436dacf978fc3f7992796d801" name="mdadm" arch="x86_64">
  <version epoch="0" ver="4.1" rel="150300.24.33.1"/>
  <changelog author="colyli@suse.com" date="1592827200">- Detail: adding sync status for cluster device
  (bsc#1163727)
  0072-Detail-adding-sync-status-for-cluster-device.patch
- Monitor: improve check_one_sharer() for checking duplicated process
  (bsc#1168953)
  0071-Monitor-improve-check_one_sharer-for-checking-duplic.patch</changelog>
  <changelog author="colyli@suse.com" date="1592827201">- OnCalendar format fix of mdcheck_start.timer (bsc#1173137)
  1002-OnCalendar-format-fix-of-mdcheck_start-timer.patch</changelog>
  <changelog author="colyli@suse.com" date="1598788800">- mdadm: treat the Dell softraid array as local array (bsc#1175004)
  1003-mdadm-treat-the-Dell-softraid-array-as-local-array.patch</changelog>
  <changelog author="colyli@suse.com" date="1602417600">- Update to latest mdadm which is requested by jsc#SLE-13700 from
  partners. Mostly the purpose is for latest Intel IMSM raid
  support, while some other fixes are important too.
- imsm: Correct minimal device size (jsc#SLE-13700)
  0073-imsm-Correct-minimal-device-size.patch
- Detail: show correct bitmap info for cluster raid device
  (jsc#SLE-13700)
  0074-Detail-show-correct-bitmap-info-for-cluster-raid-dev.patch
- imsm: support the Array Creation Time field in metadata
  (jsc#SLE-13700)
  0075-imsm-support-the-Array-Creation-Time-field-in-metada.patch
- imsm: show Subarray and Volume ID in --examine output
  (jsc#SLE-13700)
  0076-imsm-show-Subarray-and-Volume-ID-in-examine-output.patch
- udev: Ignore change event for imsm (jsc#SLE-13700)
  0077-udev-Ignore-change-event-for-imsm.patch
- Manage, imsm: Write metadata before add (jsc#SLE-13700)
  0078-Manage-imsm-Write-metadata-before-add.patch
- Assemble: print error message if mdadm fails assembling
  with --uuid option (jsc#SLE-13700)
  0079-Assemble-print-error-message-if-mdadm-fails-assembli.patch
- clean up meaning of small typo (jsc#SLE-13700)
  0080-clean-up-meaning-of-small-typo.patch
- Assemble.c: respect force flag (jsc#SLE-13700)
  0081-Assemble.c-respect-force-flag.patch
- mdcheck: Log when done (jsc#SLE-13700)
  0082-mdcheck-Log-when-done.patch
- Makefile: add EXTRAVERSION support (jsc#SLE-13700)
  0083-Makefile-add-EXTRAVERSION-support.patch
- uuid.c: split uuid stuffs from util.c (jsc#SLE-13700)
  0084-uuid.c-split-uuid-stuffs-from-util.c.patch
- Include count for \0 character when using strncpy to
  implement strdup. (jsc#SLE-13700)
  0085-Include-count-for-0-character-when-using-strncpy-to-.patch
- restripe: fix ignoring return value of read and lseek
  (jsc#SLE-13700)
  0086-restripe-fix-ignoring-return-value-of-read-and-lseek.patch
- Block overwriting existing links while manual assembly
  (jsc#SLE-13700)
  0087-Block-overwriting-existing-links-while-manual-assemb.patch
- Detect too-small device: error rather than underflow/crash
  (jsc#SLE-13700)
  0088-Detect-too-small-device-error-rather-than-underflow-.patch
- Use more secure HTTPS URLs  (jsc#SLE-13700)
  0089-Use-more-secure-HTTPS-URLs.patch
- Update link to Intel page for IMSM (jsc#SLE-13700)
  0090-Update-link-to-Intel-page-for-IMSM.patch
- mdadm/Grow: prevent md's fd from being occupied during delayed time
  (jsc#SLE-13700)
  0091-mdadm-Grow-prevent-md-s-fd-from-being-occupied-durin.patch
- Specify nodes number when updating cluster nodes (jsc#SLE-13700)
  0092-Specify-nodes-number-when-updating-cluster-nodes.patch
- mdadm/md.4: update path to in-kernel-tree documentation
  (jsc#SLE-13700)
  0093-mdadm-md.4-update-path-to-in-kernel-tree-documentati.patch
- manual: update --examine-badblocks (jsc#SLE-13700)
  0094-manual-update-examine-badblocks.patch</changelog>
  <changelog author="colyli@suse.com" date="1607169600">- There are some important fixes merged in mdadm upstream which
  should go with jsc#SLE-13700. This is the update from upstream
  mdadm including the important fixes we should have.
- Detail: show correct raid level when the array is inactive
  (jsc#SLE-13700)
  0095-Detail-show-correct-raid-level-when-the-array-is-ina.patch
- Don't create bitmap for raid5 with journal disk
  (jsc#SLE-13700)
  0096-Don-t-create-bitmap-for-raid5-with-journal-disk.patch
- Monitor: refresh mdstat fd after select (jsc#SLE-13700)
  0097-Monitor-refresh-mdstat-fd-after-select.patch
- Monitor: stop notifing about containers.  (jsc#SLE-13700)
  0098-Monitor-stop-notifing-about-containers.patch
- mdmonitor: set small delay once (jsc#SLE-13700)
  0099-mdmonitor-set-small-delay-once.patch
- Check if other Monitor instance running before fork.
  (jsc#SLE-13700)
  0100-Check-if-other-Monitor-instance-running-before-fork.patch
- Super1: allow RAID0 layout setting to be removed.
  (jsc#SLE-13700)
  0101-Super1-allow-RAID0-layout-setting-to-be-removed.patch
- Detail: fix segfault during IMSM raid creation
  (jsc#SLE-13700)
  0102-Detail-fix-segfault-during-IMSM-raid-creation.patch
- Create.c: close mdfd and generate uevent (jsc#SLE-13700)
  0103-Create.c-close-mdfd-and-generate-uevent.patch
- imsm: update num_data_stripes according to dev_size
  (jsc#SLE-13700)
  0104-imsm-update-num_data_stripes-according-to-dev_size.patch
- imsm: remove redundant calls to imsm_get_map (jsc#SLE-13700)
  0105-imsm-remove-redundant-calls-to-imsm_get_map.patch
- Monitor: don't use default modes when creating a file
  (jsc#SLE-13700)
  0106-Monitor-don-t-use-default-modes-when-creating-a-file.patch
- imsm: limit support to first NVMe namespace (jsc#SLE-13700)
  0107-imsm-limit-support-to-first-NVMe-namespace.patch
- mdadm: Unify forks behaviour (jsc#SLE-13700)
  0108-mdadm-Unify-forks-behaviour.patch
- mdadm/Detail: show correct state for clustered array
  (jsc#SLE-13700)
  0109-mdadm-Detail-show-correct-state-for-clustered-array.patch
- Make target to install binaries only (jsc#SLE-13700)
  0110-Make-target-to-install-binaries-only.patch
- udev: start grow service automatically (jsc#SLE-13700)
  0111-udev-start-grow-service-automatically.patch</changelog>
  <changelog author="colyli@suse.com" date="1609848000">- Incremental: Remove redundant spare movement logic
  (jsc#SLE-13700, bsc#1180220)
  0112-Incremental-Remove-redundant-spare-movement-logic.patch
- Dump: get stat from a wrong metadata file when restoring metadata
  (jsc#SLE-13700)
  0113-Dump-get-stat-from-a-wrong-metadata-file-when-restor.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1617278400">- cluster-md/mdadm : avoid useless re-sync (bsc#1181341)
  0114-super1-fix-Floating-point-exception.patch
  0115-super1.c-avoid-useless-sync-when-bitmap-switches-fro.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993600">- imsm: nvme multipath support (bsc#1175758)
  0116-imsm-nvme-multipath-support.patch</changelog>
  <changelog author="colyli@suse.com" date="1620993601">- Grow: be careful of corrupt dev_roles list (bsc#1181619)
  0117-Grow-be-careful-of-corrupt-dev_roles-list.patch</changelog>
  <changelog author="colyli@suse.com" date="1630584000">- Remove Spare drives line from details for external metadata
  (bsc#1180661, bsc#1182642)
  0118-Remove-Spare-drives-line-from-details-for-external-m.patch
- Don't associate spares with other arrays during RAID Examine
  (bsc#1180661, bsc#1182642)
  0119-Don-t-associate-spares-with-other-arrays-during-RAID.patch</changelog>
  <changelog author="colyli@suse.com" date="1645012800">- Monitor: print message before quit for no array to monitor
  (bsc#1183229)
  0120-Monitor-print-message-before-quit-for-no-array-to-mo.patch</changelog>
  <changelog author="mwilck@suse.com" date="1647604800">- skip RAID assembly if DM_UDEV_DISABLE_OTHER_RULES_FLAG (bsc#1196054)
  * Add 0121-udev-md-raid-assembly.rules-skip-if-DM_UDEV_DISABLE_.patch</changelog>
  <changelog author="heming.zhao@suse.com" date="1653912000">- resource RAID failed during cluster patch, Mdadm gets floating point error (bsc#1197158)
  1004-mdadm-super1-restore-commit-45a87c2f31335-to-fix-clu.patch</changelog>
  <changelog author="colyli@suse.com" date="1660219200">- imsm: support for third Sata controller (bsc#1201297)
  0122-imsm-support-for-third-Sata-controller.patch
- mdadm: enable Intel Alderlake RSTe configuration (bsc#1201297)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="colyli@suse.com" date="1663588800">- mdadm.spec: add EXTRAVERSION string to make command line
  (jsc#SLE-24761, bsc#1193566)</changelog>
  <changelog author="colyli@suse.com" date="1676289600">- Update the following patch for (bsc#1207868)
  1005-mdadm-enable-Intel-Alderlake-RSTe-configuration.patch</changelog>
  <changelog author="nfbrown@suse.com" date="1679313600">- 1011-Improvements-for-IMSM_NO_PLATFORM-testing.patch
- 1012-mdmon-don-t-test-both-all-and-container_name.patch
- 1013-mdmon-change-system-unit-file-to-use-foreground.patch
- 1014-mdmon-compensate-for-removal-of-KillMode-none.patch
- 1015-mdmon-improvements-for-switchroot.patch
- 1016-mdopen-always-try-create_named_array.patch
  Fixes for mdmon to ensure it run at the right time in the
  fight mount namespace.  This fixes various problems with
  IMSM raid arrays in 15-SP4
  (bsc#1205493, bsc#1205830)</changelog>
  <changelog author="mwilck@suse.com" date="1692619200">- make sure initramfs is rebuilt in %posttrans (bsc#1214427)</changelog>
  <changelog author="mwilck@suse.com" date="1693483200">- block array creation with long names (CVE-2023-28736, bsc#1214244)
- 1017-mdadm-block-creation-with-long-names.patch</changelog>
  <changelog author="mwilck@suse.com" date="1693569600">- fix for uncontrolled resource consumption (CVE-2023-28938, bsc#1214245)
- 1018-Fix-memory-leak-after-mdadm-detail.patch</changelog>
</package>
<package pkgid="b3d71868a966f74f3b14f458825d43644cdebce9d9760e69c95c934ce0aa09f2" name="microos-tools" arch="aarch64">
  <version epoch="0" ver="2.18" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1596110400">- Update to version 2.2
  - tmpfs support got moved to systemd</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Update to version 2.3
  - SELinux support [jsc#SMO-15]
  - overwrite tmp.mount options with SELinux label for /tmp
  - Add generator to label mount points if required
  - Add dracut module to relabel core system if required
  - Add locale-check to reset locale to system default if the one
    set by SSH does not exist [bsc#1156175]
  - Set TMPDIR for salt to not use /tmp (preparation for noexec)</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2]</changelog>
  <changelog author="kukuk@suse.com" date="1597752000">- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]</changelog>
  <changelog author="kukuk@suse.com" date="1597752001">- Update to version 2.4
  - fixes for autorelabel in initrd
  - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
    /tmp after 10 days and /var/tmp after 30 days</changelog>
  <changelog author="kukuk@suse.com" date="1601294400">- Update to version 2.5
  - tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 2.6
  - Don't delete autorelabel file in initrd</changelog>
  <changelog author="kukuk@suse.com" date="1603368000">- Fix building on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- Update to version 2.7
  - Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1604923200">- Update to version 2.8
  - Don't propagate umounts into the real root
  - Use content of .autorelabel only if it exists</changelog>
  <changelog author="kukuk@suse.com" date="1605009600">- Update to version 2.9
  - Use absolute path for selinuxenabled in systemd generator</changelog>
  <changelog author="kukuk@suse.com" date="1620648000">- Update to version 2.10
  - Fixes and improvements for SELinux support
  - Add devel tools
- Add new subpackage microos-devel-tools
- Add rpm as build dependency for that subpackage</changelog>
  <changelog author="iforster@suse.com" date="1623844800">- Update to version 2.11
  - Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]</changelog>
  <changelog author="kukuk@suse.com" date="1631188800">- Update to version 2.12
  - Remove special MicroOS firstboot script
  - Remove locale-check, replaced by another aaa_base implementation</changelog>
  <changelog author="kukuk@suse.com" date="1661860800">- Update to version 2.13
  - 98selinux-microos: Don't rely on selinux=1 [bsc#1202449]
  - Add sysext-add-debug
  - Make sure /var/lib/overlay exists before relabeling</changelog>
  <changelog author="kukuk@suse.com" date="1661860801">- Update to version 2.14
  - Fix Makefile to install sysext-add-debug</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to version 2.15
  - 98selinux-microos: Add grep as dependency</changelog>
  <changelog author="fvogt@suse.com" date="1662379200">- Update to version 2.16:
  - 98selinux-microos: Make the btrfs subvolume writable temporarily [boo#1202395]</changelog>
  <changelog author="kukuk@suse.com" date="1663329600">- Update to version 2.17:
  - selinux-autorelabel-generator: Don't cross partition boundaries
  for /.snapshots when relabeling [issue#11]</changelog>
  <changelog author="iforster@suse.com" date="1674129600">- Update to version 2.18:
  - Add TMPDIR to tukit binddirs for Salt
    [bsc#1211356] [bsc#1205011]
  - 98selinux-microos: Add chroot as dependency
  - Fix spelling error in warning</changelog>
</package>
<package pkgid="1ffc6d781ffbb07977894be1db66299a667ed2dbc8ff98d01bd5155f1998c60a" name="microos-tools" arch="s390x">
  <version epoch="0" ver="2.18" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1596110400">- Update to version 2.2
  - tmpfs support got moved to systemd</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Update to version 2.3
  - SELinux support [jsc#SMO-15]
  - overwrite tmp.mount options with SELinux label for /tmp
  - Add generator to label mount points if required
  - Add dracut module to relabel core system if required
  - Add locale-check to reset locale to system default if the one
    set by SSH does not exist [bsc#1156175]
  - Set TMPDIR for salt to not use /tmp (preparation for noexec)</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2]</changelog>
  <changelog author="kukuk@suse.com" date="1597752000">- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]</changelog>
  <changelog author="kukuk@suse.com" date="1597752001">- Update to version 2.4
  - fixes for autorelabel in initrd
  - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
    /tmp after 10 days and /var/tmp after 30 days</changelog>
  <changelog author="kukuk@suse.com" date="1601294400">- Update to version 2.5
  - tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 2.6
  - Don't delete autorelabel file in initrd</changelog>
  <changelog author="kukuk@suse.com" date="1603368000">- Fix building on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- Update to version 2.7
  - Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1604923200">- Update to version 2.8
  - Don't propagate umounts into the real root
  - Use content of .autorelabel only if it exists</changelog>
  <changelog author="kukuk@suse.com" date="1605009600">- Update to version 2.9
  - Use absolute path for selinuxenabled in systemd generator</changelog>
  <changelog author="kukuk@suse.com" date="1620648000">- Update to version 2.10
  - Fixes and improvements for SELinux support
  - Add devel tools
- Add new subpackage microos-devel-tools
- Add rpm as build dependency for that subpackage</changelog>
  <changelog author="iforster@suse.com" date="1623844800">- Update to version 2.11
  - Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]</changelog>
  <changelog author="kukuk@suse.com" date="1631188800">- Update to version 2.12
  - Remove special MicroOS firstboot script
  - Remove locale-check, replaced by another aaa_base implementation</changelog>
  <changelog author="kukuk@suse.com" date="1661860800">- Update to version 2.13
  - 98selinux-microos: Don't rely on selinux=1 [bsc#1202449]
  - Add sysext-add-debug
  - Make sure /var/lib/overlay exists before relabeling</changelog>
  <changelog author="kukuk@suse.com" date="1661860801">- Update to version 2.14
  - Fix Makefile to install sysext-add-debug</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to version 2.15
  - 98selinux-microos: Add grep as dependency</changelog>
  <changelog author="fvogt@suse.com" date="1662379200">- Update to version 2.16:
  - 98selinux-microos: Make the btrfs subvolume writable temporarily [boo#1202395]</changelog>
  <changelog author="kukuk@suse.com" date="1663329600">- Update to version 2.17:
  - selinux-autorelabel-generator: Don't cross partition boundaries
  for /.snapshots when relabeling [issue#11]</changelog>
  <changelog author="iforster@suse.com" date="1674129600">- Update to version 2.18:
  - Add TMPDIR to tukit binddirs for Salt
    [bsc#1211356] [bsc#1205011]
  - 98selinux-microos: Add chroot as dependency
  - Fix spelling error in warning</changelog>
</package>
<package pkgid="5d90dbfb48b46a67e9692188bd1fca9dce8c1d6ee3f5489a7950d6969cd96592" name="microos-tools" arch="src">
  <version epoch="0" ver="2.18" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1596110400">- Update to version 2.2
  - tmpfs support got moved to systemd</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Update to version 2.3
  - SELinux support [jsc#SMO-15]
  - overwrite tmp.mount options with SELinux label for /tmp
  - Add generator to label mount points if required
  - Add dracut module to relabel core system if required
  - Add locale-check to reset locale to system default if the one
    set by SSH does not exist [bsc#1156175]
  - Set TMPDIR for salt to not use /tmp (preparation for noexec)</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2]</changelog>
  <changelog author="kukuk@suse.com" date="1597752000">- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]</changelog>
  <changelog author="kukuk@suse.com" date="1597752001">- Update to version 2.4
  - fixes for autorelabel in initrd
  - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
    /tmp after 10 days and /var/tmp after 30 days</changelog>
  <changelog author="kukuk@suse.com" date="1601294400">- Update to version 2.5
  - tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 2.6
  - Don't delete autorelabel file in initrd</changelog>
  <changelog author="kukuk@suse.com" date="1603368000">- Fix building on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- Update to version 2.7
  - Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1604923200">- Update to version 2.8
  - Don't propagate umounts into the real root
  - Use content of .autorelabel only if it exists</changelog>
  <changelog author="kukuk@suse.com" date="1605009600">- Update to version 2.9
  - Use absolute path for selinuxenabled in systemd generator</changelog>
  <changelog author="kukuk@suse.com" date="1620648000">- Update to version 2.10
  - Fixes and improvements for SELinux support
  - Add devel tools
- Add new subpackage microos-devel-tools
- Add rpm as build dependency for that subpackage</changelog>
  <changelog author="iforster@suse.com" date="1623844800">- Update to version 2.11
  - Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]</changelog>
  <changelog author="kukuk@suse.com" date="1631188800">- Update to version 2.12
  - Remove special MicroOS firstboot script
  - Remove locale-check, replaced by another aaa_base implementation</changelog>
  <changelog author="kukuk@suse.com" date="1661860800">- Update to version 2.13
  - 98selinux-microos: Don't rely on selinux=1 [bsc#1202449]
  - Add sysext-add-debug
  - Make sure /var/lib/overlay exists before relabeling</changelog>
  <changelog author="kukuk@suse.com" date="1661860801">- Update to version 2.14
  - Fix Makefile to install sysext-add-debug</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to version 2.15
  - 98selinux-microos: Add grep as dependency</changelog>
  <changelog author="fvogt@suse.com" date="1662379200">- Update to version 2.16:
  - 98selinux-microos: Make the btrfs subvolume writable temporarily [boo#1202395]</changelog>
  <changelog author="kukuk@suse.com" date="1663329600">- Update to version 2.17:
  - selinux-autorelabel-generator: Don't cross partition boundaries
  for /.snapshots when relabeling [issue#11]</changelog>
  <changelog author="iforster@suse.com" date="1674129600">- Update to version 2.18:
  - Add TMPDIR to tukit binddirs for Salt
    [bsc#1211356] [bsc#1205011]
  - 98selinux-microos: Add chroot as dependency
  - Fix spelling error in warning</changelog>
</package>
<package pkgid="8b86456246270909d9bb4a4336bc34224bc3a18915d4f01b6064045407b36e64" name="microos-tools" arch="x86_64">
  <version epoch="0" ver="2.18" rel="150400.3.3.1"/>
  <changelog author="kukuk@suse.com" date="1596110400">- Update to version 2.2
  - tmpfs support got moved to systemd</changelog>
  <changelog author="kukuk@suse.com" date="1597233600">- Update to version 2.3
  - SELinux support [jsc#SMO-15]
  - overwrite tmp.mount options with SELinux label for /tmp
  - Add generator to label mount points if required
  - Add dracut module to relabel core system if required
  - Add locale-check to reset locale to system default if the one
    set by SSH does not exist [bsc#1156175]
  - Set TMPDIR for salt to not use /tmp (preparation for noexec)</changelog>
  <changelog author="kukuk@suse.com" date="1597406400">- Add tmp.mount for SUSE MicroOS 5.0 [jsc#SMO-2]</changelog>
  <changelog author="kukuk@suse.com" date="1597752000">- Don't install tmp.mount.d/selinux.conf on Factory [bsc#1175379]</changelog>
  <changelog author="kukuk@suse.com" date="1597752001">- Update to version 2.4
  - fixes for autorelabel in initrd
  - Use systemds tmpfiles.d/tmp.conf to relabel /tmp and cleanup
    /tmp after 10 days and /var/tmp after 30 days</changelog>
  <changelog author="kukuk@suse.com" date="1601294400">- Update to version 2.5
  - tmp.conf now part of filesystem package for Factory
- Include tmp.conf for SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603281600">- Update to version 2.6
  - Don't delete autorelabel file in initrd</changelog>
  <changelog author="kukuk@suse.com" date="1603368000">- Fix building on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1603886400">- Update to version 2.7
  - Add workaround if /.autorelabel is used, don't ignore it
- Rename tmp.conf to microos-tmp.conf on SUSE MicroOS</changelog>
  <changelog author="kukuk@suse.com" date="1604923200">- Update to version 2.8
  - Don't propagate umounts into the real root
  - Use content of .autorelabel only if it exists</changelog>
  <changelog author="kukuk@suse.com" date="1605009600">- Update to version 2.9
  - Use absolute path for selinuxenabled in systemd generator</changelog>
  <changelog author="kukuk@suse.com" date="1620648000">- Update to version 2.10
  - Fixes and improvements for SELinux support
  - Add devel tools
- Add new subpackage microos-devel-tools
- Add rpm as build dependency for that subpackage</changelog>
  <changelog author="iforster@suse.com" date="1623844800">- Update to version 2.11
  - Fix unwritable /var / /etc after SELinux relabel [bsc#1186563]</changelog>
  <changelog author="kukuk@suse.com" date="1631188800">- Update to version 2.12
  - Remove special MicroOS firstboot script
  - Remove locale-check, replaced by another aaa_base implementation</changelog>
  <changelog author="kukuk@suse.com" date="1661860800">- Update to version 2.13
  - 98selinux-microos: Don't rely on selinux=1 [bsc#1202449]
  - Add sysext-add-debug
  - Make sure /var/lib/overlay exists before relabeling</changelog>
  <changelog author="kukuk@suse.com" date="1661860801">- Update to version 2.14
  - Fix Makefile to install sysext-add-debug</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to version 2.15
  - 98selinux-microos: Add grep as dependency</changelog>
  <changelog author="fvogt@suse.com" date="1662379200">- Update to version 2.16:
  - 98selinux-microos: Make the btrfs subvolume writable temporarily [boo#1202395]</changelog>
  <changelog author="kukuk@suse.com" date="1663329600">- Update to version 2.17:
  - selinux-autorelabel-generator: Don't cross partition boundaries
  for /.snapshots when relabeling [issue#11]</changelog>
  <changelog author="iforster@suse.com" date="1674129600">- Update to version 2.18:
  - Add TMPDIR to tukit binddirs for Salt
    [bsc#1211356] [bsc#1205011]
  - 98selinux-microos: Add chroot as dependency
  - Fix spelling error in warning</changelog>
</package>
<package pkgid="13542595f7922af404038d034ad8b7cde642567116d608264c804c0c46cd9286" name="mozilla-nspr" arch="aarch64">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="ffde6e65d8feb789a1ad1de0153ed225c52e19b7e8ccef62d3ed6fdc17d46433" name="mozilla-nspr" arch="s390x">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="ebfe6d217845da5a0d7581e8cdf0d35d1cacbe9be5bf383a83d22daf1b55a145" name="mozilla-nspr" arch="src">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="58e440af88f3f4da36d0a33dd1dea7265987c39c3e58042c7a1f3c169dc8d0a2" name="mozilla-nspr" arch="x86_64">
  <version epoch="0" ver="4.35" rel="150000.3.29.1"/>
  <changelog author="wr@rosenauer.org" date="1506859200">- update to version 4.17
  * changes to the Windows implementation of the networking code
    required for Firefox 57
  * a FreeBSD build fix (bmo#1391716)</changelog>
  <changelog author="wr@rosenauer.org" date="1518004800">- update to version 4.18
  * removed HP-UX DCE threads support
  * improvements for the Windows implementation of PR_SetCurrentThreadName
  * fixes for the Windows implementation of TCP Fast Open</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to version 4.19
  * changed order of shutdown cleanup to avoid a crash on Mac OSX
  * build compatibility with Android NDK r16 and glibc 2.26</changelog>
  <changelog author="alarrosa@suse.com" date="1540814400">- update to version 4.20
  * abstract socket address support for Linux (incl. Android)
  * aarch64 support for Windows
  * support for riscv64</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1563192000">- update to version 4.21
  * Use MAP_SHARED for read-only file mappings on MacOS and
    Android.
  * Changed prbit.h to use builtin function on aarch64.
  * Test program build fixes.
  * Minor fixes to support unified builds.
  * Update library copyright notices.
  * Removed Gonk/B2G references.</changelog>
  <changelog author="cgrobertson@suse.com" date="1574424000">- Use FAT LTO objects in order to provide proper static library</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1575460800">- update to version 4.23
  * fixed a build failure that was introduced in 4.22
  * correctness fix for Win64 socket polling
  * whitespace in C files was cleaned up and no longer uses
    tab characters for indenting
- update to version 4.22
  * added support for the ARC architecture
  * removed support for the following platforms:
    OSF1/Tru64, DGUX, IRIX, Symbian, BeOS
  * correctness and build fixes</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579089600">- update to version 4.24
  * added macro PR_ASSERT_ARG
  * removed some declarations
  * added support for Nios-II, Nds32 and Microblaze architectures</changelog>
  <changelog author="wr@rosenauer.org" date="1583236800">- update to version 4.25
  * fixed reading files larger than 4 GB on Win32
  * added support for Xtensa architecture</changelog>
  <changelog author="wr@rosenauer.org" date="1595505600">- update to version 4.26
  * PR_GetSystemInfo supports a new flag PR_SI_RELEASE_BUILD to get
    information about the operating system build version.
  * Better support parallel building on Windows.
  * The internal release automatic script requires python 3.</changelog>
  <changelog author="wr@rosenauer.org" date="1598097600">- update to version 4.27
  * the macOS platform code for shared library loading was
    changed to support macOS 11.
    If the absolute path parameter given to PR_LoadLibrary
    begins with either /System/ or /usr/lib/ then no test is
    performed if the library exists at a file.
  * An include statement for a Windows system library header
    was added</changelog>
  <changelog author="wr@rosenauer.org" date="1599566400">- update to version 4.28
  * Fix a compiler warning
  * Add rule for cross-compiling with cygwin</changelog>
  <changelog author="wr@rosenauer.org" date="1601467200">- update to version 4.29
  * Remove macOS Code Fragment Manager support code
  * Remove XP_MACOSX and OS_TARGET=MacOSX
  * Refresh config.guess and config.sub
  * Remove NSPR's patch to config.sub
  * Add support for e2k target (64-bit Elbrus 2000)</changelog>
  <changelog author="wr@rosenauer.org" date="1618747200">- update to version 4.30
  * support longer thread names on macOS
  * fix a build failure on OpenBSD</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- update to version 4.31:
  * Lock access to PRCallOnceType members in PR_CallOnce* for
    thread safety bmo#1686138</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1627300800">- update to version 4.32:
  * implement new socket option PR_SockOpt_DontFrag
  * support larger DNS records by increasing the default buffer
    size for DNS queries</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1640779200">- update to 4.33:
  * fixes to build system and export of private symbols</changelog>
  <changelog author="wr@rosenauer.org" date="1653825600">- update to version 4.34
  * add an API that returns a preferred loopback IP on hosts that
    have two IP stacks available.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1660132800">- update to version 4.34.1
  * add file descriptor sanity checks in the NSPR poll function.</changelog>
  <changelog author="wr@rosenauer.org" date="1665921600">- update to version 4.35
  * fixes for building with clang
  * use the number of online processors for the
    PR_GetNumberOfProcessors() API on some platforms
  * fix build on mips+musl libc
  * Add support for the LoongArch 64-bit architecture</changelog>
</package>
<package pkgid="61fa408f793ea332e664ed21a5f3d30ea4d3b142d96533a39018a40da32830ae" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="b7927ab62c6bfad4e885a682b80fd4f4611251fa41ae185b606e348f1b48650a" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="b6b635b3100f0e11838494b9135a6f827794d955d2fa2b3b9a7a53dcbd0739af" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0b0a311b196dc62faaba036ea60f8f7e0c7b404db4bced7265657f9533bf8fc2" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0d5611acfd748a92502fdfe4eb8bfa00c7a6ec330bc7699848c08f9d7cfece1c" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="fd0c13b9588dda9f9470324a9d42759d79f50d76285e579fccfc6e8ce0f67393" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="78253f8564e3904b1999de96c0caed4d610653d72d9ed68096de47aec279f9a3" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="d96d04abd13ccf0570ca6b582f7b788d9d913914e8efb76a67886183832b3660" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="4e5b62452261b37195d6a546199f6323c16a5b090b7d94e2e69ebd978119aaea" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="13cddbec19683e7a0463c93acd2abec5ee64d38ee838132f35bf3cf2f933955a" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="b5fbb6853db3b304f7195fbdaef951f9bc9654ccfa24938f1ed00551cbe328da" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="734dee4f068ee71c3867eda71cc54fe68c324d3ca5e4bc4f88b41ba2ec07cbf0" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="c2a5074ea910ab968b41944d1445a593a85edc37ed9b15f8e594aaae6e99406d" name="mozilla-nss" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="85fe6c331a5b76426a8f0f86c9494d2f2d821173328e2b44551103171b7a95ae" name="mozilla-nss" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a9863b53baef761067394d4e91165389dce7de4f8dd6096fcd3af076aac865e0" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="6b41ef95c3870c859c30c5ff3a8db289784e11fb70c0d4b2672a3e6fad628302" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="75cce37a548ea3c6b51aac4e78e289e685f4f01c3ccc0ba86bdeb34fed8c906a" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="c45426a81a6f52aa4d6a5f591aa7d21ae8b1d88853332ab1efdaf8263a290d91" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="a5244a4812d6f305758997a7ce6d41cdf698376ce9f9fa9391b87c7db7d69e7e" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="1fe02edb683516090ec8c2c1534e544ca49bf9dac72b2039614e87f6c713bca2" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="61e4b8f57eec176d1ecdb736f05b4a126563ab14d8e8bc48f1b34e84c909031e" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="8434fd25dac8c0b976887cef7619e5a4dbf80d1029c4b0f053416a84c49729da" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="ce15d7ac1a68cee85ab04605a93859daefc1ee445f0d344a17ca9f9663b43703" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="924088bf2bfd35aea140bcae535bc5a78f6745f0ea33117d3b15003c1ad639bf" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="9e627f73d2c0eb233b257788dace10e1b6f39a86446a36d0bf1fe9092df1012e" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="50739c02ab9524f7e81991faadbda03a7d9652080c0ad6e6d2fa82901d58f40d" name="mozilla-nss-certs" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="e9c0d36f4d6360996e305c9068ec471e7fbaa41c32342d1857b7d3dbb92f9293" name="mozilla-nss-certs" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="dccbb825df0e2b6617c0e7d76c5df798ae09fe12c907565b788a60c76323b349" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a6f7ea1d183556377b5ca44e12347b10d2c64e2e40428ea170efa4b0e91dd6d8" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0de91fe29a914706ba6eb3024db6122142b272c4991f84d556c771db52424d75" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="0a0a476baf7b749215a0a5e2244ca32b43a8c93745a85cddf588ae4571f8f54c" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.79.4" rel="150400.3.29.1"/>
  <changelog author="hpj@suse.com" date="1658923200">- Update nss-fips-approved-crypto-non-ec.patch to unapprove the
  rest of the DSA ciphers, keeping signature verification only
  (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to fix compiler
  warning.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
</package>
<package pkgid="88f1345dabfd181677b44e80b5fc6095dba2ededbf1ffe3643426b6c730c3e7a" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="c7dbd0b404ccae90914582a7ee7ea9312d0a13bc5acb64b2f5f0880cbfbd2d82" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="a72bbec99c38805bae8a5030c843046e4e246252440491395a791ba7e4ea5de4" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.90" rel="150400.3.32.1"/>
  <changelog author="martin.sirringhaus@suse.com" date="1661342400">- update to NSS 3.79.1 (bsc#1202645)
  * bmo#1366464 - compare signature and signatureAlgorithm fields in legacy certificate verifier.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1759794 - protect SFTKSlot needLogin with slotLock.
  * bmo#1760998 - avoid data race on primary password change.
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state.</changelog>
  <changelog author="hpj@suse.com" date="1663329600">- Update nss-fips-approved-crypto-non-ec.patch to prevent keys
  from getting flagged as non-FIPS and add remaining TLS mechanisms.
- Add nss-fips-drbg-libjitter.patch to use libjitterentropy for
  entropy. This is disabled until we can avoid the inline assembler
  in the latter's header file that relies on GNU extensions.
- Update nss-fips-constructor-self-tests.patch to fix an abort()
  when both NSS_FIPS and /proc FIPS mode are enabled.</changelog>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
</package>
<package pkgid="4d47dd714da4adb3f865ee6bc13e3eba32909100fd1f93a27b6e9e373ebcac4f" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="6898c7b9fe2de81dc997b39a284cac4ed99efc5a8b8946cc12b8fb2fa9311667" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="8130fdcb7d02f252d85df1aaee55b14b6207b4dcfc47fc9c420c4ca2a6413b4f" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.90.1" rel="150400.3.35.2"/>
  <changelog author="hpj@suse.com" date="1663848000">- Update nss-fips-approved-crypto-non-ec.patch to prevent sessions
  from getting flagged as non-FIPS (bsc#1191546).
- Mark DSA keygen unapproved (bsc#1191546, bsc#1201298).
- Enable nss-fips-drbg-libjitter.patch now that we have a patched
  libjitter to build with (bsc#1202870).</changelog>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
</package>
<package pkgid="0b25966b12b9f99193d3813857220347290e0297a540e8b422e9a4f98a7d2074" name="mozilla-nss-tools" arch="aarch64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="8fb06e82223557aabbde132b254c41aa1cef11cb37dd90484d2bb72ed1f74b85" name="mozilla-nss-tools" arch="s390x">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="a47214615a7e7bcf25d3ad4d086a9b5a2dc53898142712d53a5a96f76681cf33" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.90.2" rel="150400.3.39.1"/>
  <changelog author="hpj@suse.com" date="1664280000">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  longer symmetric keys via the service level indicator
  (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to hopefully export
  sftk_FIPSRepeatIntegrityCheck() correctly (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1664798400">- Update nss-fips-approved-crypto-non-ec.patch to allow the use of
  DSA keys (verification only) (bsc#1201298).
- Update nss-fips-constructor-self-tests.patch to add
  sftk_FIPSRepeatIntegrityCheck() to softoken's .def file
  (bsc#1198980).</changelog>
  <changelog author="hpj@suse.com" date="1665576000">- Add nss-allow-slow-tests.patch, which allows a timed test to run
  longer than 1s. This avoids turning slow builds into broken
  builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666785600">- update to NSS 3.79.2 (bsc#1204729)
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1.
  * bmo#1777672 - Gracefully handle null nickname in CERT_GetCertNicknameWithValidity.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1666872000">- Require libjitter only for SLE15-SP4 and greater</changelog>
  <changelog author="hpj@suse.com" date="1668081600">- Update nss-fips-approved-crypto-non-ec.patch to allow the use SHA
  keygen mechs (bsc#1191546).
- Update nss-fips-constructor-self-tests.patch to ensure abort() is
  called when the repeat integrity check fails (bsc#1198980).</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1669982400">- Update nss-fips-approved-crypto-non-ec.patch to disapprove the
  creation of DSA keys, i.e. mark them as not-fips (bsc#1201298)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673438400">- update to NSS 3.79.3 (bsc#1207038)
  * Bug 1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3 TrustCor Root Certificates
    (CVE-2022-23491)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1673524800">- Add upstream patch nss-fix-bmo1774654.patch to fix CVE-2022-3479
  (bsc#1204272)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676030400">- update to NSS 3.79.4 (bsc#1208138)
  * Bug 1804640 - improve handling of unknown PKCS#12 safe bag types.
    (CVE-2023-0767)</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1676462400">- Add manpages to mozilla-nss-tools (bsc#1208242)</changelog>
  <changelog author="hpj@suse.com" date="1677585600">- Add nss-fips-pct-pubkeys.patch (bsc#1207209) for pairwise consistency
  checks. Thanks to Martin for the DHKey parts.</changelog>
  <changelog author="hpj@suse.com" date="1677758400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546).</changelog>
  <changelog author="hpj@suse.com" date="1679140800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1191546) to
  update session-&gt;lastOpWasFIPS before destroying the key after
  derivation in the CKM_TLS12_KEY_AND_MAC_DERIVE,
  CKM_NSS_TLS_KEY_AND_MAC_DERIVE_SHA256,
  CKM_TLS_KEY_AND_MAC_DERIVE and CKM_SSL3_KEY_AND_MAC_DERIVE cases.
- Update nss-fips-pct-pubkeys.patch (bsc#1207209) to remove some
  excess code.</changelog>
  <changelog author="hpj@suse.com" date="1679918400">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) to
  validate extra PBKDF2 parameters according to FIPS 140-3.</changelog>
  <changelog author="hpj@suse.com" date="1680868800">- Update nss-fips-approved-crypto-non-ec.patch (bsc#1208999) with
  fixes to PBKDF2 parameter validation.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1684152000">- update to NSS 3.90
  * bmo#1623338 - ride along: remove a duplicated doc page
  * bmo#1623338 - remove a reference to IRC
  * bmo#1831983 - clang-format lib/freebl/stubs.c
  * bmo#1831983 - Add a constant time select function
  * bmo#1774657 - Updating an old dbm with lots of certs with keys to sql results in a database that is slow to access.
  * bmo#1830973 - output early build errors by default
  * bmo#1804505 - Update the technical constraints for KamuSM
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates
  * bmo#1790763 - Enable default UBSan Checks
  * bmo#1786018 - Add explicit handling of zero length records
  * bmo#1829391 - Tidy up DTLS ACK Error Handling Path
  * bmo#1786018 - Refactor zero length record tests
  * bmo#1829112 - Fix compiler warning via correct assert
  * bmo#1755267 - run linux tests on nss-t/t-linux-xlarge-gcp
  * bmo#1806496 - In FIPS mode, nss should reject RSASSA-PSS salt lengths larger than the output size of the hash function used, or provide an indicator
  * bmo#1784163 - Fix reading raw negative numbers
  * bmo#1748237 - Repairing unreachable code in clang built with gyp
  * bmo#1783647 - Integrate Vale Curve25519
  * bmo#1799468 - Removing unused flags for Hacl*
  * bmo#1748237 - Adding a better error message
  * bmo#1727555 - Update HACL* till 51a72a953a4ee6f91e63b2816ae5c4e62edf35d6
  * bmo#1782980 - Fall back to the softokn when writing certificate trust
  * bmo#1806010 - FIPS-104-3 requires we restart post programmatically
  * bmo#1826650 - cmd/ecperf: fix dangling pointer warning on gcc 13
  * bmo#1818766 - Update ACVP dockerfile for compatibility with debian package changes
  * bmo#1815796 - Add a CI task for tracking ECCKiila code status, update whitespace in ECCKiila files
  * bmo#1819958 - Removed deprecated sprintf function and replaced with snprintf
  * bmo#1822076 - fix rst warnings in nss doc
  * bmo#1821997 - Fix incorrect pygment style
  * bmo#1821292 - Change GYP directive to apply across platforms
  * Add libsmime3 abi-check exception for NSS_CMSSignerInfo_GetDigestAlgTag
- Add nss-fix-bmo1836925.patch to fix build-errors
- Merge the libfreebl3-hmac and libsoftokn3-hmac packages
  into the respective libraries. (bsc#1185116)
- update to NSS 3.89.1
  * bmo#1804505 - Update the technical constraints for KamuSM.
  * bmo#1822921 - Add BJCA Global Root CA1 and CA2 root certificates.
- update to NSS 3.89
  * bmo#1820834 - revert freebl/softoken RSA_MIN_MODULUS_BITS increase
  * bmo#1820175 - PR_STATIC_ASSERT is cursed
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1820175 - Fix unreachable code warning in fuzz builds
  * bmo#1820175 - Fix various compiler warnings in NSS
  * bmo#1820175 - Enable various compiler warnings for clang builds
  * bmo#1815136 - set PORT error after sftk_HMACCmp failure
  * bmo#1767883 - Need to add policy control to keys lengths for signatures
  * bmo#1804662 - remove data length assertion in sec_PKCS7Decrypt
  * bmo#1804660 - Make high tag number assertion failure an error
  * bmo#1817513 - CKM_SHA384_KEY_DERIVATION correction maximum key
    length from 284 to 384
  * bmo#1815167 - Tolerate certificate_authorities xtn in ClientHello
  * bmo#1789436 - Fix build failure on Windows
  * bmo#1811337 - migrate Win 2012 tasks to Azure
  * bmo#1810702 - fix title length in doc
  * bmo#1570615 - Add interop tests for HRR and PSK to GREASE suite
  * bmo#1570615 - Add presence/absence tests for TLS GREASE
  * bmo#1804688 - Correct addition of GREASE value to ALPN xtn
  * bmo#1789436 - CH extension permutation
  * bmo#1570615 - TLS GREASE (RFC8701)
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
- update to NSS 3.88.1
  * bmo#1804640 - improve handling of unknown PKCS#12 safe bag types
- update to NSS 3.88
  * bmo#1815870 - use a different treeherder symbol for each docker
    image build task
  * bmo#1815868 - pin an older version of the ubuntu:18.04 and
    20.04 docker images
  * bmo#1810702 - remove nested table in rst doc
  * bmo#1815246 - Export NSS_CMSSignerInfo_GetDigestAlgTag.
  * bmo#1812671 - build failure while implicitly casting SECStatus
    to PRUInt32
  * bmo#1212915 - Add check for ClientHello SID max length
  * bmo#1771100 - Added EarlyData ALPN test support to BoGo shim
  * bmo#1790357 - ECH client - Discard resumption TLS &lt; 1.3
    Session(IDs|Tickets) if ECH configs are setup
  * bmo#1714245 - On HRR skip PSK incompatible with negotiated
    ciphersuites hash algorithm
  * bmo#1789410 - ECH client: Send ech_required alert on server
    negotiating TLS 1.2. Fixed misleading Gtest,
    enabled corresponding BoGo test
  * bmo#1771100 - Added Bogo ECH rejection test support
  * bmo#1771100 - Added ECH 0Rtt support to BoGo shim
  * bmo#1747957 - RSA OAEP Wycheproof JSON
  * bmo#1747957 - RSA decrypt Wycheproof JSON
  * bmo#1747957 - ECDSA Wycheproof JSON
  * bmo#1747957 - ECDH Wycheproof JSON
  * bmo#1747957 - PKCS#1v1.5 wycheproof json
  * bmo#1747957 - Use X25519 wycheproof json
  * bmo#1766767 - Move scripts to python3
  * bmo#1809627 - Properly link FuzzingEngine for oss-fuzz.
  * bmo#1805907 - Extending RSA-PSS bltest test coverage
    (Adding SHA-256 and SHA-384)
  * bmo#1804091 - NSS needs to move off of DSA for integrity checks
  * bmo#1805815 - Add initial testing with ACVP vector sets using
    acvp-rust
  * bmo#1806369 - Don't clone libFuzzer, rely on clang instead
- update to NSS 3.87
  * bmo#1803226 - NULL password encoding incorrect
  * bmo#1804071 - Fix rng stub signature for fuzzing builds
  * bmo#1803595 - Updating the compiler parsing for build
  * bmo#1749030 - Modification of supported compilers
  * bmo#1774654 - tstclnt crashes when accessing gnutls server
    without a user cert in the database.
  * bmo#1751707 - Add configuration option to enable source-based
    coverage sanitizer
  * bmo#1751705 - Update ECCKiila generated files.
  * bmo#1730353 - Add support for the LoongArch 64-bit architecture
  * bmo#1798823 - add checks for zero-length RSA modulus to avoid
    memory errors and failed assertions later
  * bmo#1798823 - Additional zero-length RSA modulus checks
- Remove nss-fix-bmo1774654.patch which is now upstream
- update to NSS 3.86
  * bmo#1803190 - conscious language removal in NSS
  * bmo#1794506 - Set nssckbi version number to 2.60
  * bmo#1803453 - Set CKA_NSS_SERVER_DISTRUST_AFTER and
    CKA_NSS_EMAIL_DISTRUST_AFTER for 3
    TrustCor Root Certificates
  * bmo#1799038 - Remove Staat der Nederlanden EV Root CA from NSS
  * bmo#1797559 - Remove EC-ACC root cert from NSS
  * bmo#1794507 - Remove SwissSign Platinum CA - G2 from NSS
  * bmo#1794495 - Remove Network Solutions Certificate Authority
  * bmo#1802331 - compress docker image artifact with zstd
  * bmo#1799315 - Migrate nss from AWS to GCP
  * bmo#1800989 - Enable static builds in the CI
  * bmo#1765759 - Removing SAW docker from the NSS build system
  * bmo#1783231 - Initialising variables in the rsa blinding code
  * bmo#320582 - Implementation of the double-signing of the message
    for ECDSA
  * bmo#1783231 - Adding exponent blinding for RSA.
- update to NSS 3.85
  * bmo#1792821 - Modification of the primes.c and dhe-params.c in
    order to have better looking tables
  * bmo#1796815 - Update zlib in NSS to 1.2.13
  * bmo#1796504 - Skip building modutil and shlibsign when building
    in Firefox
  * bmo#1796504 - Use __STDC_VERSION__ rather than __STDC__ as a guard
  * bmo#1796407 - Fix -Wunused-but-set-variable warning from clang 15
  * bmo#1796308 - Fix -Wtautological-constant-out-of-range-compare
    and -Wtype-limits warnings
  * bmo#1796281 - Followup: add missing stdint.h include
  * bmo#1796281 - Fix -Wint-to-void-pointer-cast warnings
  * bmo#1796280 - Fix -Wunused-{function,variable,but-set-variable}
    warnings on Windows
  * bmo#1796079 - Fix -Wstring-conversion warnings
  * bmo#1796075 - Fix -Wempty-body warnings
  * bmo#1795242 - Fix unused-but-set-parameter warning
  * bmo#1795241 - Fix unreachable-code warnings
  * bmo#1795222 - Mark _nss_version_c unused on clang-cl
  * bmo#1795668 - Remove redundant variable definitions in lowhashtest
  * Add note about python executable to build instructions.
- update to NSS 3.84
  * bmo#1791699 - Bump minimum NSPR version to 4.35
  * bmo#1792103 - Add a flag to disable building libnssckbi.
- update to NSS 3.83
  * bmo#1788875 - Remove set-but-unused variables from
    SEC_PKCS12DecoderValidateBags
  * bmo#1563221 - remove older oses that are unused part3/ BeOS
  * bmo#1563221 - remove older unix support in NSS part 3 Irix
  * bmo#1563221 - remove support for older unix in NSS part 2 DGUX
  * bmo#1563221 - remove support for older unix in NSS part 1 OSF
  * bmo#1778413 - Set nssckbi version number to 2.58
  * bmp#1785297 - Add two SECOM root certificates to NSS
  * bmo#1787075 - Add two DigitalSign root certificates to NSS
  * bmo#1778412 - Remove Camerfirma Global Chambersign Root from NSS
  * bmo#1771100 - Added bug reference and description to disabled
    UnsolicitedServerNameAck bogo ECH test
  * bmo#1779361 - Removed skipping of ECH on equality of private and
    public server name
  * bmo#1779357 - Added comment and bug reference to
    ECHRandomHRRExtension bogo test
  * bmo#1779370 - Added Bogo shim client HRR test support. Fixed
    overwriting of CHInner.random on HRR
  * bmo#1779234 - Added check for server only sending ECH extension
    with retry configs in EncryptedExtensions and if not
    accepting ECH. Changed config setting behavior to
    skip configs with unsupported mandatory extensions
    instead of failing
  * bmo# 1771100 - Added ECH client support to BoGo shim. Changed
    CHInner creation to skip TLS 1.2 only extensions to
    comply with BoGo
  * bmo#1771100 - Added ECH server support to BoGo shim. Fixed NSS ECH
    server accept_confirmation bugs
  * bmo#1771100 - Update BoGo tests to recent BoringSSL version
  * bmo#1785846 - Bump minimum NSPR version to 4.34.1
- update to NSS 3.82
  * bmo#1330271 - check for null template in sec_asn1{d,e}_push_state
  * bmo#1735925 - QuickDER: Forbid NULL tags with non-zero length
  * bmo#1784724 - Initialize local variables in
    TlsConnectTestBase::ConnectAndCheckCipherSuite
  * bmo#1784191 - Cast the result of GetProcAddress
  * bmo#1681099 - pk11wrap: Tighten certificate lookup based on
    PKCS #11 URI.
- update to NSS 3.81
  * bmo#1762831 - Enable aarch64 hardware crypto support on OpenBSD
  * bmo#1775359 - make NSS_SecureMemcmp 0/1 valued
  * bmo#1779285 - Add no_application_protocol alert handler and
    test client error code is set
  * bmo#1777672 - Gracefully handle null nickname in
    CERT_GetCertNicknameWithValidity
  * required for Firefox 104
- raised NSPR requirement to 4.34.1
- changing some Requires from (pre) to generic as (pre) is not
  sufficient (boo#1202118)
- update to NSS 3.80
  * bmo#1774720 - Fix SEC_ERROR_ALGORITHM_MISMATCH entry in SECerrs.h.
  * bmo#1617956 - Add support for asynchronous client auth hooks.
  * bmo#1497537 - nss-policy-check: make unknown keyword check optional.
  * bmo#1765383 - GatherBuffer: Reduced plaintext buffer allocations
    by allocating it on initialization. Replaced
    redundant code with assert. Debug builds: Added
    buffer freeing/allocation for each record.
  * bmo#1773022 - Mark 3.79 as an ESR release.
  * bmo#1764206 - Bump nssckbi version number for June.
  * bmo#1759815 - Remove Hellenic Academic 2011 Root.
  * bmo#1770267 - Add E-Tugra Roots.
  * bmo#1768970 - Add Certainly Roots.
  * bmo#1764392 - Add DigitCert Roots.
  * bmo#1759794 - Protect SFTKSlot needLogin with slotLock.
  * bmo#1366464 - Compare signature and signatureAlgorithm fields in
    legacy certificate verifier.
  * bmo#1771497 - Uninitialized value in cert_VerifyCertChainOld.
  * bmo#1771495 - Unchecked return code in sec_DecodeSigAlg.
  * bmo#1771498 - Uninitialized value in cert_ComputeCertType.
  * bmo#1760998 - Avoid data race on primary password change.
  * bmo#1769063 - Replace ppc64 dcbzl intrinisic.
  * bmo#1771036 - Allow LDFLAGS override in makefile builds.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1694088000">- Add nss-fix-bmo1813401.patch to fix bsc#1214980</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1702296000">- update to NSS 3.90.1
  * bmo#1813401 - regenerate NameConstraints test certificates.
  * bmo#1854795 - add OSXSAVE and XCR0 tests to AVX2 detection.
- Remove nss-fix-bmo1813401.patch which is now upstream.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1708344000">- update to NSS 3.90.2
  * bmo#1780432 - (CVE-2023-5388) Timing attack against RSA
    decryption in TLS. (bsc#1216198)
  * bmo#1867408 - add a defensive check for large ssl_DefSend
    return values.</changelog>
</package>
<package pkgid="f628fccd6dce1f343c74b901c175f435819d7cfa366cc460d0b6727c56f7d8df" name="multipath-tools" arch="aarch64">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="313bb7fa320237a493f3cf236582ebbd10e68c4baa1f6967b3fecb054c97d74e" name="multipath-tools" arch="s390x">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="b2cf73dd22522048c096df289e3e4a1cb5b100ebe359bb699298cbf92e68d31d" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="1e80bd32e6d3dde95a5db3756ebf808f4a1a98fa5c11b4e7215d3d4a389faf9e" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.9.0+119+suse.308c007" rel="150400.4.16.1"/>
  <changelog author="mwilck@suse.com" date="1638792000">- Update to 0.8.8+38+suse.2bdd3a14.obscpio
  * upstream version bump. Code-wise identical to 0.8.7+138+suse.7c9afe31</changelog>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
</package>
<package pkgid="0567e4b863b67c5a0d56f8d18de6354fdfd08218d30beae87a99fbd28ef645a8" name="multipath-tools" arch="aarch64">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="74b1c50527fec0a4a72f7260e234205b5a613f76cc45de0b4684af2676d9923e" name="multipath-tools" arch="s390x">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="d503d954103ce0c4d88d86b0ae4a00e778680a9ccbdccc6dcadbd5af27f57c95" name="multipath-tools" arch="src">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="a205206936a375ec6545b242c2e7351b5b352340524a82a55557059f77201873" name="multipath-tools" arch="x86_64">
  <version epoch="0" ver="0.9.0+161+suse.a26bd4c" rel="150400.4.19.1"/>
  <changelog author="mwilck@suse.com" date="1641556800">- Version 0.8.8+13+suse.79c3556f
  * code-wise identical to 0.8.8+38+suse.2bdd3a14
    (previous version number was too high by mistake)</changelog>
  <changelog author="mwilck@suse.com" date="1643803200">- Version 0.8.8+45+suse.628d603e
  * fix handling of historical-service-time path selector (bsc#1195425)
  * fix marking multipath devices as failed prematurely on startup
    (bsc#1195426)
  * multipathd.service: remove LimitCORE=infinity directive
    This should only be enabled for debugging.
  * multipathd.service: don't load scsi_dh modules (bsc#1195397)
    This is done via modules-load.d functionality on (open)SUSE
- Upstream fixes:
  * Fix claiming of paths with "find_multipaths strict"
  * Avoid unnecessary read-only reloads</changelog>
  <changelog author="mwilck@suse.com" date="1644408000">- Version 0.8.8+57+suse.dfb672fe
  * kpartx.rules: skip MD devices (bsc#1195644)
  * libmultipath: hwtable: use ALUA for all LIO targets (bsc#1195649)
  * multipathd.service: drop ExecStartPre for loading dm-multipath
    (bsc#1195397)</changelog>
  <changelog author="mwilck@suse.com" date="1644926400">- Update to version 0.8.8+60+suse.4c5922cb:
  * multipathd: add suppport for FC Fabric Performance Impact
    Notifications (FPIN) (bsc#1195506)</changelog>
  <changelog author="mwilck@suse.com" date="1645012800">- Update to version 0.8.8+64+suse.f265f7e0:
  * libmultipath: fix printing native nvme multipath topology
    (bsc#1196011)
  * libmultipath: add %L path wildcard for 64-bit hex LUN
  * libmultipath: support host adapter name lookup for s390x ccw bus</changelog>
  <changelog author="mwilck@suse.com" date="1648468800">- If multipath-tools is newly installed, load dm-multipath
  (bsc#1196898)</changelog>
  <changelog author="mwilck@suse.com" date="1649937600">- Update to version 0.8.9+42+suse.45974f11:
  * Logging improvements
  * Fix busy loop with delayed_reconfigure (bsc#1199342)
  * multipathd: use remove_map_callback for delayed reconfigure
  * multipathd: Don't keep starting TUR threads, if they always hang.
    (bsc#1199345)
  * Fix handling of path addition in read-only arrays on NVMe
  * Updates of built-in hardware database
- Update to upstream 0.8.9
  * libmultipath: only warn once about unsupported dev_loss_tmo
  * Otherwise code-identical to 0.8.8+64</changelog>
  <changelog author="mwilck@suse.com" date="1652097600">- Update to version 0.8.9+85+suse.a9da21c:
  * This is a pre-release of multipath-tools 0.9.0
  * multipath.conf: add "protocol" subsection in "overrides" section
    This allows to set "dev_loss_tmo", "fast_io_fail_tmo", and
    "eh_deadline" on a per-protocol basis rather than per storage
  * multipath.conf: drop support for deprecated options:
    getuid_callout, pg_timeout, config_dir, multipath_dir
  * multipathd: don't switch to DAEMON_IDLE during startup
  (bsc#1199346, bsc#1197570)
  * multipathd: avoid delays during uevent processing (bsc#1199347)
  * Fixes for minor issues reported by coverity
  * Fix for memory leak with uid_attrs
  * Fix possibility to redefine -D_FORTIFY_SOURCE macro.
  * Updates for built in hardware db</changelog>
  <changelog author="mwilck@suse.com" date="1652184000">- Update to version 0.8.9+87+suse.a1eb122:
  * add ability to autodetect support for -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1652270400">- Update to version 0.8.9+90+suse.71a70fb:
  * support overriding -D_FORTIFY_SOURCE in OPTFLAGS
  * add -U_FORTIFY_SOURCE to optflags to avoid compilation errors
    on old distros</changelog>
  <changelog author="mwilck@suse.com" date="1657713600">- Update to version 0.9.0+33+suse.fdc6686
  * multipath.conf: add support for "protocol" subsection in
    "overrides" section to set certain config options by protocol.
  * Removed the previously deprecated options getuid_callout,
    config_dir, multipath_dir, pg_timeout
  * hwable fixes and additions
  * multipath.conf(5): add disclaimer about vendor support
  * libmultipath, kpartx: fix callers of dm_get_next_target()
  * Change built-in defaults for NVMe: group by prio, and immediate
    failback
  * Allow compilation with -D_FORTIFY_SOURCE=3</changelog>
  <changelog author="mwilck@suse.com" date="1657713601">- Update to version 0.9.0+39+suse.51a2ab1:
  Upstream bug fixes:
  * libmultipath: fix find_multipaths_timeout for unknown hardware
  (boo#1201483)
  * multipath-tools: fix "multipath -ll" for Native NVME Multipath devices
  (boo#1201483)</changelog>
  <changelog author="mwilck@suse.com" date="1661342400">- Update to version 0.9.0+55+suse.33d8854:
  * Avoid linking to libreadline to avoid licensing issue
    (bsc#1202616)</changelog>
  <changelog author="mwilck@suse.com" date="1664539200">- Update to version 0.9.0+62+suse.3e048d4:
  * Fix multipathd authorization bypass and symlink attack
    (bsc#1202739 CVE-2022-41973 CVE-2022-41974)
  * add multipath-dracut.conf: dracut config file to install
    tmpfiles.d/multipath.conf in initramfs</changelog>
  <changelog author="mwilck@suse.com" date="1664539201">- Use %tmpfiles_create macro for tmpfiles.d file</changelog>
  <changelog author="mwilck@suse.com" date="1674043200">- Fix "rpm --verify" (bsc#1207232)</changelog>
  <changelog author="mwilck@suse.com" date="1678795200">- Update to version 0.9.0+114+suse.48792e7:
  * libmultipath: pathinfo: don't fail for devices lacking INQUIRY properties
    (gh#opensvc/multipath-tools#56)
  * libmpathpersist: use conf-&gt;timeout for updating persistent reservations
    (gh#opensvc/multipath-tools#45)
  * libmultipath: is_path_valid(): check if device is in use
    (bsc#1203141) (added libmount dependency)
  * libmultipath: orphan paths if coalesce_paths frees newmp (bsc#1207546)
  * multipathd: handle no active paths in update_map_pr (bsc#1207546)
  * multipathd: make pr registration consistent (bsc#1207546)
  * multipath.conf(5): improve documentation of dev_loss_tmo (bsc#1207546)
  * libmpathpersist: fix command keyword ordering (bsc#1207546, bsc#1209345)
  * libmultipath: fix 'show paths format' failure
  * Use "queue_mode bio" for NVMeoF/TCP devices
  * minor upstream bug fixes
  * man page fixes
  * hwtable fixes
  * github workflow adaptations from Factory / SLE15-SP5</changelog>
  <changelog author="mwilck@suse.com" date="1679486400">- Update to version 0.9.0+117+suse.78cc20b:
  * libmultipath: avoid grouping paths wrongly with "find_multipaths smart"
    (bsc#1209623)
  * fix multipath-tools build with liburcu 0.14.0</changelog>
  <changelog author="mwilck@suse.com" date="1688472000">- Update to version 0.9.0+119+suse.308c007:
  * libmultipath: fix dev_loss_tmo even if not set in configuration
    (bsc#1212440)</changelog>
  <changelog author="mwilck@suse.com" date="1709035200">- Update to version 0.9.0+161+suse.a26bd4c:
- Backport of earlier bugfixes:
  * Fix activation of LVM volume groups during coldplug (bsc#1219142)
  * avoid changing SCSI timeouts in "multipath -d" (bsc#1213809)
  * fix dev_loss_tmo even if not set in configuration (bsc#1212440)
- Backport of upstream bug fixes (bsc#1220374):
  * avoid setting queue_if_no_path on multipath maps for which the
    no_path_retry timeout has expired
  * fixed memory and error handling for code using aio (marginal path code,
    directio path checker)
  * libmultipath: fix max_sectors_kb on adding path
  * fix warnings reported by udevadm verify
  * libmultipath: use directio checker for LIO targets
    (gh#opensvc/multipath-tools#54)
  * multipathd.service: remove "Also=multipathd.socket"
    (gh#opensvc/multipath-tools#65)
  * libmultipathd: Avoid parsing errors due to unsupported designators
  * libmultipath: return 'pending' state when port is in transition
  * multipath.rules: fix "smart" bug with failed valid path check
  * libmpathpersist: fix resource leak in update_map_pr()
  * libmultipath: keep renames from stopping other multipath actions
  * pass EXTRAVERSION to build</changelog>
</package>
<package pkgid="15781542e009a9ca8ef40328b4bb609fbf8511739bb9e7d7d7355750d379b7d1" name="ncurses" arch="src">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="f1f1364c29e2dcc1c937e595c481bbfe774d04ee26a5235d91b131a4cbc603ae" name="ncurses" arch="src">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="ddbf5732e42476eda86f5f60eb74d830710fb51d59700269c45dfb8bc658257e" name="ncurses" arch="src">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="c8f6e299eb17a75f625fc0a2680f2006575a4683490f2fe5332baa30d51f62fa" name="ncurses-utils" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="21d78bcafb5c66fb553ff0f336be2c7ac8188129cffa9b783c1150f2fd2f9e55" name="ncurses-utils" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="d5ce2843054257a6f1bd70e258e85ec571b1d7c43c00c30497c3be0d086b67f8" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.15.1"/>
  <changelog author="werner@suse.de" date="1516622400">- Add ncurses patch 20180121 pre-release 6.1
  &gt; terminfo changes:
  + add xterm+noalt, xterm+titlestack, xterm+alt1049, xterm+alt+title
    blocks from xterm #331 -TD
  + add xterm+direct, xterm+indirect, xterm-direct entries from xterm
    [#331] -TD
  + modify xterm+256color and xterm+256setaf to use correct number of
    color pairs, for ncurses 6.1 -TD
  + add rs1 capability to xterm-256color -TD
  + modify xterm-r5, xterm-r6 and xterm-xf86-v32 to use xterm+kbs to
    match xterm #272, reflecting packager's changes -TD
  + remove "boolean" Se, Ss from st-0.7 -TD
  + add konsole-direct and st-direct -TD
  + remove unsupported "Tc" capability from st-0.7; use st-direct if
    direct-colors are wanted -TD
  + add vte-direct -TD
  + add XT, hpa, indn, and vpa to screen, and invis, E3 to tmux (patch by
    Pierre Carru)
  + use xterm+sm+1006 in xterm-new, vte-2014 -TD
  + use xterm+x11mouse in iterm, iterm2, mlterm3 because xterm's 1006
    mode does not work with those programs.  konsole is debatable -TD
  + add "termite" entry (report by Markus Pfeiffer) -TD
  &gt; merge branch begun April 2, 2017 which provides these features:
  + support read/write new binary-format for terminfo which stores
    numeric capabilities as a signed 32-bit integer.  The test programs
    such as picsmap, ncurses were created or updated during 2017 to use
    this feature.
  + the new format is written by the wide-character configuration of
    tic when it finds a numeric capability larger than 32767.
  + other applications such as infocmp built with the wide-character
    ncurses library work as expected.
  + applications built with the "narrow" (8-bit) configuration will
    read the new format, but will limit those extended values to 32767.
  + in either wide/narrow configuration, the structure defined in
    term.h still uses signed 16-bit values.
  + because it is incompatible with the legacy (mid-1980s) binary format,
    a new magic value is provided for the "file" program.
  + the term.5 manual page is updated to describe this new format.
  + the limit on file-size for compiled terminfo is increased in the
    wide-character configuration to 32768.
- Add ncurses patch 20180120
  + build-fix in picsmap.c for stdint.h existence.
  + add --disable-stripping option to configure scripts.
  + modify ncurses-examples to install test-scripts in the data directory.
  + work around tool-breakage in Debian 9 and later by invoking
    gprconfig to specify the C compiler to be used by gnatmake,
    and conditionally suppressing Library_Options line for static
    libraries.
  + bump the compat level for test-packages to 7, i.e., Debian 5.
- Add tack patch 1.08-20170818</changelog>
  <changelog author="werner@suse.de" date="1517227200">- Update to ncurses 6.1 (patch 20180127)
  + updated release notes
  + amend a warning message from tic which should have flagged misuse
    of "XT" capability in "screen" terminal description.
  &gt; terminfo changes:
  + trim "XT" from screen entry, add comments to explain why it was
    not suitable -TD
  + modify iterm to use xterm+sl-twm building block -TD
  + mark konsole-420pc, konsole-vt100, konsole-xf3x obsolete reflecting
    konsole's removal in 2008 -TD
  + expanded the history section of konsole to explain its flawed
    imitation of xterm's keyboard -TD
  + use xterm+x11mouse in screen.* entries because screen does not yet
    support xterm's 1006 mode -TD
  + add nsterm-build400 for macOS 10.13 -TD
  + add ansi+idc1, use that in ansi+idc adding dch for consistency -TD
  + update vte to vte-2017 -TD
  + add ecma+strikeout to vte-2017 -TD
  + add iterm2-direct -TD
  + updated teraterm, added teraterm-256color -TD
  + add mlterm-direct -TD
  + add descriptions for ANSI building-blocks -TD
- Modify patch ncurses-5.9-ibm327x.dif
- Rename patch ncurses-6.0.dif to new name ncurses-6.1.dif
- Modify patch ncurses-6.1.dif</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
</package>
<package pkgid="ac6b5c74af595ad9574537bf9faf099b818bfe49b373c70df5c759c77b931709" name="ncurses-utils" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="0ba032772d126efbe854da109a007d5fd98a439f2ae17b0c59d86dda63b03ed2" name="ncurses-utils" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="eeb9c73ea845c95a76025a8bb6c086d1fbd2bc224543ede9549e4c89a71d17bf" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.20.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Correct include path for wide chraracter header files for ABI 6.1</changelog>
  <changelog author="werner@suse.de" date="1517313601">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()</changelog>
</package>
<package pkgid="1a92a428f0da86a6fa178efa8fc29134e0f1552f2c5dfe5b1eadf3d588487886" name="ncurses-utils" arch="aarch64">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="37544ccae50a533a1bed40e4adc6c387e4b42ebac9712b1902e631d753259d92" name="ncurses-utils" arch="s390x">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="3d0498a5005f2198a1a3aee77c3366d59daf7147803ea6fc69f57f7eaa6a45e7" name="ncurses-utils" arch="x86_64">
  <version epoch="0" ver="6.1" rel="150000.5.24.1"/>
  <changelog author="werner@suse.de" date="1517313600">- Add ncurses patch 6.1-20180129
  + update "VERSION" file, used in shared-library naming.</changelog>
  <changelog author="werner@suse.de" date="1517832000">- Add ncurses patch 6.1-20180203
  + minor fixes to test/*.h to make them idempotent.
  + add/use test/parse_rgb.h to show how the "RGB" capability works.
  + add a clarification in user_caps.5 regarding "RGB" capability.
  + add extended_slk_color{,_sp} symbols to the appropriate
    package/*.{map,sym} files (report by Sven Joachim, cf: 20170401).</changelog>
  <changelog author="werner@suse.de" date="1518696000">- Add ncurses patch 6.1-20180210
  + modify misc/Makefile.in to install/uninstall explicit list in case
    the build-directory happens to have no ".pc" files when an uninstall
    is performed (report by Jeffrey Walton).
  + deprecate safe-sprintf, since the vsnprintf function, which does what
    was needed, was standardized long ago.
  + add several development/experimental options to development packages.
  + minor reordering of options in configure script to make the threaded
    and reentrant options distinct from the other extensions which are
    normally enabled.
- Make reentrant libs opaque</changelog>
  <changelog author="werner@suse.de" date="1519041600">- Add ncurses patch 6.1-20180217
  + remove incorrect free() from 20170617 changes (report by David Macek).
  + correct type for "U8" in user_caps.5; it is a number not boolean.
  + add a null-pointer check in safe_sprintf.c (report by Steven Noonan).
  + improve fix for Debian #882620 by reusing limit2 variable (report
    Julien Cristau, Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519646400">- Add ncurses patch 6.1-20180224
  + modify _nc_resolve_uses2() to detect incompatible types when merging
    a "use=" clause of extended capabilities.  The problem was seen in a
    defective terminfo integrated from simpleterm sources in 20171111,
    compounded by repair in 20180121.
  + correct Ss/Ms interchange in st-0.7 entry (tmux #1264) -TD
  + fix remaining flash capabilities with trailing mandatory delays -TD
  + correct cut/paste in NEWS (report by Sven Joachim).</changelog>
  <changelog author="werner@suse.de" date="1519905600">- Add patch ncurses-6.1-weakpthreads.dif
  + Be aware that libtinfo/libtinfw is also used without libpthread
    (boo#1058509)
- Use expect to run at least two test for normal and wide character
  version of newdemo from test suite</changelog>
  <changelog author="werner@suse.de" date="1519992000">- Switch back to shared libtinfo only but provide an auxiliary shared
  library libtinfow to avoid a rebuild of third party programs (bsc#1082772)
  + Add sanity check if new 32bit API is included in libtinfo</changelog>
  <changelog author="werner@suse.de" date="1520251200">- Add ncurses patch 6.1-20180303
  + modify TurnOn/TurnOff macros in lib_vidattr.c and lib_vid_attr.c to
    avoid expansion of "CUR" in trace.
  + improve a few lintian warnings in test-packages.
  + modify lib_setup to avoid calling pthread_self() without first
    verifying that the address is valid, i.e., for weak symbols
    (report/patch by Werner Fink).
  + modify generated terminfo.5 to not use "expand" and related width
    on the last column of tables, making layout on wide terminals look
    better (adapted from patch by Kir Kolyshkin).
  + add a category to report_offsets, e.g., "w" for wide-character, "t"
    for threads to make the report more readable.  Reorganized the
    structures reported to make the categories more apparent.
  + simplify some ifdef's for extended-colors.
  + add NCURSES_GLOBALS and NCURSES_PRESCREEN to report_offsets, to show
    how similar the different tinfo configurations are.
- Remove patch ncurses-6.1-weakpthreads.dif now upstream (bsc#1082772)
- Make expect build check less fragile on timing</changelog>
  <changelog author="werner@suse.de" date="1520510400">- Avoid opaque libraries for Leap 15 and SLES 15
- No tests on Leap 15 and SLES 15</changelog>
  <changelog author="werner@suse.de" date="1521460800">- Add ncurses patch 6.1-20180317
  + fix a check in infotocap which may not have detected a problem when
    it should have.
  + add a check in tic for the case where setf/setb are given using
    different strings, but provide identical results to setaf/setab.
  + further improve fix for terminfo.5 (patch by Kir Kolyshkin).
  + reorder loop-limit checks in winsnstr() in case the string has no
    terminating null and only the number of characters is used (patch
    by Gyorgy Jeney).</changelog>
  <changelog author="werner@suse.de" date="1521633600">- Change baselibs.conf to avoid mixed version requirements (bsc#1082744)</changelog>
  <changelog author="werner@suse.de" date="1542715200">- Add patch ncurses-5.9-bsc1115929.patch
  * For bug bsc#1115929 port back null pointer checks to catch e.g.
    the crash in _nc_parse_entry(), belongs to CVE-2018-19211</changelog>
  <changelog author="werner@suse.de" date="1542801600">- Remove screen.xterm from terminfo data base (boo#1103320) as with
  this screen uses fallback TERM=screen</changelog>
  <changelog author="werner@suse.de" date="1571140800">- Add patches
  CVE-2019-17594.patch for bsc#1154036 -- CVE-2019-17594: heap-based
    buffer over-read in _nc_find_entry function in tinfo/comp_hash.c
  CVE-2019-17595.patch for bsc#1154037 -- CVE-2019-17595: heap-based
    buffer over-read in fmt_entry function in tinfo/comp_hash.c</changelog>
  <changelog author="werner@suse.de" date="1634126400">- Add patch bsc1190793-63ca9e06.patch to fix bsc#1190793 for
  CVE-2021-39537: ncurses: heap-based buffer overflow in
  _nc_captoinfo in captoinfo.c</changelog>
  <changelog author="werner@suse.de" date="1657886400">- Add patch ncurses-bnc1198627.patch
  * Fix bsc#1198627: CVE-2022-29458: ncurses: segfaulting OOB read</changelog>
  <changelog author="werner@suse.de" date="1682596800">- Modify patch ncurses-6.1.dif
  * Secure writing terminfo entries by setfs[gu]id in s[gu]id
    (boo#1210434, CVE-2023-29491)
  * Reading is done since 2000/01/17</changelog>
  <changelog author="werner@suse.de" date="1702382400">- Add patch boo1201384.patch
  * Do not fully reset serial lines</changelog>
  <changelog author="werner@suse.de" date="1702468800">- Add patch bsc1218014-cve-2023-50495.patch
  * Fix CVE-2023-50495: segmentation fault via _nc_wrap_entry()
    (bsc#1218014)</changelog>
  <changelog author="werner@suse.de" date="1708344000">- Add patch ncurses-6.1-bsc1220061.patch (bsc#1220061, CVE-2023-45918)
  * Backport from ncurses-6.4-20230615.patch
    improve checks in convert_string() for corrupt terminfo entry</changelog>
</package>
<package pkgid="db7a342f8caf3ecb9bffa3d8bb7977662f74f2731ab329075c3408bb26078cf4" name="ndctl" arch="src">
  <version epoch="0" ver="71.1" rel="150400.10.3.1"/>
  <changelog author="msuchanek@suse.com" date="1565956800">- ndctl/list: Introduce region capability objects (bsc#1145772 ltc#178159).
  + ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1566216000">- ndctl: Use the same align value as original namespace on reconfigure (bsc#1145577 ltc#178224).
  + ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- ndctl/lib: Fix duplicate bus detection (bsc#1145573 ltc#180249).
  + ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1566216001">- ndctl/namespace: Handle 'create-namespace' in label-less mode (bsc#1145471 ltc#179886).
  + ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1566388800">- Refresh patches with upstream status:
  ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch
  ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch
  ndctl-list-Introduce-region-capability-objects.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1571400000">- Refresh patches with upstream status:
  ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
  ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1573214400">- ndctl/dimm: Fix init-labels success reporting (bsc#1156308 ltc#181441).
  + ndctl-dimm-Fix-init-labels-success-reporting.patch
- Refresh patches with upstream status:
  ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
  ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1583236800">- ndctl/test: Relax dax_pmem_compat requirement (bsc#1159523)
  + ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Add -fcommon flag on Tumbleweed (boo#1160286).
- Fix 'ndctl enable-namespace all' fails trying to enable idle namespaces
  (bsc#1165509 ltc#182068).
  + ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1585915200">- ndctl/namespace: Skip zero namespaces when processing all namespaces
  (bsc#1167861, bsc#1165509, ltc#182068).
  + ndctl-namespace-skip-zero-namespaces-when-processing.patch
- Refresh patch to upstream version:
  ndctl-test-Relax-dax_pmem_compat-requirement.patch</changelog>
  <changelog author="info@paolostivanin.com" date="1589544000">- Update to v68:
  * zero-labels: display an error if regions are active
  * destroy-namespace: fix seed namespace accounting
  * list: drop named list objects from verbose listing
  * *-namespace: emit better errors on failure
  * read-infoblock: new command to read an infoblock
  * write-infoblock: new command to create and write an infoblock
  * create-namespace: add --continue option
  * daxctl-reconfigure-device: add --no-movable option
  * daxctl-reconfigure-device: display movable state in listings
  * daxctl-reconfigure-device: detect races in memory onlining
  * security: support for 'security frozen' attribute
  * daxctl-reconfigure-device: new command for device mode management
  * daxctl-{on,off}line-memory: new commands for devices in system-ram mode
  * monitor: logging improvements, allow sending to background
  * inject-error: refuse to operate on activew BTT namespaces
  * *-labels: improvements to minimize data transfer
  * create-namespace: usability improvements around region search
- Removed ndctl-Use-the-same-align-value-as-original-namespace-on-reconfigure.patch
- Removed ndctl-dimm-Fix-init-labels-success-reporting.patch
- Removed ndctl-list-Introduce-region-capability-objects.patch
- Removed ndctl-namespace-Fix-enable-namespace-error-for-seed-.patch
- Removed ndctl-namespace-Handle-create-namespace-in-label-less-mode.patch
- Removed ndctl-ndctl-lib-Fix-duplicate-bus-detection.patch
- Removed ndctl-test-Relax-dax_pmem_compat-requirement.patch
- Removed ndctl_check_Ensure_mmap_of_BTT_sections_work_with_64K_page-sizes.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1594728000">- Clarify documentation about filtering options (bsc#1173861)
  + ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1597060800">- Update to v69 (jsc#SLE-13824, jsc#SLE-12770, jsc#SLE-15065, jsc#SLE-15484,
    jsc#SLE-15485, bsc#1175052, ltc#186863, bsc#1174969, ltc#185845):
  * infoblock: Set the default alignment to the platform alignment
  * libndctl/papr_scm: Add support for reporting "life_used_percentage" metric
  * Skip region filtering if numa_node attribute is not present
  * libndctl,papr_scm: Implement support for PAPR_PDSM_HEALTH
  * miscellaneous bugfixes
- Removed ndctl-Documentation-use-includes-in-more-ndctl-command-pag.patch</changelog>
  <changelog author="msuchanek@suse.de" date="1598616000">- Suppress ENXIO when processing all namespaces (jsc#SLE-13321, bsc#1175851, ltc#187867).
  + ndctl-namespace-Suppress-ENXIO-when-processing-all-n.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1603281600">- Update to upstream v70.1 (jsc#SLE-13338).
  Adds firmware activation support.</changelog>
  <changelog author="msuchanek@suse.de" date="1609416000">- Update to upstream v71 (jsc#SLE-14344, bsc#1170384).
  - support for the new device-dax subdivision functionality added in Linux in
    v5.10, including ways to create smaller devdax devices using
    daxctl/libdaxctl, as well as creating, listing, and restoring from a config
    dump, 'mappings' on these devices.
  - miscellaneous bugfixes
- Fix documentation and license packaging</changelog>
  <changelog author="dmueller@suse.com" date="1609934400">- update to 71.1:
  * ndctl/dimm: Attempt an abort upon firmware-update-busy status
  * ndctl/dimm: Fix submit_abort_firmware()</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1611316800">- Enable aarch64 build (bsc#1188502).</changelog>
  <changelog author="jsegitz@suse.com" date="1634126400">- Added hardening to systemd service(s) (bsc#1181400). Added patch(es):
  * harden_ndctl-monitor.service.patch</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Install modprobe.conf file to %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="msuchanek@suse.com" date="1646654400">- Add support for reporting dirty shutdown count (jsc#SLE-18196).
  + 0016-libndctl-papr-Add-support-for-reporting-shutdown-cou.patch
  + 0009-libndctl-papr-Fix-probe-for-papr-scm-compatible-nvdi.patch
  + 0003-libndctl-Unify-adding-dimms-for-papr-and-nfit-famili.patch
- Merge fixes that went into v72 and v73
  - Documentation updates
    + 0015-ndctl-docs-Clarify-update-firwmware-activation-overf.patch
    + 0014-Documentation-ndctl-fix-self-reference-of-ndctl-disa.patch
    + 0013-daxctl-Add-Soft-Reservation-theory-of-operation.patch
    + 0008-ndctl-Update-nvdimm-mailing-list-address.patch
  - Label index block calculation fix
    + 0012-ndctl-dimm-Fix-label-index-block-calculations.patch
    + 0002-Expose-ndctl_bus_nfit_translate_spa-as-a-public-func.patch
  - Scrub fix
    + 0011-ndctl-scrub-Reread-scrub-engine-status-at-start.patch
    + 0010-ndctl-scrub-Stop-translating-return-values.patch
  - Add memblock count to JSON
    + 0007-daxctl-emit-counts-of-total-and-online-memblocks.patch
  - DAX disable fix
    + 0006-libndctl-check-for-active-system-ram-before-disablin.patch
    + 0005-libdaxctl-add-an-API-to-check-if-a-device-is-active.patch
    + 0001-ndctl-namespace-Fix-disable-namespace-accounting-rel.patch
  - DAX reconfigure fix
    + 0004-daxctl-fail-reconfigure-device-based-on-kernel-onlin.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1677067200">- Fix parsing NDCTL_TIMEOUT (bsc#1208548 ltc#199892)
    + ndctl-Fix-the-NDCTL_TIMEOUT-environment-variable-par.patch</changelog>
</package>
<package pkgid="1b56b7810bf06f0cbb0e01098bcc57ad5877890d43fcc977422eaff2a4435938" name="net-snmp" arch="src">
  <version epoch="0" ver="5.9.4" rel="150300.15.11.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Add net-snmp-5.7.3-modern-rpm-api.patch: Supprt modern RPM (&gt;=
  4.6) API. In RPM 4.14, the RPM 4.4 compatibility APIs are being
  removed.</changelog>
  <changelog author="tchvatal@suse.com" date="1516363200">- Format with spec-cleaner
- Drop sle11 support as it fails to build anyway for ages
- Rename python packages to be python-%{name} with obsoletes
  * Use new singlespec macros
  * Add patch converting the py files to python3/2 compat mode
    net-snmp-python3.patch
- Run full autoreconf instead of partial
- Build with threads by building few targets first</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Take systemd service files from fedora to replace sysV scripts
- Also convert the sysconfig files to match fedora ones, they
  get bit more terse but it works seamlessly with systemd</changelog>
  <changelog author="tchvatal@suse.com" date="1516795200">- Add patch from Fedora to support natively systemd:
  * net-snmp-5.7.2-systemd.patch
- Drop the check phase as whole 90% of the tests fail it makes
  more sense to run them somewhere localy</changelog>
  <changelog author="tchvatal@suse.com" date="1516795201">- Properly conditionalize the py2 build</changelog>
  <changelog author="jengelh@inai.de" date="1517486400">- Fix RPM group for shlib subpackage.</changelog>
  <changelog author="abergmann@suse.com" date="1523880000">- Remove executable flags from systemd service files (bsc#1089295).</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Fix permissions on unit files wrt bsc#1087977
- Use %license (boo#1082318)</changelog>
  <changelog author="kukuk@suse.de" date="1529323200">- Create /var/agentx via systemd tmpfiles in case of rollback,
  snapshots and transactional updates [bsc#1098032]</changelog>
  <changelog author="abergmann@suse.com" date="1539086400">- Fix remote DoS in agent/helpers/table.c (bsc#1111122, CVE-2018-18065)
  Add net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
- swintst_rpm: Protect against unspecified Group name (bsc#1102775)
  Add net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
- Add tsm and tlstm MIBs and the USM security module. (bsc#1081164)
- Fix agentx freezing on timeout (bsc#1027353)
  Add net-snmp-fix-agentx-freezing-on-timeout.patch</changelog>
  <changelog author="abergmann@suse.com" date="1562328000">- Add Lustre filesystem support (bsc#1140341, jsc#SLE-6120).
  Add net-snmp-5.7.3-add-lustre-fs-support.patch
- Add info about the original agent which triggered the trap.
  When the trap is forwarded there was no info about the original
  agent (bsc#1116807).
  Add net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
- Fix missing sysconfig files creation (bsc#1108471).</changelog>
  <changelog author="abergmann@suse.com" date="1639742400">- Make extended MIB read-only (bsc#1174961, CVE-2020-15862).
  Add net-snmp-5.7.3-make-extended-mib-read-only.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640001600">- Fix output for high memTotalReal RAM values (bsc#1152968).
  Add net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640174400">- Fix hrStorage autofs objects timeout problems (bsc#1179699, bsc#1145864).
  Add net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  Add net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
- Fix NSS mounted volumes in hrStorageDescr (bsc#1100146).
  Add net-snmp-5.7.3-recognize-nss-pools-and-nss-volumes-oes.patch
- Fix subagent crash at save_set_var() (bsc#1178021).
  Add net-snmp-5.7.3-subagent-set-response.patch
- Fix subagent data corruption (bsc#1178351, bsc#1179009).
  Add net-snmp-5.7.3-fix-subagent-data-corruption.patch</changelog>
  <changelog author="abergmann@suse.com" date="1640260800">- Fix LFH violation during v3 user creation (bsc#1181591).
  Add net-snmp-5.7.3-fix-create-v3-user-outfile.patch</changelog>
  <changelog author="abergmann@suse.com" date="1646827200">- Decouple snmp-mibs from net-snmp version to allow major version
  upgrade (bsc#1196955).</changelog>
  <changelog author="abergmann@suse.com" date="1665057600">- update to 5.9.3 (bsc#1201103, jsc#SLE-11203):
  - security:
  - These two CVEs can be exploited by a user with read-only credentials:
  - CVE-2022-24805 A buffer overflow in the handling of the INDEX of
    NET-SNMP-VACM-MIB can cause an out-of-bounds memory access.
  - CVE-2022-24809 A malformed OID in a GET-NEXT to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - These CVEs can be exploited by a user with read-write credentials:
  - CVE-2022-24806 Improper Input Validation when SETing malformed
    OIDs in master agent and subagent simultaneously
  - CVE-2022-24807 A malformed OID in a SET request to
    SNMP-VIEW-BASED-ACM-MIB::vacmAccessTable can cause an
    out-of-bounds memory access.
  - CVE-2022-24808 A malformed OID in a SET request to
    NET-SNMP-AGENT-MIB::nsLogTable can cause a NULL pointer dereference
  - CVE-2022-24810 A malformed OID in a SET to the nsVacmAccessTable
    can cause a NULL pointer dereference.
  - Fixed library versioning bug found in 5.9.2.
  - Library version change to libsnmp40.
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.
- Fixed python2 backward compability.
  add:
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.
- Change to use systemd service files directly from net-snmp package.
  add:
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch
  remove:
  * snmpd.service
  * snmptrapd.service
  * harden_snmpd.service.patch
  * harden_snmptrapd.service.patch
- Refactor and remove obsolete patches to work with version number 5.9.3:
  add:
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  remove:
  * net-snmp-5.9.1-pie.patch
  * net-snmp-5.9.1-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-add-lustre-fs-support.patch
  * net-snmp-5.7.3-Fix-Makefile.PL.patch
  * net-snmp-5.7.3-modern-rpm-api.patch
  * net-snmp-5.7.3-net-snmp-config-headercheck.patch
  * net-snmp-5.7.3-perl-tk-warning.patch
  * net-snmp-5.7.3-snmpstatus-suppress-output.patch
  * net-snmp-5.7.3-socket-path.patch
  * net-snmp-5.7.3-subagent-set-response.patch
  * net-snmp-5.7.3-testing-empty-arptable.patch
  * net-snmp-5.7.3-velocity-mib.patch
  * net-snmp-5.7.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.7.3-pie.patch
  * net-snmp-4.7.2-systemd.patch
  * net-snmp-5.7.3-build-with-openssl-1.1.patch
  * net-snmp-5.7.3-fix-agentx-freezing-on-timeout.patch
  * net-snmp-5.7.3-fix-missing-mib-hrStorage-indexes.patch
  * net-snmp-5.7.3-fix-snmpd-crashing-when-an-agentx-disconnects.patch
  * net-snmp-5.7.3-fix-snmp_pdu_parse-incomplete.patch
  * net-snmp-5.7.3-fix-subagent-data-corruption.patch
  * net-snmp-5.7.3-helpers-table-skip-if-next-handler-called.patch
  * net-snmp-5.7.3-host-mib-skip-autofs-entries.patch
  * net-snmp-5.7.3-make-extended-mib-read-only.patch
  * net-snmp-5.7.3-netgroups.patch
  * net-snmp-5.7.3-Remove-U64-typedef.patch
  * net-snmp-5.7.3-snmptrapd-add-forwarder-info.patch
  * net-snmp-5.7.3-swintst_rpm-Protect-against-unspecified-Group-name.patch
  * net-snmp-5.7.3-ucd-snmp-mib-add-64-bit-mem-obj.patch
  * net-snmp-python3.patch</changelog>
  <changelog author="abergmann@suse.com" date="1672920000">- Fixed NULL pointer exception issue when handling ipDefaultTTL or
  pv6IpForwarding (bsc#1205148, CVE-2022-44793, bsc#1205150, CVE-2022-44792).
  add:
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
- Enable AES-192 and AES-256 privacy protocol (bsc#1206828).</changelog>
  <changelog author="abergmann@suse.com" date="1673265600">- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add:
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch
  delete:
  * net-snmp-5.9.1-harden_snmpd.service.patch
  * net-snmp-5.9.1-harden_snmptrapd.service.patch</changelog>
  <changelog author="abergmann@suse.com" date="1697544000">- Update to net-snmp-5.9.4 (bsc#1214364).
  add (rename):
  * net-snmp-5.9.4-add-lustre-fs-support.patch
  * net-snmp-5.9.4-add-netgroups-functionality.patch
  * net-snmp-5.9.4-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.4-fixed-python2-bindings.patch
  * net-snmp-5.9.4-fix-Makefile.PL.patch
  * net-snmp-5.9.4-modern-rpm-api.patch
  * net-snmp-5.9.4-net-snmp-config-headercheck.patch
  * net-snmp-5.9.4-perl-tk-warning.patch
  * net-snmp-5.9.4-pie.patch
  * net-snmp-5.9.4-snmpstatus-suppress-output.patch
  * net-snmp-5.9.4-socket-path.patch
  * net-snmp-5.9.4-subagent-set-response.patch
  * net-snmp-5.9.4-suse-systemd-service-files.patch
  * net-snmp-5.9.4-testing-empty-arptable.patch
  delete (now part of v5.9.4):
  * net-snmp-5.9.3-disallow_SET_requests_with_NULL_varbind.patch
  delete (rename):
  * net-snmp-5.9.1-add-lustre-fs-support.patch
  * net-snmp-5.9.1-fix-Makefile.PL.patch
  * net-snmp-5.9.1-modern-rpm-api.patch
  * net-snmp-5.9.1-net-snmp-config-headercheck.patch
  * net-snmp-5.9.1-perl-tk-warning.patch
  * net-snmp-5.9.1-snmpstatus-suppress-output.patch
  * net-snmp-5.9.1-socket-path.patch
  * net-snmp-5.9.1-subagent-set-response.patch
  * net-snmp-5.9.1-suse-systemd-service-files.patch
  * net-snmp-5.9.1-testing-empty-arptable.patch
  * net-snmp-5.9.1-velocity-mib.patch
  * net-snmp-5.9.3-fix-create-v3-user-outfile.patch
  * net-snmp-5.9.3-pie.patch
  * net-snmp-5.9.3-fixed-python2-bindings.patch
- Removing legacy MIBs used by Velocity Software (jira#PED-6416).
- Re-add support for hostname netgroups that was removed accidentally and
  previously added with FATE#316305 (bsc#1207697).
  '@hostgroup' can be specified for multiple hosts
- Hardening systemd services setting "ProtectHome=true" caused home directory
  size and allocation to be listed incorrectly (bsc#1206044).
  add (rename):
  * net-snmp-5.9.4-harden_snmpd.service.patch
  * net-snmp-5.9.4-harden_snmptrapd.service.patch
  delete (rename):
  * net-snmp-5.9.3-harden_snmpd.service.patch
  * net-snmp-5.9.3-harden_snmptrapd.service.patch</changelog>
</package>
<package pkgid="cb90987f02fe5cc521bf1bd43f502fd77761d24b8f4d9e275a7d5e33d598e12a" name="netcfg" arch="noarch">
  <version epoch="0" ver="11.6" rel="150000.3.6.1"/>
  <changelog author="tchvatal@suse.com" date="1417435200">- Drop the scriptlet for the netgroup handling. It was caused by
  the aaa_base -&gt; netcfg move, which I guess after 12 years is moot</changelog>
  <changelog author="tchvatal@suse.com" date="1417435201">- Remove the socket check from the defaultdomain checker as it was
  always false and thus not needed
  - Add comment explaining the reason for the code</changelog>
  <changelog author="tchvatal@suse.com" date="1417435202">- Redo the HOSTNAME -&gt; hostname migration to support smallest
  possible step. Thus ensuring the migration is done just once and
  finished:
  [#] HOSTNAME migration supported scenarios [bnc#858908]:
  [#] /etc/HOSTNAME -&gt; /etc/hostname content preservation.
  [#] If hostname and HOSTNAME both exist HOSTNAME wins.
  [#] Nothing apart from content of the document is preserved
- Solves bnc#858908 and bnc#899506 while moves bnc#887039 to
  unsupported scenarios.</changelog>
  <changelog author="tchvatal@suse.com" date="1417435203">- Spec-cleanify the previous commit.</changelog>
  <changelog author="tchvatal@suse.com" date="1418817600">- Keep the condition posix as it is shorter :)</changelog>
  <changelog author="tchvatal@suse.com" date="1418817601">- Try different approach to fix failing migration from 13.1.
  This one is from locilka</changelog>
  <changelog author="tchvatal@suse.com" date="1434024000">- Keep /etc/hostname empty and %ghost it. bnc#934056</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- Do not ghost the empty /etc/hostname to not break installationimages
  pkg.</changelog>
  <changelog author="tchvatal@suse.com" date="1440504000">- Do not actually replace the hostname if user already has something
  in there. Thanks to Takashi Iwai for spotting this</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Repack services.bz2 with latest from upstream and adjust the script
  to not add all the names+emails at the bottom bnc#959693</changelog>
  <changelog author="tchvatal@suse.com" date="1488888000">- Update script to generage services to use UTF8 by default bsc#1028305
- Update the services list with latest content</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300801">- Include /etc/ethertypes to resolve a conflict between
  security:netfilter/ebtables and security:netfilter/iptables-nft. This
  ethertypes version comes from iptables, because it contains an additional
  entry over the ebtables one. Increased minor version to allow a suitable
  Requires statement in ebtables/iptables. FATE#320520</changelog>
  <changelog author="pgajdos@suse.com" date="1629720000">- add submissions port number [bsc#1189683]
- modified patches
  % services-suse.diff</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704110400">- Add krb-prop entry, fix for bsc#1211886.</changelog>
</package>
<package pkgid="373593fd2d4943cac515bc99e0bcbcccf57e50d0ed9ffa004b3c28131253839a" name="netcfg" arch="src">
  <version epoch="0" ver="11.6" rel="150000.3.6.1"/>
  <changelog author="pgajdos@suse.com" date="1391688000">- added helper scripts and doc for creating services file to
  Sources</changelog>
  <changelog author="pgajdos@suse.com" date="1401883200">- HOSTNAME renamed to hostname [bnc#858908]</changelog>
  <changelog author="pgajdos@suse.com" date="1402488000">- move /etc/HOSTNAME to /etc/hostname during update</changelog>
  <changelog author="pgajdos@suse.com" date="1406289600">- resolve some update scenarios [bnc#883999], [bnc#886443] (private)
  with regard to /etc/HOSTNAME -&gt; /etc/hostname change</changelog>
  <changelog author="pgajdos@suse.com" date="1412251200">- fix %pre scriptlet [bnc#899506] (thanks to mls for the fix)</changelog>
  <changelog author="tchvatal@suse.com" date="1417435200">- Drop the scriptlet for the netgroup handling. It was caused by
  the aaa_base -&gt; netcfg move, which I guess after 12 years is moot</changelog>
  <changelog author="tchvatal@suse.com" date="1417435201">- Remove the socket check from the defaultdomain checker as it was
  always false and thus not needed
  - Add comment explaining the reason for the code</changelog>
  <changelog author="tchvatal@suse.com" date="1417435202">- Redo the HOSTNAME -&gt; hostname migration to support smallest
  possible step. Thus ensuring the migration is done just once and
  finished:
  [#] HOSTNAME migration supported scenarios [bnc#858908]:
  [#] /etc/HOSTNAME -&gt; /etc/hostname content preservation.
  [#] If hostname and HOSTNAME both exist HOSTNAME wins.
  [#] Nothing apart from content of the document is preserved
- Solves bnc#858908 and bnc#899506 while moves bnc#887039 to
  unsupported scenarios.</changelog>
  <changelog author="tchvatal@suse.com" date="1417435203">- Spec-cleanify the previous commit.</changelog>
  <changelog author="tchvatal@suse.com" date="1418817600">- Keep the condition posix as it is shorter :)</changelog>
  <changelog author="tchvatal@suse.com" date="1418817601">- Try different approach to fix failing migration from 13.1.
  This one is from locilka</changelog>
  <changelog author="tchvatal@suse.com" date="1434024000">- Keep /etc/hostname empty and %ghost it. bnc#934056</changelog>
  <changelog author="tchvatal@suse.com" date="1438689600">- Do not ghost the empty /etc/hostname to not break installationimages
  pkg.</changelog>
  <changelog author="tchvatal@suse.com" date="1440504000">- Do not actually replace the hostname if user already has something
  in there. Thanks to Takashi Iwai for spotting this</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Repack services.bz2 with latest from upstream and adjust the script
  to not add all the names+emails at the bottom bnc#959693</changelog>
  <changelog author="tchvatal@suse.com" date="1488888000">- Update script to generage services to use UTF8 by default bsc#1028305
- Update the services list with latest content</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1519300801">- Include /etc/ethertypes to resolve a conflict between
  security:netfilter/ebtables and security:netfilter/iptables-nft. This
  ethertypes version comes from iptables, because it contains an additional
  entry over the ebtables one. Increased minor version to allow a suitable
  Requires statement in ebtables/iptables. FATE#320520</changelog>
  <changelog author="pgajdos@suse.com" date="1629720000">- add submissions port number [bsc#1189683]
- modified patches
  % services-suse.diff</changelog>
  <changelog author="martin.schreiner@suse.com" date="1704110400">- Add krb-prop entry, fix for bsc#1211886.</changelog>
</package>
<package pkgid="3eab86b34246e12f054af54db03fd4f6c1777572232e06409d0ca00668011ea1" name="netcontrol" arch="src">
  <version epoch="0" ver="0.3.2" rel="150200.10.8.1"/>
  <changelog author="mt@suse.de" date="1315483200">- Fixed to include config.h to have _GNU_SOURCE defined</changelog>
  <changelog author="cfarrell@suse.com" date="1315569600">- license update: LGPL-2.1+
  SPDX syntax. See http://www.spdx.org/licenses</changelog>
  <changelog author="mt@suse.de" date="1317124800">- version 0.2.4
- Fixed writing of bonding slaves into ifcfg file
- Fixed a memory leak while netcf xml generation error
- Generate complete interface chanins, do not generate
  type attribute in vlan interface reference xml node
  (bnc#708398).</changelog>
  <changelog author="mt@suse.com" date="1323259200">- Lowered bad_reference (bridge config references an unknown
  interface) log level to warning (bnc#735187).</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="mt@suse.de" date="1341230400">- version 0.2.5
- Fixed several bugs reported in bnc#760500, bnc#763388,
  bnc#765040, bnc#754001:
  - Fetch ip addresses and routes in system refresh via
    netlink, adds libnl-1 dependency to libnetcontrol.
  - Do not use -o rc for ifup or it fails when startmode
    is set to manual.
  - Always call ifstatus in ncf_if_status and not check
    interface operstate to better match ifstatus results
  - Check type while creating topology tree as well, not
    only if the interface specific data exists.
  - Do not report error in ncf_if_xml_state when interface
    does not exists any more [has been stopped/removed].
  - Improved error handling, report several errors once
  - Expose a lot of error details to the caller
  - Fixed to parse and configure complete interface trees
    and fixed a senseless type check that caused SEGV.
  - Fetch mac address from system when not in the config
  - Fixed arp ip target bonding option handling and expose
    errors while trying to add not unique slave interface.
  - Refresh config handle earlier in ncf_define, fixed a
    double free in regression test it does.
  - Automatically start port/slave/base interfeces when
    stating a bridge/bond/vlan.</changelog>
  <changelog author="mt@suse.de" date="1341316800">- version 0.2.6
- Merged spec file changes from openSUSE:Factory
- Fixed libnl-devel build requires to build on 12.1
- Updated FSF address in copyright/license statements</changelog>
  <changelog author="mt@suse.de" date="1359115200">- version 0.2.7
- Fixed a bridge variable initialization in try_bridge
- Use --enable-network-service on openSUSE &gt;= 12.3 (bnc#798348)
- Check the network.service alias link instead of NETWORKMANAGER
  variable in /etc/sysconfig/network/config, when requested by
  the --enable-network-service configure option.</changelog>
  <changelog author="mt@suse.de" date="1364299200">- version 0.2.8
- Added ChangeLog.git to dist archive and to devel package docs.
- Fixed ncf_close to not close logger as ncf_init did not open any.
  This caused SEGV's in libvirt, that redirects the global logger
  to itself and is using multiple ncf instances (bnc#811002).
- Fixed pthreads detection and source enablement in configure,
  added an explicit configure --enable-pthreads option to spec
  file to cause a failure on detection problems (bnc#811002).
- Fixed SEGV at parsing not existing BRIDGE_PATHCOSTS and memory
  leaks in in loop check, xml parsing and on backup file creation
  failure while routes file rewrite (bnc#810381).</changelog>
  <changelog author="idonmez@suse.com" date="1382702400">- Add libnl3.patch to build with libnl3 open openSUSE 13.1+, this
  fixes bnc#845540</changelog>
  <changelog author="mt@suse.de" date="1387281600">- Applied a minimal 0002-allow-wicked.patch to accept wicked
  as the network service (fate#316768).
- Renamed libnl3.patch to 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1389355200">- version 0.3.0
- Added libnl version configure option and detection
- Obsoletes 0002-allow-wicked.patch, 0001-use-libnl3.patch</changelog>
  <changelog author="mt@suse.de" date="1399377600">- blacklist ifcfg files ending in .orig or tilde (bnc#871600)
  [+ 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.3.1
- filter devices not supported by libvirt API (fate#320557)
  [- 0001-blacklist-ifcfg-files-ending-in-.orig-or-tilde-bnc-8.patch]</changelog>
  <changelog author="olaf@aepfle.de" date="1553515200">- Install pkgconfig into libdir instead of datadir</changelog>
  <changelog author="mt@suse.com" date="1583928000">- udev: use correct udev rule (write) lock directory
  [+ 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
- sysconfig: fix segfault on missed end-quote (bsc#1027736)
  [+ 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
- fix segfault on invalid check in route creation (bsc#1148646)
  [+ 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
- fix virsh iface-list not working as expected (bsc#1029201)
  [+ 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="mt@suse.com" date="1583928001">- bonding: don't complain about unknown options (bsc#1132794)
  [+ 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]</changelog>
  <changelog author="mt@suse.com" date="1623758400">- version 0.3.2
- use SPDX shortname lincense and PKG_INSTALLDIR autoconf macro
- virsh iface-list takes too long with many interfaces (bsc#1179144)
  - Cleanup netcf functions, include elapsed time in debug messages
  - Changed to refresh config and system info to keep them consistent
  - Add (fix or) adaptive refresh caching, set to double refresh-time
  - Implemented new backend refresh using wicked config/system queries
- remove packages included in 0.3.2 source archive:
  [- 0005-bonding-don-t-complain-about-unknown-options.1132794.patch]
  [- 0004-udev-use-correct-udev-rule-write-lock-directory.patch]
  [- 0003-sysconfig-fix-segfault-on-missed-end-quote-bsc-10277.patch]
  [- 0002-Fix-invalid-check-in-route-creation-bsc-1148646.patch]
  [- 0001-virsh-iface-list-not-working-as-expected-bsc-1029201.patch]</changelog>
  <changelog author="cfamullaconrad@suse.com" date="1689940800">- Fix EOF handling in xml-reader to avoid `virsh iface-*` commands
  hang on aarch64 (bsc#1213349)
  [+ 0001-xml-reader-fix-xml_getc-and-xml_ungetc.patch,
  + 0002-xml-reader-allow-uppercase-for-lt-gt-and-amp-expansi.patch]</changelog>
</package>
<package pkgid="983a122e69a197188d940082cf352458b0c76069c835eaf1001ca94aea8661dc" name="nfs-client" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="e9939356bfc094d7cb2ec9febe071f1c097c854a569a44bbd55115e04bd6525d" name="nfs-client" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="94d5dcdb75cdc948553ca85fdc2a218027dbc6d26513ab68e7c0ea01578f1424" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="1d6cad6b7b38b80fd447a82008e88f1a520c3b5aef1d0156fdc4fa945f5a691f" name="nfs-client" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150100.10.37.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="4c089b6c2bb29f1fefc99853e9eb6a8a638b52f07e07af16fc84342a1d006b14" name="nfs-client" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150100.10.37.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="9f02c47a520747c3b73f53cb5a6587b628494cfc765cb4d35f49fe321a7b49c8" name="nfs-client" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150100.10.37.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="98ca2fa9549984ab58992b09512d0bda5ebbfbf4247608d86154de908a654f03" name="nfs-kernel-server" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="c398fdb76640c7d8fdf0f1d8b16f812906cb759b9af9d405dde7e3c2e94e6a36" name="nfs-kernel-server" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="6c3b46977ab103014c0fe595b5bcca3b9f07e8b62eda4609f03cd4d48fb2c2d6" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="ee3c7f8894669ccb3f04cfd74bfa8a88d8d5fbf53eafbc58aa692f349d8e2b03" name="nfs-kernel-server" arch="aarch64">
  <version epoch="0" ver="2.1.1" rel="150100.10.37.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="2e1bbd5b4e7a52a8e264ef5a4cb6eefa60f494403556c2b977c45c7427ba8a42" name="nfs-kernel-server" arch="s390x">
  <version epoch="0" ver="2.1.1" rel="150100.10.37.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="32b51f427318d882762d500fdc9097be117ac8557e0000371f955b84a622d569" name="nfs-kernel-server" arch="x86_64">
  <version epoch="0" ver="2.1.1" rel="150100.10.37.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="cf7fc428c35f30e7e3f81b6a72c244a6d92f55815b1fc2dd84c4bac0f2521264" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.1.1" rel="150100.10.32.1"/>
  <changelog author="schwab@suse.de" date="1499256000">- nsm-headers.patch: add missing &lt;stdint.h&gt;</changelog>
  <changelog author="nfbrown@suse.com" date="1507291200">- fix incorrect dependency in
  /usr/lib/systemd/system/nfs-client.target.d/nfs.conf
  When yast restarts "nfs" it should propagate to nfs-client,
  but doesn't.
  (boo#1053691)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
</package>
<package pkgid="a31fc76d90f5888564681ced0d377150621a740af18d38729b59a9b6ced8a2c9" name="nfs-utils" arch="src">
  <version epoch="0" ver="2.1.1" rel="150100.10.37.1"/>
  <changelog author="kukuk@suse.de" date="1530878400">- Create files in /var/lib/nfs via tmpfiles.d [bsc#1100404],
  [FATE#325524]</changelog>
  <changelog author="nfbrown@suse.com" date="1543838400">- 0002-Let-systemd-know-when-rpc.statd-is-needed.patch
  0003-systemd-run-statd-notify-even-when-nfs-client-isn-t-.patch
  Fixes for systemd integration
  (bsc#1116221)
- nfs.conf: spell NFSV4LEASETIME correctly.
  (bsc#1098532)</changelog>
  <changelog author="nfbrown@suse.com" date="1569844800">- Don't make /var/lib/nfs owned by statd.
  Only sm and sm.bak need to be accessible by
  statd or sm-notify after they drop privs.
  Providing they get created, the parent
  directory can be root-owned.
- 0007-statd-user-from-sm
  Change rpc.statd and sm-notify to take uid from the sm
  directory.
  (bsc#1150733 CVE-2019-3689)</changelog>
  <changelog author="nfbrown@suse.com" date="1594296000">- 0008-gssd-replace-non-thread-safe-strtok-with-strsep.patch
  Fix bug with concurrent gssd requests arriving from kernel.
  (bsc#1174260)</changelog>
  <changelog author="nfbrown@suse.com" date="1599134400">- 0009-Convert-remaining-python-scripts-to-python3.patch
  Python is no longer installed by default and these scripts
  work with python3, so request that explicitly.
  (bsc#1173104)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068800">- Add 0010-gssd-Fix-locking-for-machine-principal-list.patch
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068801">- Add 0011-manpage-Add-a-description-of-the-nconnect-mount-opti.patch
  (bsc#1181651)</changelog>
  <changelog author="nfbrown@suse.com" date="1616068802">- 0012-mountd-reject-unknown-client-IP-when-use_ipaddr.patch
  0013-mountd-Don-t-proactively-add-export-info-when-fh-inf.patch
  0014-mountd-add-logging-for-authentication-results-for-ac.patch
  0015-mountd-add-cache-use-ipaddr-option-to-force-use_ipad.patch
  0116-mountd-make-default-ttl-settable-by-option.patch
  Improve logging of authentication (bsc#1181540)</changelog>
  <changelog author="nfbrown@suse.com" date="1620388800">- Add 0018-Replace-all-var-run-with-run.patch
  /var/run is long deprecated - switch all relevant paths to /run
  (bsc#1185170)</changelog>
  <changelog author="nfbrown@suse.com" date="1621598400">- Add 0019-gssd-use-mutex-to-protect-decrement-of-refcount.patch
  A field was modified by multiple threads without locking.
  This can lead to use-after-free.
  (bsc#1183194)</changelog>
  <changelog author="nfbrown@suse.com" date="1642507200">- Add 0020-mountd-Initialize-logging-early.patch
  If an error or warning message is produced before
  closeall() is called, mountd gets confused and doesn't work.
  (bsc#1194661)</changelog>
  <changelog author="nfbrown@suse.com" date="1648123200">- Add 0021-mount.nfs-insert-sloppy-at-beginning-of-the-options.patch
  Add 0022-mount.nfs-Fix-the-sloppy-option-processing.patch
  Ensure "sloppy" is added correctly for newer kernels.  Particularly
  required for kernels since 5.6 (so SLE15-SP4), and safe for all kernels.
  (boo#1197297)</changelog>
  <changelog author="nfbrown@suse.com" date="1648814400">- Add 0023-cache.c-removed-a-couple-warning.patch
  Fix compilation with new glibc (SLE15-SP4)
  (bsc#1197788)</changelog>
  <changelog author="nfbrown@suse.com" date="1655208000">- 0024-systemd-Apply-all-sysctl-settings-when-NFS-related-m.patch
  Ensure sysctl setting work (bsc#1199856)</changelog>
  <changelog author="nfbrown@suse.com" date="1662379200">- add 0025-nfsdcltrack-getopt_long-fails-on-a-non-x86_64-archs.patch
  Fix nfsdcltrack bug that affected non-x86 archs.
  (bsc#1202627)</changelog>
  <changelog author="nfbrown@suse.com" date="1673697600">- 0026-modprobe-avoid-error-messages-if-sbin-sysctl-fail.patch
  Avoid modprobe errors when sysctl is not installed.
  (bsc#1200710 bsc#1207022 bsc#1206781)
- 0027-nfsd-allow-server-scope-to-be-set-with-config-or-com.patch
  Add "-S scope" option to rpc.nfsd to simplify fail-over cluster
  config.
  (bsc#1203746)</changelog>
  <changelog author="nfbrown@suse.com" date="1675684800">- Rename all drop-in options.conf files as 10-options.conf
  This makes it easier for other packages to over-ride
  with a drop-in with a later sequence number.
  resource-agents does this.
  (bsc#1207843)</changelog>
  <changelog author="nfbrown@suse.com" date="1680091200">- Add 0028-mount.nfs-always-include-mountpoint-or-spec-if-error.patch
  boo#1157881
- Add 0029-nfsd.man-fix-typo-in-section-on-scope.patch
  bsc#1209859
- Allow scope to be set in sysconfig: NFSD_SCOPE</changelog>
  <changelog author="nfbrown@suse.com" date="1686052800">- Add 0030-systemd-use-correct-modprobe-d-directory
  SLE15-SP5 an earlier don't use /usr/lib/modprobe.d
  (bsc#1200710)
- Add 0031-mountd-don-t-advertise-krb5-for-v4root-when-not-conf.patch
  Avoid unhelpful warning if rpcsec_gss_krb5.ko not installed</changelog>
  <changelog author="nfbrown@suse.com" date="1687867200">- Add 0032-exportfs-Ingnore-export-failures-in-nfs-server.seriv.patch
  Inconsistencies in /etc/exports shouldn't be fatal.
  (bsc#1212594)</changelog>
</package>
<package pkgid="36944b35f953f17b5f17cdaa2f2370e5fbea829df8cc7f6f6ea73ba950c41378" name="nftables" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="4c9b362e3d420e08cbdc3751c97b5dd14ee4736d0e33c38c4c477f0381d38970" name="nftables" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="7ddbb4e20619772dab50ab5190e636abecaa762e3831c9e2db44e4dccc8ad5ad" name="nftables" arch="src">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="1c4e5c8552405583709b83ae5889a579baeffb989138c913bb73187d7e7add87" name="nftables" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="27a90a1ead793d049315bb7dc54a1b5607a7e09857319b46e001202b40a10cb2" name="nftables" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="a100e6b09375d51d7b2047f21f0b9c905fe3db7e8f2f3ffded243a6cbb2df0e4" name="nftables" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="c7bdd1c39de58f35679c7290174d8699d40ac684117aae0c0acd8300d67feb38" name="nftables" arch="src">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="78e2daf5c8b9cd7e6c92640aa8ffdb56e9806f7211bd760df17d309540d9a558" name="nftables" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="9a698f8dcc67d8b37293a5bfa9420cd3c27d50af72a108e51187cfb6819fa746" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150200.12.1"/>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
</package>
<package pkgid="83d9402c0f0761a2202d7b3153e35d46a8b6f22538450ada51a824be426b4f61" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150200.17.1"/>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1697716800">- security update
- added patches
  fix CVE-2023-44487 [bsc#1216123], HTTP/2 Rapid Reset Attack
  + nghttp2-CVE-2023-44487.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1712145600">- security update
- added patches
  fix CVE-2024-28182 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-1.patch
  fix CVE-2024-28182-2 [bsc#1221399], HTTP/2 CONTINUATION frames can be utilized for DoS attacks
  + nghttp2-CVE-2024-28182-2.patch</changelog>
</package>
<package pkgid="fc44b45cd1919a729d4eb44ecb31d35175e57fdf0525e12669acfe067950da11" name="nghttp2" arch="src">
  <version epoch="0" ver="1.40.0" rel="150200.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Export PYTHON=/usr/bin/python3 before running configure: allow to
  build without (comnplete) python2 in the buildroot. In any case
  we only ship python3-bindings already.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 1.29.0:
  * lib: Use NGHTTP2_REFUSED_STREAM for streams which are closed by
    GOAWAY
  * build: Remove SPDY
  * build: Fix CMAKE_MODULE_PATH
  * nghttpx: Revert "nghttpx: Use an existing h2 backend connection
    as much as possible"
  * nghttpx: Write API request body in temporary file
  * nghttpx: Increase api-max-request-body
  * nghttpx: Faster configuration loading with lots of backends
  * nghttpx: Fix crash with --backend-http-proxy-uri option</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="tchvatal@suse.com" date="1523275200">- Drop spdylay dependency as it is deprecated since version 1.28.0
  and removed from cofnigure.ac since 1.29.0</changelog>
  <changelog author="tchvatal@suse.com" date="1523275201">- Version update to 1.31.0:
  * lib: Add nghttp2_session_set_user_data() public API function (GH-1137)
  * src: Define nghttp2_inet_pton wrapper to avoid inet_pton macro (GH-1128)
  * nghttpx: Close listening socket on graceful shutdown
  * nghttpx: Add an option to accept expired client certificate (GH-1126)
  * nghttpx: Add mruby tls_client_not_before, and tls_client_not_after (GH-1123)
  * nghttpx: Fix potential memory leak
  * lib: Allow PING frame to be sent after GOAWAY (GH-1103)
  * nghttpx: Fix bug that h1 backend idle timeout expires sooner
  * nghttpx: Stop overwrite of first header on mruby call to env.req.set_header(..) (Patch from Dylan Plecki) (GH-1119)
  * nghttpx: Add upgrade-scheme parameter to backend option (GH-1099)
  * nghttpx: Fix missing ALPN validation (--npn-list) (GH-1094)
  * nghttpx: Remember which resource is pushed for RFC 8297 (GH-1101)</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Version umpdate to 1.31.1:
  * Fix bsc#1088639 CVE-2018-1000168
  * https://nghttp2.org/blog/2018/04/12/nghttp2-v1-31-1/</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 1.32.0:
  * lib: Ignore all input after calling session_terminate_session
  * lib: Fix treatment of padding
  * lib: Don't allow 101 HTTP status code because HTTP/2 removes
    HTTP Upgrade
  * build: add ENABLE_STATIC_LIB option to build static lib
  * third-party: Upgrade neverbleed to the latest master
  * asio: Support client side SNI
  * src: Compile with libressl 2.7.2
  * src: Allow building without NPN
  * h2load: -r and --duration are mutually exclusive</changelog>
  <changelog author="adam.majer@suse.de" date="1537963200">- Update to version 1.33.0:
  * lib: Tweak nghttp2_session_set_stream_user_data
  * lib: Fix handling of SETTINGS_MAX_CONCURRENT_STREAMS.
  * lib: Implement ORIGIN frame
  * asio: support definition of local endpoint for cleartext
    client session
  * integration: Remove remaining SPDY code from the integration tests
  * nghttpx: Fix worker process crash with neverbleed write error
  * nghttpx: Support per-backend mruby script
  * nghttpx: Fix stream reset if data from client is arrived before
    dconn is attached</changelog>
  <changelog author="adam.majer@suse.de" date="1539000000">- Update to version 1.34.0: (bsc#1112438, FATE#326776)
  * lib: Implement RFC 8441 :protocol support
  * nghttpx: Add read/write-timeout parameters to backend option
  * nghttpx: Fix mruby parameter validation in backend option
  * nghttpx: Implement RFC 8441 Bootstrapping WebSocket with HTTP/2
  * nghttpx: Update neverbleed to fix OpenSSL 1.1.1 issues
  * nghttpx: Update mruby 1.4.1
  * nghttpx: Add mruby env.tls_handshake_finished
  * nghttpx: Add --tls13-ciphers and --tls-client-ciphers options
  * nghttpx: Add RFC 8470 Early-Data header field support
  * nghttpx: Add RFC 8446 TLSv1.3 0-RTT early data support</changelog>
  <changelog author="mpluskal@suse.com" date="1547208000">- Update to version 1.35.1:
  * nghttpx: Fix broken trailing slash handling (GH-1276)
- Changes for version 1.35:
  * build: cmake: Fix libevent version detection (Patch from Jan Kundrát) (GH-1238)
  * lib: Use __has_declspec_attribute for shared builds (Patch from Don) (GH-1222)
  * src: Require C++14 language feature
  * nghttpx: Write mruby send_info early
  * nghttpx: Fix assertion failure on mruby send_info with HTTP/1 frontend
  * h2load: Handle HTTP/1 non-final response (GH-1259)
  * h2load: Clarify that time for connect includes TLS handshake</changelog>
  <changelog author="tchvatal@suse.com" date="1547812800">- Use multibuild to not pull in python3 in first build, nghttp2
  is low in the system</changelog>
  <changelog author="seanlew@opensuse.org" date="1547812801">- Update to 1.36.0
  * build: disable shared library if ENABLE_SHARED_LIB is off
  * third-party: use http-parser to v2.9.0 (GH-1294)
  * third-party: Update mruby to 2.0.0
  * nghttpx: Pool h1 backend connection per address (GH-1292)
  * nghttpx: Randomize backend address round robin order per thread
    (GH-1291)
  * nghttpx: Fix getting long SNs for openssl &lt; 1.1 (GH-1287)
  * h2load: add an option to write per-request logs (GH-1256)
  * asio: added access to # of the current server port (GH-1257)</changelog>
  <changelog author="tchvatal@suse.com" date="1557489600">- Update to 1.38.0:
  * This release fixes the bug that authority and path altered by per-pattern mruby script can affect backend selection on retry.
  * It also fixes the bug that HTTP/1.1 chunked request stalls.
  * Now nghttpx does not log authorization request header field value with -LINFO.
  * This release fixes possible backend stall when header and request body are sent in their own packets.
  * The backend option gets weight parameter to influence backend selection.
  * This release fixes compile error with BoringSSL.
- Add patch from upstream to build with new boost bsc#1134616:
  * boost170.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1565697600">- Update to version 1.39.1:
  * This release fixes the bug that log-level is not set with
    cmd-line or configuration file. It also fixes FPE with default
    backend.
- Changes for version 1.39.0:
  * libnghttp2 now ignores content-length in 200 response to
    CONNECT request as per RFC 7230.
  * mruby has been upgraded to 2.0.1.
  * libnghttp2-asio now supports boost-1.70.
  * http-parser has been replaced with llhttp.
  * nghttpx now ignores Content-Length and Transfer-Encoding in 1xx
    or 200 to CONNECT.
- Drop no longer needed boost170.patch</changelog>
  <changelog author="adam.majer@suse.de" date="1566216000">- Update to version 1.39.2 (bsc#1146184, bsc#1146182):
  * This release fixes CVE-2019-9511 “Data Dribble” and CVE-2019-9513
  “Resource Loop” vulnerability in nghttpx and nghttpd. Specially crafted HTTP/2
  frames cause Denial of Service by consuming CPU time. Check out
  https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md
  for details. For nghttpx, additionally limiting inbound traffic by
  - -read-rate and --read-burst options is quite effective against
  this kind of attack.
  * Add nghttp2_option_set_max_outbound_ack API function
  * nghttpx: Fix request stall</changelog>
  <changelog author="mpluskal@suse.com" date="1566216001">- Require correct library from devel package - boo#1125689</changelog>
  <changelog author="mpluskal@suse.com" date="1567166400">- Conditionally remove dependecy on jemalloc for SLE-12</changelog>
  <changelog author="mrostecki@opensuse.org" date="1579003200">- Update to version 1.40.0 to fix CVE-2019-18802 in envoy-proxy and
  cilium-proxy (bsc#1166481)
  * lib: Add nghttp2_check_authority as public API
  * lib: Fix the bug that stream is closed with wrong error code
  * lib: Faster huffman encoding and decoding
  * build: Avoid filename collision of static and dynamic lib
  * build: Add new flag ENABLE_STATIC_CRT for Windows
  * build: cmake: Support building nghttpx with systemd
  * third-party: Update neverbleed to fix memory leak
  * nghttpx: Fix bug that mruby is incorrectly shared between
    backends
  * nghttpx: Reconnect h1 backend if it lost connection before
    sending headers
  * nghttpx: Returns 408 if backend timed out before sending
    headers
  * nghttpx: Fix request stal</changelog>
  <changelog author="pgajdos@suse.com" date="1615550400">- security update
- added patches
  fix CVE-2020-11080 [bsc#1181358], HTTP/2 Large Settings Frame DoS
  + nghttp2-CVE-2020-11080.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1695729600">- Fixes memory leak that happens when PUSH_PROMISE or HEADERS frame cannot be
  sent, and nghttp2_on_stream_close_callback fails with a fatal error.
  [CVE-2023-35945 bsc#1215713]
  + nghttp2-CVE-2023-35945.patch</changelog>
</package>
<package pkgid="fe2af4a33a295e252c88fe2bb611a5c459d1eabd7e8573a75cdb328ec6dfe4fa" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.0+40.gd857ed9befd6" rel="150400.3.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="5c111102f7508b11978aa78310a5da43b5dde1905456b8823d5fad0686374d4e" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.0+40.gd857ed9befd6" rel="150400.3.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="0e053087efbc536e96a464377a830b6ec606bf9792bc1ba4c59a6582c420c10a" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.0+40.gd857ed9befd6" rel="150400.3.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="f0971d5606332a7e660833187cb61bbd08673f9f0a7cdbe562c8c2038507b3d9" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.0+40.gd857ed9befd6" rel="150400.3.18.1"/>
  <changelog author="dimstar@opensuse.org" date="1639051200">- Update to version 1.16:
  + Print ProductName found even if subvendor/subdevice is unknown.
  + Add New fields on PEL based on NVMe 2.0a.
  + nvme-cli:
  - Split media units written/read into hi/lo 64 bit fields.
  - Add support for new SN650 device.
  - Update WDC pluging version to 1.15.3.
  - fix the [data|mdata]_len param (boo#1193547).
  - Add support for C3/Latency Monitor Log page parsing.
  - ctrl-loss-tmo should accept -1 as value.
  + nvme: add spinup control feature (fid=0x1A).
  + nvme: Add Identify for CNS 08h NVMe spec 2.0a based.
  + nvme: add boot partition log support.
  + nvme: add support for fid supported and effects log(lid =
    0x12).
  + add identify endurance group list (cns 0x19) support.
  + add json support for zns report zones.
  + fabrics: fix 'nvme discover' segfault if sysfs path is not
    available.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
</package>
<package pkgid="0e957f3eb4a6a9f82b61abbde32ff60e7fee559975ac05dc7472535e5ee32c2c" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.0+47.ga43da6" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.0+47.ga43da6:
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology
    (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts
    (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#1213644)</changelog>
</package>
<package pkgid="a3e3dc36d205b74b5e19e576add31075d17970835968cb7858dc2c2aac115b4c" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.0+47.ga43da6" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.0+47.ga43da6:
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology
    (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts
    (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#1213644)</changelog>
</package>
<package pkgid="72a07ebfb007d7245ef0a96b0be2d55f9e01615a1e8d3d047fa7332a649e69b0" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.0+47.ga43da6" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.0+47.ga43da6:
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology
    (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts
    (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#1213644)</changelog>
</package>
<package pkgid="4afaf7130bc00efbc1e30d31f552122678579a59a3063d7e6501b138e1fa411b" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.0+47.ga43da6" rel="150400.3.21.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642161600">- Update to v2.0-rc0
  * Depends on libnvme
  * rename harden_nvmf-connect@.service.patch to 0100-harden_nvmf-connect@.service.patch
  * drop 0102-nvme-cli-Add-script-to-determine-host-NQN.patch</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.0+47.ga43da6:
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology
    (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts
    (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#1213644)</changelog>
</package>
<package pkgid="a90ccd1da64af33c1b7f7d5e540482b3d9a79da258da0260190ecb40c838733b" name="nvme-cli" arch="aarch64">
  <version epoch="0" ver="2.0+48.gbd004e" rel="150400.3.24.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.0+47.ga43da6:
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology
    (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts
    (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#1213644)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.0+48.gbd004e:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="5d0a8f4da5f1b7c3ab6b71b7291821c86382afd3b3afb290198a3da9f9235d85" name="nvme-cli" arch="s390x">
  <version epoch="0" ver="2.0+48.gbd004e" rel="150400.3.24.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.0+47.ga43da6:
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology
    (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts
    (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#1213644)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.0+48.gbd004e:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="648a34abaddaacac4096225aa9f3dd3cca85e3fed7084cf7b59d187a04272b39" name="nvme-cli" arch="src">
  <version epoch="0" ver="2.0+48.gbd004e" rel="150400.3.24.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.0+47.ga43da6:
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology
    (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts
    (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#1213644)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.0+48.gbd004e:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="b97d7bbf0b021904dfafb0edf5791abee071739fa32e69b0019577a16a474d44" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="2.0+48.gbd004e" rel="150400.3.24.1"/>
  <changelog author="daniel.wagner@suse.com" date="1642420800">- Update Source URL and introduce a variable for the release canditate
  version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642507200">- Use osc_scm to manage upstream input source.
- Fix version string.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1642593600">- Fix zsh completion package depenedencies.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1643716800">- Update to version 2.0~2:
  * Adapt to logging API changes in libnvme
  * Adapt to scan API changes in libnvme
  * Reworked error message handling
  * Fix 'list-ns' (bsc#1195151)
  * Add 'gen-tls-key' and 'check-tls-key'
  * Add Media Unit Status log page support
  * Cleanups and build fixes
- Fix path to systemctl (bsc#1193699)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1644580800">- Update to version v2.0-rc3:
  * nvme-print: Fix json output for list-subsys
  * nvme: Allow --verbose flag to increase log level
  * Added telemetry log fetch support for SN810, SN530 and SN740 series NVMe SSDs through wdc vs-internal-log command
  * nvmf: Remove --matching from systemd service file (bsc#1195665)
  * nvme: Fix --force flag inversion (bsc#1195637)
  * nvme: Add support for data area 4 to get-telemetry-log
  * nvme: Add Supported Capacity Configuration List log page(LID: 0x11)
  * nvme: Add Enhanced Controller Meta Data(FID: 0x7D)
  * nvme-print: Add NVME_FEAT_FID_ENH_CTRL_METADATA to nvme_feature_to_string
  * nvme-print: remove unused nvme_show_id_ctrl function
  * nvme: Add nvm-id-ns-lba-format(CNS 0Ah) command from TP4095
  * nvme: Add NVM Command Set specific identify namespace command
  * nvme: Add id-ns-lba-format(CNS 09h) command from TP4095
  * nvme: Add nulbaf(Number of Unique Capability LBA Formats) field on nvmd_id_ns
- Include precompiled documentation</changelog>
  <changelog author="daniel.wagner@suse.com" date="1645531200">- Update to version 2.0-rc4:
  * netapp-nvme: free the nsdescs pointer after use
  * netapp-nvme: fix ontapdevices segfault in json output
  * nvme-print: fix 'nvme list -o json' segfault
  * nvme: get_ns_id command fails on nvme device
  * wdc: updated products list for telemetry (--type) argument
  * docs: fix typo in Data Set Management section
  * Fix ctrlist for attach-ns and detach-ns
  * netapp-nvme: fix nvme ns desc uuid handling for ontapdevices
  * wdc: Fix use-after-free access of cbs_data
  * Fixed regression with 'open namespace exclusive' (bsc#1195945)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1646308800">- Update to version 2.0-rc5:
  * nvme: passthru bugfix(wrong jump, wrong file descriptor)
  * nvme-cli: Ignore traddr case (bsc#1194025)
  * nvme: fix segfault in nvme telemetry-log error handling
  * fabrics: ensure zero kato for non-persistent controllers
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647000000">- Update to version 2.0-rc6:
  * nvme: print out ANA state for 'list-subsys' (bsc#1195938)
  * nvme: Explicit initialize all command line options (bsc#1195945)
  * nvme: Explicit initialize passthru command line options
  * nvme: list_ns bug fix (csi option enable)
  * nvme: nvme write bug fix (no parse for option)
  * documenation updates</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647604800">- Update to version 2.0-rc7:
  * netapp-nvme: fix smdevices segfault in json output (bsc#1195937)
  * fabrics: keep the backward compatibility
  * nvme: Do not slash escape strings in JSON output (bsc#1195937)
  * nvme: Print full device path
  * nvme-print: Make JSON keys consistent with nvme-cli 1.x
  * nvme-print: print generic device in list command
  * fabrics: check for discovery controller instead of subsystem NQN (bsc#1197061)
  * connect: Set errno to zero on nvmf_add_ctrl() success
  * documenation updates
- Set path to systemctl via newly introduced config option
- Update 0100-harden_nvmf-connect@.service.patch due to upstream file rename
- Moved bash completion script to /usr/share/bash-completion/completions/nvme</changelog>
  <changelog author="daniel.wagner@suse.com" date="1647950400">- Fix install conflict caused by new bash completion script
  location (bsc#1197365).</changelog>
  <changelog author="daniel.wagner@suse.com" date="1648814400">- Update to version 2.0-rc8:
  * fabrics: Add DIM command
  * fabrics: Introduce force flag to overwrite persistence logic (bsc#1197076)
  * fabrics: Free non-matching controller during discovery
  * fabrics: add 'nvme config' command
  * fabrics: Correctly stringify discovery.conf and config.json paths
  * nvme-print: Add human readable print for nsattr field
  * nvme-print: Update Persistent Event log fields
  * nvme-print: print discovery async event support
  * nvme-rpmb: Fix spelling for 'Partition'
  * nvme-copy: add missing field to the command
  * nvme: add get_mi_cmd_support_effects_log command
  * nvme: Fixup namespace filtering yet again
  * nvme: Use type bool for OPT_FLAG
  * nvme: use filter for 'list-subsys &lt;devname&gt;' (bsc#1195938)
  * Add lbstm option to create-ns
  * argconfig: Do not use default value loading by getopt_long_only
  * argconfig: Rename CFG_NONE to CFG_FLAG
  * plugins: Use type bool for OPT_FLAG
  * documenation updates
- Drop 'ProtectKernelTunables=true' (bsc#1197076)</changelog>
  <changelog author="daniel.wagner@suse.com" date="1649419200">- Update to version 2.0:
  * fabrics: Create persistent controller using unique subsystem NQN (bsc#1198243)
  * fabrics: Set KATO for discovery controller when connecting
  * fabrics: Do no modify default config for discovery controller
  * fabrics: Set default trsvcid ports for TCP and RDMA (bsc#1195858)
  * fabrics: Support connect even when no /etc/nvme/hostnqn file exists
  * nvme: update to nvme_scan_filter_t modifications (bsc#1195938)
  * plugins/intel: make 'buckets' a json array
  * plugins: Update WDC capabilities command with new commmands
  * plugins: Add OCP plugin</changelog>
  <changelog author="dwagner@suse.de" date="1654603200">- fabrics: Already connected uses a different error code (bsc#1199994)
  * add 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
- fabrics: skip connect if the transport types don't match (bsc#1199949 bsc#1199994)
  * add 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
- nvme-print: Show ANA state only for one namespace (bsc#1200044 bsc#1199956 bsc#1199990)
  * add 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * add 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
- fabrics: Honor config file for connect-all (bsc#1199504)
  * add 0005-fabrics-Honor-config-file-for-connect-all.patch</changelog>
  <changelog author="dwagner@suse.de" date="1663761600">- Support auto discovery, add %systemd_ordering to spec file (bsc#1186399)
- fabrics: Remove dhchap-ctrl-secret from discover/connect-all (bsc#1201701)
  * add 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
- Fabrics related bug fixes
  * add 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * add 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * add 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * add 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * add 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * add 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * add 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * add 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * add 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch</changelog>
  <changelog author="dwagner@suse.de" date="1668513600">- Honor JSON config file in connect-all command (bsc#1203204 bsc#1203163)
  * add 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * add 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * add 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
- Add show-topology command (bsc#1200089)
  * add 0019-nvme-Add-show-topology-command.patch
  * add 0020-doc-Add-nvme-show-topology-documnetation.patch
  * add 0021-completions-Add-show-topology-tab-completion.patch</changelog>
  <changelog author="mwilck@suse.com" date="1669204800">- fix 'persistent' handling during connect-all with JSON file (bsc#1205657)
  * add 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch</changelog>
  <changelog author="dwagner@suse.de" date="1677153600">- Switch from quilt based to git based maintenance
  * remove 0001-fabrics-Already-connected-uses-a-different-error-cod.patch
  * remove 0002-fabrics-skip-connect-if-the-transport-types-don-t-ma.patch
  * remove 0003-nvme-print-Show-paths-from-the-first-namespace-only.patch
  * remove 0004-nvme-print-Show-ANA-state-only-for-one-namespace.patch
  * remove 0005-fabrics-Honor-config-file-for-connect-all.patch
  * remove 0006-fabrics-Remove-dhchap-ctrl-secret-from-discover-conn.patch
  * remove 0007-fabrics-error-message-for-nvme-discover-connect-all-.patch
  * remove 0008-fabrics-avoid-segfault-when-nvme-discover-fails-with.patch
  * remove 0009-fabrics-avoid-segfault-if-transport-type-is-omitted.patch
  * remove 0010-nvme-Return-status-error-code-for-effects-log-comman.patch
  * remove 0011-nvme-fix-nvme-get-feature-with-H-option.patch
  * remove 0012-fabrics-Avoid-nvme_scan_ctrl-when-disconnecting.patch
  * remove 0013-nvme-Do-not-print-error-message-in-collect_effects_l.patch
  * remove 0014-nvme-print-Handle-NULL-hostid-in-JSON-output.patch
  * remove 0015-nvme-print-sanitize-the-get-feature-async-event-conf.patch
  * remove 0016-fabrics-nvme-config-modify-depends-on-n-and-t-argume.patch
  * remove 0017-fabrics-Honor-JSON-config-file-in-connect-all-comman.patch
  * remove 0018-fabrics-Trigger-auto-connect-if-config.json-exists.patch
  * remove 0019-nvme-Add-show-topology-command.patch
  * remove 0020-doc-Add-nvme-show-topology-documnetation.patch
  * remove 0021-completions-Add-show-topology-tab-completion.patch
  * remove 0022-fabrics-fix-persistent-handling-during-connect-all-w.patch
  * remove 0100-harden_nvmf-connect@.service.patch
- Sanitize traddr and trsvcid avoid buffer overrun (bsc#1207435)
  * json_discovery_log: avoid buffer overrun
- Extend udev rule to pass --host-interface argument to nvme-cli (bsc#1208001)
  * udev: Add HOST_IFACE to udev rule
- Build documentation to be up to date
- Fix build warning (git-fixes)
  * fabrics: 'e-&gt;traddr' is static
- Improvements for supported-log-pages (bsc#1209550)
  * nvme-doc: update man page for supported-log-pages
  * nvme-print: sanitize supported-log-pages output
- Fix read command (bsc#1209564)
  * nvme: fix block count and data size logic
- Fix mounting filesystems via fstab (bsc#1208075)
  * fabrics: Fix ordering for auto connect services</changelog>
  <changelog author="dwagner@suse.de" date="1685102400">- Fix crash when printing json output for supported log pages (bsc#1209550)
  * nvme-print: fix segfault in supported-log-pages json output
- Add coverity reported fixes (bsc#1209669)
  * nvme: fix nvme get-feature with -H option
  * nvme: add '--groups' option to nvme ana-log
  * nvme: coverity fixes
  * nvme-rpmb: fixup resource leaks
  * nvme-models: fixup resource leaks
  * util/argconfig: fixup possible overflows
- Update host_traddr when using config.json file (bsc#1210089)
  * fabrics: fix fc config JSON file handling
- Fix compiler warning (git-fixes)
  * nvme-print: Use enum nvme_print_flags for nvme_show_id_ctrl
- Fix condition in autoconnect service (bsc#1210105)
  * fabrics: fix conditions in nvmf-autoconnect.service
- Set version-tag so that version are correctly reported</changelog>
  <changelog author="dwagner@suse.de" date="1690459200">- Update to version 2.0+47.ga43da6:
  * nvme-print: Show subsystem iopolicy (bsc#1124564)
  * nvme-print-stdout: Do not show non reachable ns in namespace topology
    (bsc#1212598)
  * nvme-print-stdout: List only ctrls which are part of ns (bsc#1212598)
  * nvme-print-stdout: Support subsys reachable from several hosts
    (bsc#1212598)
  * ccan: Add htable, strset and dependencies (bsc#1212598)
  * ccan: Remove unused documentation (bsc#1212598)
  * nvme-print: fix counter while looping through uuid_list (bsc#1213644)</changelog>
  <changelog author="dwagner@suse.de" date="1693915200">- Update to version 2.0+48.gbd004e:
  * json: fix seg. fault converting NULL to JSON string (bsc#1213762)</changelog>
</package>
<package pkgid="575c2be240803ab9a6009623d95a7d59ae71e29bf8a706c06d41524d3829f13b" name="open-lldp" arch="aarch64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove obsolete insserv calls</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="5000cb868f855be5152a1f982354b8132b92acc0db2d37d68a1f6964e385e2f1" name="open-lldp" arch="s390x">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove obsolete insserv calls</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="b2fa7515cf97020248f8cc088e52f52e583a9cbae851edac77c68a61b0fe5738" name="open-lldp" arch="src">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove obsolete insserv calls</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="16b9a021f34ceae005445671181bb686eed6810b75dcd4586a3fa1fe52dc9588" name="open-lldp" arch="x86_64">
  <version epoch="0" ver="1.1+77.75e83b6" rel="150300.3.6.1"/>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove obsolete insserv calls</changelog>
  <changelog author="dimstar@opensuse.org" date="1488283200">- Don't use full URL as source, as the tarball does not exist at
  that location.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512993600">- Fix calling of fillup_only: it knows no -i parameter.</changelog>
  <changelog author="hare@suse.de" date="1547121600">- Update to git commit cb81e9541b5 (FATE#326034,bug#1104011)
  * 8021qaz: Remove unused variable
  * 8021qaz: Honor willing value from config file
  * lldpad: Support DSCP selectors in APP TLV's
  * Fix application tlv display
  * basman_clif: print the OID properly
  * ecp22: deinit l2_packet_data before freeing ecp22
  * DCB set state operation return value check
  * memleak on received TLVs from modules
  * Use interface index instead of name in libconfig
  * Fix 'is_valid_mac' to include mcast mac address
  * lldpad: Fix segfault in lldptool
  * Fixup disabling PG
  + open-lldp-v1.0.1+56.cb81e95.tar.xz
- Remove superseded files
  - open-lldp-1.0.1.tar.gz
  - open-lldp-git-update.patch.bz2
  - open-lldp-gcc5.patch
  - 0001-l2_linux_packet-correctly-process-return-value-of-ge.patch
  - 0002-lldpad-Only-set-Tx-adminStatus-if-interface-is-not-m.patch</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mliska@suse.cz" date="1552996800">- Add gcc9-fix-werror.patch in order to fix bsc#1128299.
- Adjust project URL as we're using the Intel's fork.</changelog>
  <changelog author="mliska@suse.cz" date="1557403200">- Disable -Werror (boo#1128299) and remove gcc9-fix-werror.patch.</changelog>
  <changelog author="mliska@suse.cz" date="1557835200">- Add disable-werror.patch.</changelog>
  <changelog author="hare@suse.com" date="1574164800">- Update to version v1.0.1+95.3168e11:
  * Test with newer GCC 8 and 9 versions
  * RPM build is broken, so skip
  * Place the tarball in the right place
  * A tarball needs to be built after bootstrap.sh for use with RPM
  * Added missing steps for building an RPM
  * Finish off with testing building the RPM
  * Test package installation as well
  * Test under multiple GCC releases
  * Drop requirement for Travis CI testing with Clang
  * Support checking build with Travis CI
  * vdp-netlink: account for sizes properly
  * qbg: avoid warning for extra parens
  * qbg: port name is always a valid pointer
  * dcbx-nl: drop run_cmd
  * ecp: allow for failure to create
  * lldp_util: allow for null ifa_addr element
  * lldpad: Do not enable port if already enabled
  * Silent -Werror=address-of-packed-member warnings.
  * Come up with STRNCPY_TERMINATED (#25).
  * vdptool: fixed compile error for getline()
  * Fix #23 by off by one strncpy value.
  * 8021qaz: Block lldptool set operations if read only mode is on
  * 8021qaz: Add read only option for 8021qaz module
  * lldp: Allow lldptool to modify optional TLV's content
  * 8021qaz: Print dscp2prio map
  * autoconf: Add systemd support in configure.ac
  * rpm-spec: Add vdp22 man files to lldpad.spec.in</changelog>
  <changelog author="hare@suse.com" date="1574164801">- Update to version v1.0.1+102.4c7fcc3:
  * l2_packet: Guard ETH_P_LLDP define (edit: fixes bsc#1156545)
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="dimstar@opensuse.org" date="1579867200">- BuildRequire pkgconfig(systemd) instead of systemd directly:
  allow OBS to shortcut through the -mini flavors.</changelog>
  <changelog author="mliska@suse.cz" date="1586174400">- Use -fcommon in order to fix boo#1160407.</changelog>
  <changelog author="hare@suse.de" date="1596542400">- Update to version v1.0.1+63.f977e67 (bsc#1171284,bsc#1170745,bsc#1153520):
  * lldp/rx.c: Reset state machine variable in process_delete_info()
  * lldp: do not call 'assert' in rxProcessFrame()
  * ecp: allow for failure to create
  * lldp_mand: retrieve permanent mac address in get_mac()
  * lldp_util: use netlink to fetch mac address
  * lldp_util: drop get_macstr()
  * linux/if_link.h: Update and add bonding netlink definitions</changelog>
  <changelog author="lduncan@suse.com" date="1599220800">- Moved sources from github.com/intel to github/openSUSE
  * upgrading to version v1.0.1+110.6009075a9fcc
  - merged in latest upstream (no API changes)</changelog>
  <changelog author="lduncan@suse.com" date="1599393600">- Update to version v1.0.1+69.e8f522565f5a to removed commpiler
  and rpmlint complaints:
  * Fix bash-completion dir: don't use /etc
  * Fix compiler issue with strcpy(): use memcpy
  * Fix compiler complaint argument type mismatch.
  * Fix compiler complaint declaration vs function.
  * Fix compiler complaint copying to packed member.
  * add 'lldpad.socket' to the '%service_*' macros in the SPEC
    file</changelog>
  <changelog author="lduncan@suse.com" date="1604923200">- Update to version v1.1+15.ef8495548d04, by merging
  upstream version 1.1 + latest, including:
  * Fix merge error: remove bogus line
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  This removed the need for the patch disable-werror.patch.</changelog>
  <changelog author="lduncan@suse.com" date="1607601600">- Update to version v1.1+18.0e969d0edcc4:
  * event_iface: only set rcv buf size if too small (bsc#1175570)</changelog>
  <changelog author="lduncan@suse.com" date="1610107200">- Update to version v1.1+36.e926f7172b96:
  * tx: rename variable
  * event_iface: only set rcv buf size if too small (bsc#1175570)
  * tx: when operating in rx-only mode don't send a port shutdown pdu
  * Update .travis.yml
  * vdp22: manpage typo
  * lldptool: fix manpage
  * lldp_head: remove all references
  * add_rtattr: only copy if data is provided
  * autoconf: convenience to setup asan and ubsan
  * Post 1.1 release</changelog>
  <changelog author="lduncan@suse.com" date="1632139200">- Update to version v1.1+44.0f781b4162d3:
  * agent: reset frame status on message delete
  * Avoiding null pointer dereference</changelog>
  <changelog author="tabraham@suse.com" date="1704974400">- Update to version latest Intel upstream (v1.1+77.75e83b6fb98e, jsc#PED-6852):
  * lldpad: dcbx: prevent null dereference in dcbx_free_data (bsc#1212749)
  * dcbx: Fix use-after-free
  * dcbx: Fix NULL pointer dereference
  * dcbx: Fix leak when receiving legacy TLVs with mismatched mode
  * lldp: Reject frames with duplicate TLVs
  * dcbx: Free manifest in rchange callback
  * dcbx: Avoid memory leak if ifup is called twice
  * ctrl_iface: Fix a memory leak in ctrl_iface_deinit
  * lldp: Avoid sending uninitialized data
  * lldptool: fix null pointer deference
  * Revert "Use interface index instead of name in libconfig"
  * Avoiding null pointer dereference
  * agent: reset frame status on message delete
  * basman: use return address when pulling address
  * 8021Qaz: check for rx block validity
  * 8021qaz: squelch initialization errors
  * macvtap: fix error condition
  * vdp22: convert command parsing to null term</changelog>
</package>
<package pkgid="4de43dd8e4509c3eb2257ea0f7613d29714f2c503ae0933a4b7d949c5c5043ba" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.2.0" rel="150300.26.1"/>
  <changelog author="kallan@suse.com" date="1598616000">- Update to 11.1.5 (build 16724464) (boo#1175573)
  + This source release rolls up the SDMP fixes release post 11.1.0.
  + Fix serveral Coverity reported issues.
  + Address github issues:
    https://github.com/vmware/open-vm-tools/issues/451
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/issues/428
- Drop unnecessary patch:
  - gcc10-warning.patch
  - sdmp-get-version.patch
  - sdmp-netstat-to-ss.patch
  - sdmp-warnings.patch</changelog>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
</package>
<package pkgid="27a6829a330cc6cf99954548cbb8799a2875c6e7377ce824a16a865cf49cd7cf" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.26.1"/>
  <changelog author="kallan@suse.com" date="1598616000">- Update to 11.1.5 (build 16724464) (boo#1175573)
  + This source release rolls up the SDMP fixes release post 11.1.0.
  + Fix serveral Coverity reported issues.
  + Address github issues:
    https://github.com/vmware/open-vm-tools/issues/451
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/issues/428
- Drop unnecessary patch:
  - gcc10-warning.patch
  - sdmp-get-version.patch
  - sdmp-netstat-to-ss.patch
  - sdmp-warnings.patch</changelog>
  <changelog author="schwab@suse.de" date="1599480000">- Use libtirpc also in SLE-15-SP3</changelog>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
</package>
<package pkgid="a3747306348439e978efae5c10bdad0105091465aecd394423572f33a6663a24" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="a2d75bceb12e53a9c33b11d4e758dcd72ec88c9f349b65fc1ae579adbe6228c1" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.29.1"/>
  <changelog author="kallan@suse.com" date="1603281600">- Update to 11.2.0 (build 16938113) (boo#1177987)
  + Fixed memory leak occurs in disk device mapping information for IDE,
    SATA or SAS (LSI Logic SAS) disks configured in the guest.
  + The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/429
    https://github.com/vmware/open-vm-tools/pull/431
    https://github.com/vmware/open-vm-tools/pull/432
    https://github.com/vmware/open-vm-tools/issues/452
  + A number of Coverity reported errors and false positives have been
    addressed.
  + A complete list of the granular changes that are in the open-vm-tools
    11.2.0 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.0/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch (boo#1177987): removed the pam_securetty.so line
  from the new suse file.  Modified the Makefile.am to copy the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
</package>
<package pkgid="d15e2f3492deb5e9c82f733749f7ed71853026d8d831309d5243fd3e5e638419" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.2.0" rel="150300.33.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
</package>
<package pkgid="8e39a937d198e46e232867da9035b6167e35870dad8b051384fed1efeffa0e0f" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.2.0" rel="150300.33.1"/>
  <changelog author="dimstar@opensuse.org" date="1604923200">- Add explicit pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: used
  to be pulled in (as part of gdk-pixbuf) by GTK3 in the past. But
  as configure explicitly looks for it, it is our own duty to
  ensure its presence.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1606910400">- Enable build on aarch64</changelog>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
</package>
<package pkgid="7cfca3d7bdac19eeedea8fb6217afc3488dc9d04d02448f79dbab8343df7a916" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.0" rel="150300.37.1"/>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
</package>
<package pkgid="e4094742d9835e3187e1ffda2c03f269e00d1dc12671dacd3c73767790cc3597" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.37.1"/>
  <changelog author="kallan@suse.com" date="1611230400">- Update to 11.2.5 (build 17337674) (boo#1180997)
  + Resolved issues:
  - The SUSE specific vmtoolsd PAM configuration file incorrectly referenced
    pam_securetty.so.
  - The following issues and pull requests reported on
    https://github.com/vmware/open-vm-tools have been addressed:
    https://github.com/vmware/open-vm-tools/issues/467
    https://github.com/vmware/open-vm-tools/issues/468
    https://github.com/vmware/open-vm-tools/pull/469
  - A number of Coverity reported errors and false positives have been
    addressed.
  - A complete list of the granular changes that are in the
    open-vm-tools 11.2.5 release is available at:
    https://github.com/vmware/open-vm-tools/blob/stable-11.2.5/open-vm-tools/ChangeLog
- Update pam-vmtoolsd.patch: With the pam_securetty.so entry fixed, only need
  the modified Makefile.am portion of the patch which copies the suse file to
  the /etc/pam.d/vmtoolsd file rather than the default generic file.</changelog>
  <changelog author="lnussel@suse.de" date="1615809600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
</package>
<package pkgid="6dd1eb15087fd6f4fec849d60becd881be2e9640218aed1ac4cba2eb8045064a" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.0" rel="150300.40.1"/>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
</package>
<package pkgid="074b3782faa8af65d3f018bdc1da4882b0fb4ea3cd14ff1e1fc7dc5518cddbd7" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.40.1"/>
  <changelog author="dimstar@opensuse.org" date="1616760000">- Add open-vm-tools-glib-2.67.patch: Fix build with glib 2.67.
  Patch has been borrowed by Fedora, upstream is still busy working
  out a patch (I'd not be surprised if they end up merging this
  finally.
  https://github.com/vmware/open-vm-tools/issues/500</changelog>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
</package>
<package pkgid="89dbcb6e0279ce2bd921ae279c049f4c3002672adfeafd097321bff693a741b5" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.0" rel="150300.43.1"/>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="a5d51aa3d61016e60ba79464c7af260a6853af21040e1bd0698b94a7b6001348" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.0" rel="150300.43.1"/>
  <changelog author="kallan@suse.com" date="1620302400">- Add open-vm-tools-pollGtk.patch: Fixes boo#1185103 GCC 11: open-vm-tools
  package fails.</changelog>
  <changelog author="kallan@suse.com" date="1624536000">- Update to 11.3.0 (build 18090558) (boo#1187567)
  + Resolved issues:
  - The following github issues and pull requests have been resolved:
    446, 481, 500, and 509
  - The following Pull requests have been resolved: 474 and 505
  - A number of issues detected by Coverity, internally or by third parties,
    have been addressed.
  - A command line tool, vmwgfxctrl, has been added to open-vm-tools for
    Linux that can be used to control various aspects of the vmwgfx Linux
    kernel module.  Currently it can both display and set the current
    topology of the vmwgfx kernel driver. It is useful when trying to
    configure custom resolutions on recent Linux distributions, including
    multi-monitor setups.
  - A command line tool, vmware-alias-import, has been added to
    open-vm-tools that can be used to import vgauth config data and apply
    it to the running vgauth service.
  - Enhancements to support or utilize various vSphere features.
- Fixed bug (bsc#1185175) In vmtoolsd.service move deprecated path
  "/var/run" to "/run" for it's PIDfile.
- Update pam-vmtoolsd.patch to compensate for new line numbers.
- Drop patch now contained in 11.3.0:
  - open-vm-tools-glib-2.67.patch
  - open-vm-tools-pollGtk.patch</changelog>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="83465ccabfb43714140929fcaac01b11a3f62fe22fd07bce08f6fa0cacfacd96" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.3.5" rel="150300.46.1"/>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="3a2e53de84ccb724b8241bef9e10346dd483ad3e3d2ac15a541f1a2f7b259ffc" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.3.5" rel="150300.46.1"/>
  <changelog author="kallan@suse.com" date="1633348800">- Update to 11.3.5 (build 18557794) (boo#1190987)
  + New/Updated features:
  - Added a configurable logging capability to the network script.
    The network script has been updated to:
    use vmware-toolbox-cmd to query any network logging configuration from
    the tools.conf file.  Use vmtoolsd --cmd "log ..." to log a message to
    the vmx logfile when the logging handler is configured to "vmx" or when
    the logfile is full or is not writeable.
  - The hgfsmounter (mount.vmhgfs) command has been removed from
    open-vm-tools.
    The hgfsmounter (mount.vmhgfs) command is no longer used in
    Linux open-vm-tools. It has been replaced by hgfs-fuse. Therefore,
    removing all references to the hgfsmounter in Linux builds.
  + Resolved issues:
  - Customization: Retry the Linux reboot if telinit is a soft link to
    systemctl.
  - Open-vm-tools commands would hang if configured with "--enable-valgrind".
  + Spec file updates for:
  - rpmlint errors
  - arg_xmlsec1 --enable-xmlsec1 for better xmlsec1/libxml2 handling.</changelog>
  <changelog author="kallan@suse.com" date="1648468800">- Update to 12.0.0 (build 19345655) (boo#1196803)
- jsc#SLE-24097 ECO Update open-vm-tools 12.0.0
  + New/Updated features:
  - Support for managing Salt Minion through guest variables.  A new
    open-vm-tools-salt-minion rpm is added to handle this support.
    jsc#SLE-24094 Update open-vm-tools 12.0.0 SLES15SP4
    jsc#SLE-24095 Update open-vm-tools 12.0.0 SLES15SP3
    jsc#SLE-24096 Update open-vm-tools 12.0.0 SLES12SP5
  - New ComponentMgr plugin to manage (add, remove, monitor) components on
    the guest VM.
  - Patch to fix potential Fail to Build from Source [FTBFS] (boo#1196804).
  - Build vmhgfs with either libfuse2 or libfuse3.
  + A number of Coverity and Codacy reported issues have been addressed.
  + The following issues and pull requests reported on
    github.com/vmware/open-vm-tools have been addressed: Issue # 128,
    Issue # 314, Pull # 513, Pull # 544, Pull # 573
- Added patches
  + gcc_size_t.patch (boo#1196804)</changelog>
  <changelog author="kallan@suse.com" date="1661428800">- Update to 12.1.0 (build 20219665) (boo#1202733)
  + New/Updated features:
  - Contains security update fix for (bsc#1202657) - (CVE-2022-31676)
    VUL-0: CVE-2022-31676: open-vm-tools:
    local privilege escalation vulnerability
  + A number of Coverity reported issues have been addressed.
  + [FTBFS] Fix the build of the ContainerInfo plugin for a 32-bit Linux
    release:
    https://github.com/vmware/open-vm-tools/pull/588
  + Make HgfsConvertFromNtTimeNsec aware of 64-bit time_t on i386 (32-bit)
    This change incorporates the support of 64 bit time epoch conversion
    from Windows NT time to Unix Epoch time on i386.
    https://github.com/vmware/open-vm-tools/pull/387
- Drop patch now contained in 12.1.0:
  + gcc_size_t.patch</changelog>
  <changelog author="caleb.crane@suse.com" date="1670500800">- Add _service to handle open-vm-tools sources
- Update to 12.1.5 (build 20735119) (boo#1205962)
  - A number of Coverity reported issues have been addressed.
  - The deployPkg plugin may prematurely reboot the guest VM before cloud-init
    has completed user data setup. If both the Perl based Linux customization
    script and cloud-init run when the guest VM boots, the deployPkg plugin
    may reboot the guest before cloud-init has finished. The deployPkg
    plugin has been updated to wait for a running cloud-init process to
    finish before the guest VM reboot is initiated. This issue is fixed in
    this release.
  - A SIGSEGV may be encountered when a non-quiesing snapshot times out.
    This issue is fixed in this release.
  - Unwanted vmtoolsd service error message if not on a VMware hypervisor.
    When open-vm-tools comes preinstalled in a base Linux release, the vmtoolsd
    services are started automatically at system start and desktop login.
    If running on physical hardware or in a non-VMware hypervisor, the services
    will emit an error message to the Systemd's logging service before stopping.
    This issue is fixed in this release.</changelog>
  <changelog author="caleb.crane@suse.com" date="1670846400">- Add containerInfo plugin (jsc-PED-1344)
  - Add dependencies on grpc, protobuf, and containerd for container
    introspection
- Added patches (jsc-PED-1344)
  + detect-suse-location.patch</changelog>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
</package>
<package pkgid="e6838214a617262087cedb34a2ae92a0e0a734633a2653166b4e28f41e184340" name="open-vm-tools" arch="src">
  <version epoch="0" ver="12.4.0" rel="150300.49.11"/>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
</package>
<package pkgid="c948cb4e108e6145dd19189c723a773e4bf950d5b9be64910a63d2ed90e94322" name="open-vm-tools" arch="x86_64">
  <version epoch="0" ver="12.4.0" rel="150300.49.11"/>
  <changelog author="kallan@suse.com" date="1670932800">- Don't use new LDFLAGS, -labsl_synchronization -lgpr, when building for SLE.</changelog>
  <changelog author="kallan@suse.com" date="1671019200">- Don't list libgrpc++, libgrpc, and libprotobuf in the containerinfo Requires
  section.  The dependencies will be added automatically.</changelog>
  <changelog author="schubi@suse.com" date="1672228800">- Migration of PAM settings to /usr/lib/pam.d.</changelog>
  <changelog author="kallan@suse.com" date="1680004800">- Update to 12.2.0 (build 21223074) (boo#1209128)
  - There are no new features in the open-vm-tools 12.2.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - Linux quiesced snapshots have been updated to avoid intermittent hangs of
    the vmtoolsd process.
  - Updated the guestOps to handle some edge cases when File_GetSize() fails
    or returns -1.
  - A number of Coverity reported issues have been addressed.
  - Detect the proto files for the containerd grpc client in alternate
    locations.  Pull request #626
  - FreeBSD: Support newer releases and code clean-up for earlier versions.
    Pull request #584
  - Please refer to the release notes at
    https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.2.0 release are in the
    ChangeLog at https://github.com/vmware/open-vm-tools/blob/stable-12.2.0/
    open-vm-tools/ChangeLog
- Update detect-suse-location.patch to remove upstream accepted portion of the
  patch (jsc-PED-1344).</changelog>
  <changelog author="kallan@suse.com" date="1680609600">- As per jsc-PED-1344, update spec file to only build the containerinfo
  plugin for TW/SLES 15 SP5 and newer.</changelog>
  <changelog author="jengelh@inai.de" date="1683028800">- Add 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch,
  0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  [boo#1210695]
- Reduce generated script size by coalescing multiple %service_*</changelog>
  <changelog author="kallan@suse.com" date="1686571200">- Fix (bsc#1212143) - (CVE-2023-20867) - VUL-0: CVE-2023-20867:
  open-vm-tools: Authentication Bypass vulnerability in the vgauth
  module
  + Add patch: 2023-20867-Remove-some-dead-code.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- limit to protobuf &lt; 22 for now until build failures have been fixed</changelog>
  <changelog author="kallan@suse.com" date="1693224000">- Fix (bsc#1214566) - (CVE-2023-20900) - VUL-0: CVE-2023-20900:
  open-vm-tools: SAML token signature bypass vulnerability
  + Add patch: CVE-20230-20900.patch</changelog>
  <changelog author="kallan@suse.com" date="1694001600">- Update to 12.3.0 (build 22234872) (boo#1214850)
  - There are no new features in the open-vm-tools 12.3.0 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release integrates CVE-2023-20900 without the need for a patch.
    For more information on this vulnerability and its impact on VMware
    products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0019.html.
  - A tools.conf configuration setting is available to temporaily direct
    Linux quiesced snaphots to restore pre open-vm-tools 12.2.0 behavior
    of ignoring file systems already frozen.
  - Building of the VMware Guest Authentication Service (VGAuth) using
    "xml-security-c" and "xerces-c" is being deprecated.
  - A number of Coverity reported issues have been addressed.
  - A number of GitHub issues and pull requests have been handled.
    Please see the Resolves Issues section of the Release Notes.
  - For issues resolved in this release, see the Resolved Issues section
    of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.0
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.0 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.0/open-vm-tools/ChangeLog
- Fix (bsc#1205927) - hv_vmbus module is loaded unnecessarily in VMware guests
- jsc-PED-1344 - reinable building containerinfo plugin for SLES 15 SP4.
- Drop patch now contained in 12.3.0:
  + 0001-build-put-l-specifiers-into-LIBADD-not-LDFLAGS.patch
  + 0002-build-use-grpc-pkgconfig-to-retrieve-flags-libraries.patch
  + 2023-20867-Remove-some-dead-code.patch
  + CVE-20230-20900.patch</changelog>
  <changelog author="meissner@suse.com" date="1695297600">- open-vm-tools is built with containerinfo plugin from 15 sp3 onwards</changelog>
  <changelog author="kallan@suse.com" date="1695902400">- 15 sp4 currently uses open-vm-tools rpms from 15 sp3.  As such, enable
  the spec file fix for bug (bsc#1205927) for 15 sp3 onwards.</changelog>
  <changelog author="kallan@suse.com" date="1697803200">- Fix (bsc#1216432) - VUL-0: CVE-2023-34058: open-vm-tools: SAML token
  signature bypass vulnerability.
- Fix (bsc#1216433) - VUL-0: : CVE-2023-34059: open-vm-tools: file
  descriptor hijack vulnerability
  + Add patch:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1697976000">- Drop pkgconfig(gdk-pixbuf-xlib-2.0) BuildRequires: No longer
  needed, nor used (since 12.3.0 release).</changelog>
  <changelog author="kallan@suse.com" date="1698667200">- Update to 12.3.5 (build 22544099) (boo#1216670)
  - There are no new features in the open-vm-tools 12.3.5 release. This is
    primarily a maintenance release that addresses a few critical problems,
    including:
  - This release resolves CVE-2023-34058. For more information on this
    vulnerability and its impact on VMware products, see
    https://www.vmware.com/security/advisories/VMSA-2023-0024.html.
  - This release resolves CVE-2023-34059 which only affects open-vm-tools.
    For more information on this vulnerability, please see the Resolved
    Issues section of the Release Notes.
  - A GitHub issue has been handled. Please see the Resolved Issues section
    of the Release Notes.
  - An update to the deployPkg plugin to coordinate with recent releases
    of cloud-init for improvement for guest VM customization.
  - For issues resolved in this release, see the Resolved Issues
    &lt;https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md#resolved-issues&gt;
    section of the Release Notes.
  - For complete details, see:
    https://github.com/vmware/open-vm-tools/releases/tag/stable-12.3.5
  - Release Notes are available at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/ReleaseNotes.md
  - The granular changes that have gone into the 12.3.5 release are in the
    ChangeLog at
    https://github.com/vmware/open-vm-tools/blob/stable-12.3.5/open-vm-tools/ChangeLog
- Drop patch now contained in 12.3.5:
  - CVE-2023-34058.patch
  - CVE-2023-34059.patch</changelog>
  <changelog author="kallan@suse.com" date="1702296000">- Fix (bsc#1217796) - Fix outdated libxmlsec1 dependency version.
  Updates to open-vm-tools for SLES 12 SP4 and SP5 are now being built
  againt against libxmlsec1-1-1.2.37. Update the spec file to now require
  libxmlsec1-openssl1 &gt;= 1.2.37.</changelog>
  <changelog author="dimstar@opensuse.org" date="1703073600">- Own %{_modulesloaddir}: used to be present via udev-mini -&gt; kmod
  - &gt; suse-module-tools dependency before.</changelog>
  <changelog author="dimstar@opensuse.org" date="1708948800">- Use %patch -P N instead of deprecated %patchN.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1711195200">- update to 12.4.0:
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/ReleaseNotes.md
  https://github.com/vmware/open-vm-tools/blob/stable-12.4.0/open-vm-tools/ChangeLog
  There are no new features in the open-vm-tools 12.4.0 release.
  This is primarily a maintenance release that addresses a few
  critical problems, including:
  * A Github pull request has been handled. Please see the Resolved
    Issues section of the Release Notes.
  * A number of issues flagged by Coverity have been addressed.
  * For issues resolved in this release, see the Resolved Issues
    section of the Release Notes.</changelog>
  <changelog author="kallan@suse.com" date="1711540800">- Remove protobuf &lt; 22 dependency from spec file (bsc#1217478)
  Required linking with additional absl libraries for sle_version &gt; 150400.
- Use (boo#1222089) for updating open-vm-tools to version 12.4.0.</changelog>
</package>
<package pkgid="9b7b71834503d22076ed5d7bf274a480a8ccd0a4db2da16053757ab8eeabb856" name="openldap2" arch="src">
  <version epoch="0" ver="2.4.46" rel="150200.14.14.1"/>
  <changelog author="william.brown@suse.com" date="1588248000">- bsc#1170771 (CVE-2020-12243) - recursive filters may crash server
  * patch: 0205-bsc-1170771-limit-depth-of-nested-filters.patch</changelog>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
</package>
<package pkgid="4bc1e7ce719cdfc31003b4ceb455270b3e58141c633f1aadce340b7e9dbe3c3f" name="openldap2" arch="src">
  <version epoch="0" ver="2.4.46" rel="150200.14.17.1"/>
  <changelog author="william.brown@suse.com" date="1591876800">- bsc#1172704 - Change DB_CONFIG to root:ldap permissions.
- bsc#1172698 (CVE-2020-8023) - local priv esc via start script
  chown -R on olcdbdirectory path. Remove chown -R on start to
  resolve.</changelog>
  <changelog author="william.brown@suse.com" date="1598011200">- bsc#1174154 - CVE-2020-15719 - This resolves an issue with x509
  SAN's falling back to CN validation in violation of rfc6125.
  * 0206-openldap-tlso-use-openssl-api-to-verify-host.patch</changelog>
  <changelog author="william.brown@suse.com" date="1598443200">- bsc#1175568 CVE-2020-8027
  openldap_update_modules_path.sh has a number of issues in it's
  design that lead to security issues. This file has been removed,
  from the package, and the %post execution of the install. The
  function is replaced by /usr/sbin/slapd-ldif-update-crc and
  /usr/lib/openldap/fixup-modulepath, through the addition of the
  source files:
  * fixup-modulepath.sh
  * slapd-ldif-update-crc.sh
  * update-crc.sh</changelog>
  <changelog author="william.brown@suse.com" date="1604923200">- bsc#1178387 (CVE-2020-25692) - unauthenticated remote denial of
  service due to incorrect validation of modrdn equality rules.
  * patch: 0207-ITS-9370-check-for-equality-rule-on-old_rdn.patch</changelog>
  <changelog author="william.brown@suse.com" date="1609761600">- bsc#1179503 - fix proxy retry binds to a remote server
  * patch: 0208-ITS-9400-back-ldap-fix-retry-binds.patch</changelog>
  <changelog author="william.brown@suse.com" date="1610452800">- bsc#1178909 CVE-2020-25709 CVE-2020-25710 - Resolves two issues
    where openldap would crash due to malformed inputs.
  * patch: 0209-ITS-9383-remove-assert-in-certificateListValidate.patch
  * patch: 0210-ITS-9384-remove-assert-in-obsolete-csnNormalize23.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613476800">- bsc#1182279 CVE-2021-27212 - an assertion failure in slapd can occur
    in the issuerAndThisUpdateCheck function via a crafted packet,
    resulting in a denial of service (daemon exit) via a short timestamp.
    This is related to schema_init.c and checkTime.
  * patch: 0211-ITS-9454-fix-issuerAndThisUpdateCheck.patch</changelog>
  <changelog author="william.brown@suse.com" date="1613736000">- bsc#1182408 CVE-2020-36230 - an assertion failure in slapd in the
  X.509 DN parsing in decode.c ber_next_element, resulting in denial
  of service.
  * 0220-ITS-9423-ldap_X509dn2bv-check-for-invalid-BER-after-.patch
- bsc#1182411 CVE-2020-36229 - ldap_X509dn2bv crash in the X.509 DN
  parsing in ad_keystring, resulting in denial of service.
  * 0222-ITS-9425-add-more-checks-to-ldap_X509dn2bv.patch
- bsc#1182412 CVE-2020-36228 - integer underflow leading to crash
  in the Certificate List Exact Assertion processing, resulting in
  denial of service.
  * 0223-ITS-9427-fix-issuerAndThisUpdateCheck.patch
- bsc#1182413 CVE-2020-36227 - infinite loop in slapd with the
  cancel_extop Cancel operation, resulting in denial of service.
  * 0224-ITS-9428-fix-cancel-exop.patch
- bsc#1182416 CVE-2020-36225 - double free and slapd crash in the
  saslAuthzTo processing, resulting in denial of service.
  * 0218-ITS-9412-fix-AVA_Sort-on-invalid-RDN.patch
- bsc#1182417 CVE-2020-36224 - invalid pointer free and slapd crash
  in the saslAuthzTo processing, resulting in denial of service.
  * 0217-ITS-9409-saslauthz-use-slap_sl_free-in-prev-commit.patch
  * 0216-ITS-9409-saslauthz-use-ch_free-on-normalized-DN.patch
- bsc#1182415 CVE-2020-36226 - memch-&gt;bv_len miscalculation and slapd
  crash in the saslAuthzTo processing, resulting in denial of service.
  * 0219-ITS-9413-fix-slap_parse_user.patch
- bsc#1182419 CVE-2020-36222 - assertion failure in slapd in the
  saslAuthzTo validation, resulting in denial of service.
  * 0213-ITS-9406-9407-remove-saslauthz-asserts.patch
  * 0214-ITS-9406-fix-debug-msg.patch
- bsc#1182420 CVE-2020-36221 - slapd crashes in the Certificate Exact
  Assertion processing, resulting in denial of service (schema_init.c
  serialNumberAndIssuerCheck).
  * 0212-ITS-9404-fix-serialNumberAndIssuerCheck.patch
  * 0221-ITS-9424-fix-serialNumberAndIssuerSerialCheck.patch
- bsc#1182418 CVE-2020-36223 - slapd crash in the Values Return Filter
  control handling, resulting in denial of service (double free and
  out-of-bounds read).
  * 0215-ITS-9408-fix-vrfilter-double-free.patch</changelog>
  <changelog author="william.brown@suse.com" date="1615550400">- bsc#1182791 - improve proxy connection timout options to correctly
  prune connections.
  * 0225-ITS-8625-Separate-Avlnode-and-TAvlnode-types.patch
  * 0226-ITS-9197-back-ldap-added-task-that-prunes-expired-co.patch
  * 0227-ITS-9197-Increase-timeouts-in-test-case-due-to-spora.patch
  * 0228-ITS-9197-fix-typo-in-prev-commit.patch
  * 0229-ITS-9197-Fix-test-script.patch
  * 0230-ITS-9197-fix-info-msg-for-slapd-check.patch</changelog>
  <changelog author="william.brown@suse.com" date="1623844800">- bsc#1187210 - Resolve bug in the idle / connection TTL timeout
  implementation in OpenLDAP.
  * 0231-ITS-9468-Added-test-case-for-proxy-re-binding-anonym.patch
  * 0232-ITS-9468-back-ldap-Return-disconect-if-rebind-cannot.patch
  * 0233-ITS-9468-removed-accidental-unicode-characters.patch
  * 0234-ITS-9468-documented-that-re-connecting-does-not-happ.patch
  * 0235-ITS-9468-summarize-discussion-about-rebind-as-user.patch
  * 0236-ITS-9468-fixed-typos.patch
  * 0237-ITS-9468-always-init-lc_time-and-lc_create_time.patch
  * 0238-ITS-9468-do-not-arm-expire-timer-for-connections-tha.patch</changelog>
  <changelog author="william.brown@suse.com" date="1644321600">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1647259200">- Revert jsc#PM-3288 - CLDAP ( -DLDAP_CONNECTIONLESS ) due to regression
  reporting is bsc#1197004 causing SSSD to have faults.</changelog>
  <changelog author="william.brown@suse.com" date="1647604800">- jsc#PM-3288 - restore CLDAP functionality in CLI tools</changelog>
  <changelog author="william.brown@suse.com" date="1648036800">- bsc#1197004 - libldap was able to be out of step with openldap in
  some cases which could cause incorrect installations and symbol
  resolution failures. openldap2 and libldap now are locked to their
  related release versions.</changelog>
  <changelog author="william.brown@suse.com" date="1648036801">- bsc#1191157 - allow specification of max/min TLS version with TLS1.3
  * 0239-ITS-9422-Update-for-TLS-v1.3.patch
  * 0240-ITS-9518-add-LDAP_OPT_X_TLS_PROTOCOL_MAX-option.patch
  * 0241-TLS-set-protocol-version.patch</changelog>
  <changelog author="william.brown@suse.com" date="1649937600">- bsc#1191157 - Correct version specification in ppolicy to allow
  submission to SP3 for TLS1.3</changelog>
  <changelog author="william.brown@suse.com" date="1651838400">- bsc#1199240 - CVE-2022-29155 - Resolve sql injection in back-sql
  * 0242-ITS-9815-slapd-sql-escape-filter-values.patch</changelog>
  <changelog author="william.brown@suse.com" date="1655208000">- bsc#1198341 - Prevent memory reuse which may lead to instability
  * 0243-Change-malloc-to-use-calloc-to-prevent-memory-reuse-.patch</changelog>
  <changelog author="william.brown@suse.com" date="1685448000">- bsc#1211795 - CVE-2023-2953 - Null pointer deref in ber_memalloc_x
  * 0244-ITS-9904-ldif_open_url-check-for-ber_strdup-failure.patch</changelog>
  <changelog author="william.brown@suse.com" date="1686657600">- bsc#1212260 - crash in libldap when non-ldap data responds
  * 0245-ITS-9803-Drop-connection-when-receiving-non-LDAP-dat.patch</changelog>
</package>
<package pkgid="3c3e54832a146c16fd5e2604d67966ff82eec46c877b6849fe8de30181598439" name="opensc" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="b1744dcd409c300c85eea6a8ce44cb8daf611a7beaa862b88771ae4df11c0cc9" name="opensc" arch="s390x">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="3f0add7bd7aea75b486327bec3b3e201ec24cad0c7d8ee744c13500ef1237c31" name="opensc" arch="src">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1294401600">- Updated to version 0.12.0:
  * Security fix (bnc#660109, CVE-2010-4523).
  * Only one backend is supported. openSUSE will use pcsc-lite.
  * libopensc made private, library should not be used by other
    applications. Please use generic PKCS#11 interface instead.
  * Signer plugin discontinued. Please use openssl engine_pkcs11.
  * No more depends on libassuan.
  * New card drivers.
  * Support for CardOS enhanced.
  * More changes and enhancements.
- libopensc merged back to the main package, as it is private now.</changelog>
  <changelog author="lmedinas@opensuse.org" date="1317297600">- Updated to version 0.12.2:
  * Builds are now silent by default when OpenSC is built from
    source on Unix.
  * Using --wait with command line tools works with 64bit Linux
    again.
  * Greatly improved OpenPGP card support, including OpenPGP
    2.0 cards like the one found in German Privacy Foundation
    CryptoStick.
  * Fixed support for FINeID cards issued after 01.03.2011 with
    2048bit keys.
  * #256: Fixed support for TCOS cards (broken since 0.12.0).
  * Added support for IDKey-cards to TCOS3 driver.
  * #361: Improved PC/SC driver to fetch the maximum PIN sizes
    from the open source CCID driver. This fixes the issue for
    Linux/OSX with recent driver.
  * Fix FINeID cards for organizations.
  * Several smaller bugs and compiler warnings fixed
- Updated to version 0.12.1:
  * IAS-ECC 1.0.1
  * Support for cards with multiple PKCS#15 applications
  * New card driver: IAS/ECC 1.0.1
  * rutoken-tool has been deprecated and removed.
  * eidenv and piv-tool utilities now have manual pages.
  * pkcs11-tool now requires the use of --module parameter.
  * All tools can now use an ATR as an argument to --reader,
    to skip to the card with given ATR.
  * opensc-tool -l with -v now shows information about the
    inserted cards.
  * Creating files have an enforced upper size limit, 64K
  * Support for multiple PKCS#15 applications with different
    AID-s. PKCS#15 applications can be listed with pkcs15-tool
  - -list-applications. Binding to a specific AID with PKCS#15
    tools can be done with --aid.
  * Hex strings (like card ATR or APDU-s) can now be separated
    by space, in addition to colons.
  * Pinpad readers known to be bogus are now ignored by OpenSC.
    At the moment only "HP USB Smart Card Keyboard" is disabled.
  * Numerous compiler warnings, unused code and internal bugs
    have been eliminated.</changelog>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="2869da9911f982948c9b5c4791b7049029655a93ff0598845fb90c1562c81dda" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150400.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
</package>
<package pkgid="80e844f720c01772bfefc35fff9c7040bf1797a72616695fc383e5de157da7b9" name="opensc" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="9ce6d260f3651309d75c7e21501cea4973ec12582bcd92e73ceb831688724a16" name="opensc" arch="s390x">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="a92abbecd97b743968bef98078c7ee1ab42e453128ef9729a4ecd8b19b0f8dc5" name="opensc" arch="src">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="6d46e2a2a305fb1f77c52a01f983f45af0c541ff8ff568f5b4cb3a3582ac9d93" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150400.3.6.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
</package>
<package pkgid="afc41a4a086dfba0893409b4b6d943e432bcb15a61ca597dc914ebbd55bd8254" name="opensc" arch="aarch64">
  <version epoch="0" ver="0.22.0" rel="150400.3.9.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1713268800">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="55ae82907a8a82650df085603ca9d890c9db4a6e51a8c867037a2ac060181ed6" name="opensc" arch="s390x">
  <version epoch="0" ver="0.22.0" rel="150400.3.9.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1713268800">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="9b34c6c981179d745b5d55f916c4ed7b238f0169486bee3a6b06a722d0d83731" name="opensc" arch="src">
  <version epoch="0" ver="0.22.0" rel="150400.3.9.1"/>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1713268800">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="a57b7092685f73e0884ec2b9a5cad43758a575e7cf8fd9f3bb27a16efef0880b" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.22.0" rel="150400.3.9.1"/>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
  <changelog author="kbabioch@suse.com" date="1536840000">- Update to version 0.19.0
  * Fixed multiple security problems (out of bound writes/reads):
  * bsc#1104812
  * CVE-2018-16391 (bsc#1106998)
  * CVE-2018-16392 (bsc#1106999)
  * CVE-2018-16393 (bsc#1108318)
  * CVE-2018-16418 (bsc#1107039)
  * CVE-2018-16419 (bsc#1107107)
  * CVE-2018-16420 (bsc#1107097)
  * CVE-2018-16421 (bsc#1107049)
  * CVE-2018-16422 (bsc#1107038)
  * CVE-2018-16423 (bsc#1107037)
  * CVE-2018-16424 (bsc#1107036)
  * CVE-2018-16425 (bsc#1107035)
  * CVE-2018-16426 (bsc#1107034)
  * CVE-2018-16427 (bsc#1107033)
  * Workaround cards returning short signatures without leading zeroes
  * Distribute minimal opensc.conf
  * `pkcs11_enable_InitToken made` global configuration option
  * Modify behavior of `OPENSC_DRIVER` environment variable to restrict driver
    list instead of forcing one driver and skipping vital parts of
    configuration
  * Removed configuration options `zero_ckaid_for_ca_certs`,
    `force_card_driver`, `reopen_debug_file`, `paranoid-memory`
  * Generalized configuration option `ignored_readers`
  * If card initialization fails, continue card detection with other card
    drivers
  * reader-pcsc: allow fixing the length of a PIN
  * fixed crash during `C_WaitForSlotEvent`
  * Allow cancelling the PIN pad prompt before starting the reader transaction.
    Whether to start the transaction immediately or not is user-configurable
    for each application
  * opensc-notify
  * add Exit button to tray icon
  * User better description (GenericName) and a generic application icon
  * Do not display in the application list
- Removed patches included upstream now:
  * opensc-desktop.patch
  * opensc-desktop2.patch
  * opensc-bash-completions.patch
- Applied spec-cleaner</changelog>
  <changelog author="code@bnavigator.de" date="1563883200">- add explicit BuildRequires: zlib-devel</changelog>
  <changelog author="jsikes@suse.de" date="1564488000">- added opensc-0.19.0-rsa-pss.patch
  * Fixes the pkcs11-tool example
  * Added missing CKM_SHA224_RSA_PKCS_PSS
  * Add support for PSS padding to RSA signatures
  * Support for signature verification in pkcs11-tool
  * Switch cleanup steps to avoid segfaults on errors and more sanity checking
- added opensc-0.19.0-redundant_logging.patch
  * Remove redundant debug output</changelog>
  <changelog author="jsikes@suse.com" date="1566129600">- added opensc-0.19.0-piv_card_matching.patch
  * Improve Card Matching for Dual CAC/PIV and PIVKEY cards.
  * sourced from https://github.com/OpenSC/OpenSC/pull/1549</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1606478400">- OpenSC 0.21.0:
  * CVE-2020-26571: stack-based buffer overflow in the gemsafe GPK
    smart card software driver (boo#1177380)
  * CVE-2020-26572: stack-based buffer overflow in the TCOS smart
    card software driver (boo#1177378)
  * CVE-2020-26570: heap-based buffer overflow in the Oberthur
    smart card software driver (boo#1177364)
  * CardOS 5.x support boo#1179291
  * Support for OAEP encryption, make SHA256 default
  * New separate debug level for PIN commands
  * Fix handling of card/reader insertion/removal events in pcscd
  * Fixes of removed readers handling
  * Fix Firefox crash because of invalid pcsc context
  * PKCS#11: Return CKR_TOKEN_NOT_RECOGNIZED for not recognized cards
  * Propagate ignore_user_content to PKCS#11 layer not to confuse applications
  * Minidriver: Fix check of ATR length (2-to 33 characters inclusive)
  * pkcs11-tool: allow using SW tokens
  * opensc-explorer asn1 accepts offsets and decode records
  * opensc-explorer cat accepts records
  * OpenPGP: Add new ec curves supported by GNUK
  * First steps supporting OpenPGP 3.4
  * OpenPGP: Add support for EC key import
  * Rutoken: Add ATR for Rutoken ECP SC NFC
  * Improve detection of various CardOS 5 configurations
  * DNIe: Add new DNIe CA structure for the secure channel
  * ePass2003: Improve ECC support
  * ePass2003: Fix erase sequence
  * IAS-ECC: Fix support for Idemia Cosmo cards
  * IAS-ECC: PIN padding settings are now used from PKCS#15 info when available
  * IAS-ECC: Added PIN-pad support for PIN unblock
  * New driver for Gemalto IDPrime (only some types)
  * eDo: New driver with initial support for Polish eID card (e-dowód, eDO)
  * MCRD: Remove unused and broken RSA EstEID support
  * TCOS: Add missing encryption certificates
  * PIV: Add ATR of DOD Yubikey
  * fixed PIV global pin bug
  * CAC1: Support changing PIN with CAC Alt tokens
- includes changes from 0.20.0
  * CVE-2019-6502: memory leak in libopensc (boo#1122756)
  * CVE-2019-15946: out-of-bounds access of an ASN.1 Octet string (boo#1149747)
  * CVE-2019-15945: out-of-bounds access of an ASN.1 Bitstring (boo#1149746)
  * CVE-2019-19479: incorrect read operation during parsing of a SETCOS file attribute (boo#1158256)
  * CVE-2019-19480: improper free operation in sc_pkcs15_decode_prkdf_entry (boo#1158307)
  * CVE-2019-20792: double free in coolkey_free_private_dat (bsc#1170809)
  * Support RSA-PSS signature mechanisms using RSA-RAW
  * Added memory locking for secrets
  * added support for terminal colors
  * PC/SC driver: Fixed error handling in case of changing or removing the card reader
  * rename md_read_only to read_only and use it for PKCS#11 and Minidriver
  * allow global use of ignore_private_certificate
  * PKCS#11: Implement write protection (CKF_WRITE_PROTECTED) based on the card profile
  * PKCS#11: Add C_WrapKey and C_UnwrapKey implementations
  * PKCS#11: Handle CKA_ALWAYS_AUTHENTICATE when creating key objects
  * PKCS#11: Truncate long PKCS#11 labels with ...
  * PKCS#11: Fixed recognition of a token when being unplugged and reinserted
  * Minidriver: Register for CardOS5 cards
  * Minidriver: Add support for RSA-PSS
  * tools: Harmonize the use of option -r/--reader
  * goid-tool: GoID personalization with fingerprint
  * openpgp-tool: replace the options -L/--key-length with -t/--key-type
  * openpgp-tool: add options -C/--card-info and -K/--key-info
  * opensc-explorer: add command pin_info, extend random
  * pkcs11-register: Auto-configuration of applications for use of OpenSC PKCS#11
  * pkcd11-register: Autostart
  * opensc-tool: Show ATR also for cards not recognized by OpenSC
  * pkcs11-spy: parse CKM_AES_GCM, EC Derive parameters
  * pkcs11-spy: Add support for CKA_OTP_* and CKM_*_PSS values
  * pkcs11-tool: Support for signature verification via --verify
  * pkcs11-tool: Add object type secrkey for --type option
  * pkcs11-tool: Implement Secret Key write object
  * pkcs11-tool: Add GOSTR3410-2012 support
  * pkcs11-tool: Add support for testing CKM_RSA_PKCS_OAEP
  * pkcs11-tool: Add extractable option to key import
  * pkcs11-tool: list more key access flags when listing keys
  * pkcs11-tool: Add support for CKA_ALLOWED_MECHANISMS when creating new objects and listing keys
  * pkcs15-crypt: *Handle keys with user consent
  * New separate CAC1 driver using the old CAC specification (#1502)
  * CardOS: Add support for 4K RSA keys in CardOS 5
  * CardOS: Fixed decryption with CardOS 5
  * Enable CoolKey driver to handle 2048-bit keys
  * EstEID: add support for a minimalistic, small and fast card profile based on IAS-ECC issued since December 2018
  * GIDS Decipher fix (#1881)
  * GIDS: Allow RSA 4K support
  * MICARDO: Remove long expired EstEID 1.0/1.1 card support
  * MyEID: Add support for unwrapping a secret key with an RSA key or secret key
  * MyEID Add support for wrapping a secret key with a secret key
  * Support for MyEID 4K RSA
  * Support for OsEID
  * Gemalto GemSafe: add new PTeID ATRs, add support for 4K RSA keys
  * OpenPGP Card v3 ECC support
  * Add Rutoken ECP SC
  * Add Rutoken Lite
  * Add SmartCard-HSM 4K ATR
  * Add missing secp384r1 curve parameter
  * Stacros: Fix decipher with 2.3
  * Stacros: Add ATR for 2nd gen. eGK
  * Stacros: Add new ATR for 3.5
  * Stacros: Detect and allow Globalplatform PIN encoding
  * Fix TCOS IDKey support
  * TCOS: add encryption certificate for IDKey
  * Infocamere, Postecert, Cnipa: Remove profiles
  * Remove incomplete acos5 driver
- drop patches now upstream:
  * opensc-0.19.0-piv_card_matching.patch
  * opensc-0.19.0-redundant_logging.patch
  * opensc-0.19.0-rsa-pss.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615550400">- move licenses to licensedir</changelog>
  <changelog author="predivan@mts.rs" date="1624795200">- Fix build on GCC11
  * Add opensc-gcc11.patch from Fedora
    (https://github.com/OpenSC/OpenSC/pull/2241/)</changelog>
  <changelog author="daniel.donisa@suse.com" date="1633348800">- Update to OpenSC 0.22.0:
  * Removed changes in opensc-gcc11.patch already present in upstream.
  - See https://github.com/OpenSC/OpenSC/pull/2241/commits/e549e9c62eb4fcd2260800e2665071e4dd9bbbda
  * Removed some false positives from the openrc-rpmlintrc file.
  * Use standard paths for file cache on Linux (#2148) and OSX (#2214)
  * Various issues of memory/buffer handling in legacy drivers mostly reported by oss-fuzz and coverity (tcos, oberthur, isoapplet, iasecc, westcos, gpk, flex, dnie, mcrd, authentic, belpic)
  * Add threading test to `pkcs11-tool` (#2067)
  * Add support to generate generic secret keys (#2140)
  * `opensc-explorer`: Print information about LCS (Life cycle status byte) (#2195)
  * Add support for Apple's arm64 (M1) binaries, removed TokenD. A seperate installer with TokenD (and without arm64 binaries) will be available (#2179).
  * Support for gcc11 and its new strict aliasing rules (#2241, #2260)
  * Initial support for building with OpenSSL 3.0 (#2343)
  * pkcs15-tool: Write data objects in binary mode (#2324)
  * Avoid limited size of log messages (#2352)
  * Support for ECDSA verification (#2211)
  * Support for ECDSA with different SHA hashes (#2190)
  * Prevent issues in p11-kit by not returning unexpected return codes (#2207)
  * Add support for PKCS#11 3.0: The new interfaces, profile objects and functions (#2096, #2293)
  * Standardize the version 2 on 2.20 in the code (#2096)
  * Fix CKA_MODIFIABLE and CKA_EXTRACTABLE  (#2176)
  * Copy arguments of C_Initialize (#2350)
  * Fix RSA-PSS signing (#2234)
  * Fix DO deletion (#2215)
  * Add support for (X)EdDSA keys (#1960)
  * Add support for applet version 3 and fix RSA-PSS mechanisms (#2205)
  * Add support for applet version 4 (#2332)
  * New configuration option for opensc.conf to disable pkcs1_padding (#2193)
  * Add support for ECDSA with different hashes (#2190)
  * Enable more mechanisms (#2178)
  * Fixed asking for a user pin when formatting a card (#1737)
  * Added support for French CPx Healthcare cards (#2217)
  * Added ATR for new CardOS 5.4 version (#2296)
  * Fixes security issues:
  * tcos: use after return (bsc#1192005, CVE-2021-42780)
  * oberthur: use after free (bsc#1191992, CVE-2021-42779)
  * oberthur: multiple heap buffer overflows (bsc#1192000,
    CVE-2021-42781)
  * multiple stack buffer overflow issues (bsc#1191957,
    CVE-2021-42782)</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685620800">- Security Fix: [CVE-2023-2977, bsc#1211894]
  * opensc: out of bounds read in pkcs15 cardos_have_verifyrc_package()
  * Add opensc-CVE-2023-2977.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Security Fix: [CVE-2023-40660, bsc#1215762]
  * opensc: PIN bypass when card tracks its own login state
  * Add patches:
  - patches/opensc-0_22_0-CVE-2023-40660-1of2.patch
  - patches/opensc-0_22_0-CVE-2023-40660-2of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696593600">- Security Fix: [CVE-2023-40661, bsc#1215761]
  * opensc: multiple memory issues with pkcs15-init (enrollment tool)
  * Add patches:
  - opensc-CVE-2023-40661-1of12.patch
  - opensc-CVE-2023-40661-2of12.patch
  - opensc-CVE-2023-40661-3of12.patch
  - opensc-CVE-2023-40661-4of12.patch
  - opensc-CVE-2023-40661-5of12.patch
  - opensc-CVE-2023-40661-6of12.patch
  - opensc-CVE-2023-40661-7of12.patch
  - opensc-CVE-2023-40661-8of12.patch
  - opensc-CVE-2023-40661-9of12.patch
  - opensc-CVE-2023-40661-10of12.patch
  - opensc-CVE-2023-40661-11of12.patch
  - opensc-CVE-2023-40661-12of12.patch</changelog>
  <changelog author="martin.schreiner@suse.com" date="1713268800">- Security fix: [CVE-2023-5992, bsc#1219386]
  * Add patch:
  - opensc-CVE-2023-5992.patch</changelog>
</package>
<package pkgid="8e20099833ab94dcfb82ea0d818ad85b0023f512bcb7b4b078fad8410c3a84b5" name="openslp" arch="aarch64">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="d472c4dce38fe8d62311447e8ed75aa8292c0155e140b5505a2fa3cc23d46915" name="openslp" arch="s390x">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="c468323afe151a024e13dda59700d62d9dff35900c3f2ae1ddb0229703607d99" name="openslp" arch="src">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="mls@suse.de" date="1392292800">- frontport SLE11 patches:
  * add hardMTU option to limit the datagram package size to
    1400 bytes [bnc#648384].
    patch: openslp.hardmtu.diff
  * fix double free in SLPDKnownDAAdd error case [bnc#667953]
    patch: openslp.knowndafree.diff
  * fix libslp socket handling, check if socket is still alive
    and fix socket close code [bnc#693756]
    patch: openslp.loopbacksocket.diff
  * make openslpd reconnect to DAs if they closed the connection
    [bnc#723385]
    patch: openslp.slpdreconnect.diff
  * fixup lifetime of registrations a bit so that they
    don't get removed too early [bnc#658972]
    patch: openslp.lifetime.diff</changelog>
  <changelog author="mls@suse.de" date="1392811200">- update to openslp-2.0.0 to get IPv6 support
  * dropped patches:
    v1dadiscovery.diff, openslp.clrflags.diff
    openslp.fixdsareturn.diff, openslp.dereg.diff,
    openslp.tcpclearovr.diff, openslp.lifetime.diff,
    slptool-timeout.diff, openslp.poll.diff,
    openslp.ignorespaces.diff, openslp.checkovr.diff,
    openslp.fixaddrcheck.diff, openslp.loopbacksocket.diff,
    openslp.diff, openslp.doubleequal.diff, openslp.discovery.diff,
    openslp.parseext.diff, openslp.knowndafree.diff,
    openslp.emptyanswer.diff, openslp.v1sladdr.diff, hppa.diff
  * renamed patches:
    openslp-1.2.0-visibility.patch -&gt; openslp.visibility.diff
    openslp-1.2.0-daemon.diff -&gt; openslp.daemon.diff
    openslp.use-TCPDIAG-for-checking-listeners -&gt; openslp.netlink.diff
    openslp-ocloexec.patch -&gt; openslp.cloexec.diff
- always use localtime in the log file [bnc#855385]
  patch: openslp.localtime.diff
- use tcp to connect to the local SA
  patch: openslp.tcplocal.diff
- drop unused mdns support
- rename README.SuSE to README.SUSE</changelog>
  <changelog author="mls@suse.de" date="1397131200">- use AI_CANONNAME when looking up the canonical name</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406462400">- openslp.sd_notify.diff make slpd systemd service of type
  notify instead of simple, to avoid startup races.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406548800">- Do not apply previous patch to distros without systemd.
- Limit init script usage only to legacy products.</changelog>
  <changelog author="mls@suse.de" date="1409572800">- fix last commit</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="d40096c5a33fd2dbe46e8ca65003f098015b10cc2d2070bc858c3f4d6c866513" name="openslp" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="150000.6.17.1"/>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
  <changelog author="mls@suse.de" date="1559908800">- Use tcp connects to talk with other DAs [bnc#1117969]
  new patch: openslp.tcpknownda.diff
- Fix segfault in predicate match if a registered service has
  a malformed attribute list [bnc#1136136]
  new patch: openslp.nullattr.diff</changelog>
  <changelog author="vcizek@suse.com" date="1568289600">- Add missing zlib build dependency, which used to be pulled in
  by libopenssl-devel. The package fails to build since the openssl
  upgrade to 1.1.1 (bsc#1149792)</changelog>
  <changelog author="mls@suse.de" date="1585051200">- Add missing group(daemon) prerequires to the openslp-server
  package [bnc#1165050]
- Add missing openslp requires to the openslp-server package
  [bnc#1165121]</changelog>
  <changelog author="mls@suse.de" date="1618401600">- Implement automatic active discovery retries so that DAs do
  not get dropped if they are not reachable for some time
  [bnc#1166637] [bnc#1184008]
  new patch: openslp.unicastactivediscovery.diff</changelog>
</package>
<package pkgid="568997efa5610939e2777975d6ddecadadd4e70c77ed6083a2bac12a8a266d7f" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="6f3ba471eda09e36ec3fc62db18f9e9443698f0977640cf6356096ce473b13b3" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="651cf328af0b1bc574922ae4abc1ba37d83672d6bf07931cb2856f01ebe9c996" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="0e2307e610e4b80db01d9646d38a08dd475938c86b3ce0cfd7d42ff2ccb2ea38" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="9b3edd6a976e4812f4976a1b2ebafd919c074773da2f4e6d939836725d574556" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="a010dbe1ca0b8e3cceac5e10f42c4a0ba014bef936dbbaffa3c01908f149ac83" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="3298b3cac6194866f480a78d81134da1ccfedc38314c314b5c1823a69bb88fec" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="e5cd9066b9d1220c71718db05c6eec87eba359acd787825ba34f5adc2b76978f" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="1104096e66a7617b4730351722d1c0f07fef6c58ffc992ef444e3178fc73cf5b" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="d447a944ec7a86d2df650f8fddda71d63e7fc6b342cf3c0382bc6e82ee5d94bf" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="f5ac4473915013fb48d265ff501133aa381310a1f304b4d2271297484d0668e3" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="0d8d47dd676699b626b9ded1933437ab9859b4d9bdb8c070bcd9c670a0f0d498" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="7af80bcd939f084fb561a4c03ce5f8d9689b2140f730bb01069d2b9b5ea31406" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="6316264b1e432b462e70870acae1bdee29667de1cb8e2ebe204c57913f44c4da" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="2f7c774ef16abe43f78406e8d7ce1ff7e1b3027adcf87f2f31116108e074d3bf" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="78fc2ef8016f732d4ff05374ce41d68eb061c4d218827b10f7f7e65746e16b7f" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="63c35f18f1fdd28f8c99ceb64fc1bedb47233aa57256ba1f9bbf1bcb7473bb4e" name="openssh" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="931cbd00f0b466793992e4ac82c9c2403d39d5cb915bb1ba675f5c73153623ec" name="openssh" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="86a55065b6cd8700a2916dfe36444ce07287e3874cd3843f2197098dbedc6044" name="openssh" arch="src">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="0c1f7f67e58f24d3b1d8e8c921cf35a8c3b70c37839f285478db0acc80000711" name="openssh" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="de6a4cc82d4da8a960d676a5589ff746cb791c5d2baca08d40cddc9e1be52bea" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="54e4df832cadf4def977ebc03f03078e99c17cc1d5705591a7fedd0ada228283" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="deac90859fe91dd2c15e0e41d3d0e0d9053b64cb2f27f034a57d6480882112b1" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="99fff94d4283cc51fab549fddba7263249c7b76ecce22127c43b3e5ec7642b92" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="ec05ba8d80c1440912648eda1d2de4860506529ee10b80baf91701b0ea923509" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="469f40ca53dc53b87220c00473d58c1c608a3fba6628dfa9c602a531c0f8918d" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="fa8a67a714d3ebfb9e66c1a4b91cf6a9d6926f0b761a1ed9aca5412ca1b45ab1" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="7a15f371c5a7776ebfccea5aaab0e2a3945fdbc54db4c5f04786a93f01ea5918" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="169de9762b96bff3272d8ec3ed4c83fc09be278321874e4774736ce8773dd150" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="77d9cbece1d805f1fc6386babbfd30d1fe593fe6793613a46a0707e6323da158" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="5dbb5c29a43aba7f9e62dd89e6d408596de718372c4e981603e054a3b1f07a8e" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="46b125f87eba645be860ce206689354c8ddf47e07209394d412c6994965b4d7b" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="6974574a12bdc3b8decb1e16b7e09ae7fe68e610a39b6f2812ee9ec6fbbf629f" name="openssh-clients" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="b8df65c9b36f4ac39b685f8d667f5c8299bccc79fa908ae150c1238a1e0ef702" name="openssh-clients" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="de7672662be524aa38968dd33f95d4ad3c034c803b82490f8a2a7172e5f0b344" name="openssh-clients" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="c731b535574fefbd00b2d340ac3456be73b2f3451a96fec0830394bb91790944" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="e5c0836ea1405f4fdb6a8fb936d2fec0322c8927c01ee037ee78203fa8f5178d" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="b773922f92518f637254580606169e5df546c1c5825ac97529dd7d886f4ec776" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="713d7d8337c3b39dfd3df5b06bcf7ec5d8a4fc784345b2d431dc1ff1514c6507" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="8a17e824fc4516272f489ede869644a8897bf590228827798073222a94e519ff" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="62b7bbfa81dd164a52fba0f4cd59ad032a5c509959363f7a59d0521eeca93bc7" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="a32350bcfed0deaa4b5b519d6b9276c87975c38f43a17680d8e19e4b7b99640d" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="cf97dd88fe632f4ee89d3e4eb456c708ccb63aaef3e7716029174f86b69b0147" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="2fae7dfd8b50c699710be4f0e242ba6f81c0ab9410045c01da911bd6d8c24621" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="e8dfc1b215680a17ad7a2ad69ff9fba26d2a4b61cb2915123445bebf5f3bfdd5" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="3e90f35c1fe16d30c248537a5aaff38b28d7cc01441f71e7997c6df693c8c327" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="836daf382c178e49939012b4ac7834bbb8a30107ad46fafde921e7081d14e042" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="7946dd2a6f99483350dca48cdf655f8f7bc9a441d73114c5e8bb776dd36529b3" name="openssh-common" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="50da3268cae483435558dccaf48f581c32ff198b47f8e556612c27a8181dbe94" name="openssh-common" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="98c044b5cee1a2769b081bf00483aa12218e21e244b3cb1f60b4ca68c332d452" name="openssh-common" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="7738f9612beaebf9bf62cfec95397cf44ad9a5e7bcbb1050bdee2c294546dba4" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="1202c4bf7b52ac526cb054fc8c5a3f35b19eeba179a337eb4cbf406ea5219fe2" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="cfad00fdd506b9461c8ceab99ccfe125dcf28342b136dd864f64bea7f68c2708" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="3efc315a0fc59705f9e7a4f64712f376377906d8a4d47f8f9dce0b15d1172698" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="e6a5cfc736520c14eaaf8b2f71fa7e981219dc150b5e932f1bdfaed80637973c" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="b9cb44d512e315fd12b3b2b955466d3ced47e797248640c8aa71be3b91c29b9c" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="f98bb9ca74797f27abef73d168283aa189603e6063bd4358768d344cf74d0ccd" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="cebc784cabcdb4b2256c927c02522a6d8fda9f9cd97716d7539356d5f91dc303" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="914b6fb5fe05776e363991012a20c2fab24d56e9037f83f467e49c32ffb24516" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="9990ed87ab9a2236246d8ebb145f5cbea62cec9fc55cd5534f28f6646196d3a4" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="dfee18ebeb6f6ef64bd60dc65cc64fbf3a7f9b962685f4ad46efbdb751647b10" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="ece5dbaa481500adb5a1b1555bf652dfd826a84addc1f7b292d235092b0f3b9b" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="c4d64bbe1667fd1898a95ffb2a247850ef12af54036ff6b57c65e4726a2f2977" name="openssh-fips" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="0b02a5485287ef1356353650d24bcdad72dc1a033ba04313d2d24467da49bf1c" name="openssh-fips" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="4abd7c04daec3f8cc6b1861f7d9f519943cd43a2e6fee5835c462c426be77278" name="openssh-fips" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="e0f1d831bb4bdf892cbf11d5df5040e48d0a9f258cfd8ce8e5b1019daf792ff4" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="a0be90e184b7befebbca74404031b496afe080eee4a8b89391c19c6fb60c6970" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="5cc1206a0c38e9fccbca6967513405538389382b6e8a3d792317fc88eaf4751b" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.18.2"/>
  <changelog author="fbui@suse.com" date="1601035200">- Use of DISABLE_RESTART_ON_UPDATE is deprecated.
  Replace it with %service_del_postun_without_restart</changelog>
  <changelog author="dimstar@opensuse.org" date="1601035201">- Fix fillup-template usage:
  + %post server needs to reference ssh (not sshd), which matches
    the sysconfig.ssh file name the package ships.
  + %post client does not need any fillup_ calls, as there is no
    client-relevant sysconfig file present. The naming of the
    sysconfig file (ssh instead of sshd) is unfortunate.</changelog>
  <changelog author="hpj@suse.com" date="1602158400">- Work around %service_add_post disabling sshd on upgrade with
  package name change (bsc#1177039).</changelog>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
</package>
<package pkgid="1211a1435349e636455c616adbd83fe1740f82faa5198e1e713ec2dc74082871" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="f27c8d251ac7586d74c59454c32127db7f230cdb93f9ea7d71198059828f50ac" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="af1f13b76a4102c85fd4133da7d9d5f302645d488b5eed5e9bd72eb42654b8b2" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.22.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Add openssh-8.1p1-ed25519-use-openssl-rng.patch (bsc#1173799).
  This uses OpenSSL's RAND_bytes() directly instead of the internal
  ChaCha20-based implementation to obtain random bytes for Ed25519
  curve computations. This is required for FIPS compliance.</changelog>
  <changelog author="hpj@suse.com" date="1605096001">- Add openssh-fips-ensure-approved-moduli.patch (bsc#1177939).
  This ensures only approved DH parameters are used in FIPS mode.</changelog>
  <changelog author="hpj@suse.com" date="1605096002">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
</package>
<package pkgid="be7e7805300040e3392aa52dbedbafc532bd41b6fccc5ebca79dd20a164462cc" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="0d86c32de5e7509fc3be0f4be3fa1ab6a1c59e0b8c5e0acc31cca52f16afa4b7" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="04156c333b32d3c9fe2244663775958181fdbdf05cb12038e60e78e4e0974402" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.27.1"/>
  <changelog author="hpj@suse.com" date="1605096000">- Fix build breakage caused by missing security key objects:
  + Modify openssh-7.7p1-cavstest-ctr.patch.
  + Modify openssh-7.7p1-cavstest-kdf.patch.
  + Add openssh-link-with-sk.patch.</changelog>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
</package>
<package pkgid="04bd1806b9c09d0871bdcd4788e905c82b88072ba7a5b86d8beaa0ee2a878fec" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="353347c1025ad23a94fcc71ededb1e3434533c0c11f7748e3859f4dcddeaab29" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="32f47a47d046d1e8c88426bcfd5dbaa1f66231c4741240c4e2149a81128dffca" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.30.1"/>
  <changelog author="kukuk@suse.com" date="1606478400">- Support /usr/etc/pam.d</changelog>
  <changelog author="hpj@suse.com" date="1610107200">- Update openssh-8.1p1-audit.patch (bsc#1180501). This fixes
  occasional crashes on connection termination caused by accessing
  freed memory.</changelog>
  <changelog author="dmueller@suse.com" date="1610971200">- update to 8.4p1:
  Security
  ========
  * ssh-agent(1): restrict ssh-agent from signing web challenges for
  FIDO/U2F keys.
  * ssh-keygen(1): Enable FIDO 2.1 credProtect extension when generating
  a FIDO resident key.
  * ssh(1), ssh-keygen(1): support for FIDO keys that require a PIN for
  each use. These keys may be generated using ssh-keygen using a new
  "verify-required" option. When a PIN-required key is used, the user
  will be prompted for a PIN to complete the signature operation.
  New Features
  - -----------
  * sshd(8): authorized_keys now supports a new "verify-required"
  option to require FIDO signatures assert that the token verified
  that the user was present before making the signature. The FIDO
  protocol supports multiple methods for user-verification, but
  currently OpenSSH only supports PIN verification.
  * sshd(8), ssh-keygen(1): add support for verifying FIDO webauthn
  signatures. Webauthn is a standard for using FIDO keys in web
  browsers. These signatures are a slightly different format to plain
  FIDO signatures and thus require explicit support.
  * ssh(1): allow some keywords to expand shell-style ${ENV}
  environment variables. The supported keywords are CertificateFile,
  ControlPath, IdentityAgent and IdentityFile, plus LocalForward and
  RemoteForward when used for Unix domain socket paths. bz#3140
  * ssh(1), ssh-agent(1): allow some additional control over the use of
  ssh-askpass via a new $SSH_ASKPASS_REQUIRE environment variable,
  including forcibly enabling and disabling its use. bz#69
  * ssh(1): allow ssh_config(5)'s AddKeysToAgent keyword accept a time
  limit for keys in addition to its current flag options. Time-
  limited keys will automatically be removed from ssh-agent after
  their expiry time has passed.
  * scp(1), sftp(1): allow the -A flag to explicitly enable agent
  forwarding in scp and sftp. The default remains to not forward an
  agent, even when ssh_config enables it.
  * ssh(1): add a '%k' TOKEN that expands to the effective HostKey of
  the destination. This allows, e.g., keeping host keys in individual
  files using "UserKnownHostsFile ~/.ssh/known_hosts.d/%k". bz#1654
  * ssh(1): add %-TOKEN, environment variable and tilde expansion to
  the UserKnownHostsFile directive, allowing the path to be
  completed by the configuration (e.g. bz#1654)
  * ssh-keygen(1): allow "ssh-add -d -" to read keys to be deleted
  from stdin. bz#3180
  * sshd(8): improve logging for MaxStartups connection throttling.
  sshd will now log when it starts and stops throttling and periodically
  while in this state. bz#3055
  Bugfixes
  - -------
  * ssh(1), ssh-keygen(1): better support for multiple attached FIDO
  tokens. In cases where OpenSSH cannot unambiguously determine which
  token to direct a request to, the user is now required to select a
  token by touching it. In cases of operations that require a PIN to
  be verified, this avoids sending the wrong PIN to the wrong token
  and incrementing the token's PIN failure counter (tokens
  effectively erase their keys after too many PIN failures).
  * sshd(8): fix Include before Match in sshd_config; bz#3122
  * ssh(1): close stdin/out/error when forking after authentication
  completes ("ssh -f ...") bz#3137
  * ssh(1), sshd(8): limit the amount of channel input data buffered,
  avoiding peers that advertise large windows but are slow to read
  from causing high memory consumption.
  * ssh-agent(1): handle multiple requests sent in a single write() to
  the agent.
  * sshd(8): allow sshd_config longer than 256k
  * sshd(8): avoid spurious "Unable to load host key" message when sshd
  load a private key but no public counterpart
  * ssh(1): prefer the default hostkey algorithm list whenever we have
  a hostkey that matches its best-preference algorithm.
  * sshd(1): when ordering the hostkey algorithms to request from a
  server, prefer certificate types if the known_hosts files contain a key
  marked as a @cert-authority; bz#3157
  * ssh(1): perform host key fingerprint comparisons for the "Are you
  sure you want to continue connecting (yes/no/[fingerprint])?"
  prompt with case sensitivity.
  * sshd(8): ensure that address/masklen mismatches in sshd_config
  yield fatal errors at daemon start time rather than later when
  they are evaluated.
  * ssh-keygen(1): ensure that certificate extensions are lexically
  sorted. Previously if the user specified a custom extension then
  the everything would be in order except the custom ones. bz#3198
  * ssh(1): also compare username when checking for JumpHost loops.
  bz#3057
  * ssh-keygen(1): preserve group/world read permission on known_hosts
  files across runs of "ssh-keygen -Rf /path". The old behaviour was
  to remove all rights for group/other. bz#3146
  * ssh-keygen(1): Mention the [-a rounds] flag in the ssh-keygen
  manual page and usage().
  * sshd(8): explicitly construct path to ~/.ssh/rc rather than
  relying on it being relative to the current directory, so that it
  can still be found if the shell startup changes its directory.
  bz#3185
  * sshd(8): when redirecting sshd's log output to a file, undo this
  redirection after the session child process is forked(). Fixes
  missing log messages when using this feature under some
  circumstances.
  * sshd(8): start ClientAliveInterval bookkeeping before first pass
  through select() loop; fixed theoretical case where busy sshd may
  ignore timeouts from client.
  * ssh(1): only reset the ServerAliveInterval check when we receive
  traffic from the server and ignore traffic from a port forwarding
  client, preventing a client from keeping a connection alive when
  it should be terminated. bz#2265
  * ssh-keygen(1): avoid spurious error message when ssh-keygen
  creates files outside ~/.ssh
  * sftp-client(1): fix off-by-one error that caused sftp downloads to
  make one more concurrent request that desired. This prevented using
  sftp(1) in unpipelined request/response mode, which is useful when
  debugging. bz#3054
  * ssh(1), sshd(8): handle EINTR in waitfd() and timeout_connect()
  helpers. bz#3071
  * ssh(1), ssh-keygen(1): defer creation of ~/.ssh until we attempt to
  write to it so we don't leave an empty .ssh directory when it's not
  needed. bz#3156
  * ssh(1), sshd(8): fix multiplier when parsing time specifications
  when handling seconds after other units. bz#3171</changelog>
  <changelog author="kukuk@suse.com" date="1610971201">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
</package>
<package pkgid="de104a43f5f7cc3ad01ea500857638b992e03b3bc29dcaa47d2cd66e703efea8" name="openssh-server" arch="aarch64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="0073000747920fb20664c9564e16704451a393ad937a222deff77123f8ce0570" name="openssh-server" arch="s390x">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="cbe4d68c1daf57a18142d4e9157fdf8a40c4d9ebb917388591f5a9ef4da30ef8" name="openssh-server" arch="x86_64">
  <version epoch="0" ver="8.4p1" rel="150300.3.37.1"/>
  <changelog author="kukuk@suse.com" date="1610971200">- sysusers-sshd.conf: use sysusers.d configuration file to create
  sshd user (avoid hard dependency on shadow).</changelog>
  <changelog author="hpj@suse.com" date="1611316800">- Make sure sshd is enabled correctly when upgrading from a
  pre-systemd distribution (bsc#1180083).</changelog>
  <changelog author="hpj@suse.com" date="1611316801">- Add openssh-reenable-dh-group14-sha1-default.patch, which adds
  diffie-hellman-group14-sha1 key exchange back to the default
  list (bsc#1180958). This is needed for backwards compatibility
  with older platforms.</changelog>
  <changelog author="hpj@suse.com" date="1611316802">- Improve robustness of sshd init detection when upgrading from
  a pre-systemd distribution.</changelog>
  <changelog author="hpj@suse.com" date="1611403200">- Add openssh-fix-ssh-copy-id.patch, which fixes breakage
  introduced in 8.4p1 (bsc#1181311).</changelog>
  <changelog author="hpj@suse.com" date="1621425600">- Add openssh-7.6p1-audit_race_condition.patch, fixing sshd
  termination of multichannel sessions with non-root users
  (error on 'mm_request_receive_expect') (bsc#1115550,
  bsc#1174162).</changelog>
  <changelog author="hpj@suse.com" date="1623067200">- Add openssh-mitigate-lingering-secrets.patch (bsc#1186673), which
  attempts to mitigate instances of secrets lingering in memory
  after a session exits. (bsc#1213004 bsc#1213008)</changelog>
  <changelog author="hpj@suse.com" date="1637928000">- Add openssh-bsc1190975-CVE-2021-41617-authorizedkeyscommand.patch
  (bsc#1190975, CVE-2021-41617), backported from upstream by
  Ali Abdallah.</changelog>
  <changelog author="hpj@suse.com" date="1639137600">- Add openssh-CVE-2021-28041-agent-double-free.patch (bsc#1183137,
  CVE-2021-28041), from upstream.</changelog>
  <changelog author="vliaskovitis@suse.com" date="1650628800">- Add openssh-do-not-send-empty-message.patch: Prevent empty
  messages from being sent. This avoids a superfluous new line
  (bsc#1192439).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1655899200">- Add openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish: Make ssh
  connections update their dbus environment (bsc#1179465).</changelog>
  <changelog author="vliaskovitis@suse.com" date="1680264000">- Revert addition of openssh-dbus.sh, openssh-dbus.csh, openssh-dbus.fish:
  This caused invalid and irrelevant environment assignments (bsc#1207014).</changelog>
  <changelog author="meissner@suse.com" date="1689076800">- openssh-7.7p1-fips_checks.patch: close the right filedescriptor
  to avoid fd leads, and also close fdh in read_hmac (bsc#1209536)</changelog>
  <changelog author="sflees@suse.de" date="1689940800">- Add openssh-CVE-2023-38408-PKCS11-execution.patch, Abort if
  requested to load a PKCS#11 provider that isnt a PKCS#11
  provider (bsc#1213504,CVE-2023-38408)</changelog>
  <changelog author="jsegitz@suse.com" date="1701345600">- Enhanced SELinux functionality. Added
  * openssh-7.8p1-role-mls.patch
    Proper handling of MLS systems and basis for other SELinux
    improvements
  * openssh-6.6p1-privsep-selinux.patch
    Properly set contexts during privilege separation
  * openssh-6.6p1-keycat.patch
    Add ssh-keycat command to allow retrival of authorized_keys
    on MLS setups with polyinstantiation
  * openssh-6.6.1p1-selinux-contexts.patch
    Additional changes to set the proper context during privilege
    separation
  * openssh-7.6p1-cleanup-selinux.patch
    Various changes and putting the pieces together
  For now we don't ship the ssh-keycat command, but we need the patch
  for the other SELinux infrastructure
  This change fixes issues like bsc#1214788, where the ssh daemon
  needs to act on behalf of a user and needs a proper context for this</changelog>
  <changelog author="hpj@suse.com" date="1702468800">- Added openssh-cve-2023-48795.patch (bsc#1217950, CVE-2023-48795).
  This mitigates a prefix truncation attack that could be used to
  undermine channel security.</changelog>
  <changelog author="hpj@suse.com" date="1707739200">- Added openssh-cve-2023-51385.patch (bsc#1218215, CVE-2023-51385).
  This limits the use of shell metacharacters in host- and
  user names.</changelog>
  <changelog author="alarrosa@suse.com" date="1712059200">- Fix hostbased ssh login failing occasionally with "signature
  unverified: incorrect signature" by fixing a typo in patch
  (bsc#1221123):
  * openssh-7.8p1-role-mls.patch</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1712750400">- Add patches openssh-7.7p1-seccomp_getuid.patch and
  openssh-bsc1216474-s390-leave-fds-open.patch
  (bsc#1216474, bsc#1218871)</changelog>
  <changelog author="alarrosa@suse.com" date="1713182400">- Add patches from upstream to change the default value of
  UpdateHostKeys to Yes (unless VerifyHostKeyDNS is enabled).
  This makes ssh update the known_hosts stored keys with all
  published versions by the server (after it's authenticated
  with an existing key), which will allow to identify the
  server with a different key if the existing key is considered
  insecure at some point in the future (bsc#1222831).
  * 0001-upstream-enable-UpdateHostkeys-by-default-when-the.patch
  * 0002-upstream-disable-UpdateHostkeys-by-default-if.patch</changelog>
</package>
<package pkgid="2110b892919198d62dcd2bf50fd3e4df77cec253e56326b5a0f49d9b0b7f8740" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="2f38e42d05730451249f3f67f7e46b3f9ecf5d5f894b52e2163e4c5042e20518" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="6cf28459f0ec3907fbca5d76d15b7ae115f5c0aee4b2e7c8b827c35ed55a05ab" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="f91b1a479062be239d15641ec2378c521254fddf81db6889dc4a8d2b59012db4" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662033600">- Fix memory leaks introduced by openssl-1.1.1-fips.patch [bsc#1203046]
  * Add patch openssl-1.1.1-fips-fix-memory-leaks.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: openssl: RAND api should call into FIPS DRBG [bsc#1201293]
  * The FIPS_drbg implementation is not FIPS validated anymore. To
    provide backwards compatibility for applications that need FIPS
    compliant RNG number generation and use FIPS_drbg_generate,
    this function was re-wired to call the FIPS validated DRBG
    instance instead through the RAND_bytes() call.
  * Add openssl-1_1-FIPS_drbg-rewire.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1662120001">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
</package>
<package pkgid="0c9f4f544275848058cffddc91ef0973973feb9d769a35e8496fc7575903a166" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="488651a771cd7f5eb1d7642020135600e2c3c6282801ed92a5efaf692a181fb4" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="a3a2221f241721b92acda8d1d3987b4581e7a74b7638b981713bcd46d53c72d2" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="70faa94b88ba7bf1ac00f734cb554380201205b632dd800ea1529bbf3100e4b0" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.42.1"/>
  <changelog author="pmonreal@suse.com" date="1662120000">- FIPS: Add KAT for the RAND_DRBG implementation [bsc#1203069]
  * Add openssl-1_1-fips-drbg-selftest.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
</package>
<package pkgid="eabc5c5c0f5814b10811f9669144904a661bf5e76efb1c0f6223e8b3bd6acce9" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="60aa5e2d454920d038ca8360967e83bbdea0c53b535000ed2676ad4308b136f0" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="a335b1c2af8002fd5fd7ce71455f60f8a9882ff05203295cdd31147616cc5c74" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="5a17cadc75aa055d02016ec97fe12cb23c361b7e0988a65a4299505157aa7ae7" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.45.1"/>
  <changelog author="otto.hollmann@suse.com" date="1662724800">- FIPS: list only FIPS approved digest and public key algorithms
  [bsc#1121365, bsc#1190888, bsc#1193859, bsc#1198471, bsc#1198472]
  * Add openssl-1_1-fips-list-only-approved-digest-and-pubkey-algorithms.patch
  * Disabled test 15-test_ec.t in FIPS mode</changelog>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
</package>
<package pkgid="1b9a7d7c2d60a933f829317afa531462d6a6125d0da5708e8d97ca026368fc76" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="d5b5b3b46e4ffb670b9a1c5afc0f32de59fb0bf22a697b42d603a7f649e292b5" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="fdbc1fc775d486ba026de4150e7e921e076accaf3dc838505e71ccdaef59bf48" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="11034770c2eb17cffd11114602b85dbce2f38e7ac99a9d57cbfccebb2142b80f" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.48.1"/>
  <changelog author="pmonreal@suse.com" date="1663329600">- FIPS: Default to RFC-7919 groups for genparam and dhparam
  * Add openssl-1_1-FIPS-default-RFC7919.patch [bsc#1180995]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1664971200">- FIPS: OpenSSL service-level indicator - Allow AES XTS 256 [bsc#1190651]
  * Add patches: openssl-1_1-ossl-sli-004-allow-aes-xts-256.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
</package>
<package pkgid="d57491796003dd7ccc473030f346a3683aa2c1b29ca6f2f2790f3a1fcdc014d1" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="32fb79aa415f7c5095ee8e0c055f6ce0128b6d2ba45cd6c4a3b26257c529c801" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="8f018a9b3e924501ec3f199208bbc873d2396f62efcb21a1ad5dfc589bc5e57a" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="7e7ee633cb420a17890d9e3167f2e51052b03f04f41f5913a474a35d82705ac4" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.53.1"/>
  <changelog author="pmonreal@suse.com" date="1666958400">- FIPS: Add a missing dependency on jitterentropy-devel for
  libopenssl-1_1-devel [bsc#1202148]</changelog>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="b4ce7ba542cdd16b0de63d8a8d608d1d9bc74d0e05ba604a984710fa739fb788" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="0215641a03667c4fac617e51734b762e5ed0837e2a9cf32b9acb53630ed6a1b8" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="c300b9b84fe9780feebf7c642d997c6960e5fe984babcba91c75e225367fdf18" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="7bd04e8832f58586a855d32992d273c17b1335a436dad56027405422fb8508b9" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.57.1"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Return the correct indicator for a given EC group order bits
  * Add openssl-1_1-ossl-sli-005-EC_group_order_bits.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1668600001">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
</package>
<package pkgid="7398f56e244d7238f2d9fc12e9df11ad13732fdd0b9c542da0d2a6f65b7bfcd4" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="eeade8a572f8adba19babf34addbf388b705cfa75878c76e0534cf698d07cf1e" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="97c2301bcaad05c368f02d515fa2f11db31291dd3734b1e9f35ba4d81654b14b" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="596f8cebd3f8bd0949e1b51bff78fb8e44e65e6829dfaf631d0087ab91c1c398" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.60.2"/>
  <changelog author="pmonreal@suse.com" date="1668600000">- FIPS: Service-level indicator [bsc#1190651]
  * Consider RSA siggen/sigver with PKCS1 padding also approved
  * Add openssl-1_1-ossl-sli-006-rsa_pkcs1_padding.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="8d241fe05d9a76abed1e3d3897d83734122b0db5071f21f5caead54eca4d348f" name="openssl-1_1" arch="aarch64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="8a64cd972b1c5b09ad6170bd2299b629a493b15240457a08f58bdd791315bc07" name="openssl-1_1" arch="s390x">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="ef11c9816a7150250105ec223a2393c8f692689ec73997fd9065b7c61e0f3470" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="05b4b8246787ac3c76ff03fec83c5c58bdfb5c3ec1923123f0595ea721d6d119" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.1l" rel="150400.7.63.1"/>
  <changelog author="pmonreal@suse.com" date="1669032000">- FIPS: Service-level indicator [bsc#1190651]
  * Mark PBKDF2 with key shorter than 112 bits as non-approved
  * Add openssl-1_1-ossl-sli-007-pbkdf2-keylen.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1673956800">- FIPS: Add Pair-wise Consistency Test when generating DH key [bsc#1207182]
  * Add openssl-fips-DH-Pair-wise-Consistency.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1675857600">- FIPS: Serialize jitterentropy calls [bsc#1207994]
  * Add openssl-1_1-serialize-jitterentropy-calls.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678190400">FIPS: Service-level indicator [bsc#1208998]
  * Add additional check required by FIPS 140-3. Minimum values for
    PBKDF2 are: 112 bits for key, 128 bits for salt, 1000 for
    iteration count and 20 characters for password.
  * Add openssl-1_1-ossl-sli-008-pbkdf2-salt_pass_iteration.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685534400">- Update further expiring certificates that affect tests [bsc#1201627]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1686744000">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Reworked the Fix for the Timing Oracle in RSA Decryption
    The previous fix for this timing side channel turned out to cause
    a severe 2-3x performance regression in the typical use case
    compared to 1.1.1s.
  * Add openssl-CVE-2022-4304.patch
  * Removed patches:
  - openssl-CVE-2022-4304-1of2.patch
  - openssl-CVE-2022-4304-2of2.patch
  * Refreshed patches:
  - openssl-CVE-2023-0464.patch
  - openssl-CVE-2023-0465.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1688126400">- Check OCSP RESPONSE in s_client and terminate connection if a
  revoked certificate is found. Add OCSP_RESPONSE_check_status()
  function to do that check. [bsc#1212623]
  * Add openssl-s_client-check-ocsp-status.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1690200000">- Dont pass zero length input to EVP_Cipher because assembler
  optimized AES cannot handle zero size. [bsc#1213517]
  * Add openssl-dont-pass-zero-length-input-to-EVP_Cipher.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: (bsc#1213853, CVE-2023-3817)
  * Fix excessive time spent checking DH q parameter value
    (bsc#1213853, CVE-2023-3817). The function DH_check() performs
    various checks on DH parameters. After fixing CVE-2023-3446 it
    was discovered that a large q parameter value can also trigger
    an overly long computation during some of these checks. A
    correct q value, if present, cannot be larger than the modulus
    p parameter, thus it is unnecessary to perform these checks if
    q is larger than p. If DH_check() is called with such q parameter
    value, DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-1_1-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1696420800">- Displays "fips" in the version string (bsc#1215215)
  * Add openssl-1_1-fips-bsc1215215_fips_in_version_string.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="9575c86a26fcbdfbf9730343090706621e947762e0ac72338142437fd642a053" name="openssl-3" arch="src">
  <version epoch="0" ver="3.0.8" rel="150400.4.34.1"/>
  <changelog author="otto.hollmann@suse.com" date="1666785600">- Fix X.509 Email Address Buffer Overflow [bsc#1204714, CVE-2022-3602, CVE-2022-3786]
  * An off by one error in the punycode decoder allowed for a single
    unsigned int overwrite of a buffer which could cause a crash and
    possible code execution.
  * Also fixed the ossl_a2ulabel() function which was broken and also
    contained a potential buffer overflow, albeit one byte without
    control of the contents.
  * Added a test case that errors without the CVE fix and passes with it.
  * Add patches:
  - openssl-3-CVE-2022-3602_1.patch
  - openssl-3-CVE-2022-3602_2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671019200">- Fix X.509 Policy Constraints Double Locking [bsc#1206374, CVE-2022-3996]
  * Add patch: openssl-3-Fix-double-locking-problem.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
</package>
<package pkgid="f90c4f741c3e6114484bec365c1c99a5d5aa86fc66e6bf915b41122b5465c3cb" name="openssl-3" arch="src">
  <version epoch="0" ver="3.0.8" rel="150400.4.37.1"/>
  <changelog author="otto.hollmann@suse.com" date="1671796800">- Fix SHA, SHAKE, KECCAK ASM and EC ASM flag passing (bsc#1206222)
  * Add patches:
  - openssl-3-Fix-EC-ASM-flag-passing.patch
  - openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1672833600">- Enable zlib compression support [bsc#1195149]
- Add crypto-policies dependency.</changelog>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
</package>
<package pkgid="539c0fe020105774765fcfc2f818b0431c50c67897bcf9ed8ec8b24eafe59627" name="openssl-3" arch="src">
  <version epoch="0" ver="3.0.8" rel="150400.4.42.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207535, CVE-2022-4203]
  * X.509 Name Constraints Read Buffer Overflow
  * Add patch:
  - openssl-CVE-2022-4203-1of2.patch
  - openssl-CVE-2022-4203-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207534, CVE-2022-4304]
  * Timing Oracle in RSA Decryption
  * Add openssl-CVE-2022-4304.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207538, CVE-2022-4450]
  * Double free after calling PEM_read_bio_ex()
  * Add patches:
  - openssl-CVE-2022-4450-1of2.patch
  - openssl-CVE-2022-4450-2of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648004">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648005">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648006">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
</package>
<package pkgid="7c719bc532eadd15fa81cc60ff3300378b63966c65697bdea9f2eeb324ecacb0" name="openssl-3" arch="src">
  <version epoch="0" ver="3.0.8" rel="150400.4.49.1"/>
  <changelog author="pmonreal@suse.com" date="1674648000">- Security Fix: [bsc#1207536, CVE-2023-0215]
  * Use-after-free following BIO_new_NDEF()
  * Add patches:
  - openssl-CVE-2023-0215-1of4.patch
  - openssl-CVE-2023-0215-2of4.patch
  - openssl-CVE-2023-0215-3of4.patch
  - openssl-CVE-2023-0215-4of4.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648001">- Security Fix: [bsc#1207539, CVE-2023-0216]
  * Invalid pointer dereference in d2i_PKCS7 functions
  * Add patches:
  - openssl-CVE-2023-0216-2of2.patch
  - openssl-CVE-2023-0216-1of2.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674648002">- Security Fix: [bsc#1207540, CVE-2023-0217]
  * NULL pointer dereference validating DSA public key
  * Add patches:
  - openssl-CVE-2023-0217-1of4.patch
  - openssl-CVE-2023-0217-2of4.patch
  - openssl-CVE-2023-0217-3of4.patch
  - openssl-CVE-2023-0217-4of4.patch
  * Provide the binary der file for the test 91-test_pkey_check.t
    as openssl-CVE-2023-0217-dsapub_noparam.der.tar.xz</changelog>
  <changelog author="pmonreal@suse.com" date="1674648003">- Security Fix: [bsc#1207533, CVE-2023-0286]
  * Fix X.400 address type confusion in X.509 GENERAL_NAME_cmp
    for x400Address
  * Add openssl-CVE-2023-0286.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1674734400">- Security Fix: [bsc#1207541, CVE-2023-0401]
  * NULL pointer dereference during PKCS7 data verification
  * Add patches:
  - openssl-CVE-2023-0401-2of2.patch
  - openssl-CVE-2023-0401-1of2.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1679659200">- Security Fix: [CVE-2023-0464, bsc#1209624]
  * Excessive Resource Usage Verifying X.509 Policy Constraints
  * Add openssl-CVE-2023-0464.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523200">- Security Fix: [CVE-2023-0465, bsc#1209878]
  * Invalid certificate policies in leaf certificates are silently ignored
  * Add openssl-CVE-2023-0465.patch
- Security Fix: [CVE-2023-0466, bsc#1209873]
  * Certificate policy check not enabled
  * Add openssl-CVE-2023-0466.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1680523201">- Update further expiring certificates that affect tests [bsc#1210060]
  * Add openssl-Update-further-expiring-certificates.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1684756800">- Security Fix: [CVE-2023-1255, bsc#1210714]
  * Input buffer over-read in AES-XTS implementation on 64 bit ARM
  * Add openssl-CVE-2023-1255.patch
- Security Fix: [CVE-2023-2650, bsc#1211430]
  * Possible DoS translating ASN.1 object identifiers
  * Add openssl-CVE-2023-2650.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1685448000">- Update to version 3.0.8 [bsc#1207541, CVE-2023-0401]
  * Fixed NULL dereference during PKCS7 data verification.
    A NULL pointer can be dereferenced when signatures are being
    verified on PKCS7 signed or signedAndEnveloped data. In case the hash
    algorithm used for the signature is known to the OpenSSL library but
    the implementation of the hash algorithm is not available the digest
    initialization will fail. There is a missing check for the return
    value from the initialization function which later leads to invalid
    usage of the digest API most likely leading to a crash.
    ([bsc#1207541, CVE-2023-0401])
    PKCS7 data is processed by the SMIME library calls and also by the
    time stamp (TS) library calls. The TLS implementation in OpenSSL does
    not call these functions however third party applications would be
    affected if they call these functions to verify signatures on untrusted
    data.
  * Fixed X.400 address type confusion in X.509 GeneralName.
    There is a type confusion vulnerability relating to X.400 address processing
    inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1_STRING
    but the public structure definition for GENERAL_NAME incorrectly specified
    the type of the x400Address field as ASN1_TYPE. This field is subsequently
    interpreted by the OpenSSL function GENERAL_NAME_cmp as an ASN1_TYPE rather
    than an ASN1_STRING.
    When CRL checking is enabled (i.e. the application sets the
    X509_V_FLAG_CRL_CHECK flag), this vulnerability may allow an attacker to
    pass arbitrary pointers to a memcmp call, enabling them to read memory
    contents or enact a denial of service.
    ([bsc#1207533, CVE-2023-0286])
  * Fixed NULL dereference validating DSA public key.
    An invalid pointer dereference on read can be triggered when an
    application tries to check a malformed DSA public key by the
    EVP_PKEY_public_check() function. This will most likely lead
    to an application crash. This function can be called on public
    keys supplied from untrusted sources which could allow an attacker
    to cause a denial of service attack.
    The TLS implementation in OpenSSL does not call this function
    but applications might call the function if there are additional
    security requirements imposed by standards such as FIPS 140-3.
    ([bsc#1207540, CVE-2023-0217])
  * Fixed Invalid pointer dereference in d2i_PKCS7 functions.
    An invalid pointer dereference on read can be triggered when an
    application tries to load malformed PKCS7 data with the
    d2i_PKCS7(), d2i_PKCS7_bio() or d2i_PKCS7_fp() functions.
    The result of the dereference is an application crash which could
    lead to a denial of service attack. The TLS implementation in OpenSSL
    does not call this function however third party applications might
    call these functions on untrusted data.
    ([bsc#1207539, CVE-2023-0216])
  * Fixed Use-after-free following BIO_new_NDEF.
    The public API function BIO_new_NDEF is a helper function used for
    streaming ASN.1 data via a BIO. It is primarily used internally to OpenSSL
    to support the SMIME, CMS and PKCS7 streaming capabilities, but may also
    be called directly by end user applications.
    The function receives a BIO from the caller, prepends a new BIO_f_asn1
    filter BIO onto the front of it to form a BIO chain, and then returns
    the new head of the BIO chain to the caller. Under certain conditions,
    for example if a CMS recipient public key is invalid, the new filter BIO
    is freed and the function returns a NULL result indicating a failure.
    However, in this case, the BIO chain is not properly cleaned up and the
    BIO passed by the caller still retains internal pointers to the previously
    freed filter BIO. If the caller then goes on to call BIO_pop() on the BIO
    then a use-after-free will occur. This will most likely result in a crash.
    ([bsc#1207536, CVE-2023-0215])
  * Fixed Double free after calling PEM_read_bio_ex.
    The function PEM_read_bio_ex() reads a PEM file from a BIO and parses and
    decodes the "name" (e.g. "CERTIFICATE"), any header data and the payload
    data. If the function succeeds then the "name_out", "header" and "data"
    arguments are populated with pointers to buffers containing the relevant
    decoded data. The caller is responsible for freeing those buffers. It is
    possible to construct a PEM file that results in 0 bytes of payload data.
    In this case PEM_read_bio_ex() will return a failure code but will populate
    the header argument with a pointer to a buffer that has already been freed.
    If the caller also frees this buffer then a double free will occur. This
    will most likely lead to a crash.
    The functions PEM_read_bio() and PEM_read() are simple wrappers around
    PEM_read_bio_ex() and therefore these functions are also directly affected.
    These functions are also called indirectly by a number of other OpenSSL
    functions including PEM_X509_INFO_read_bio_ex() and
    SSL_CTX_use_serverinfo_file() which are also vulnerable. Some OpenSSL
    internal uses of these functions are not vulnerable because the caller does
    not free the header argument if PEM_read_bio_ex() returns a failure code.
    ([bsc#1207538, CVE-2022-4450])
  * Fixed Timing Oracle in RSA Decryption.
    A timing based side channel exists in the OpenSSL RSA Decryption
    implementation which could be sufficient to recover a plaintext across
    a network in a Bleichenbacher style attack. To achieve a successful
    decryption an attacker would have to be able to send a very large number
    of trial messages for decryption. The vulnerability affects all RSA padding
    modes: PKCS#1 v1.5, RSA-OEAP and RSASVE.
    ([bsc#1207534, CVE-2022-4304])
  * Fixed X.509 Name Constraints Read Buffer Overflow.
    A read buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. The read buffer overrun might
    result in a crash which could lead to a denial of service attack.
    In a TLS client, this can be triggered by connecting to a malicious
    server. In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    ([bsc#1207535, CVE-2022-4203])
  * Fixed X.509 Policy Constraints Double Locking security issue.
    If an X.509 certificate contains a malformed policy constraint and
    policy processing is enabled, then a write lock will be taken twice
    recursively.  On some operating systems (most widely: Windows) this
    results in a denial of service when the affected process hangs.  Policy
    processing being enabled on a publicly facing server is not considered
    to be a common setup.
    ([CVE-2022-3996])
  * Our provider implementations of `OSSL_FUNC_KEYMGMT_EXPORT` and
    `OSSL_FUNC_KEYMGMT_GET_PARAMS` for EC and SM2 keys now honor
    `OSSL_PKEY_PARAM_EC_POINT_CONVERSION_FORMAT` as set (and
    default to `POINT_CONVERSION_UNCOMPRESSED`) when exporting
    `OSSL_PKEY_PARAM_PUB_KEY`, instead of unconditionally using
    `POINT_CONVERSION_COMPRESSED` as in previous 3.x releases.
    For symmetry, our implementation of `EVP_PKEY_ASN1_METHOD-&gt;export_to`
    for legacy EC and SM2 keys is also changed similarly to honor the
    equivalent conversion format flag as specified in the underlying
    `EC_KEY` object being exported to a provider, when this function is
    called through `EVP_PKEY_export()`.
  * Removed openssl-3-Fix-double-locking-problem.patch,
    contained in upstream.
- Update to 3.0.7: [bsc#1204714, CVE-2022-3602,CVE-2022-3786]
  * Fixed two buffer overflows in punycode decoding functions.
    A buffer overrun can be triggered in X.509 certificate verification,
    specifically in name constraint checking. Note that this occurs after
    certificate chain signature verification and requires either a CA to
    have signed the malicious certificate or for the application to continue
    certificate verification despite failure to construct a path to a trusted
    issuer.
    In a TLS client, this can be triggered by connecting to a malicious
    server.  In a TLS server, this can be triggered if the server requests
    client authentication and a malicious client connects.
    An attacker can craft a malicious email address to overflow
    an arbitrary number of bytes containing the `.`  character (decimal 46)
    on the stack.  This buffer overflow could result in a crash (causing a
    denial of service).
    ([CVE-2022-3786])
    An attacker can craft a malicious email address to overflow four
    attacker-controlled bytes on the stack.  This buffer overflow could
    result in a crash (causing a denial of service) or potentially remote code
    execution depending on stack layout for any given platform/compiler.
    ([CVE-2022-3602])
  * Removed all references to invalid OSSL_PKEY_PARAM_RSA names for CRT
    parameters in OpenSSL code.
    Applications should not use the names OSSL_PKEY_PARAM_RSA_FACTOR,
    OSSL_PKEY_PARAM_RSA_EXPONENT and OSSL_PKEY_PARAM_RSA_COEFFICIENT.
    Use the numbered names such as OSSL_PKEY_PARAM_RSA_FACTOR1 instead.
    Using these invalid names may cause algorithms to use slower methods
    that ignore the CRT parameters.
  * Fixed a regression introduced in 3.0.6 version raising errors on some stack
    operations.
  * Fixed a regression introduced in 3.0.6 version not refreshing the certificate
    data to be signed before signing the certificate.
  * Added RIPEMD160 to the default provider.
  * Ensured that the key share group sent or accepted for the key exchange
    is allowed for the protocol version.
- Update to 3.0.6: [bsc#1204226, 1205476, CVE-2022-3358, CVE-2022-40735]
  * OpenSSL supports creating a custom cipher via the legacy
    EVP_CIPHER_meth_new() function and associated function calls. This function
    was deprecated in OpenSSL 3.0 and application authors are instead encouraged
    to use the new provider mechanism in order to implement custom ciphers.
  * OpenSSL versions 3.0.0 to 3.0.5 incorrectly handle legacy custom ciphers
    passed to the EVP_EncryptInit_ex2(), EVP_DecryptInit_ex2() and
    EVP_CipherInit_ex2() functions (as well as other similarly named encryption
    and decryption initialisation functions). Instead of using the custom cipher
    directly it incorrectly tries to fetch an equivalent cipher from the
    available providers. An equivalent cipher is found based on the NID passed
    to EVP_CIPHER_meth_new(). This NID is supposed to represent the unique NID
    for a given cipher. However it is possible for an application to incorrectly
    pass NID_undef as this value in the call to EVP_CIPHER_meth_new(). When
    NID_undef is used in this way the OpenSSL encryption/decryption
    initialisation function will match the NULL cipher as being equivalent and
    will fetch this from the available providers. This will succeed if the
    default provider has been loaded (or if a third party provider has been
    loaded that offers this cipher). Using the NULL cipher means that the
    plaintext is emitted as the ciphertext.
  * Applications are only affected by this issue if they call
    EVP_CIPHER_meth_new() using NID_undef and subsequently use it in a call to
    an encryption/decryption initialisation function. Applications that only use
    SSL/TLS are not impacted by this issue. ([CVE-2022-3358])
  * Fix LLVM vs Apple LLVM version numbering confusion that caused build
    failures on MacOS 10.11
  * Fixed the linux-mips64 Configure target which was missing the SIXTY_FOUR_BIT
    bn_ops flag. This was causing heap corruption on that platform.
  * Fix handling of a ticket key callback that returns 0 in TLSv1.3 to not send
    a ticket
  * Correctly handle a retransmitted ClientHello in DTLS
  * Fixed detection of ktls support in cross-compile environment on Linux
  * Fixed some regressions and test failures when running the 3.0.0 FIPS
    provider against 3.0.x
  * Fixed SSL_pending() and SSL_has_pending() with DTLS which were failing to
    report correct results in some cases
  * Fix UWP builds by defining VirtualLock
  * For known safe primes use the minimum key length according to RFC 7919.
    Longer private key sizes unnecessarily raise the cycles needed to compute
    the shared secret without any increase of the real security. This fixes a
    regression from 1.1.1 where these shorter keys were generated for the known
    safe primes.
  * Added the loongarch64 target
  * Fixed EC ASM flag passing. Flags for ASM implementations of EC curves were
    only passed to the FIPS provider and not to the default or legacy provider.
  * Fixed reported performance degradation on aarch64. Restored the
    implementation prior to commit 2621751 ("aes/asm/aesv8-armx.pl: avoid 32-bit
    lane assignment in CTR mode") for 64bit targets only, since it is reportedly
    2-17% slower and the silicon errata only affects 32bit targets. The new
    algorithm is still used for 32 bit targets.
  * Added a missing header for memcmp that caused compilation failure on some
    platforms
- Update to 3.0.5:
  * The OpenSSL 3.0.4 release introduced a serious bug in the RSA
    implementation for X86_64 CPUs supporting the AVX512IFMA instructions.
    This issue makes the RSA implementation with 2048 bit private keys
    incorrect on such machines and memory corruption will happen during
    the computation. As a consequence of the memory corruption an attacker
    may be able to trigger a remote code execution on the machine performing
    the computation.
    SSL/TLS servers or other servers using 2048 bit RSA private keys running
    on machines supporting AVX512IFMA instructions of the X86_64 architecture
    are affected by this issue. [bsc#1201148, CVE-2022-2274]
  * AES OCB mode for 32-bit x86 platforms using the AES-NI assembly optimised
    implementation would not encrypt the entirety of the data under some
    circumstances.  This could reveal sixteen bytes of data that was
    preexisting in the memory that wasn't written.  In the special case of
    "in place" encryption, sixteen bytes of the plaintext would be revealed.
    Since OpenSSL does not support OCB based cipher suites for TLS and DTLS,
    they are both unaffected. [bsc#1201099, CVE-2022-2097]
- Update to 3.0.4: [bsc#1199166, bsc#1200550, CVE-2022-1292, CVE-2022-2068]
  * In addition to the c_rehash shell command injection identified in
    CVE-2022-1292, further bugs where the c_rehash script does not
    properly sanitise shell metacharacters to prevent command injection
    have been fixed.
    When the CVE-2022-1292 was fixed it was not discovered that there
    are other places in the script where the file names of certificates
    being hashed were possibly passed to a command executed through the shell.
    This script is distributed by some operating systems in a manner where
    it is automatically executed.  On such operating systems, an attacker
    could execute arbitrary commands with the privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool.
  * Case insensitive string comparison no longer uses locales.
    It has instead been directly implemented.
- Update to 3.0.3:
  * Case insensitive string comparison is reimplemented via new locale-agnostic
    comparison functions OPENSSL_str[n]casecmp always using the POSIX locale for
    comparison. The previous implementation had problems when the Turkish locale
    was used.
  * Fixed a bug in the c_rehash script which was not properly sanitising shell
    metacharacters to prevent command injection.  This script is distributed by
    some operating systems in a manner where it is automatically executed.  On
    such operating systems, an attacker could execute arbitrary commands with the
    privileges of the script.
    Use of the c_rehash script is considered obsolete and should be replaced
    by the OpenSSL rehash command line tool. [bsc#1199166, CVE-2022-1292]
  * Fixed a bug in the function 'OCSP_basic_verify' that verifies the signer
    certificate on an OCSP response. The bug caused the function in the case
    where the (non-default) flag OCSP_NOCHECKS is used to return a postivie
    response (meaning a successful verification) even in the case where the
    response signing certificate fails to verify.
    It is anticipated that most users of 'OCSP_basic_verify' will not use the
    OCSP_NOCHECKS flag. In this case the 'OCSP_basic_verify' function will return
    a negative value (indicating a fatal error) in the case of a certificate
    verification failure. The normal expected return value in this case would be 0.
    This issue also impacts the command line OpenSSL "ocsp" application. When
    verifying an ocsp response with the "-no_cert_checks" option the command line
    application will report that the verification is successful even though it
    has in fact failed. In this case the incorrect successful response will also
    be accompanied by error messages showing the failure and contradicting the
    apparently successful result. [bsc#1199167, CVE-2022-1343]
  * Fixed a bug where the RC4-MD5 ciphersuite incorrectly used the
    AAD data as the MAC key. This made the MAC key trivially predictable.
    An attacker could exploit this issue by performing a man-in-the-middle attack
    to modify data being sent from one endpoint to an OpenSSL 3.0 recipient such
    that the modified data would still pass the MAC integrity check.
    Note that data sent from an OpenSSL 3.0 endpoint to a non-OpenSSL 3.0
    endpoint will always be rejected by the recipient and the connection will
    fail at that point. Many application protocols require data to be sent from
    the client to the server first. Therefore, in such a case, only an OpenSSL
    3.0 server would be impacted when talking to a non-OpenSSL 3.0 client.
    [bsc#1199168, CVE-2022-1434]
  * Fix a bug in the OPENSSL_LH_flush() function that breaks reuse of the memory
    occuppied by the removed hash table entries.
    This function is used when decoding certificates or keys. If a long lived
    process periodically decodes certificates or keys its memory usage will
    expand without bounds and the process might be terminated by the operating
    system causing a denial of service. Also traversing the empty hash table
    entries will take increasingly more time. Typically such long lived processes
    might be TLS clients or TLS servers configured to accept client certificate
    authentication. [bsc#1199169, CVE-2022-1473]
  * The functions 'OPENSSL_LH_stats' and 'OPENSSL_LH_stats_bio' now only report
    the 'num_items', 'num_nodes' and 'num_alloc_nodes' statistics. All other
    statistics are no longer supported. For compatibility, these statistics are
    still listed in the output but are now always reported as zero.
- Update to 3.0.2: [bsc#1196877, CVE-2022-0778]
  * Security fix [CVE-2022-0778]: Infinite loop for non-prime moduli
    in BN_mod_sqrt() reachable when parsing certificates.
  * Add ciphersuites based on DHE_PSK (RFC 4279) and ECDHE_PSK
    (RFC 5489) to the list of ciphersuites providing Perfect Forward
    Secrecy as required by SECLEVEL &gt;= 3.
  * Made the AES constant time code for no-asm configurations
    optional due to the resulting 95% performance degradation.
    The AES constant time code can be enabled, for no assembly
    builds, with: ./config no-asm -DOPENSSL_AES_CONST_TIME
  * Fixed PEM_write_bio_PKCS8PrivateKey() to make it possible to
    use empty passphrase strings.
  * The negative return value handling of the certificate
    verification callback was reverted. The replacement is to set
    the verification retry state with the SSL_set_retry_verify()
    function.
- Rebase patches:
  * openssl-Add-support-for-PROFILE-SYSTEM-system-default-cipher.patch
  * openssl-CVE-2023-0464.patch
  * openssl-CVE-2023-0465.patch
  * openssl-CVE-2023-0466.patch
  * openssl-use-versioned-config.patch
- Removed patches:
  * openssl-CVE-2022-0778.patch
  * openssl-CVE-2022-0778-tests.patch
  * openssl-CVE-2022-1292.patch
  * openssl-update_expired_certificates.patch
  * openssl-3-Fix-file-operations-in-c_rehash.patch
  * openssl-3-CVE-2022-1343.patch
  * openssl-3-CVE-2022-1434.patch
  * openssl-3-CVE-2022-1473.patch
  * openssl-CVE-2022-2097.patch
  * openssl-3-CVE-2022-3358.patch
  * openssl-3-CVE-2022-3602_1.patch
  * openssl-3-CVE-2022-3602_2.patch
  * openssl-3-Fix-double-locking-problem.patch
  * openssl-3-Fix-EC-ASM-flag-passing.patch
  * openssl-3-Fix-SHA-SHAKE-and-KECCAK-ASM-flag-passing.patch
  * openssl-CVE-2022-4203-1of2.patch
  * openssl-CVE-2022-4203-2of2.patch
  * openssl-CVE-2022-4304.patch
  * openssl-CVE-2022-4450-1of2.patch
  * openssl-CVE-2022-4450-2of2.patch
  * openssl-CVE-2023-0215-1of4.patch
  * openssl-CVE-2023-0215-2of4.patch
  * openssl-CVE-2023-0215-3of4.patch
  * openssl-CVE-2023-0215-4of4.patch
  * openssl-CVE-2023-0216-2of2.patch
  * openssl-CVE-2023-0216-1of2.patch
  * openssl-CVE-2023-0217-1of4.patch
  * openssl-CVE-2023-0217-2of4.patch
  * openssl-CVE-2023-0217-3of4.patch
  * openssl-CVE-2023-0217-4of4.patch
  * openssl-CVE-2023-0286.patch
  * openssl-CVE-2023-0401-1of2.patch
  * openssl-CVE-2023-0401-2of2.patch
  * openssl-Update-further-expiring-certificates.patch
- Enable tests: test_req test_verify_store test_ca test_ssl_old</changelog>
  <changelog author="pmonreal@suse.com" date="1689681600">- Security fix: [bsc#1213383, CVE-2023-2975]
  * AES-SIV implementation ignores empty associated data entries
  * Add openssl-CVE-2023-2975.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1689854400">- Security fix: [bsc#1213487, CVE-2023-3446]
  * Fix DH_check() excessive time with over sized modulus.
  * The function DH_check() performs various checks on DH parameters.
    One of those checks confirms that the modulus ("p" parameter) is
    not too large. Trying to use a very large modulus is slow and
    OpenSSL will not normally use a modulus which is over 10,000 bits
    in length.
    However the DH_check() function checks numerous aspects of the
    key or parameters that have been supplied. Some of those checks
    use the supplied modulus value even if it has already been found
    to be too large.
    A new limit has been added to DH_check of 32,768 bits. Supplying
    a key/parameters with a modulus over this size will simply cause
    DH_check() to fail.
  * Add openssl-CVE-2023-3446.patch openssl-CVE-2023-3446-test.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1690891200">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Excessive time spent checking DH q parameter value:
    The function DH_check() performs various checks on DH parameters.
    After fixing CVE-2023-3446 it was discovered that a large q
    parameter value can also trigger an overly long computation
    during some of these checks. A correct q value, if present,
    cannot be larger than the modulus p parameter, thus it is
    unnecessary to perform these checks if q is larger than p.
    If DH_check() is called with such q parameter value,
    DH_CHECK_INVALID_Q_VALUE return flag is set and the
    computationally intensive checks are skipped.
  * Add openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1691496000">- Security fix: [bsc#1213853, CVE-2023-3817]
  * Add test of DH_check() with q = p + 1
  * Update openssl-3-CVE-2023-3817.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697457600">- Security fix: [bsc#1216163, CVE-2023-5363]
  * Incorrect cipher key and IV length processing
  * Add openssl-CVE-2023-5363.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1697716800">- Added openssl-3-use-include-directive.patch so that the default
  /etc/ssl/openssl3.cnf file will include any configuration files that
  other packages might place into /etc/ssl/engines3.d/ and
  /etc/ssl/engdef3.d/.
- Updated spec file to create the two new necessary directores for
  the above patch. [bsc#1194187, bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1699876800">- Security fix: [bsc#1216922, CVE-2023-5678]
  * Fix excessive time spent in DH check / generation with large Q
    parameter value.
  * Applications that use the functions DH_generate_key() to generate
    an X9.42 DH key may experience long delays. Likewise,
    applications that use DH_check_pub_key(), DH_check_pub_key_ex
    () or EVP_PKEY_public_check() to check an X9.42 DH key or X9.42
    DH parameters may experience long delays. Where the key or
    parameters that are being checked have been obtained from an
    untrusted source this may lead to a Denial of Service.
  * Add openssl-CVE-2023-5678.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1704974400">- Security fix: [bsc#1218690, CVE-2023-6129]
  * POLY1305: Fix vector register clobbering on PowerPC
  * Add openssl-CVE-2023-6129.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1705406400">- Security fix: [bsc#1218810, CVE-2023-6237]
  * Limit the execution time of RSA public key check
  * Add openssl-CVE-2023-6237.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1706616000">- Security fix: [bsc#1219243, CVE-2024-0727]
  * Add NULL checks where ContentInfo data can be NULL
  * Add openssl-CVE-2024-0727.patch</changelog>
</package>
<package pkgid="82fe15dede366c83cd088e85d7e9ed80ccb13672f1d94044d076ecac413d03e4" name="openssl-ibmca" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150400.4.11.1"/>
  <changelog author="mpluskal@suse.com" date="1459944000">- Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1476360000">- fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path</changelog>
  <changelog author="mpost@suse.com" date="1491912000">- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
  same reason.
- Tweaked a comment to get rid of an rpmlint warning message.</changelog>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
</package>
<package pkgid="05cbe8db09d3cbf6ea14820d9b2eff3702371e3c75015f524b3e7e7b468f3d4c" name="openssl-ibmca" arch="src">
  <version epoch="0" ver="2.4.0" rel="150400.4.11.1"/>
  <changelog author="mpluskal@suse.com" date="1459944000">- Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1476360000">- fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path</changelog>
  <changelog author="mpost@suse.com" date="1491912000">- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
  same reason.
- Tweaked a comment to get rid of an rpmlint warning message.</changelog>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
</package>
<package pkgid="d4ab56461c275bd2d7ef17724f794bb9f9dd86685d02af0b07e064b27f63526c" name="openssl-ibmca" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150400.4.16.1"/>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1683201600">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687435200">- Adjust dlopen() for the new ibmca-openssl3.so for the multibuild
  flavor. This allows to install in parallel a version compiled
  against openssl 1.1.1 and another with openssl 3.0. [bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1693569600">- Adjust configure and Makefile to require libica-openssl3 when
  building wiht openssl3 flavor. [bsc#1207472]
  * Add openssl3-rename-libica-files.patch</changelog>
</package>
<package pkgid="827ea6a527ab3167ebbc86ee5fd8a4e0543ab4a813f039d9de5e958e8d8907ed" name="openssl-ibmca" arch="src">
  <version epoch="0" ver="2.4.0" rel="150400.4.16.1"/>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682424000">- Added dependency on libica4 (bsc#1209038)
  * BuildRequires and Requires statements in .spec file for libica4</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1682596800">- Updated the .spec file as follow:
  * BuildRequires:  libica-devel &gt;= 4.0.0
  * BuildRequires:  libica-tools &gt;= 4.0.0</changelog>
  <changelog author="otto.hollmann@suse.com" date="1683201600">- Add multibuild flavor to provide library compiled against openssl-3
  [bsc#1207472]</changelog>
  <changelog author="pmonreal@suse.com" date="1687435200">- Adjust dlopen() for the new ibmca-openssl3.so for the multibuild
  flavor. This allows to install in parallel a version compiled
  against openssl 1.1.1 and another with openssl 3.0. [bsc#1207472]</changelog>
  <changelog author="otto.hollmann@suse.com" date="1693569600">- Adjust configure and Makefile to require libica-openssl3 when
  building wiht openssl3 flavor. [bsc#1207472]
  * Add openssl3-rename-libica-files.patch</changelog>
</package>
<package pkgid="2fe8148d7131faf6305866469fcfdc4c48f7b61dc655c99ef9799c00ec7063c7" name="openssl-ibmca" arch="s390x">
  <version epoch="0" ver="2.4.0" rel="150400.4.8.1"/>
  <changelog author="jjolly@suse.com" date="1458561600">- Fixed %post script to update library path (the only dynamic part
  of the ibmca configuration) every time the package is installed.
  (bsc#966139)</changelog>
  <changelog author="mpost@suse.com" date="1459425600">- Upgraded to version 1.3.0 (fate#319941)
  - Updated openssl-ibmca-configure.patch to apply cleanly
  - Removed obsolete patches
  - openssl-ibmca-README.patch
  - openssl-ibmca-sha256-digest-length.patch
  - openssl-pkey.patch
  - openssl-des-ede.patch
- Did some spec file cleanup.</changelog>
  <changelog author="mpluskal@suse.com" date="1459944000">- Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1476360000">- fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path</changelog>
  <changelog author="mpost@suse.com" date="1491912000">- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
  same reason.
- Tweaked a comment to get rid of an rpmlint warning message.</changelog>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
</package>
<package pkgid="3fdf52ad72175e303b47af7f0d955c8bc9b3e1269025b1d83d9a6734f58cd9b1" name="openssl-ibmca" arch="src">
  <version epoch="0" ver="2.4.0" rel="150400.4.8.1"/>
  <changelog author="jjolly@suse.com" date="1458561600">- Fixed %post script to update library path (the only dynamic part
  of the ibmca configuration) every time the package is installed.
  (bsc#966139)</changelog>
  <changelog author="mpost@suse.com" date="1459425600">- Upgraded to version 1.3.0 (fate#319941)
  - Updated openssl-ibmca-configure.patch to apply cleanly
  - Removed obsolete patches
  - openssl-ibmca-README.patch
  - openssl-ibmca-sha256-digest-length.patch
  - openssl-pkey.patch
  - openssl-des-ede.patch
- Did some spec file cleanup.</changelog>
  <changelog author="mpluskal@suse.com" date="1459944000">- Use macro for configure (fate#319941)
- Use url for source
- Enable parallel building
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="meissner@suse.com" date="1476360000">- fixed ssl configuration merging (bsc#1004463)
- openssl-ibmca-fix-enginepath.patch: fix the engine path</changelog>
  <changelog author="mpost@suse.com" date="1491912000">- Added openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch (bsc#1032113)
- Added libica-tools to the BuildRequires due to repackaging of libica.
- Renamed BuildRequires from libica2-devel to libica-devel for the
  same reason.
- Tweaked a comment to get rid of an rpmlint warning message.</changelog>
  <changelog author="mpost@suse.com" date="1506081600">- Now that the openSSL engines directory is versioned:
  * Modified the spec file to query the libcrypto package
    for which directory to install the engine into.
  * Removed openssl-ibmca-fix-enginepath.patch. Replaced it
    with a sed command so that it will provide the correct
    versioned engines directory
- Removed openssl-ibmca-configure.patch. It doesn't seem to
  be needed any longer.</changelog>
  <changelog author="mpost@suse.com" date="1506081601">- Upgraded to version 1.4.0
  * Re-license to Apache License v2.0
  * Fix aes_gcm initialization.
  * Update man page.
  * Add macros for OpenSSL 0.9.8 compat.
  * Remove AC_FUNC_MALLOC from configure.ac
  * Add compat macro for OpenSSL 1.0.1e-fips.
  * Setting 'foreign' strictness for automake.
  * Add AES-GCM support.
  * Rework EVP_aes macros.
  * Remove dependency of old local OpenSSL headers.
  * Fix engine initialization to set function pointers only once.
  * Remove blank COPYING and NEWS files.
  * Remove INSTALL and move its content to README.md
  * Update README.md file to make use of markdown.
  * Rename README file to README.md to use markdown
  * Add CONTRIBUTING guidelines.
  * Adding coding style documentation.
  * Enable EVP_MD_FLAG_FIPS flag for SHA-*.
  * Initialize rsa_keygen in RSA_METHOD for openssl &lt; 1.1.0
  * Fix SHA512 EVP digest struct to use
    EVP_MD_FLAG_PKEY_METHOD_SIGNATURE when using OpenSSL 1.0
  * Fix wrong parenthesis
  * convert libica loading to dlopen() and friends
  * Add support to DSO on new API of OpenSSL-1.1.0
- Removed obsolete openssl-ibmca-fix-sha512-evp-digest-to-use-evp_md_flag_pkey_method_signature.patch
- Added BuildRequires for autoconf, automake, and libtool.
- Updated BuildRequires for libica-devel to be &gt;= 3.1.1</changelog>
  <changelog author="mpost@suse.com" date="1535716800">- Added the following patches for bsc#1097463
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542196800">- Upgraded to version 2.0.0 (Fate#325688)
  * openssl-ibmca 2.0.0
    Add ECC support.
    Add check and distcheck make-targets.
    Project cleanup, code was broken into multiple files and coding style cleanup.
    Improvements to compat macros for openssl.
    Don't disable libica sw fallbacks.
    Fix dlclose logic.
  * openssl-ibmca 1.4.1
    Fix structure size for aes-256-ecb/cbc/cfb/ofb
    Update man page
    Switch to ibmca.so filename to allow standalone use
    Switch off Libica fallback mode if available
    Make sure ibmca_init only runs once
    Provide simple macro for DEBUG_PRINTF possibility
    Cleanup and slight rework of function set_supported_meths
- Did some cleanup to the spec file, based on spec-cleanup.
- Removed the following obsolete patches:
  * openssl-ibmca-sles15-Switch-to-ibmca.so-filename-to-allow-a-standalone-us.patch
  * openssl-ibmca-sles15-Fix-lib-name-in-test-code.patch
  * openssl-ibmca-sles15-Update-lib-name-in-documentation.patch</changelog>
  <changelog author="mpost@suse.com" date="1542283200">- Upgraded to version 2.0.1 (Fate#325688)
  * openssl-ibmca 2.0.1
    Dont fail when a libica symbol cannot be resolved.
- Made multiple changes to the spec file based on spec-cleaner output.</changelog>
  <changelog author="mpost@suse.com" date="1543320000">- Upgraded to version 2.0.2 (Fate#325688)
  * openssl-ibmca 2.0.2
    Fix doing rsa-me, altough rsa-crt would be possible.</changelog>
  <changelog author="mpost@suse.com" date="1561723200">- Added openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
  An Apache HTTP Server was set up with mod_ssl and the openssl
  ibmca engine using libica and a CEX6A card. Whenever a worker
  process is cleaned up a segmentation fault occurs.
  (bsc#1138517)</changelog>
  <changelog author="mpost@suse.com" date="1566993600">- Upgraded to version 2.0.3 (jsc#SLE-6123, jsc#SLE-6424)
  * openssl-ibmca 2.0.3
    Add MSA9 CPACF support for ECDSA sign/verify
- Dropped obsolete openssl-ibmca-sles15sp1-Move-ERR_load-unload-to-bind_helper-resp-destroy-fun.patch
- Changed the ExclusiveArch directive to include s390x only.
- The code in e_ibmca.c does a dlopen for libica.so.3, instead of
  linking against the shared library. As a result, if the package
  containing libica.so.3 isn't installed, problems occur. Added
  a "Requires: libica3" to the spec file to fix this. (bsc#1142286)
- Made a couple of changes to the spec file based on the output
  from spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1568116800">- Upgrade to version 2.1.0 (jsc#SLE-7852, jsc#SLE-7882)
  Add MSA9 CPACF support for X25519, X448, Ed25519 and Ed448</changelog>
  <changelog author="mpost@suse.com" date="1600257600">- Upgrade to version 2.1.1 (jsc#SLE-13709)
  * Bug fixes</changelog>
  <changelog author="mpost@suse.com" date="1631880000">- Upgraded to version 2.2.1 (jsc#SLE-18333)
  * openssl-ibmca 2.2.1
    Bug fixes
  * openssl-ibmca 2.2.0
    Implement fallbacks based on OpenSSL
    Disable software fallbacks from libica
    Allow to specify default library (libica vs. libica-cex) to use
    Provide "libica" engine ctrl to switch library at load time
    Update README.md
    Remove libica link dependency
    Generate sample configuration files from system configuration
    Restructure registration global data
  * openssl-ibmca 2.1.3
    Bug fix
  * openssl-ibmca 2.1.2
    Bug fixes
- Modified spec file to
  * Define a global variable enginesdir the same was as IBM does
    instead of _ENGINE_DIR as we had been doing.
  * Implemented %make_build macro according to spec-cleaner
  * Changed the package description to match IBM's.
  * Removed the redundant "autoreconf --force --install"</changelog>
  <changelog author="mpost@suse.com" date="1647345600">- Completely revamped the postinstall scriptlet so that it doesn't
  need to know or care about how many lines are in either
  /etc/ssl/openssl.cnf, or the sample file at
  /usr/share/doc/packages/openssl-ibmca/openssl.cnf.sample
  We're now using the ".include" directive for the openssl.cnf
  file, and only modifying that file the minimum necessary to
  implement the change. (bsc#1004463)</changelog>
  <changelog author="mpost@suse.com" date="1664884800">- Upgraded to version 2.3.1 (jsc#PED-597)
  * openssl-ibmca 2.3.1
  - Adjustments for libica 4.1.0
  * openssl-ibmca 2.3.0
  - First version including the provider
  - Fix for engine build without OpenSSL 3.0 sources
  * openssl-ibmca 2.2.3
  - Fix PKEY segfault with OpenSSL 3.0
  * openssl-ibmca 2.2.2
  - Fix tests with OpenSSL 3.0
  - Build against libica 4.0
- Removed a Requires for libica from the specfile.
- Removed the obsolete baselibs.conf file</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1680696000">- Upgraded openssl-ibmca to version 2.4.0 (bsc#1210058)
  * openssl-ibmca 2.4.0
  - Provider: Adjustments for OpenSSL versions 3.1 and 3.2
  - Provider: Support RSA blinding
  - Provider: Constant-time fixes for RSA PKCS#1 v1.5 and OAEP padding
  - Provider: Support "implicit rejection" option for RSA PKCS#1 v1.5 padding
  - Provider: Adjustments in OpenSSL config generator and example configs
  - Engine: EC: Cache ICA key in EC_KEY object (performance improvement)</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1681905600">- Applies a patch (bsc#1210359)
  * openssl-ibmca-engine-noregister.patch
- Updated %autosetup, added ' -p1'</changelog>
</package>
<package pkgid="9d26462353e9df49eefe05f985a5a655880158aa478ab41b0d3db5d7f1ebb5a5" name="osinfo-db" arch="noarch">
  <version epoch="0" ver="20230719" rel="150400.3.12.1"/>
  <changelog author="carnold@suse.com" date="1627387200">- bsc#1182144 - osinfo-db: autoinst.xml does not work with
  Tumbleweed. Fixes nested language problem.
  opensuse-autoyast-desktop.patch</changelog>
  <changelog author="carnold@suse.com" date="1630497600">- Update to database version 20210809
  osinfo-db-20210809.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1630670400">- Update to database version 20210903
  osinfo-db-20210903.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1634731200">- Update to database version 20211013
  osinfo-db-20211013.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1637668800">- jsc#SLE-17764 - Dev: Support Oracle Linux as a guest VM. See also
  bsc#1192238 [Build58.2][KVM] The latest supported OracleLinux as
  guest versions are not included anywhere
  add-missing-oracle-linux-versions.patch</changelog>
  <changelog author="carnold@suse.com" date="1641384000">- Update to database version 20211216
  osinfo-db-20211216.tar.xz
- Drop add-missing-oracle-linux-versions.patch</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to database version 20220214
  osinfo-db-20220214.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1646913600">- bsc#1196965 - openSUSE Tumbleweed unattended installation with
  libvirt fails
  opensuse-autoyast-desktop.patch</changelog>
  <changelog author="carnold@suse.com" date="1649160000">- bsc#1197958 - request support for SLE15-SP4 in the osinfo database
- Add support for SUSE linux Enterprise Micro 5.2
  add-slem5.2-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1653307200">- Update to database version 20220516
  osinfo-db-20220516.tar.xz</changelog>
  <changelog author="dmueller@suse.com" date="1659355200">- update to 20220727
- drop: add-opensuse-leap-15.4-support.patch
  add-sle15sp4-support.patch
  add-slem5.1-support.patch
  add-slem5.2-support.patch
  opensuse-autoyast-desktop.patch: all upstream</changelog>
  <changelog author="carnold@suse.com" date="1661428800">- Add support for openSUSE Leap 15.5, SLES 15.5, and SLE Micro 5.3
  add-opensuse-leap-15.5-support.patch
  add-sle15sp5-support.patch
  add-slem5.3-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1662120000">- bsc#1202827 - Fail to deploy sle15sp5 guest via virt-install with
  osinfo
  add-sle15sp5-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1664452800">- Update to database version 20220830
  osinfo-db-20220830.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1666872000">- Update to database version 20221018
  osinfo-db-20221018.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1671105600">- Update to database version 20221130
  osinfo-db-20221130.tar.xz
- Add support for SLE Micro 5.4
  add-slem5.4-support.patch
- Fix &lt;derives-from id&gt; value
  add-slem5.3-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1678708800">- Update to database version 20230308
  osinfo-db-20230308.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1685534400">- Update to database version 20230518
  osinfo-db-20230518.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1691409600">- Update to database version 20230719
  osinfo-db-20230719.tar.xz
- Add support for SLE 15-SP6
  add-sle15sp6-support.patch
- Add support for SLE Micro 5.5
  add-slem5.5-support.patch
- Drop patches contained in new tarball
  add-opensuse-leap-15.5-support.patch
  add-sle15sp5-support.patch
  add-slem5.3-support.patch
  add-slem5.4-support.patch</changelog>
</package>
<package pkgid="e52e349a2941ba9672d0e76b4a7782fab730e2cebba7c0de9c78620b1fe42d78" name="osinfo-db" arch="src">
  <version epoch="0" ver="20230719" rel="150400.3.12.1"/>
  <changelog author="carnold@suse.com" date="1627387200">- bsc#1182144 - osinfo-db: autoinst.xml does not work with
  Tumbleweed. Fixes nested language problem.
  opensuse-autoyast-desktop.patch</changelog>
  <changelog author="carnold@suse.com" date="1630497600">- Update to database version 20210809
  osinfo-db-20210809.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1630670400">- Update to database version 20210903
  osinfo-db-20210903.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1634731200">- Update to database version 20211013
  osinfo-db-20211013.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1637668800">- jsc#SLE-17764 - Dev: Support Oracle Linux as a guest VM. See also
  bsc#1192238 [Build58.2][KVM] The latest supported OracleLinux as
  guest versions are not included anywhere
  add-missing-oracle-linux-versions.patch</changelog>
  <changelog author="carnold@suse.com" date="1641384000">- Update to database version 20211216
  osinfo-db-20211216.tar.xz
- Drop add-missing-oracle-linux-versions.patch</changelog>
  <changelog author="carnold@suse.com" date="1646136000">- Update to database version 20220214
  osinfo-db-20220214.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1646913600">- bsc#1196965 - openSUSE Tumbleweed unattended installation with
  libvirt fails
  opensuse-autoyast-desktop.patch</changelog>
  <changelog author="carnold@suse.com" date="1649160000">- bsc#1197958 - request support for SLE15-SP4 in the osinfo database
- Add support for SUSE linux Enterprise Micro 5.2
  add-slem5.2-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1653307200">- Update to database version 20220516
  osinfo-db-20220516.tar.xz</changelog>
  <changelog author="dmueller@suse.com" date="1659355200">- update to 20220727
- drop: add-opensuse-leap-15.4-support.patch
  add-sle15sp4-support.patch
  add-slem5.1-support.patch
  add-slem5.2-support.patch
  opensuse-autoyast-desktop.patch: all upstream</changelog>
  <changelog author="carnold@suse.com" date="1661428800">- Add support for openSUSE Leap 15.5, SLES 15.5, and SLE Micro 5.3
  add-opensuse-leap-15.5-support.patch
  add-sle15sp5-support.patch
  add-slem5.3-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1662120000">- bsc#1202827 - Fail to deploy sle15sp5 guest via virt-install with
  osinfo
  add-sle15sp5-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1664452800">- Update to database version 20220830
  osinfo-db-20220830.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1664884800">- jsc#PED-2113 [Virt Tools] Refresh Virtualization Tools for Xen
  and KVM Management</changelog>
  <changelog author="carnold@suse.com" date="1666872000">- Update to database version 20221018
  osinfo-db-20221018.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1671105600">- Update to database version 20221130
  osinfo-db-20221130.tar.xz
- Add support for SLE Micro 5.4
  add-slem5.4-support.patch
- Fix &lt;derives-from id&gt; value
  add-slem5.3-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1678708800">- Update to database version 20230308
  osinfo-db-20230308.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1685534400">- Update to database version 20230518
  osinfo-db-20230518.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1691409600">- Update to database version 20230719
  osinfo-db-20230719.tar.xz
- Add support for SLE 15-SP6
  add-sle15sp6-support.patch
- Add support for SLE Micro 5.5
  add-slem5.5-support.patch
- Drop patches contained in new tarball
  add-opensuse-leap-15.5-support.patch
  add-sle15sp5-support.patch
  add-slem5.3-support.patch
  add-slem5.4-support.patch</changelog>
</package>
<package pkgid="6774ee4bb998085e1fc2c65c0ef6b3b2b86f09ef52770c7a158d1d1c1cd31144" name="ovmf" arch="src">
  <version epoch="0" ver="202202" rel="150400.5.10.1"/>
  <changelog author="glin@suse.com" date="1625832000">- Add ovmf-fix-xen-s3-detection.patch to fix the S3 detection in
  ovmf-xen
- Add ovmf-xen-add-qemu-kernel-loader-fs.patch to add
  QemuKernelLoaderFsDxe to ovmf-xen to load kernel from qemu fw_cfg</changelog>
  <changelog author="jlee@suse.com" date="1634212800">- Update to edk2-stable202108
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc
  Add CLANGDWARF toolchain for generating ELF+DWARF
  NetworkPkg/IScsiDxe: remotely exploitable buffer overflows
  NetworkPkg/IScsiDxe: add sha256 support to CHAP
  Create header files and multiple Hobs for Universal Payload
  Add search feature in config editor
  Add additional build option to treat Dynamic Pcd as DynamicEx Pcd
  Add a new MicrocodeLib for microcode loading
  Implement key enrolment from default key variables
  StandaloneMm support for 32bit Arm machines
  Add firmware support for Cloud Hypervisor on arm64
  Support architecture-specific openssl acceleration
  Support measured AMD SEV boot with kernel/initrd/cmdline
  Add ACPI 6.4 header
  Add new BootDiscoveryPolicyUiLib
  - Patches (git log --oneline --reverse edk2-stable202105~..edk2-stable202108):
  e1999b264f ArmPkg/ArmGic: Fix maximum number of interrupts in GICv3
  b8ed8c0fb2 Maintainers.txt: add Sami Mujawar as top-level ArmVirtPkg reviewer
  dbc22a1785 UefiCpuPkg/MpInitLib: Allocate a separate SEV-ES AP reset stack area
  0095070e70 MdePkg/Register/Amd: expand the SEV MSR to include the SNP definition
  f828fc9876 MdePkg/Register/Amd: realign macros with more space for future expansion
  34e16ff883 MdePkg/Register/Amd: define GHCB macros for hypervisor feature detection
  f0983b2074 MdePkg/Register/Amd: define GHCB macro for Register GPA structure
  4665fa6503 MdePkg/Register/Amd: define GHCB macro for the Page State Change
  dfd41aef78 MdePkg/Register/Amd: define GHCB macros for SNP AP creation
  5a7cbd54a1 MdePkg/BaseLib: add support for PVALIDATE instruction
  2b5b2ff04d MdePkg/BaseLib: add support for RMPADJUST instruction
  901a9bfc3a OvmfPkg/BaseMemEncryptSevLib: introduce MemEncryptSevClearMmioPageEncMask()
  c394fa4c9e OvmfPkg/AmdSevDxe: use MemEncryptSevClearMmioPageEncMask() to clear EncMask
  8ee4e52ba8 OvmfPkg/QemuFlashFvbServicesRuntimeDxe: use Mmio helper to clear enc mask
  b4a8de5d27 OvmfPkg/TpmMmioSevDecryptPei: use MemEncryptSevClearMmioPageEncMask()
  adfa3327d4 OvmfPkg/BaseMemEncryptSevLib: remove Flush parameter
  fe5da0927a IntelFsp2WrapperPkg: Remove microcode related PCDs
  d3ff5dbe1d MdePkg: MmControl: Fix function and structure definition mismatches
  197e27c90a MdePkg: Add new 16550-compatible Serial Port Subtypes to DBG2
  fdf3666f01 MdePkg: Update DBG2 and SPCR header with NVIDIA 16550 Subtype
  b233eb1849 EmbeddedPkg/RealTimeClockRuntimeDxe: Improve GetWakeupTime
  b5379899b3 MdeModulePkg/Xhci: Fix TRT when data length is 0
  039e07f626 MdePkg/MdeModulePkg: Move AML_NAME_SEG_SIZE definition
  1f515342d8 DynamicTablesPkg: Use AML_NAME_SEG_SIZE define
  75e9154f81 OvmfPkg/VirtioMmioDeviceLib: Add EFIAPI to VirtioMmioSetQueueAddress
  c410ad4da4 MdePkg/BaseLib: Fix AsmReadSs() with GCC toolchain
  c1aa3bab12 BaseTools: Add ClangBase.lds for CLANG8 tool chain with max-page-size
  c6b872c6ab BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image
  cf9959adff BaseTools: Update build_rule to skip CLANG resource section generation
  4b56ad2049 BaseTools: Add new CLANG8ELF tool chain for new LLVM/CLANG8
  e1636fe18f BaseTools: Update ClangBase.lds to keep dynamic section
  924c2b847f BaseTools: Change CLANG8ELF to CLANGDWARF
  e25566cd2b OvmfPkg: remove the Xen drivers from the IA32, IA32X64, and X64 platforms
  aa7f19f480 OvmfPkg: remove the Xen drivers from the AmdSev platform
  7bc04a75a7 OvmfPkg: switch IA32, IA32X64, X64 to the fw_cfg-only ACPI platform driver
  d697037446 OvmfPkg: switch the AmdSev platform to the fw_cfg-only ACPI platform driver
  ae4aa4a346 OvmfPkg/README: bump minimum QEMU version to 1.7.1, machine types to 1.7
  2a85d9b07e OvmfPkg/AcpiPlatformDxe: fix header file warts
  180f1908b3 OvmfPkg/AcpiPlatformDxe: sort #includes and [LibraryClasses]
  6d1e56e715 OvmfPkg/AcpiPlatformDxe/QemuLoader.h: remove QemuFwCfgLib class dependency
  747b1ef725 OvmfPkg/AcpiPlatformDxe: move "QemuLoader.h" to IndustryStandard
  cc302b799e OvmfPkg/AcpiPlatformDxe: consolidate #includes and [LibraryClasses]
  c9bba52fc7 OvmfPkg/XenAcpiPlatformDxe: create from AcpiPlatformDxe
  a31fcb5096 OvmfPkg/AcpiPlatformDxe: remove the "AcpiPlatformDxe.inf" driver
  4115840c28 OvmfPkg/XenAcpiPlatformDxe: remove the QEMU ACPI linker/loader client
  d6ba8aa6ef OvmfPkg/XenAcpiPlatformDxe: remove QEMU fw_cfg dependency
  3f975ee570 OvmfPkg/XenAcpiPlatformDxe: remove the InstallAcpiTable() helper function
  8f8d3d90c5 OvmfPkg/XenAcpiPlatformDxe: remove OVMF's built-in ACPI tables
  4174c5c787 OvmfPkg/Bhyve/AcpiPlatformDxe: fix file path typo in comment
  d491c88a0c OvmfPkg/AcpiTables: remove unused module
  e7641171b6 OvmfPkg/OvmfXen: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  3357ac7380 OvmfPkg/XenAcpiPlatformDxe: remove delayed ACPI table installation
  d06eb2d1d9 OvmfPkg/PlatformPei: remove Xen support
  8899e3fe6a OvmfPkg: drop PcdPciDisableBusEnumeration from the IA32, IA32X64, X64 DSCs
  2833589ad0 OvmfPkg: drop PcdPciDisableBusEnumeration from the AmdSev platform
  e43cca74ad OvmfPkg/Bhyve: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  b005f9f1f5 OvmfPkg/OvmfXen: remove IncompatiblePciDeviceSupport DXE driver
  8c8f886f27 OvmfPkg/Bhyve: remove IncompatiblePciDeviceSupport DXE driver
  984c93ece3 OvmfPkg/IncompatiblePciDeviceSupportDxe: remove PcdPciDisableBusEnumeration
  32fef03563 OvmfPkg/PciHostBridgeLib: consolidate #includes and INF file sections
  e120c962f5 OvmfPkg/PciHostBridgeLibScan: create from PciHostBridgeLib
  c2f24ba321 OvmfPkg/Bhyve: consume PciHostBridgeLibScan
  307763c3da OvmfPkg/OvmfXen: consume PciHostBridgeLibScan
  242678da2a OvmfPkg/PciHostBridgeLib: remove Bhyve and Xen support
  33d4f3e39e OvmfPkg/PciHostBridgeLibScan: remove QEMU (fw_cfg) support
  4c81178cf0 OvmfPkg/PciHostBridgeLibScan: remove PcdOvmfHostBridgePciDevId
  8af38170b5 OvmfPkg/PciHostBridgeLibScan: clean up file names and file-top comments
  7e25086a00 OvmfPkg/SmbiosPlatformDxe: clean up #includes and INF
  5072593738 OvmfPkg/SmbiosPlatformDxe: return EFI_NOT_FOUND if there is no SMBIOS data
  4db374562f OvmfPkg/SmbiosPlatformDxe: locate SMBIOS protocol in InstallAllStructures()
  a8ab14424e OvmfPkg/SmbiosPlatformDxe: split GetXenSmbiosTables() decl. to new header
  9d84e74ca0 OvmfPkg/SmbiosPlatformDxe: declare InstallAllStructures() in header file
  d4a8aaee73 OvmfPkg/SmbiosPlatformDxe: create Xen-specific module INF file
  ce270905bf OvmfPkg/SmbiosPlatformDxe: split Xen entry point from QEMU entry point
  51adb689e1 OvmfPkg: restrict XenPlatformLib to BdsDxe in the IA32, IA32X64, X64 DSCs
  ddb3fdbef3 BaseTools GenFw: Fix regression issue to convert the image to ACPI data
  558d83ab1a OvmfPkg/README: Fix typo in README
  beb443fde0 ShellPkg: Fix typo
  702ba436ed OvmfPkg/PlatformCI: bump QEMU choco package version to 2021.5.5
  83761337ec NetworkPkg/IScsiDxe: wrap IScsiCHAP source files to 80 characters
  29cab43bb7 NetworkPkg/IScsiDxe: simplify "ISCSI_CHAP_AUTH_DATA.InChallenge" size
  95616b8661 NetworkPkg/IScsiDxe: clean up "ISCSI_CHAP_AUTH_DATA.OutChallengeLength"
  e8f28b09e6 NetworkPkg/IScsiDxe: clean up library class dependencies
  cf01b2dc8f NetworkPkg/IScsiDxe: fix potential integer overflow in IScsiBinToHex()
  d90fff40cb NetworkPkg/IScsiDxe: assert that IScsiBinToHex() always succeeds
  dc469f1371 NetworkPkg/IScsiDxe: reformat IScsiHexToBin() leading comment block
  47b76780b4 NetworkPkg/IScsiDxe: fix IScsiHexToBin() hex parsing
  54e90edaed NetworkPkg/IScsiDxe: fix IScsiHexToBin() buffer overflow
  b8649cf2a3 NetworkPkg/IScsiDxe: check IScsiHexToBin() return values
  288bd74a22 Pytool: SpellCheck: Fix incorrect file mask across package matrices
  1ad794b627 MdeModulePkg: Fix device path when boot manager menu is from different FV
  11b1c1d4b9 SecurityPkg: TcgStorageOpalLib: Initialize SupportedAttributes parameter.
  d58016b768 UefiPayloadPkg: Get platform specific logic via protocol for BDS
  d8c18ba3f4 MdeModulePkg: Add Universal Payload general definition header file
  b597b6e24c MdeModulePkg: Add new structure for the PCI Root Bridge Info Hob
  99de2e7e03 UefiPayloadPkg: UefiPayload retrieve PCI root bridge from Guid Hob
  9d53e01efe MdeModulePkg: Add new structure for the Universal Payload SMBios Table Hob
  70e8c9c3bc MdeModulePkg/Universal/SmbiosDxe: Scan for existing tables
  302a8f353c UefiPayloadPkg: Create gUniversalPayloadSmbiosTableGuid Hob
  75293330ea MdeModulePkg: Add new structure for the Universal Payload ACPI Table Hob
  761329ee27 MdeModulePkg/ACPI: Install ACPI table from HOB.
  8c0d678063 UefiPayloadPkg: Create gUniversalPayloadAcpiTableGuid Hob
  fa24b6ed26 UefiPayloadPkg: Use DynamicEx instead of Dynamic to pass PCD across binary
  c511426abe MdeModulePkg/UniversalPayload: Add definition for extra info in payload
  fe471d4a57 UefiPayloadPkg: Add PayloadLoaderPeim which can load ELF payload
  ab2b389e7a PeiCore: Remove assertion when failing to load PE image
  1b380aa603 BaseTools GenFw: Keep read only alloc section as text when convert ELF
  9cf9de668f StandaloneMmPkg: Core: Spelling error in comment
  610385fa3b ArmPlatformPkg: SpellCheck: Switch spellcheck CI to AuditOnly
  04ddd1271e ArmPkg: SpellCheck: Update valid acronyms in ExtendedWords
  cdf7544703 MdeModulePkg PciBusDxe: Increase the width of data read during oprom shadow
  2847c72fda Maintainers.txt: Add Reviewers for Universal Payload definitions
  1162ae8297 Maintainers.txt: Add reviewers for ACPI and SMBIOS modules
  a63914d3f6 ArmPkg: Move cache defs used in Universal/Smbios into ArmCache.h
  6cfeeb71c4 UefiCpuPkg/CpuCommonFeaturesLib: Correct the CPU location check
  d9a7612f8d MdeModulePkg/BdsDxe: Update BdsEntry to use Variable Policy
  5959879e92 ArmVirtPkg: Add PCIe host bridge utility lib for ArmVirtPkg
  4dda0f7ab4 ArmVirtPkg: Enable PCIe support for Kvmtool
  1e5e58d39b UefiPayloadPkg/UefiPayloadEntry: Improve bootloader memrange parsing
  7471751a4d UefiPayloadPkg/UefiPayloadEntry: Remove 4GB memory WA
  20ca528828 CryptoPkg: BaseCryptLib: Update Salt length requirement for RSA-PSS scheme.
  18b2272e4d Azurepipeline: SpellCheck: Enforce Node dependency to use version 14.x
  eba32695ee CryptoPkg/BaseCryptLib: Enabled CryptSha512 for Smm/Runtime drivers
  12e34cd2f7 OvmfPkg/Bhyve: clean up TPM_ENABLE remnants
  82f727c4af UefiPayloadPkg: Add HobLib for UniversalPayload
  ea0bd5f6a7 MdeModulePkg: Add new structure for the Universal Payload Serial Port Info
  a75c029f60 UefiPayloadPkg: Add a separate PlatformHookLib for Universal Payload
  d63595c3c9 UefiPayloadPkg: Update the function definition of HobConstructor
  0ff6de9358 UefiPayloadPkg: Create separate Payload Entry for UniversalPayload
  b208d37c73 UefiPayloadPkg: Get and enter DxeCore for Universal Payload
  27cb64fffc UefiPayloadPkg: Fix up UPL Pcd database
  6b69f73b59 UefiPayloadPkg: Include UniversalPayLoad modules in UefiPayloadPkg.dsc
  86e6948cfb UefiPayloadPkg: Remove assert when reserve MMIO/IO resource for devices
  2db0ed93ff UefiPayloadPkg: Add macro to enable and disable some drivers
  3eb72b308a UefiPayloadPkg: Add PcdInstallAcpiSdtProtocol feature in UefiPayloadPkg
  caa139fe17 UefiPayloadPkg: Add PcdResetOnMemoryTypeInformationChange in UefiPayloadPkg
  8efd912baf UefiPayloadPkg: Add new structure for BootManagerMenuFile HOB
  19a541d70e UefiPayloadPkg: consume the BootManagerMenuFile HOB
  333a866106 BaseTools: Remove check for Split.exe in toolset.bat
  f0a3f6d9c3 BaseTools: Fix spelling of "overwrite" and "overwriting" in toolset.bat
  17143c4837 BaseTools: Reset ERRORLEVEL in toolsetup.bat after edk2basetools check
  abfff7c45d BaseTools GenFw: Add support for RISCV GOT/PLT relocations
  27b8a52957 MdePkg: MmConfiguration: Move definition of EFI_MM_RESERVED_MMRAM_REGION
  d1fc3d7ef3 MdePkg: MmConfiguration: Added definition of MM Configuration PPI
  5a2e030f73 OvmfPkg/GenericQemuLoadImageLib: plug cmdline blob leak on success
  932449710c OvmfPkg/X86QemuLoadImageLib: plug cmdline blob leak on success
  24b0e9d128 Revert "OvmfPkg/QemuKernelLoaderFsDxe: don't expose kernel command line"
  cf20302474 OvmfPkg/GenericQemuLoadImageLib: Read cmdline from QemuKernelLoaderFs
  9421f5ab8d OvmfPkg/X86QemuLoadImageLib: State fw_cfg dependency in file header
  b37cfdd280 OvmfPkg/XenPlatformPei: Relocate shared_info page mapping
  55dee4947b MdePkg : Add IPMI Macro and Structure Defintions to resolve build errors
  580b11201e IntelFsp2Pkg: Add Config Editor tool support
  939ed3a592 UefiPayloadPkg/PayloadLoader: Fix bug in locating relocation section
  3cde0d553d UefiPayloadPkg/PayloadLoader: Remove assertion
  49eeda113a NetworkPkg/IScsiDxe: re-set session-level authentication state before login
  7eba9f698e NetworkPkg/IScsiDxe: add horizontal whitespace to IScsiCHAP files
  7b6c2b2a26 NetworkPkg/IScsiDxe: distinguish "maximum" and "selected" CHAP digest sizes
  903ce1d8f8 NetworkPkg/IScsiDxe: support multiple hash algorithms for CHAP
  47fea2abcb NetworkPkg/IScsiDxe: support SHA256 in CHAP
  bb33c27fbe NetworkPkg: introduce the NETWORK_ISCSI_MD5_ENABLE feature test macro
  8697dc60cc Maintainers.txt: Update Maintainers and reviewers for UefiPayloadPkg
  fea7901dba UefiPayloadPkg: Fix the build failure
  1e0c441c92 OvmfPkg/Bhyve: add USB support
  44ced03798 OvmfPkg/Bhyve: use static PCI32Base address
  b3db0cb1f8 MdeModulePkg/PartitionDxe: Ignore PMBR BootIndicator per UEFI spec
  0a6b303dce UefiCpuPkg/ExceptionLib: Conditionally clear shadow stack token busy bit
  d10e058016 MdeModulePkg/RegularExpressionDxe: Fix memory assert in FreePool()
  4c051c2c65 MdeModulePkg: Update YAML file to fix CI error
  31fcee6d99 ArmVirtPkg: Add PlatformHasAcpiDtDxe for Cloud Hypervisor
  c28fc8ab3b ArmVirtPkg: Install Acpi tables for Cloud Hypervisor
  0e3b6bd0ee ArmVirtPkg: support Cloud Hypervisor in edk2
  b560e9d9b6 IntelFsp2Pkg: PatchFv parseInfFile function modification
  f47c4676dd Pytool: SpellCheck: Defer path expansion in cspell parameters
  cc89d245f9 Maintainers.txt: remove Laszlo Ersek's entries
  84af6ea320 BaseTools/Scripts: Ignore Mergify merge commits in PatchCheck.py
  b491eace37 .mergify: Simplify Mergify rules using GitHub status checks
  5ef08a49e3 .azurepipelines: Remove FINISHED and FAILED states
  ad1009ec62 MdePkg/Include: Add STATIC_ASSERT for L'' and L"" strings
  3de3c24755 BaseTools: Remove non-ascii character of StructurePcd comment
  40a9066439 BaseTools: Enable the flag to treat dynamic pcd as dynamicEx
  22fe311bd2 .pytool/EccCheck: Locate BaseTools dir with EDK_TOOLS_PATH
  a050c599df .pytool/EccCheck: Rename edk2_path as workspace_path
  50672d2692 .pytool/EccCheck: Check ecc_csv exists
  fb5b6220a9 .pytool/EccCheck: Set PACKAGES_PATH env var in Ecc
  fda5226aa3 UefiPayloadPkg: Dump hob information from boot loader
  7d748705b1 MdeModulePkg: Change the PldHeader to Header in ExtraData.h
  9bf4aee734 UefiPayloadPkg: Assign the length of UniversalPayload ExtraData
  d0b6596b8e MdeModulePkg/RamDiskDxe: Init list head before registering RamDisk protocol
  91f5d3b410 IntelFsp2Pkg: BaseCacheLib EfiProgramMtrr MtrrNumber Should be UINT32
  be282b1493 UefiPayloadPkg: Add PCD_DYNAMIC_AS_DYNAMICEX and set to True
  cac83b6f3b IntelFsp2Pkg: Add search function for Config Editor
  4bac086e8e UefiPayloadPkg: Add FV Guid for DXEFV and PLDFV
  fddb8d24ec ArmPlatformPkg/Scripts: Infer dll load address from console output
  885efcd3f9 MdePkg/Include: Smbios Specification 3.4.0 changes
  83b43c4cb1 MdeModulePkg PCD: Print which PCD was unable to be found
  c32c5911c4 BaseTools GenFw: Add support for R_RISCV_PCREL_LO12_S relocation
  097aeeb119 MdePkg/BaseLib: Add MemoryFence implementation for RiscV64
  391cffcb61 MdeModulePkg PiSmmCore: Change MemoryAttributes message to DEBUG_VERBOSE
  8781b143de BaseTools/Scripts: Fix GetMaintainer.py line endings
  28ef05ce10 BaseTools/Scripts: Allow GitHub ID at end Maintainers.txt lines
  2f5ad3f451 Maintainers.txt: Add GitHub IDs
  332632abf3 Maintainers.txt: Add Jiewen Yao as OvmfPkg Maintainer
  4d28a1c2fd BaseTools: Remove COMMON section from the GCC discard list
  878a92a887 CryptoPkg/OpensslLib: Add native instruction support for X64
  147f34b56c CryptoPkg/OpensslLib: Commit the auto-generated assembly files for X64
  ac70e71b1f NetworkPkg: Making the HTTP IO timeout value programmable with PCD
  ab796d3e2a NetworkPkg: Add HTTP Additional Event Notifications
  b461d67639 OvmfPkg/ResetVector: move SEV specific code in a separate file
  7f05102f65 OvmfPkg/ResetVector: add the macro to invoke MSR protocol based VMGEXIT
  dc485c556d OvmfPkg/ResetVector: add the macro to request guest termination
  f05eb2dfe5 OvmfPkg/AmdSev/SecretDxe: fix header comment to generic naming
  35e267cb34 OvmfPkg/AmdSev: use GenericQemuLoadImageLib in AmdSev builds
  a26a08dc1f OvmfPkg: PlatformBootManagerLibGrub: Allow executing kernel via fw_cfg
  0cb48007f7 OvmfPkg: add library class BlobVerifierLib with null implementation
  c73e31f54d OvmfPkg: add BlobVerifierLibNull to DSC
  6bf5580a3d ArmVirtPkg: add BlobVerifierLibNull to DSC
  d10ad8444f OvmfPkg/QemuKernelLoaderFsDxe: call VerifyBlob after fetch from fw_cfg
  5ace477f34 OvmfPkg/AmdSev/SecretPei: build hob for full page
  0deeab36d1 OvmfPkg/AmdSev: reserve MEMFD space for for firmware config hashes
  385b9d80a0 OvmfPkg/AmdSev: add BlobVerifierLibSevHashes
  514b3aa08e OvmfPkg/AmdSev: Enforce hash verification of kernel blobs
  8e6bb64fe4 EmbeddedPkg/VirtualRealTimeClockLib: Fix SetTime issues
  610bcc69ed ArmVirtPkg: Remove meaningless comment
  3445058aea MdeModulePkg/CapsuleApp: Fix typo in error message
  2e1fb41339 build: Fix python3.10 threading DeprecationWarnings
  0b1b0a9674 python: Replace distutils.utils.split_quotes with shlex.split
  fc50df0d8e BaseTools: Drop check for distutils.utils
  03e77558d4 BaseTools: use shutil.copyfile instead shutil.copy2
  2b47aaecef MdeModulePkg: Add BootDiscoveryPolicyUiLib.
  bb806a6e88 SecurityPkg: Create SecureBootVariableLib.
  9732659698 SecurityPkg: Create library for enrolling Secure Boot variables.
  12a4d0cb9d ArmVirtPkg: add SecureBootVariableLib class resolution
  3d427c5f83 OvmfPkg: add SecureBootVariableLib class resolution
  b926956418 EmulatorPkg: add SecureBootVariableLib class resolution
  db959018b6 SecurityPkg: Remove duplicated functions from SecureBootConfigDxe.
  a97e9e327e ArmPlatformPkg: Create include file for default key content.
  94e065582b SecurityPkg: Add SecureBootDefaultKeysDxe driver
  19107590b6 SecurityPkg: Add EnrollFromDefaultKeys application.
  45f3dd2ce9 SecurityPkg: Add new modules to Security package.
  55266a9b8a SecurityPkg: Add option to reset secure boot keys.
  6355287206 Maintainers.txt: Add new maintainer and reviewer to EmbeddedPkg/
  9abc60f9f7 EmbeddedPkg/libfdt: Add strcmp and strncpy to libfdt_env.h
  0856cdc89e MdePkg: add definition of LINUX_EFI_INITRD_MEDIA_GUID
  97fdcbda4e OvmfPkg: Remove Initrd LINUX_EFI_INITRD_MEDIA_GUID
  4de77ae989 UefiCpuPkg/CpuCacheInfoLib: Sort CpuCacheInfo array
  3c6107758b SecurityPkg: Fix GetSupportedAndActivePcrs counter calculation
  b40bdd6ecd UefiPayloadPkg: Add Fixed PCDs and use Macro to define the default value.
  d497eace3b UefiPayloadPkg: define some PCD as DynamicEX PCD
  ac6e5d6b41 UefiPayloadPkg: change the default value of some PCDs.
  672bd1c711 UefiPayloadPkg: Add a macro to enable or diable the serial driver.
  d02dbb53cd UefiPayloadPkg: Fix the non-ascii character in UniversalPayloadEntry.c
  a7ddc7847c RedfishPkg/JsonLib: Add more JsonLib functions
  5963ce5d28 MdePkg: Add ACPI 6.4 header file
  4d7137f261 MdePkg: Increment FADT version
  d910e83299 MdePkg: Rename SBSA Generic Watchdog to Arm Generic Watchdog
  ad3dea9861 MdePkg: Update PMTT to ACPI 6.4
  ced4cb7609 MdePkg: Add SPA Location Cookie field to SPA Range structure
  c82d6dd4a3 MdePkg: Remove DPPT table
  357383bc4f MdePkg: Add flags and MinTransferSize to Generic Initiator
  7b17bcd9a0 MdePkg: Add 'Type 5' PCC structure
  0938f9235c MdePkg: Add Multiprocessor Wakeup structure
  75c4a8e10d MdePkg: Add the Platform Health Assessment Table (PHAT)
  1803757a9b MdePkg: Add Secure Access Components in the SDEV table
  605c4a1ff2 MdePkg: Add Cache ID to PPTT
  3d359ff905 MdePkg: Fix broken coding style in Acpi64.h
  7311e96417 RedfishPkg/RefishCrtLib: Public RefishCrtLib
  03e19e6bc8 ArmPkg/IndustryStandard: 32b/64b agnostic FF-A, Mm SVC and Std SMC IDs
  aee0098faf ArmPkg: prepare 32bit ARM build of StandaloneMmPkg
  ca1773878d GenFv: Arm: support images entered in Thumb mode
  b7f0226a46 StandaloneMmPkg: fix pointer/int casts against 32bit architectures
  a776bbabd9 StandaloneMmPkg: build for 32bit arm machines
  ac826886c9 MdeModulePkg/UefiSortLib:Add UefiSortLib unit test
  6fdd1c13a7 MdeModulePkg PCD: Reinstall PCD service PPIS when memory available
  ef56f55d19 EmbeddedPkg/NonCoherentDmaLib: Avoid dereferencing unset Map field
  8dd4fc5be6 UefiCpuPkg/CpuCacheInfoLib: Correct logical for identifying cache type
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  - Removed patches which are merged to mainline:
  ovmf-bsc1186151-fix-iscsi-overflows.patch
  ovmf-xen-relocate-shared_info_page-map.patch
  - Updated patches
  ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
  ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - Added patches
  ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="jlee@suse.com" date="1634904000">- Removed edk2-stable202105.tar.gz because we updated to edk2-stable202108</changelog>
  <changelog author="jlee@suse.com" date="1635249600">- Removed patches which are merged to mainline:
    ovmf-bsc1186151-fix-iscsi-overflows.patch
    ovmf-xen-relocate-shared_info_page-map.patch
- Removed patches because replaced:
    ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
    ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1636372800">- Update rpmlintrc (fixes aarch64 build)</changelog>
  <changelog author="jlee@suse.com" date="1638532800">- Merge the difference from SLE for pushing back to SLE15-SP4
  - Add/Update 50-xen-hvm-x86_64.json in descriptors.tar.xz
  - Add the json descriptor for xen-hvm (bsc#1180050)
  - Add "nvram-template" and change the firmware file to
  ovmf-x86_64-ms-4m.bin (bsc#1180050, bsc#1181264)
  - The following patches in SLE are already in edk2-edk2-stable202108
    in factory, so they will be removed from 15-SP4
  - ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
    the potential NULL dereference in AuthenticodeVerify()
    (bsc#1177789, CVE-2019-14584)
  - 26442d11e620a9	edk2-stable202011~124
  - ovmf-bsc1180079-amd-sev-es-mitigation.patch to mitigate the
  potential AMD SEV-ES security issues
  (bsc#1180079)
  - a91b700e385e74	edk2-stable202102~181
  - ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch as the
  follow-up patch for SEV-ES to fix the flash writing
  (jsc#SLE-16075)
  - 3a3501862f7309	edk2-stable202102~105
  - ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption
  (bsc#1183578, CVE-2021-28211)
  - e7bd0dd26db7e5	edk2-stable202011~7
  - ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion
  (bsc#1183579, CVE-2021-28210)
  - b9bdfc72853fe9	edk2-stable202011~9
  - Add ovmf-bsc1186151-fix-iscsi-overflows.patch to fix the possible
  overflows in IScsiDxe
  (bsc#1186151)
  - 83761337ec91fb	edk2-stable202108-rc0~171</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638792000">- cross-i386-binutils and cross-i386-gcc have been dropped from
  Factory, so use only cross-x86_64-* - boo#1193424</changelog>
  <changelog author="jlee@suse.com" date="1638964800">- For preparing push to SLE15-SP4, add more notes:
  - Drop upstreamed ovmf-jscSLE-16075-SEV-ES-fixes.patch from 15-SP4
  - All patches in the above big patch are in edk2-stable202011
  - Some changes in ovmf.spec file of 15-SP4:
  - brotli-v1.0.7-17-g666c328-c.tar.xz and "add brotli" section
  be removed because ovmf-disable-brotli.patch.
  - Using %{_prefix} instead of /usr hard code.
  - Redundant %defattr(-,root,root) are removed.
  - BuildRoot be removed because factory doesn't have it.
  - Sync some differences in the change log between 15-SP3 with openSUSE
    TW since "Wed Jan 24 06:31:21 UTC 2018":
  - Add TLS and IPv6 supports for ArmVirtQemu.
  - ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  - already in edk2-stable202008
  - Drop the build requirement of python2</changelog>
  <changelog author="jlee@suse.com" date="1640088000">- Update to edk2-stable202111
  - Features (https://github.com/tianocore/edk2/releases):
  Add SSDT CPU topology generator
  Support ACPI 6.4 in GTDT parser and generator
  Support ACPI 6.4 in DynamicTables FADT parser
  Support ACPI 6.4 in Acpiview PCCT parser
  Support ACPI 6.4 in Acpiview HMAT parser
  Add support for the microvm machine type (qemu)
  OVMF/ArmVirt: add support for virtio-mmio 1.0
  IntelFsp2Pkg: adopt FSP 2.3 specification
  UefiCpuPkg VTF0 X64: Build page tables using Linear-Address Translation to a 1-GByte Page
  Enable wildcard host name matching in HTTPS/TLS implementation
  Add QuickSort function into BaseLib
  Add SMM NV variable support in universal UEFI payload
  Add TDVF to OvmfPkg
  Make package and platform builds reproducible across source format changes
  - Patches (git log --oneline --reverse edk2-stable202108~..edk2-stable202111):
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  82f7e315d6 MdeModulePkg/PeiCore: Remove MigrateSecModulesInFv()
  8b15024dc7 Maintainers: Add kraxel as Reviewer to ArmVirtPkg and OvmfPkg
  80e67af9af OvmfPkg: introduce a common work area
  ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
  b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm
  a82bad9730 ArmPkg/GicV3Dxe: Don't signal EOI on arbitrary interrupts
  94e465e5cb OvmfPkg/Virtio10: Add virtio-mmio 1.0 defines
  08293e43da OvmfPkg/VirtioMmioDeviceLib: Add virtio 1.0 detection.
  212a2b9bb8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetPageSize.
  537a724421 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetQueueAddress
  6a3e9576b8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Add default QueueNum
  ae12188cf8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Adapt feature bit handling
  77d5fa8024 OvmfPkg/VirtioMmioDeviceLib: enable virtio 1.0
  b04453d36b MdeModulePkg/EbcDxe: Mitigate memcpy intrinsics
  dc995ce906 MdeModulePkg: Add BootDiscoveryPolicyOld variable.
  443300be46 MdePkg:Update IndustryStandard/Nvme.h with Nvme amdin controller data
  0f11537548 MdeModulePkg:Increase Nvme capacity display
  cae735f613 ArmPkg: Enable boot discovery policy for ARM package.
  cb0d24637d OvmfPkg/OvmfXen: set PcdAcpiS3Enable at initialization
  28152333bc OvmfPkg/LockBoxLib: use PcdAcpiS3Enable to detect S3 support
  52e2dabc0f OvmfPkg/PlatformBootManagerLib: use PcdAcpiS3Enable to detect S3 support
  5b5f10d746 OvmfPkg/SmmControl2Dxe: use PcdAcpiS3Enable to detect S3 support
  9f3eda177a OvmfPkg/OvmfXen: add QemuKernelLoaderFsDxe
  f0fe55bca4 UefiPayloadPkg: Fix the build error when enable Core ci for UefiPayloadPkg
  5d34cc49d5 UefiCpuPkg/PiSmmCpuDxeSmm: Update mPatchCetSupported set condition
  cdda3f74a1 UefiPayloadPkg/UefiPayloadEntry: Fix memory corruption
  3b3f882288 MdeModulePkg/PiSmmCore: Drop deprecated image profiling commands
  b170806518 UefiCpuPkg: Clean up save state boundary checks and comments.
  12e33dca4c IntelFsp2Pkg: Support Config File and Binary delta comparison
  63fddc98e0 UefiPayloadPkg: Create .yaml file in UefiPayloadPkg
  e3ee8c8dbd .azurepipelines: Add UefiPayloadPkg in gate-build-job.yml and CISetting.py
  b6bc203375 MdeModulePkg/HiiDatabaseDxe:remove dead code block
  c5e805ffe1 MdeModulePkg: Fix typo of "memory" in RamDiskDxe debug message
  81d71fb86e Maintainers.txt: Update maintainer/reviewer roles in MdeModulePkg
  edf8bc6d24 SecurityPkg/MemoryOverwriteControl: Add missing argument to DEBUG print
  4473834e7d OvmfPkg/OvmfXen: Fix build with QemuKernelLoaderFsDxe
  a7cf2c5664 RedfishPkg: Fix various typos
  851785ea67 UefiPayloadPkg: Include more modules in UefiPayloadPkg.
  d248516b3a UefiPayloadPkg: Include Network modules in UefiPayloadPkg.
  6c7d6d4a5e UefiCpuPkg: ResetVector Tool Support for Python 3
  cf7c650592 UefiCpuPkg: ResetVector Tool additional debug prints
  d96df7e993 UefiPayloadPkg: Fix the bug in dump guid HOB info functions
  dcd3d63f4f UefiPayloadPkg: Dump hob info from gEdkiiBootManagerMenuFileGuid
  610d8073f2 SecurityPkg/TPM: Import PeiDxeTpmPlatformHierarchyLib.c from edk2-platforms
  4d5f39cd22 SecurityPkg/TPM: Fix bugs in imported PeiDxeTpmPlatformHierarchyLib
  ebbc8ab2cd SecrutiyPkg/Tcg: Import Tcg2PlatformDxe from edk2-platforms
  2906e572c6 SecurityPkg/Tcg: Make Tcg2PlatformDxe buildable and fix style issues
  f108178c56 SecurityPkg: Introduce new PCD PcdRandomizePlatformHierarchy
  a4867dea2a SecurityPkg/Tcg: Import Tcg2PlatformPei from edk2-platforms
  2fa89c8e11 SecurityPkg/Tcg: Make Tcg2PlatformPei buildable and fix style issues
  3b69fcf5f8 SecurityPkg: Add references to header and inf files to SecurityPkg
  6c80564b89 MdeModulePkg/Core/Pei: Fix typo in function descriptions
  6f501a7c9b MdeModulePkg/Core/Pei: Make migrated PEIM message verbose
  c19d18136e MdeModulePkg/Core/Pei: Fix pointer size mismatch in EvacuateTempRam()
  f4e72cf9d6 UefiPayloadPkg: Add script to build UniversalPayload in UefiPayloadPkg
  bda3546c55 UefiPayloadPkg: Fix the warning when building UefiPayloadPkg with IA32+X64
  010753b7e7 UefiCpuPkg: Refactor initialization of CPU features during S3 resume
  89f7ed8b29 UefiCpuPkg: Prevent from re-initializing CPU features during S3 resume
  60d8bb9f28 UefiCpuPkg: VTF0 Linear-Address Translation to a 1-GByte Page till 512GB
  ac6388add4 ArmPkg/ProcessorSubClassDxe: Fix the format of ProcessorId
  e3e47d7963 UefiCpuPkg: SecCoreNative without ResetVector
  542cba73d2 SecurityPkg: Add debug log for indicating IBB verified OBB successfully
  f334c5a41d IntelFsp2WrapperPkg: Make PcdFspModeSelection dynamic
  79019c7a42 OvmfPkg: set a default value for the WorkAreaHeader PCD
  fdeff3fdae EmbeddedPkg: Remove duplicate libfdt.h include
  f2a7e24e38 EmbeddedPkg: AndroidBootImgBoot error handling updates
  c0cd26f43c EmbeddedPkg: Install FDT if UpdateDtb is not present
  7ea7f9c077 EmbeddedPkg: Add LoadFile2 for linux initrd
  d60915b751 UefiPayloadPkg: Add Macro to enable or disable some drivers.
  46b4606ba2 MdeModulePkg/PciBusDxe: Improve the flow of testing support attributes
  f57040b038 MdeModulePkg/BootManagerMenuApp: Limit string drawing within one line
  b0f1b1c5fd MdePkg: Fix DEVICE_SECURITY_EVENT_DATA_HEADER version definition
  cc5a67269e UefiPayloadPkg: Build a HOB from bootloader ACPI table
  dc430ccf3f UefiPayloadPkg: Use dummy constructor for PlatformHookLib
  4a1899dd79 UefiPayloadPkg: Add ".upld_info" in universal payload
  2ea0a0a414 BaseTools: Switch to downloading the ARM compiler from Arm's site
  1ce6ceb75b BaseTools: Switch to downloading the AARCH64 compiler from Arm's site
  c214128a38 BaseTools/GenMake: Use ToolDefinition as fallback option
  259c184c8f BaseTools/build: Set MakefileName
  445c39f757 BaseTools: Remove Makefile/MakefileName fields
  c7d5b046d9 BaseTools: Remove hard-coded strings for target and tools_def
  442e46d3b6 UefiPayloadPkg: Update maximum logic processor to 256
  499c4608b1 OvmfPkg/TPM PPI: Connect default consoles for user interaction
  b8675deaa8 OvmfPkg: Handle TPM 2 physical presence opcodes much earlier
  8ab8fbc016 OvmfPkg: Reference new Tcg2PlatformDxe in the build system for compilation
  bd298d7593 OvmfPkg: Reference new Tcg2PlatformPei in the build system
  f86de75862 MdePkg: MmCommunication: Added definition of MM Communication PPI
  8b4bb94f64 MdePkg: CI YAML: Added new GUID to ignore duplicate list
  9e950cda6a MdeModulePkg: CI YAML: Added new GUID to ignore duplicate list
  2273799677 SecurityPkg: Fix SecureBootDefaultKeysDxe failed to start
  422e5d2f7f UefiPayloadPkg: Remove asm code and sharing libraries
  0875443f7e DynamicTablesPkg: Extract AcpiHelperLib from TableHelperLib
  20775950c6 DynamicTablesPkg: Update TableHelperLib.inf
  1ad5182500 DynamicTablesPkg: Rename single char input parameter
  653113412f DynamicTablesPkg: Add HexFromAscii() to AcpiHelperLib
  72ab552554 DynamicTablesPkg: Add AmlGetEisaIdFromString() to AcpiHelperLib
  96e006b37e DynamicTablesPkg: Add Configuration Manager Object parser
  235ff9fcd1 DynamicTablesPkg: Use %a formatter in AmlDbgPrint
  7a8c037e9e DynamicTablesPkg: Update DynamicTablesPkg.ci.yaml
  691c5f7762 DynamicTablesPkg: Deprecate Crs specific methods in AmlLib
  22873f58c4 DynamicTablesPkg: Rework AmlResourceDataCodegen.c/h
  4cc1458dbe IntelFsp2Pkg: Adopt FSP 2.3 specification.
  c49cb8f30e ArmPkg: SmbiosMiscDxe: Don't populate ExtendedBiosSize when size &lt; 16MB
  282122ec5f ArmVirtPkg/TPM: Add a NULL implementation of TpmPlatformHierarchyLib
  b3685956d2 ArmVirtPkg: Reference new TPM classes in the build system for compilation
  c806b76865 ArmVirtPkg: Disable the TPM2 platform hierarchy
  606340fba3 OvmfPkg/Microvm: copy OvmfPkgX64 files as-is
  4932f05a00 OvmfPkg/Microvm: rename output files, fix includes
  2a49c19b9e OvmfPkg/Microvm: no smm
  60d55c4156 OvmfPkg/Microvm: no secure boot
  0569c52b15 OvmfPkg/Microvm: no tpm
  06fa1f1931 OvmfPkg/Microvm: no sev
  6073bf6cd8 OvmfPkg/Microvm: no csm
  b9dd64b80e OvmfPkg/Microvm: no emulated scsi
  27de86ae41 OvmfPkg/Microvm: use MdePkg/Library/SecPeiDxeTimerLibCpu
  76602f45dc OvmfPkg/Microvm: use XenTimerDxe (lapic timer)
  6a8e9ad24b OvmfPkg/Microvm: PlatformPei/MemDetect tweaks
  8583b57c5c OvmfPkg/Microvm: PlatformPei/Platform memory map tweaks
  bf02d73e74 OvmfPkg/Microvm: PlatformPei/Platform: add id.
  1d3e89f349 OvmfPkg/ResetSystemLib: add driver for microvm
  2c467c9be2 OvmfPkg/Microvm: BdsPlatform: PciAcpiInitialization tweak.
  8456785986 OvmfPkg/Microvm: use PciHostBridgeLibNull
  55f47d2299 OvmfPkg/Microvm: wire up serial console, drop super-io
  862e814de4 OvmfPkg/Microvm: add Maintainers.txt entry
  06a326caf1 DynamicTablesPkg: Update FADT generator to ACPI 6.4
  f09dbf20b9 DynamicTablesPkg: Rename SBSA generic watchdog
  942c9bd357 ShellPkg: Update Acpiview GTDT parser to ACPI 6.4
  80e67bcb23 ShellPkg: Update Acpiview PCCT parser to ACPI 6.4
  b4da6c29f1 ShellPkg: Add Type 5 PCC Subspace Structure parser
  5ece2ad36c MdeModulePkg/Core/Dxe: Add lock protection in CoreLocateHandleBuffer()
  30400318a2 ShellPkg: Update Acpiview HMAT parser to ACPI spec version 6.4
  71c3c9c0c4 DynamicTablesPkg: Remove unnecessary includes
  25cf58a163 DynamicTablesPkg: Add missing parameter check
  bfaf7c8b9e DynamicTablesPkg: Add AddSsdtAcpiHeader()
  28b2df475f DynamicTablesPkg: Add AmlRdSetEndTagChecksum()
  74addfeab6 DynamicTablesPkg: Add AmlSetRdListCheckSum()
  7b2022d39e DynamicTablesPkg: Set EndTag's Checksum if RdList is modified
  2dd7dd3952 DynamicTablesPkg: Clear pointer in node creation fcts
  37bd08176c DynamicTablesPkg: Update error handling for node creation
  6d2777d85f DynamicTablesPkg: Make AmlNodeGetIntegerValue public
  f995f8672b DynamicTablesPkg: AML Code generation for Register()
  9454d1ebcb DynamicTablesPkg: AML Code generation for Resource data EndTag
  1e33479b39 DynamicTablesPkg: AML code generation for a Package
  12e65fd258 DynamicTablesPkg: Helper function to compute package length
  ce15936f2f DynamicTablesPkg: AML code generation for a ResourceTemplate
  de62ccbf4f DynamicTablesPkg: AML code generation for a Method
  e2d7b4950b DynamicTablesPkg: AML code generation to Return a NameString
  3e958e93ce DynamicTablesPkg: AML code generation for a Method returning a NS
  018a962d92 DynamicTablesPkg: AML code generation for a _LPI object
  a5e36ad9bc DynamicTablesPkg: AML code generation to add an _LPI state
  f17ef10e63 DynamicTablesPkg: Add CM_ARM_LPI_INFO object
  769e63999f DynamicTablesPkg: SSDT CPU topology and LPI state generator
  19ee56c4b3 UefiPayloadPkg: Add a macro to select the SecurityStubDxe driver.
  782d018703 MdePkg: Add ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  ba4ae92234 ShellPkg: Support ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  f22feb0e3b CryptoPkg/BaseCryptLib: Eliminate extra buffer copy in Pkcs7Verify()
  4225a464c6 MdePkg/BaseLib: Add QuickSort function on BaseLib
  6ed6abd6c1 BaseTools: Change RealPath to AbsPath
  978d428ec3 UefiPayloadPkg: Add PCI root bridge info hob support for SBL
  43b3840873 MdeModulePkg/Sd: Corrections for Extra.uni files
  a7fcab7aa3 MdeModulePkg/Core/Dxe: Acquire a lock when iterating gHandleList
  e40fefafa9 ArmVirtPkg/FdtClintDxe: Move FdtClientDxe to EmbeddedPkg
  fb759b8b73 MdePkg: Add PcdPciIoTranslation PCD
  7d78a86ecf ArmPkg: Use PcdPciIoTranslation PCD from MdePkg
  77e9b3a7c6 ArmVirtPkg/FdtPciPcdProducerLib: Relocate PciPcdProducerLib to OvmfPkg
  d881c6ddf5 ArmVirtPkg/HighMemDxe: Relocate HighMemDxe to OvmfPkg
  47bd85e9f9 OvmfPkg/HighMemDxe: Add RISC-V in the supported arch.
  f8d0501ded ArmVirtPkg/QemuFwCfgLib: Relocate QemuFwCfgLib to OvmfPkg
  26aa241d2f OvmfPkg/QemuFwCfgLibMmio: Add RISC-V arch support
  c6770f4b88 MdePkg: Add PcdPciMmio32(64)Translation PCDs
  9a7509e465 ArmVirtPkg/FdtPciHostBridgeLib: Relocate FdtPciHostBridgeLib to OvmfPkg/Fdt
  b21c6794de OvmfPkg/FdtPciHostBridgeLib: Add RISC-V in the supported arch.
  e0c23cba5e ArmVirtPkg/VirtioFdtDxe: Relocate VirtioFdtDxe to OvmfPkg/Fdt
  f2400e06db BaseTools: add edk2-test repo to SetupGit.py
  785cfd3305 UefiPayloadPkg: Use SECURITY_STUB_ENABLE to control the SecurityStubDxe
  7e43d3e086 ArmPkg/Smbios: Fix max cache size 2 wrong issue
  f10a112f08 UefiPayloadPkg: Fix the build issue for coreboot
  2108698346 StandaloneMmPkg: Support CLANGPDB builds
  11a4af85a4 Ovmfpkg: update Ia32 build to use new work area
  36b561623a OvmfPkg/AmdSev: update the fdf to use new workarea PCD
  91a978ce7e UefiPayloadPkg: Replace MEMROY_ENTRY by MEMORY_ENTRY
  6ef5797447 UefiPayloadPkg: Fix ECC reported issues
  90246a6d9f UefiPayloadPkg: Fix the build failure for non-universal payload
  37a33f02aa UefiCpuPkg: Cpu feature data stored in memory may be migrated
  4fdf843c75 DynamicTablesPkg: Fix unitialized variable use
  6893865b30 DynamicTablesPkg: Fix void pointer arithmetic
  99325a8b65 MdeModulePkg/SortLib: Add QuickSort function on BaseLib
  305fd6bee0 UefiCpuPkg/CpuCacheInfoLib: Add QuickSort function on BaseLib
  2f286930a8 ShellPkg: Parse I/O APIC and x2APIC structure
  bd5ec03d87 NetworkPkg/HttpBootDxe: make file extension check case-insensitive
  6254037223 ArmPkg: Implement PlatformBootManagerLib for LinuxBoot
  f079e9b450 OvmfPkg: Copy Main.asm from UefiCpuPkg to OvmfPkg's ResetVector
  5a2411784b OvmfPkg: Clear WORK_AREA_GUEST_TYPE in Main.asm
  c9ec74a198 OvmfPkg: Add IntelTdxMetadata.asm
  8b76f23534 OvmfPkg: Enable TDX in ResetVector
  87a34ca0cf UefiPayloadPkg: Add a common SmmAccessDxe module
  e7e8ea27d4 UefiPayloadPkg: Add a common SMM control Runtime DXE module
  bed990aae6 UefiPayloadPkg: Add bootloader SMM support module
  1d66480aa4 UefiPayloadPkg: Add SpiFlashLib
  04714cef46 UefiPayloadPkg: Add FlashDeviceLib
  ae8acce8ae UefiPayloadPkg: Add a common FVB SMM module
  242dcfe30f UefiPayloadPkg: Add a SMM dispatch module
  b80c17b62d UefiPayloadPkg: Add SMM support and SMM variable support
  2f6f3329ad FmpDevicePkg/FmpDxe: Use new Variable Lock interface
  9a95d11023 IntelFsp2Pkg/SplitFspBin.py: adopt FSP 2.3 specification.
  bb146ce32d MdePkg Cpuid.h: Define CPUID.(EAX=7,ECX=0):EDX[30]
  1bc232aae3 RedfishPkg: Update link to staging/RedfishClientPkg in Readme.md
  e7663fdd82 UefiPayloadPkg: Remove SystemTableInfo GUID.
  91b772ab62 RedfishPkg: Add more information to Readme.md
  c8594a5311 SecurityPkg/FvReportPei: Remove the ASSERT to allow neither M nor V
  939c2355da IntelFsp2Pkg SplitFspBin.py: Correct file name in file header
  6f9e83f757 NetworkPkg/HttpDxe: Enable wildcard host name matching for HTTP+TLS.
  b258f12889 BaseTools/VrfCompile: Fix uninitialized field from unnamed field
  0f4cdad25b DynamicTablesPkg: Add missing BaseStackCheckLib instance
  e13e53cb2f NetworkPkg/NetworkPkg.dsc: Add RngLib mapping for ARM and RISCV64
  c1f2287635 SecurityPkg/SecurityPkg.dsc: Add missing RngLib for ARM and RISCV64
  b0a03ca4a9 SignedCapsulePkg/SignedCapsulePkg.dsc: Add RngLib mapping
  15e635d1b5 UefiCpuPkg/MtrrLib/UnitTest: Fix 32-bit GCC build issues
  4050c873b5 MdeModulePkg/Variable/RuntimeDxeUnitTest: Fix 32-bit GCC builds
  d79df34beb BaseTools: Fix StructurePcd offset error.
  b5d4a35d90 MdeModulePkg/XhciSched: Fix missing DEBUG arguments
  48452993ad MdePkg/Include: Enhance DebugLib to support reproduce builds
  5948ec3647 MdePkg: Reproduce builds across source format changes
  f331310a10 ArmPkg: Reproduce builds across source format changes
  77dcd03ecf MdeModulePkg: Reproduce builds across source format changes
  45137bca2f NetworkPkg: Reproduce builds across source format changes
  d939a25d41 SecurityPkg: Reproduce builds across source format changes
  fd42dcb1fc OvmfPkg: Reproduce builds across source format changes
  8c1b1fe634 ShellPkg: Add comment that ItemPtr is set after validation
  d6e6337cd6 MdePkg: Fix ACPI memory aggregator/device type mismatch
  c974257821 MdeModulePkg AtaAtapiPassThru: Always do S.M.A.R.T. check if device support
  aab6bb3d32 MdeModulePkg/DxeCapsuleLibFmp: Capsule on Disk file name capsule
  a7b35aae13 MdeModulePkg\UfsBlockIoPei: UFS MMIO address size support both 32/64 bits
  f826b20811 UefiCpuPkg/UefiCpuLib: Add GetCpuFamilyModel and GetCpuSteppingId
  8c8867c5da MdeModulePkg/DxeCapsuleLibFmp: Use new Variable Lock interface
  22c3b5a865 BaseTools: Add authenticated variable store support
  a92559671a OvmfPkg/Xen: Fix VS2019 build issues
  4c495e5e3d OvmfPkg/Bhyve/PlatformPei: Fix VS2019 X64 NOOPT build issue
  466ebdd2e0 MdeModulePkg/FPDT: Lock boot performance table address variable at EndOfDxe
  455b0347a7 UefiCpuPkg/PiSmmCpuDxeSmm: Use SMM Interrupt Shadow Stack
  e1e7306b54 OvmfPkg/Library/ResetSystemLib: Fix Microvm VS2019 NOOPT build issue
  4c7ce0d285 MdeModulePkg AtaAtapiPassThru: Skip the potential NULL pointer access
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  - Removed patches which are merged to mainline:
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch to fix the
    S3 detection in ovmf-xen
  - cb0d24637d    edk2-stable202111-rc1~220
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch to add QemuKernelLoaderFsDxe
    to ovmf-xen to load kernel from qemu fw_cfg
  - 9f3eda177a    edk2-stable202111-rc1~216
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - 4473834e7d    edk2-stable202111-rc1~203
  - The edk2-stable202111 includes the following patches for bsc#1192126
    to fix unlimited reset. (bsc#1192126)
    80e67af9af OvmfPkg: introduce a common work area
    ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
    b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm</changelog>
  <changelog author="jlee@suse.com" date="1640260800">- Removed useless patch files because they are merged to edk2-stable202111
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
- Updated URL to the edk2 repo on github
- Use downloaded edk2-edk2-stable%{version}.tar.gz instead of the URL
  for Source0 because the edk2-edk2-stable202111 tarball is broken
  in tianocore repo which can not pass the "osc service runall download_files"
  testing.
  - We ill change it back to the following setting when upstream fixed tarball:
  Source0:        https://github.com/tianocore/edk2/releases/download/edk2-stable%{version}/edk2-edk2-stable%{version}.tar.gz</changelog>
  <changelog author="jlee@suse.com" date="1641211200">- Modified gdb_uefi.py.in for python3 (bsc#1192126)
  - change 'long' to 'int'
  - using
    print ('
    instead of
    print "</changelog>
  <changelog author="bwiedemann@suse.com" date="1645099200">- Sort file lists for reproducible build results</changelog>
  <changelog author="jlee@suse.com" date="1646913600">- Update to edk2-stable202202
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg Add new target for Cloud Hypervisor
  Add TDVF to OvmfPkg
  Add new APIs to UefiCpuPkg/UefiCpuLib
  Add AMD Secure Nested Paging Support
  Add SSDT PCI generator in DynamicTablesPkg
  Support ACPI 6.4 PPTT changes
  Add FdtHwInfoParser library
  Add DynamicPlatRepo library
  Make package and platform builds reproducible across source format changes
  Add Uncrustify CI Plugin
  Apply uncrustify changes to all package C and H files
  - Patches (git log --oneline --reverse edk2-stable202111~..edk2-stable202202):
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  ef9a059cdb EmulatorPkg/Win/Host: Update CC_FLAGS
  69877614fd .pytool/Plugin/EccCheck: Remove RevertCode()
  854462bd34 .pytool/Plugin/EccCheck: Remove temp directory on exception
  3019f1bbab .pytool/Plugin/EccCheck: Add performance optimizations
  99f84ff473 .pytools/Plugin/LicenseCheck: Use temp directory for git diff output
  76a1ce4d5f .azurepipelines/templates: Update max pipeline job time to 2 hours
  365dced2c3 ArmPkg: Update YAML to ignore specific ECC files/errors
  1939fc9569 ArmPlatformPkg: Update YAML to ignore specific ECC files/errors
  c97fee87f0 ArmVirtPkg: Update YAML to ignore specific ECC files/errors
  d5744ecba8 CryptoPkg: Update YAML to ignore specific ECC files/errors
  d7d30e8f21 EmulatorPkg: Update YAML to ignore specific ECC files/errors
  9deb937076 MdeModulePkg: Update YAML to ignore specific ECC files/errors
  df790cd6b3 MdePkg: Update YAML to ignore specific ECC files/errors
  60fa40be45 SecurityPkg: Update YAML to ignore specific ECC files/errors
  9944508e85 ShellPkg: Update YAML to ignore specific ECC files/errors
  c30c40d6c6 StandaloneMmPkg: Update YAML to ignore specific ECC files/errors
  c057347977 UefiPayloadPkg: Update YAML to ignore specific ECC files/errors
  f0f3f5aae7 UnitTestFrameworkPkg: Update YAML to ignore specific ECC files/errors
  dfafa8e453 MdeModulePkg/DxeCorePerformanceLib:Variable Initial
  a4a582e180 ArmPkg: Change use of EFI_D_* to DEBUG_*
  1d2482e1e3 ArmPlatformPkg: Change use of EFI_D_* to DEBUG_*
  c5b3a56e4f ArmVirtPkg: Change use of EFI_D_* to DEBUG_*
  a1878955b2 EmbeddedPkg: Change use of EFI_D_* to DEBUG_*
  9c7da8d804 EmulatorPkg: Change use of EFI_D_* to DEBUG_*
  917e98f3e5 FatPkg: Change use of EFI_D_* to DEBUG_*
  87000d7708 MdeModulePkg: Change use of EFI_D_* to DEBUG_*
  5f289f3ae3 MdePkg: Change use of EFI_D_* to DEBUG_*
  c49ca4a29e NetworkPkg: Change use of EFI_D_* to DEBUG_*
  47719926e8 OvmfPkg: Change use of EFI_D_* to DEBUG_*
  ca56749b0e PcAtChipsetPkg: Change use of EFI_D_* to DEBUG_*
  e905fbb05a SecurityPkg: Change use of EFI_D_* to DEBUG_*
  4a1aee13d8 ShellPkg: Change use of EFI_D_* to DEBUG_*
  586fda4800 SourceLevelDebugPkg: Change use of EFI_D_* to DEBUG_*
  96e1cba5c1 UefiCpuPkg: Change use of EFI_D_* to DEBUG_*
  1871d28eaf ArmPkg: Change OPTIONAL keyword usage style
  2863ba97ca ArmPlatformPkg: Change OPTIONAL keyword usage style
  9607597a74 ArmVirtPkg: Change OPTIONAL keyword usage style
  c8f46130f8 CryptoPkg: Change OPTIONAL keyword usage style
  fe2d81892f DynamicTablesPkg: Change OPTIONAL keyword usage style
  792433088c EmbeddedPkg: Change OPTIONAL keyword usage style
  c69fc80c80 EmulatorPkg: Change OPTIONAL keyword usage style
  9c721071d3 FmpDevicePkg: Change OPTIONAL keyword usage style
  e3917e22e7 MdeModulePkg: Change OPTIONAL keyword usage style
  d0e2f8232a MdePkg: Change OPTIONAL keyword usage style
  8874fa199d NetworkPkg: Change OPTIONAL keyword usage style
  79d49e162e OvmfPkg: Change OPTIONAL keyword usage style
  237295f46d PcAtChipsetPkg: Change OPTIONAL keyword usage style
  dc8fe5ec95 RedfishPkg: Change OPTIONAL keyword usage style
  12710fe93b SecurityPkg: Change OPTIONAL keyword usage style
  9b8507cabe ShellPkg: Change OPTIONAL keyword usage style
  18908e6131 SignedCapsulePkg: Change OPTIONAL keyword usage style
  f9c9215b55 SourceLevelDebugPkg: Change OPTIONAL keyword usage style
  902e76de19 StandaloneMmPkg: Change OPTIONAL keyword usage style
  4ec586b9f6 UefiCpuPkg: Change OPTIONAL keyword usage style
  e35dd32821 UefiPayloadPkg: Change OPTIONAL keyword usage style
  78bc3bdd2a UnitTestFrameworkPkg: Change OPTIONAL keyword usage style
  ea85f0fe13 ArmVirtPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  e3b855f283 CryptoPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  4a9d411662 DynamicTablesPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  db52c7f755 MdeModulePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  098307e082 MdePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  ed7f7c9168 NetworkPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  8e875037bf OvmfPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  deba54761a PcAtChipsetPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  f9f4fb2329 SecurityPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  7c2a6033c1 UefiCpuPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  429309e0c6 ArmPkg: Apply uncrustify changes
  40b0b23ed3 ArmPlatformPkg: Apply uncrustify changes
  2b16a4fb91 ArmVirtPkg: Apply uncrustify changes
  7c34237831 CryptoPkg: Apply uncrustify changes
  731c67e1d7 DynamicTablesPkg: Apply uncrustify changes
  e7108d0e96 EmbeddedPkg: Apply uncrustify changes
  a550d468a6 EmulatorPkg: Apply uncrustify changes
  bcdcc4160d FatPkg: Apply uncrustify changes
  45ce0a67bb FmpDevicePkg: Apply uncrustify changes
  111f2228dd IntelFsp2Pkg: Apply uncrustify changes
  7c7184e201 IntelFsp2WrapperPkg: Apply uncrustify changes
  1436aea4d5 MdeModulePkg: Apply uncrustify changes
  2f88bd3a12 MdePkg: Apply uncrustify changes
  d1050b9dff NetworkPkg: Apply uncrustify changes
  ac0a286f4d OvmfPkg: Apply uncrustify changes
  5220bd211d PcAtChipsetPkg: Apply uncrustify changes
  39de741e2d RedfishPkg: Apply uncrustify changes
  c411b485b6 SecurityPkg: Apply uncrustify changes
  47d20b54f9 ShellPkg: Apply uncrustify changes
  b878648967 SignedCapsulePkg: Apply uncrustify changes
  c1e126b119 SourceLevelDebugPkg: Apply uncrustify changes
  91415a36ae StandaloneMmPkg: Apply uncrustify changes
  053e878bfb UefiCpuPkg: Apply uncrustify changes
  e5efcf8be8 UefiPayloadPkg: Apply uncrustify changes
  7c0ad2c338 UnitTestFrameworkPkg: Apply uncrustify changes
  dc453b5164 .pytool/Plugin/UncrustifyCheck: Add Uncrustify CI plugin
  1832eb15aa UefiPayloadPkg/UefiPayloadPkg.fdf: Update DXE Apriori list
  ca78281c25 UefiPayloadPkg/PayloadEntry: Inherit 4/5-level paging from bootloader
  b2f7ee2ded UefiPayloadPkg: Increase SystemMemoryUefiRegionSize from 32M to 64M
  94e0a7bddb UefiPayloadPkg: Add missing Guid gUefiAcpiBoardInfoGuid
  2527723de9 UefiPayloadPkg: Add performance measurement feature
  ffdde9d719 UefiPayloadPkg: Skip ModuleInfo HOB in Payload
  965292135b UefiPayloadPkg/UefiPayloadPkg.dsc:Add BootManagerLib for BootManagerMenuApp
  85a678bf76 UefiPayloadPkg: Add integration instruction for coreboot common error
  7b28310008 BaseTools: Increase the DevicePath length for support more PCD value.
  d25b803e51 MdeModulePkg/Bus/Pci/UhciDxe: Fix the UsbHc memory allocate and free issue
  c82ab4d8c1 BaseTools/VfrCompile: Correct Bit Field Flags for numeric/one of
  2ddacfb6b8 OvmfPkg/SecMain: move SEV specific routines in AmdSev.c
  e2289d19d8 UefiCpuPkg/MpInitLib: move SEV specific routines in AmdSev.c
  2fe8edfe55 OvmfPkg/ResetVector: move clearing GHCB in SecMain
  3053183d41 OvmfPkg/ResetVector: introduce SEV metadata descriptor for VMM use
  707c71a01b OvmfPkg: reserve SNP secrets page
  cca9cd3dd6 OvmfPkg: reserve CPUID page
  f2dc28f0b6 OvmfPkg/ResetVector: pre-validate the data pages used in SEC phase
  34819f2cac OvmfPkg/ResetVector: use SEV-SNP-validated CPUID values
  d9822304ce OvmfPkg/MemEncryptSevLib: add MemEncryptSevSnpEnabled()
  7c3b2892ea OvmfPkg/SecMain: register GHCB gpa for the SEV-SNP guest
  d2b998fbdc OvmfPkg/VmgExitLib: use SEV-SNP-validated CPUID values
  a19b648952 OvmfPkg/PlatformPei: register GHCB gpa for the SEV-SNP guest
  19914edc5a OvmfPkg/AmdSevDxe: do not use extended PCI config space
  ade62c18f4 OvmfPkg/MemEncryptSevLib: add support to validate system RAM
  d706f8fec2 OvmfPkg/MemEncryptSevLib: add function to check the VMPL0
  11b15336f0 OvmfPkg/BaseMemEncryptSevLib: skip the pre-validated system RAM
  d39f8d88ec OvmfPkg/MemEncryptSevLib: add support to validate &gt; 4GB memory in PEI phase
  202fb22be6 OvmfPkg/SecMain: validate the memory used for decompressing Fv
  8eb79b5f4f OvmfPkg/PlatformPei: validate the system RAM when SNP is active
  26210f9436 MdePkg: Define ConfidentialComputingGuestAttr
  504ae26b80 OvmfPkg/PlatformPei: set PcdConfidentialComputingAttr when SEV is active
  b95908e043 UefiCpuPkg/MpInitLib: use PcdConfidentialComputingAttr to check SEV status
  f4e3ce5f53 UefiCpuPkg: add PcdGhcbHypervisorFeatures
  f5a6e1bab5 OvmfPkg/PlatformPei: set the Hypervisor Features PCD
  2c354252be MdePkg/GHCB: increase the GHCB protocol max version
  9c703bc0f1 UefiCpuPkg/MpLib: add support to register GHCB GPA when SEV-SNP is enabled
  d4d7c9ad5f UefiCpuPkg/MpInitLib: use BSP to do extended topology check
  b928eb44d5 OvmfPkg/MemEncryptSevLib: change the page state in the RMP table
  b7b8872031 OvmfPkg/MemEncryptSevLib: skip page state change for Mmio address
  ea3a12d970 OvmfPkg/PlatformPei: mark cpuid and secrets memory reserved in EFI map
  67484aed69 OvmfPkg/AmdSev: expose the SNP reserved pages through configuration table
  06544455d0 UefiCpuPkg/MpInitLib: Use SEV-SNP AP Creation NAE event to launch APs
  0f1d7477c0 OvmfPkg: Remove unused print service driver (PrintDxe)
  30631f0a26 MdePkg: Add missing Cache ID (in)valid define
  0077c22f6d MdePkg: Remove PPTT ID type structure
  a50b65ce22 ShellPkg: Update Acpiview PPTT parser to ACPI 6.4
  8cf2bdfcfb ShellPkg: Add Cache ID to PPTT parser
  b2bbe3df54 DynamicTablesPkg: Remove PPTT ID structure from ACPI 6.4 generator
  e139829dd6 DynamicTablesPkg: Update PPTT generator to ACPI 6.4
  e81a81e584 DynamicTablesPkg: Add CacheId to PPTT generator
  9afcd48a94 OvmfPkg: Handle Cloud Hypervisor host bridge
  2ccefa32a6 OvmfPkg: Create global entry point for SMBIOS parsing
  d8ef774346 OvmfPkg: Retrieve SMBIOS from Cloud Hypervisor
  66bce05f6d OvmfPkg: Generalize AcpiPlatformDxe
  7594c5bfe2 OvmfPkg: Install ACPI tables for Cloud Hypervisor
  f6df289a1c OvmfPkg/OvmfXen: Fix Xen build
  2b20a34fd5 OvmfPkg-EmuVariableFvbRuntimeDxe: Support Access To Memory Above 4G
  d5efc875ef MdePkg: Introduce CcMeasurementProtocol for CC Guest firmware
  a124cd4ef9 SecurityPkg: Support CcMeasurementProtocol in DxeTpm2MeasureBootLib
  8c06c53b58 SecurityPkg: Support CcMeasurementProtocol in DxeTpmMeasurementLib
  adf070ff56 OvmfPkg/Microvm: add PcdConfidentialComputingGuestAttr
  2686468c43 OvmfPkg/Bhyve: add MemEncryptSevLib
  61be49e0f7 OvmfPkg/PlatformCI: factor out PlatformBuildLib.py
  21ee379407 OvmfPkg/PlatformCI: add QEMU_SKIP
  64bccda534 OvmfPkg/PlatformCI: add BhyveBuild.py
  04eacd3943 OvmfPkg/PlatformCI: add MicrovmBuild.py
  8b8ae609a7 OvmfPkg/PlatformCI: add AmdSevBuild.py
  2722856a87 OvmfPkg/PlatformCI: dummy grub.efi for AmdSev
  1203eba58e OvmfPkg/PlatformCI: add XenBuild.py
  64ef0dd1d3 OvmfPkg/Microvm/fdt: add device tree support
  79dcaf7054 OvmfPkg/Microvm/fdt: load fdt from fw_cfg
  c802f8935c OvmfPkg/Microvm/fdt: add empty fdt
  2a68abf6ee OvmfPkg/Microvm/virtio: add virtio-mmio support
  e07d27e24d OvmfPkg/Microvm: add README
  7f1861be2b DynamicTablesPkg: AML Code generation for memory ranges
  0e7147fe75 DynamicTablesPkg: AML Code generation to create a named Package()
  fd5fc4bbb7 DynamicTablesPkg: AML Code generation to create a named ResourceTemplate()
  b2b8def4e3 DynamicTablesPkg: AML Code generation to add _PRT entries
  69ddfee1c3 DynamicTablesPkg: Add AmlAttachNode()
  ce306e48eb DynamicTablesPkg: Add Pci related objects
  e35a746cf5 DynamicTablesPkg: SSDT Pci express generator
  ec37fd9c1f DynamicTablesPkg: Fix multiple objects parsing
  557dede8a6 OvmfPkg/PlatformPei: ScanOrAdd64BitE820Ram improvements
  759e3c6d21 OvmfPkg/PlatformPei: prefer etc/e820 for memory detection
  41d8bb3038 OvmfPkg/PlatformPei: stop using cmos for memory detection
  7a6e6ae933 EmulatorPkg: Update lldbefi.py to work with current lldb which uses python3
  4d30352445 ArmPkg: Add SMC helper functions
  c039fa7ff0 ArmPkg: Update SMC calls to use the new ArmCallSmc0/1/2/3 functions
  90ad4b3b34 DynamicTablesPkg: Definition for HwInfoParser interface
  d59c5a20f8 DynamicTablesPkg: FdtHwInfoParser: CM Object descriptor helper
  5d8b5d171c DynamicTablesPkg: FdtHwInfoParser: Add FDT utility functions
  8d2691c3d5 DynamicTablesPkg: FdtHwInfoParser: Add Boot Arch parser
  3ebe1ff5c9 DynamicTablesPkg: FdtHwInfoParser: Generic Timer Parser
  51941f7558 DynamicTablesPkg: FdtHwInfoParser: Add Serial port parser
  e366a41ef0 DynamicTablesPkg: FdtHwInfoParser: Add GICC parser
  0fa1217726 DynamicTablesPkg: FdtHwInfoParser: Add GICD parser
  b04cf355a0 DynamicTablesPkg: FdtHwInfoParser: Add MSI Frame parser
  d250d408cf DynamicTablesPkg: FdtHwInfoParser: Add ITS parser
  7b6c8b30a5 DynamicTablesPkg: FdtHwInfoParser: Add GICR parser
  26bf034a59 DynamicTablesPkg: FdtHwInfoParser: Add GIC dispatcher
  c67bf628c8 DynamicTablesPkg: FdtHwInfoParser: Add PCI config parser
  deb01dfd7f DynamicTablesPkg: Add FdtHwInfoParser library
  9006967c8d DynamicTablesPkg: Handle 16550_WITH_GAS id
  b2d0ed20fd DynamicTablesPkg: Definition for DynamicPlatRepoLib interface
  2e2db65e39 DynamicTablesPkg: DynamicPlatRepo: Add TokenGenerator
  740e3bb634 DynamicTablesPkg: DynamicPlatRepo: Add TokenFixer
  5fe5b6f94f DynamicTablesPkg: DynamicPlatRepo: Add TokenMapper
  38f6d78c3b DynamicTablesPkg: Add DynamicPlatRepo library
  f14fff5135 StandaloneMmPkg/FvLib: Support large file with EFI_FFS_FILE_HEADER2.
  3a72ec71cd OvmfPkg: remove unused TPM options from MicrovmX64.dsc
  b47575801e OvmfPkg: move tcg configuration to dsc and fdf include files
  5711ff4d0b OvmfPkg: drop TPM_CONFIG_ENABLE
  b819388772 OvmfPkg: create Tcg12ConfigPei.inf
  4de8d61bce OvmfPkg: rework TPM configuration
  e6ea1464a8 OvmfPkg/PlatformPei: Revert "stop using cmos for memory detection"
  a6c0418651 ArmPkg/SmbiosMiscDxe: Remove duplicate HII string definition
  45e3842970 ArmPkg/SmbiosMiscDxe: Get full SMBIOS strings from OemMiscLib
  b451c69088 ArmPkg/ProcessorSubClassDxe: Get serial and part number from OemMiscLib
  8ed8568922 SecurityPkg: Debug code to audit BIOS TPM extend operations
  195f011973 SecurityPkg: Reallocate TPM Active PCRs based on platform support
  ab5ab2f603 SecurityPkg: TPM must go to Idle state on CRB command completion
  c63a10ecb7 EmbeddedPkg/AcpiLib: Add more helper functions
  f129b1f06f OvmfPkg/Bhyve: fix tls-enabled build
  ee1f8262b8 OvmfPkg: Call PlatformInitializeConsole for GPU passthrough case
  de9e5b7dc7 IntelFsp2WrapperPkg : FSPM/S UPD data address based on Build Type
  9ec2cc1f31 IntelFsp2WrapperPkg : Remove EFIAPI from local functions.
  ae8272ef78 MdeModulePkg/UsbBusDxe: fix NOOPT build error
  15c596aeeb OvmfPkg: Bhyve: Delete unused AcpiTables/Ssdt.asl file
  6612ff8561 UefiCpuPkg: Extend measurement of microcode patches to TPM
  e910f076ad BaseTools: Fix the bug of --cmd-len build option
  7935be0fbd IntelFsp2Pkg/FspSecCore: ExtendedImageRevision was not printed.
  c095122d4b MdeModulePkg/PciBusDxe: Enumerator to check for RCiEP before looking for RP
  d463c56ddd MdeModulePkg: Replace with UFS_UNIT_DESC to fix timeout problem
  45920941d9 MdeModulePkg: Refactoring UFS DME request and fix timing problem
  13d9e8ec98 MdeModulePkg: Put off UFS HCS.DP checking to fix timing problem
  079a58276b OvmfPkg/AmdSev/SecretPei: Mark SEV launch secret area as reserved
  9dd14fc91c MdePkg: Add registers of boot partition feature
  14a731096d UnitTestFrameworkPkg: CI YAML: Grant cmockery spell check exception
  6062002bd5 MdeModulePkg/PartitionDxe: Add break to handle invalid LBA0 in MBR
  7438a85bf1 BaseTools: Fix wrong variable header size
  c712ce2bb1 OvmfPkg/CloudHv: Add new target for Cloud Hypervisor
  a2da72b2ca OvmfPkg/CloudHv: Replace legacy 8254 PIT with local APIC timer
  6ecdda71fe OvmfPkg/CloudHv: Connect serial console
  1552050ce7 OvmfPkg/CloudHv: Remove legacy 8259 PIC support
  fdcea7ff6f OvmfPkg/CloudHv: Remove Q35 specifics
  71082d3d1b OvmfPkg/CloudHv: Reduce dependency on QemuFwCfg
  196be601f9 OvmfPkg/CloudHv: Remove video support
  7b6cbe0a81 OvmfPkg/CloudHv: Remove USB support
  e73d1bf96a OvmfPkg/CloudHv: Remove CSM support
  b66056ef21 OvmfPkg/CloudHv: add Maintainers.txt entry
  5302bd81d9 OvmfPkg: Add CloudHvX64 to the CI
  59c48c9314 UefiPayloadPkg: Change the user interface name of the Uiapp
  5801910013 UefiPayloadPkg: Not use BaseCpuTimerLib by default.
  772c5bb8dc FmpDevicePkg/FmpDxe: Update FmpDeviceCheckImageWithStatus() handling
  7709988dd8 RedfishPkg/RedfishRestExDxe:Simplify status check
  21320ef669 MdeModulePkg/Variable: Make only EFI_VARIABLE_NON_VOLATILE invalid
  7e5c603cba MdeModulePkg/SdMmcPciHcDxe: Robust improvements for SD card 1.8V switch
  ee67067f17 MdeModulePkg: VariableSmmRuntimeDxe: Fix Variable Policy Message Length
  5b39832e18 MdePkg: MmCommunication2: Update MM communicate2 function description
  ce37f45955 ArmPkg: MmCommunicationDxe: MM communicate function argument attributes
  541a077bd1 ArmPkg: MmCommunicationDxe: Update MM communicate `CommBuffer**` checks
  1aa1ec4574 ArmPkg: MmCommunicationDxe: Update MM communicate `CommSize` check
  8cc5590eab ArmPkg: MmCommunicationDxe: Update MM communicate `MessageLength` check
  6777e67383 EmbeddedPkg: Fix a build error in FwVol.c in X64 arch
  a867f3a704 UefiPayloadPkg: Use BaseCpuTimerLib for Universal Payload by default
  f4b7b473b4 MdeModulePkg/UefiBootManagerLib: Convert BmLoadOption to Variable Policy
  76b3d45b75 ShellPkg: Add the missing VariablePolicyHelperLib in ShellPkg.dsc
  8542fc5f95 NetworkPkg: Add the missing VariablePolicyHelperLib in NetworkPkg.dsc
  ae35314e7b Maintainers.txt: Add Sami Mujawar as reviewer for ArmPkg
  862ea6e836 OvmfPkg: change qemu default resolution to 1280x800
  e95b44c90e ArmVirtPkg: change qemu default resolution to 1280x800
  929804b172 OvmfPkg: add PcdVideoResolutionSource
  7f25ddbc03 OvmfPkg/QemuVideoDxe: simplify InitializeBochsGraphicsMode
  336da55ca8 OvmfPkg/QemuVideoDxe: drop QEMU_VIDEO_BOCHS_MODES-&gt;ColorDepth
  55c05427b9 OvmfPkg/QemuVideoDxe: factor out QemuVideoBochsAddMode
  49a2d8cbf5 OvmfPkg/QemuVideoDxe: parse edid blob, detect display resolution
  ba79becd55 OvmfPkg/BaseCachingPciExpressLib: Migrate BaseCachingPciExpressLib
  103fa647d1 ArmPkg: Replace CoreId and ClusterId with Mpidr in ARM_CORE_INFO struct
  742dafd2cc DynamicTablesPkg: Print specifier macro for CM_OBJECT_ID
  13136cc311 DynamicTablesPkg: FdtHwInfoParserLib: Parse Pmu info
  5751d60821 DynamicTablesPkg: AmlLib: AmlAddPrtEntry() to handle GSI
  5816bd3eab DynamicTablesPkg: AcpiSsdtPcieLibArm: Remove link device generation
  dc1118fa0d ArmVirtPkg: Add cspell exceptions
  0dbd356983 ArmVirtPkg/Kvmtool: Add DSDT ACPI table
  312ef7a0a4 ArmVirtPkg/Kvmtool: Add Configuration Manager
  17a02163bd ArmVirtPkg/Kvmtool: Enable ACPI support
  5b3c682d91 ArmVirtPkg/Kvmtool: Enable Acpiview
  017564d637 ArmPkg/ArmMmuLib AARCH64: avoid EL0 accessible mappings
  45b1612659 DynamicTablesPkg: Add Memory32Fixed function
  007a95055b DynamicTablesPkg: Remove redundant cast in AmlCodeGenReturn
  33189f0527 DynamicTablesPkg: Add AmlCodeGenMethodRetInteger function
  a4b7aa362d MdeModulePkg/Bus/Pci/PciBusDxe: Support platform PCI ROM override
  6fb09da89f ShellPkg: Fix incorrect PPTT FlagName dereference
  c09dbc92e9 BaseTools/Conf: Add new macro for customizing dll file reduction.
  d4ac53aa91 BaseTools: Fix error leg in DscBuildData.py
  f78b937c95 MdeModulePkg/RuntimeDxe: clear mVirtualMapMaxIndex
  96b8b5fd10 MdeModulePkg/UiApp: Fix spelling of 'FRONTPAGE'
  bd676f080a Maintainers.txt: add missing github IDs to OvmfPkf/Fdt reviewers
  1f54eaa725 Maintainers.txt: update email for Leif Lindholm
  b360b0b589 Maintainers.txt: Update email address
  c9b7c6e0cc BaseTools: Update CLANG{35,38}_WARNING_OVERRIDES to ignore unused vars
  42af706dfb BaseTools: Update brotli submodule
  1193aa2dfb MdeModulePkg: update brotli submodule
  85589ddbf6 OvmfPkg/VmgExitLib: Fix uninitialized variable warning with XCODE5
  c28e376edc OvmfPkg/FvbServicesSmm: use the VmgExitLibNull
  8a57673316 ShellPkg: Fix Ping GetTimerPeriod API failure
  b24306f15d NetworkPkg: Fix incorrect unicode string of the AKM/Cipher Suite
- Add amd-sev-es to the following descriptors because James Fehlig
  tested them (bsc#1196879):
    60-ovmf-x86_64.json
    60-ovmf-x86_64-2m.json
    60-ovmf-x86_64-ms.json
    60-ovmf-x86_64-2m-ms.json
- Backported patches in ovmf-bsc1196879-sev-fix.patch for fixing SEV:
    de463163d9 OvmfPkg/AmdSev: reserve snp pages
  63c50d3ff2 OvmfPkg/ResetVector: cache the SEV status MSR value in workarea
  f1d1c337e7 OvmfPkg/BaseMemEncryptLib: use the SEV_STATUS MSR value from workarea</changelog>
  <changelog author="fvogt@suse.com" date="1647345600">- TPM_ENABLE got renamed to TPM2_ENABLE and TPM_CONFIG_ENABLE removed
  (except on ARM for some reason) (boo#1197104)</changelog>
  <changelog author="jlee@suse.com" date="1651406400">- Respin amd-sev and amd-sev-es features
  After more testing, we found that not all descriptors can support
  both amd-sev with amd-sev-es. So we removed all amd-sev and amd-sev-es
  feature tags but only keep them in ovmf-x86_64-2m.json and
  60-ovmf-x86_64.json. (bsc#1198246#c75)</changelog>
  <changelog author="jlee@suse.com" date="1662465600">- Add patches to disable option ROM on sev (bsc#1199156)
  - Backported the following patches:
  - ovmf-MdeModulePkg-Update-PciEnumeratorSupport-to-ignore-O.patch
  cb8349f01a        MdeModulePkg: Update PciEnumeratorSupport to ignore OptionRom if needed
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch
  c477b2783f        OvmfPkg/IncompatiblePciDeviceSupportDxe: Ignore OptionRom in Td guest
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Refine-the-c.patch
  149ed8e421        OvmfPkg/IncompatiblePciDeviceSupportDxe: Refine the configuration
  - To disable option ROM both on tdx and sev:
  ovmf-bsc1199156-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch</changelog>
  <changelog author="jlee@suse.com" date="1665144000">- Add patches to fix detection issue of NVME controller (bsc#1203825)
  - ovmf-MdeModulePkg-NvmExpressDxe-fix-check-for-Cap.Css.patch
  - ovmf-MdeModulePkg-NvmExpressPei-fix-check-for-NVM-command.patch</changelog>
  <changelog author="jlee@suse.com" date="1681128000">- Add ovmf-Revert-OvmfPkg-OvmfXen-Set-PcdFSBClock.patch to revert
  71cdb91f313380152d7bf38cfeebe76f5b2d39ac patch (bsc#1205613)
  - 71cdb91f313380152d7bf38cfeebe76f5b2d39ac OvmfPkg/OvmfXen: Set PcdFSBClock
  - We are waiting better upsteam patch, revert the issue patch first.
    Then PcdFSBClock will back to fixed variable.
  - Reference: https://edk2.groups.io/g/devel/topic/94891128#96077
  https://bugzilla.tianocore.org/show_bug.cgi?id=4340</changelog>
  <changelog author="jlee@suse.com" date="1683979200">- Add ovmf-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch
  to check result of GetEfiGlobalVariable2 (CVE-2019-14560, bsc#1174246)</changelog>
  <changelog author="jlee@suse.com" date="1683979201">- Add ovmf-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch
  for MdeModulePkg/PiSmmCore: SmmEntryPoint underflow (CVE-2021-38578)
  (bsc#1196741)</changelog>
</package>
<package pkgid="70c16505c10d0dbb414faf5127fe9f9ac94c244971f492c1bcab3b0e272b712f" name="pam" arch="aarch64">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="f0dd371c82d2850bd65bac9d62bd7f1781af6b4793ea7d3a15c69a1736454a00" name="pam" arch="s390x">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="ca4331e4069f2b3ce1e6555040a1038ebb0198490337eee6e436d78e7012e5e3" name="pam" arch="src">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="3e730b84a0cff3112c968ba6a2b42b2e63bff359b4714e757ec0befd0a70ea77" name="pam" arch="x86_64">
  <version epoch="0" ver="1.3.0" rel="150000.6.66.1"/>
  <changelog author="josef.moellers@suse.com" date="1602763200">- /usr/bin/xauth chokes on the old user's $HOME being on an NFS
  file system. Run /usr/bin/xauth using the old user's uid/gid
  Patch courtesy of Dr. Werner Fink.
  [bsc#1174593, pam-xauth_ownership.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605268800">- Initialize pam_unix pam_sm_acct_mgmt() local variable "daysleft"
  to avoid spurious (and misleading)
    Warning: your password will expire in ... days.
  fixed upstream with commit db6b293046a
  [bsc#1178727, pam-bsc1178727-initialize-daysleft.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605700800">- pam_xauth.c: do not free() a string which has been (successfully)
  passed to putenv().
  [bsc#1177858, pam-bsc1177858-dont-free-environment-string.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1605787200">- pam_cracklib: added code to check whether the password contains
  a substring of of the user's name of at least &lt;N&gt; characters length
  in some form.
  This is enabled by the new parameter "usersubstr=&lt;N&gt;"
  See https://github.com/libpwquality/libpwquality/commit/bfef79dbe6aa525e9557bf4b0a61e6dde12749c4
  [jsc#SLE-16719, jsc#SLE-16720, pam-pam_cracklib-add-usersubstr.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1610712000">- Create macros.pam with definition of %_pamdir so packages which
  are commonly shared between Factory and SLE can use this macro
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1612785600">- Add a definition for pamdir to pam.spec
  So that a proper contents of macros.pam can be constructed.
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1615377600">- pam_limits: "unlimited" is not a legitimate value for "nofile"
  (see setrlimit(2)). So, when "nofile" is set to one of the
  "unlimited" values, it is set to the contents of
  "/proc/sys/fs/nr_open" instead.
  Also changed the manpage of pam_limits to express this.
  [bsc#1181443, pam-bsc1181443-make-nofile-unlimited-mean-nr_open.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1617710400">- If "LOCAL" is configured in access.conf, and a login attempt from
  a remote host is made, pam_access tries to resolve "LOCAL" as
  a hostname and logs a failure.
  Checking explicitly for "LOCAL" and rejecting access in this case
  resolves this issue.
  [bsc#1184358, bsc1184358-prevent-LOCAL-from-being-resolved.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1620734400">- In the 32-bit compatibility package for 64-bit architectures,
  require "systemd-32bit" to be also installed as it contains
  pam_systemd.so for 32 bit applications.
  [bsc#1185562, baselibs.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1629892800">- Added pam_faillock to the set of modules.
  [jsc#sle-20638, pam-sle20638-add-pam_faillock.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1630497600">- Added new file macros.pam on request of systemd.
  [bsc#1190052, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1633521600">- Corrected macros.pam entry for %_pam_moduledir
  Cleanup in pam.spec:
  * Replaced all references to ${_lib}/security in pam.spec by
  %{_pam_moduledir}
  * Removed definition of (unused) "amdir".</changelog>
  <changelog author="josef.moellers@suse.com" date="1634212800">- Added tmpfiles for pam to set up directory for pam_faillock.
  [pam.conf]</changelog>
  <changelog author="josef.moellers@suse.com" date="1634817600">- Corrected a bad directive file which resulted in
  the "securetty" file to be installed as "macros.pam".
  [pam.spec]</changelog>
  <changelog author="josef.moellers@suse.com" date="1645704000">- Define _pam_vendordir as "/%{_sysconfdir}/pam.d"
  The variable is needed by systemd and others.
  [bsc#1196093, macros.pam]</changelog>
  <changelog author="josef.moellers@suse.com" date="1647432000">- Between allocating the variable "ai" and free'ing them, there are
  two "return NO" were we don't free this variable. This patch
  inserts freaddrinfo() calls before the "return NO;"s.
  [bsc#1197024, pam-bsc1197024-free-addrinfo-before-return.patch]</changelog>
  <changelog author="josef.moellers@suse.com" date="1648814400">- Do not include obsolete libselinux header files flask.h and
  av_permissions.h.
  [bsc#1197794, pam-bsc1197794-do-not-include-obsolete-header-files.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1662552000">- Update pam_motd to the most current version. This fixes various issues
  and adds support for mot.d directories [jsc#PED-1712].
  * Added: pam-ped1712-pam_motd-directory-feature.patch</changelog>
  <changelog author="tabraham@suse.com" date="1703851200">- pam_lastlog: check localtime_r() return value (bsc#1217000)
  * Added: pam-bsc1217000-pam_lastlog-check-localtime_r-return-value.patch</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1704715200">- Add missing O_DIRECTORY flag in `protect_dir()` for pam_namespace module.
  [bsc#1218475, pam-bsc1218475-pam_namespace-O_DIRECTORY-flag.patch]</changelog>
</package>
<package pkgid="1078aa553f1bd08c95e7dedcbd121b05f42e591a91535ef2a133fc76bc0c8ce6" name="pam-config" arch="aarch64">
  <version epoch="0" ver="1.1" rel="150200.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1415793600">- Added pam_google_authenticator.patch: support google authentiator
  [bnc#888149]</changelog>
  <changelog author="ledest@gmail.com" date="1418472000">- fix bashism in postun script</changelog>
  <changelog author="kukuk@suse.de" date="1459512000">- Update to version 0.89
  - Includes pam_google_authenticator.patch
  - Better check for dual-arch PAM stack</changelog>
  <changelog author="kukuk@suse.de" date="1466683200">- Update to version 0.91
  - Adjust for Linux-PAM 1.3.0
  - Automatically replace obsolete PAM modules no longer installed
  - Extend error messages</changelog>
  <changelog author="mliska@suse.cz" date="1483963200">- Add gcc7-Add-break-to-a-case-label.patch: fix new warning reported
  by GCC7.</changelog>
  <changelog author="kukuk@suse.de" date="1502280000">- Update to version 0.92
  - add pam_kwallet5 support
  - move pam_systemd before pam_krb5 [bsc#1014995]
  - obsoletes gcc7-Add-break-to-a-case-label.patch</changelog>
  <changelog author="kukuk@suse.de" date="1508500800">- Update to version 0.93: Teach pam_cracklib module about
  enforce_for_root [bnc#929079, FATE#312643].</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Update to version 0.94: add support for keyinit [bsc#1045886]</changelog>
  <changelog author="kukuk@suse.de" date="1519300800">- Update to version 0.95:
  - fix migration from pam_unix2/pam_pwcheck to pam_unix/pam_cracklib</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1523448000">- Add triggerun script: update config if pam-modules is removed
  [bsc#1088863]</changelog>
  <changelog author="kukuk@suse.de" date="1544443200">- Update to version 0.96:
  * Add missing pam_cracklib options [bsc#1114835]</changelog>
  <changelog author="kukuk@suse.de" date="1553601600">- Update to version 1.0:
  - Add search in different locations for config files
  - Add support for pam_mktemp [bsc#1123878]</changelog>
  <changelog author="kukuk@suse.de" date="1563278400">- Update to version 1.1:
  - enhance comments in common-*-pc files</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240000">- prior to writing an service-specific config file, the main function
  calls access() on the destination file in /etc/pam.d.
  This will fail and no config file will be written when the original
  config file was installed in /usr/etc/pam.d.
  A similar problem exists when creating the new service file:
  create_service_file() wants to give the new service file the same
  user, group and mode as the old one, but the old one may not exist.
  In that case, set these to 0(root), 0(root), and 0644.
  [pam-config-remove-bad-access-call.patch, bsc#1187091]</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240001">- Add "revoke" to the option list for pam_keyinit
  (Remove some leftover debugs while we're at it)
  [pam-config-fix-pam_keyinit-options.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708430400">- Fix pam_gnome_keyring module for AUTH.
  [pam-config-fix-pam_gnome_keyring.patch, bsc#1219767]</changelog>
</package>
<package pkgid="e9681a1d171219079d0226feecbe9329c957ffdd9a66a23c0d46bb062d802f7f" name="pam-config" arch="s390x">
  <version epoch="0" ver="1.1" rel="150200.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1415793600">- Added pam_google_authenticator.patch: support google authentiator
  [bnc#888149]</changelog>
  <changelog author="ledest@gmail.com" date="1418472000">- fix bashism in postun script</changelog>
  <changelog author="kukuk@suse.de" date="1459512000">- Update to version 0.89
  - Includes pam_google_authenticator.patch
  - Better check for dual-arch PAM stack</changelog>
  <changelog author="kukuk@suse.de" date="1466683200">- Update to version 0.91
  - Adjust for Linux-PAM 1.3.0
  - Automatically replace obsolete PAM modules no longer installed
  - Extend error messages</changelog>
  <changelog author="mliska@suse.cz" date="1483963200">- Add gcc7-Add-break-to-a-case-label.patch: fix new warning reported
  by GCC7.</changelog>
  <changelog author="kukuk@suse.de" date="1502280000">- Update to version 0.92
  - add pam_kwallet5 support
  - move pam_systemd before pam_krb5 [bsc#1014995]
  - obsoletes gcc7-Add-break-to-a-case-label.patch</changelog>
  <changelog author="kukuk@suse.de" date="1508500800">- Update to version 0.93: Teach pam_cracklib module about
  enforce_for_root [bnc#929079, FATE#312643].</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Update to version 0.94: add support for keyinit [bsc#1045886]</changelog>
  <changelog author="kukuk@suse.de" date="1519300800">- Update to version 0.95:
  - fix migration from pam_unix2/pam_pwcheck to pam_unix/pam_cracklib</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1523448000">- Add triggerun script: update config if pam-modules is removed
  [bsc#1088863]</changelog>
  <changelog author="kukuk@suse.de" date="1544443200">- Update to version 0.96:
  * Add missing pam_cracklib options [bsc#1114835]</changelog>
  <changelog author="kukuk@suse.de" date="1553601600">- Update to version 1.0:
  - Add search in different locations for config files
  - Add support for pam_mktemp [bsc#1123878]</changelog>
  <changelog author="kukuk@suse.de" date="1563278400">- Update to version 1.1:
  - enhance comments in common-*-pc files</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240000">- prior to writing an service-specific config file, the main function
  calls access() on the destination file in /etc/pam.d.
  This will fail and no config file will be written when the original
  config file was installed in /usr/etc/pam.d.
  A similar problem exists when creating the new service file:
  create_service_file() wants to give the new service file the same
  user, group and mode as the old one, but the old one may not exist.
  In that case, set these to 0(root), 0(root), and 0644.
  [pam-config-remove-bad-access-call.patch, bsc#1187091]</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240001">- Add "revoke" to the option list for pam_keyinit
  (Remove some leftover debugs while we're at it)
  [pam-config-fix-pam_keyinit-options.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708430400">- Fix pam_gnome_keyring module for AUTH.
  [pam-config-fix-pam_gnome_keyring.patch, bsc#1219767]</changelog>
</package>
<package pkgid="6cdaba64a7fe634507aa4b884cc276a2e29912121d26f26e1953b7869a994533" name="pam-config" arch="src">
  <version epoch="0" ver="1.1" rel="150200.3.6.1"/>
  <changelog author="speilicke@suse.com" date="1395057600">- "pam-config --debug --update" in the %post section fails if any
  /etc/pam.d/common-$TYPE file is not a symlink to /etc/pam.d/common-$TYPE-pc.
  Fix that by adding '--force'. This is mainly an update issue since
  fresh configs are created appropriatly</changelog>
  <changelog author="kukuk@suse.de" date="1396440000">- Update to pam-config 0.87
  - Add support for pam_access.so
- Rervert last change, it will break manually adjusted config
  files as documented</changelog>
  <changelog author="kukuk@suse.de" date="1411646400">- Update to pam-config 0.88
  - Add pam_ecryptfs to password section [bnc#895096]</changelog>
  <changelog author="kukuk@suse.de" date="1415793600">- Added pam_google_authenticator.patch: support google authentiator
  [bnc#888149]</changelog>
  <changelog author="ledest@gmail.com" date="1418472000">- fix bashism in postun script</changelog>
  <changelog author="kukuk@suse.de" date="1459512000">- Update to version 0.89
  - Includes pam_google_authenticator.patch
  - Better check for dual-arch PAM stack</changelog>
  <changelog author="kukuk@suse.de" date="1466683200">- Update to version 0.91
  - Adjust for Linux-PAM 1.3.0
  - Automatically replace obsolete PAM modules no longer installed
  - Extend error messages</changelog>
  <changelog author="mliska@suse.cz" date="1483963200">- Add gcc7-Add-break-to-a-case-label.patch: fix new warning reported
  by GCC7.</changelog>
  <changelog author="kukuk@suse.de" date="1502280000">- Update to version 0.92
  - add pam_kwallet5 support
  - move pam_systemd before pam_krb5 [bsc#1014995]
  - obsoletes gcc7-Add-break-to-a-case-label.patch</changelog>
  <changelog author="kukuk@suse.de" date="1508500800">- Update to version 0.93: Teach pam_cracklib module about
  enforce_for_root [bnc#929079, FATE#312643].</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Update to version 0.94: add support for keyinit [bsc#1045886]</changelog>
  <changelog author="kukuk@suse.de" date="1519300800">- Update to version 0.95:
  - fix migration from pam_unix2/pam_pwcheck to pam_unix/pam_cracklib</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1523448000">- Add triggerun script: update config if pam-modules is removed
  [bsc#1088863]</changelog>
  <changelog author="kukuk@suse.de" date="1544443200">- Update to version 0.96:
  * Add missing pam_cracklib options [bsc#1114835]</changelog>
  <changelog author="kukuk@suse.de" date="1553601600">- Update to version 1.0:
  - Add search in different locations for config files
  - Add support for pam_mktemp [bsc#1123878]</changelog>
  <changelog author="kukuk@suse.de" date="1563278400">- Update to version 1.1:
  - enhance comments in common-*-pc files</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240000">- prior to writing an service-specific config file, the main function
  calls access() on the destination file in /etc/pam.d.
  This will fail and no config file will be written when the original
  config file was installed in /usr/etc/pam.d.
  A similar problem exists when creating the new service file:
  create_service_file() wants to give the new service file the same
  user, group and mode as the old one, but the old one may not exist.
  In that case, set these to 0(root), 0(root), and 0644.
  [pam-config-remove-bad-access-call.patch, bsc#1187091]</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240001">- Add "revoke" to the option list for pam_keyinit
  (Remove some leftover debugs while we're at it)
  [pam-config-fix-pam_keyinit-options.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708430400">- Fix pam_gnome_keyring module for AUTH.
  [pam-config-fix-pam_gnome_keyring.patch, bsc#1219767]</changelog>
</package>
<package pkgid="7b767c2326b2ce2456dc9510294d485897d478cba1a2d5f39ab3a3b17e4c0931" name="pam-config" arch="x86_64">
  <version epoch="0" ver="1.1" rel="150200.3.6.1"/>
  <changelog author="kukuk@suse.de" date="1415793600">- Added pam_google_authenticator.patch: support google authentiator
  [bnc#888149]</changelog>
  <changelog author="ledest@gmail.com" date="1418472000">- fix bashism in postun script</changelog>
  <changelog author="kukuk@suse.de" date="1459512000">- Update to version 0.89
  - Includes pam_google_authenticator.patch
  - Better check for dual-arch PAM stack</changelog>
  <changelog author="kukuk@suse.de" date="1466683200">- Update to version 0.91
  - Adjust for Linux-PAM 1.3.0
  - Automatically replace obsolete PAM modules no longer installed
  - Extend error messages</changelog>
  <changelog author="mliska@suse.cz" date="1483963200">- Add gcc7-Add-break-to-a-case-label.patch: fix new warning reported
  by GCC7.</changelog>
  <changelog author="kukuk@suse.de" date="1502280000">- Update to version 0.92
  - add pam_kwallet5 support
  - move pam_systemd before pam_krb5 [bsc#1014995]
  - obsoletes gcc7-Add-break-to-a-case-label.patch</changelog>
  <changelog author="kukuk@suse.de" date="1508500800">- Update to version 0.93: Teach pam_cracklib module about
  enforce_for_root [bnc#929079, FATE#312643].</changelog>
  <changelog author="kukuk@suse.de" date="1516017600">- Update to version 0.94: add support for keyinit [bsc#1045886]</changelog>
  <changelog author="kukuk@suse.de" date="1519300800">- Update to version 0.95:
  - fix migration from pam_unix2/pam_pwcheck to pam_unix/pam_cracklib</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1523448000">- Add triggerun script: update config if pam-modules is removed
  [bsc#1088863]</changelog>
  <changelog author="kukuk@suse.de" date="1544443200">- Update to version 0.96:
  * Add missing pam_cracklib options [bsc#1114835]</changelog>
  <changelog author="kukuk@suse.de" date="1553601600">- Update to version 1.0:
  - Add search in different locations for config files
  - Add support for pam_mktemp [bsc#1123878]</changelog>
  <changelog author="kukuk@suse.de" date="1563278400">- Update to version 1.1:
  - enhance comments in common-*-pc files</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240000">- prior to writing an service-specific config file, the main function
  calls access() on the destination file in /etc/pam.d.
  This will fail and no config file will be written when the original
  config file was installed in /usr/etc/pam.d.
  A similar problem exists when creating the new service file:
  create_service_file() wants to give the new service file the same
  user, group and mode as the old one, but the old one may not exist.
  In that case, set these to 0(root), 0(root), and 0644.
  [pam-config-remove-bad-access-call.patch, bsc#1187091]</changelog>
  <changelog author="josef.moellers@suse.com" date="1623240001">- Add "revoke" to the option list for pam_keyinit
  (Remove some leftover debugs while we're at it)
  [pam-config-fix-pam_keyinit-options.patch]</changelog>
  <changelog author="valentin.lefebvre@suse.com" date="1708430400">- Fix pam_gnome_keyring module for AUTH.
  [pam-config-fix-pam_gnome_keyring.patch, bsc#1219767]</changelog>
</package>
<package pkgid="78d53d72f5f0776e659df905fa6a9350dcbe22c24c4e822c22d67df572aa8457" name="pam_apparmor" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="59744c69d98e130c29e8c78e4d366e4f1e081b4f318b51bb6bd221480b17db97" name="pam_apparmor" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="5ed6356782780ea8749b95866ba00e92414b54e8117d82fdbcf7fa995298cb30" name="pam_apparmor" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150400.5.6.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628337600">- update to AppArmor 3.0.3
  - fix a failure in the parser tests
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.3
    for the detailed upstream changelog</changelog>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
</package>
<package pkgid="e50019634fa5c74cd917c41a3e3f7c6e7bedeff256522bda68062fd4596b966c" name="pam_apparmor" arch="aarch64">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="00565763ab5dc1449dfddd2bfeb004475b439ed17d7b559ecb9c17cef646ec85" name="pam_apparmor" arch="s390x">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="672da4266b2f9141c8445bba583d88116010b56998cfc42375bfacc4ce370ab7" name="pam_apparmor" arch="x86_64">
  <version epoch="0" ver="3.0.4" rel="150400.5.9.1"/>
  <changelog author="suse-beta@cboltz.de" date="1628683200">- add profiles-python-3.10-mr783.diff: update abstractions/python and
  profiles for python 3.10</changelog>
  <changelog author="suse-beta@cboltz.de" date="1631966400">- lessopen.sh profile: allow reading files that live on NFS over UDP
  (added to apparmor-lessopen-nfs-workaround.diff) (boo#1190552)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1634299200">- add add-samba-bgqd.diff: add profile for samba-bgqd (boo#1191532)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1636459200">- add aa-notify-more-arch-mr809.diff: Add support for reading s390x
  and aarch64 wtmp files (boo#1181155)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1639915200">- add openssl-engdef-mr818.diff: Allow reading /etc/ssl/engdef.d/ and
  /etc/ssl/engines.d/ in abstractions/openssl which were introduced
  with the latest openssl update</changelog>
  <changelog author="nopower@suse.com" date="1640001600">-  Modify add-samba-bgqd.diff: Add new rule to fix new "DENIED
  operation="file_mmap" violation in SLE15-SP4; (bsc#1192336).</changelog>
  <changelog author="scabrero@suse.de" date="1642420800">- add update-samba-abstractions-ldb2.diff: Cater for changes to ldb
  packaging to allow parallel installation with libldb (bsc#1192684).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1643198400">- add ruby-3.1-build-fix.diff: fix build with ruby 3.1 (boo#1194221,
  MR 827)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1644494400">- update to AppArmor 3.0.4
  - various fixes in profiles, abstractions, apparmor_parser and utils
    (some of them were already included as patches)
  - add support for mctp address family
  - see https://gitlab.com/apparmor/apparmor/-/wikis/Release_Notes_3.0.4
    for the full upstream changelog
- remove upstream(ed) patches:
  - aa-notify-more-arch-mr809.diff
  - ruby-3.1-build-fix.diff
  - add-samba-bgqd.diff
  - openssl-engdef-mr818.diff
  - profiles-python-3.10-mr783.diff
  - update-samba-abstractions-ldb2.diff
- refresh patches:
  - apparmor-samba-include-permissions-for-shares.diff
  - ruby-2_0-mkmf-destdir.patch</changelog>
  <changelog author="nopower@suse.com" date="1648123200">- Add update-samba-bgqd.diff to add new rule to fix 'DENIED' open on
  /proc/{pid}/fd for samba-bgqd (bnc#1196850).
- Add update-usr-sbin-smbd.diff to add new rule to allow reading of
  openssl.cnf (bnc#1195463).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1648555200">- ensure precompiled cache files are newer than (text) profiles
- reload profiles in %posttrans instead of %post to ensure both
  - profiles and -abstractons package are updated before the cache
  in /var/cache/apparmor/ gets built (boo#1195463 #c20)</changelog>
  <changelog author="suse-beta@cboltz.de" date="1649592000">- add profile for zgrep and xzgrep to prevent CVE-2022-1271
  (zgrep-profile-mr870.diff)</changelog>
  <changelog author="nopower@suse.com" date="1649678400">- Add samba_deny_net_admin.patch to add new rule to deny
  noisy setsockopt calls from systemd; (bnc#1196850).</changelog>
  <changelog author="nopower@suse.com" date="1649851200">- Add samba-new-dcerpcd.patch, samba-4.16 has a new dcerpcd daemon
  which now will spawn new additional services on demand. We need to
  modify the existing smbd/winbind profiles and additionally add a
  new set of profiles to cater for the new functionality;
  (bnc#1198309);</changelog>
  <changelog author="suse-beta@cboltz.de" date="1650110400">- update zgrep-profile-mr870.diff to allow executing 'expr' (boo#1198531)</changelog>
  <changelog author="dimstar@opensuse.org" date="1651060800">- Enhance zgrep-profile-mr870.diff to also allow/support zstd
  (boo#1198922).</changelog>
  <changelog author="suse-beta@cboltz.de" date="1651233600">- add php8-fpm-mr876.patch so that php8 php-fpm can read its config
  (boo#1186267#c11)
- parser: add conflict with apparmor-utils &lt; 3.0 to avoid aa-status
  file conflict on upgrade (boo#1198958)
- utils: add missing dependency on apparmor-parser (boo#1198958#c4)</changelog>
  <changelog author="ddiss@suse.com" date="1661515200">- add profiles-permit-php-fpm-pid-files-directly-under-run.patch
  https://gitlab.com/apparmor/apparmor/-/merge_requests/914 (bsc#1202344)</changelog>
  <changelog author="ddiss@suse.com" date="1690286400">- Add pam_apparmor README, referenced from online cha-apparmor-pam.html
  documentation (bsc#1213472)</changelog>
  <changelog author="ddiss@suse.com" date="1693915200">- update zgrep profile to allow egrep helper use (bsc#1214458)
  - zgrep-profile-sync-with-master.diff</changelog>
</package>
<package pkgid="edd4b545215af782b05a81b8e746296460c82eeb00360cd1e19b162ff704deb3" name="pam_pkcs11" arch="aarch64">
  <version epoch="0" ver="0.6.10" rel="150100.3.3.2"/>
  <changelog author="sbrabec@suse.cz" date="1330430400">- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341921600">- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1455019200">- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)</changelog>
  <changelog author="sbrabec@suse.com" date="1500552000">- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.</changelog>
  <changelog author="astieger@suse.com" date="1502280000">- add service file bsc#1049219</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.</changelog>
  <changelog author="sbrabec@suse.com" date="1532347200">- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).</changelog>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
</package>
<package pkgid="f6a5ef02bbbe8fee2b5763832a3f812948c434357f226594a19a4e9173f9bbbf" name="pam_pkcs11" arch="s390x">
  <version epoch="0" ver="0.6.10" rel="150100.3.3.2"/>
  <changelog author="sbrabec@suse.cz" date="1330430400">- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341921600">- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1455019200">- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)</changelog>
  <changelog author="sbrabec@suse.com" date="1500552000">- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.</changelog>
  <changelog author="astieger@suse.com" date="1502280000">- add service file bsc#1049219</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.</changelog>
  <changelog author="sbrabec@suse.com" date="1532347200">- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).</changelog>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
</package>
<package pkgid="3dfbdd3fcc558688610517789172acfe1d0c91ca09298ceabbe720fc985c3c9b" name="pam_pkcs11" arch="src">
  <version epoch="0" ver="0.6.10" rel="150100.3.3.2"/>
  <changelog author="sbrabec@suse.cz" date="1185451200">- Updated to version 0.6.0:
  * compiler warning fixes
  * I18N support
  * new configuration options
  * support for new environment variables
  * new tool pkcs11_setup
  * support for the NSS crypto libraries (off by default)
  * for more changes see ChangeLog.svn</changelog>
  <changelog author="sbrabec@suse.cz" date="1185883200">- Build with NSS instead of openssl.
- Applied patches from Jacob Berkman: MS UPN OID and NSS
  configuration.
- Fixed implicit declaration.</changelog>
  <changelog author="jberkman@novell.com" date="1189080000">- use the same directory for nssdb as the kerberos pkinit plugin</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="sbrabec@suse.cz" date="1222171200">- Fixed uninitialized variable (bnc#351207).</changelog>
  <changelog author="sbrabec@suse.cz" date="1224072000">- Fixed all implicit declarations.</changelog>
  <changelog author="sbrabec@suse.cz" date="1245931200">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 0.6.1:
  * Added functions to API.
  * Fixes from openSUSE packages upstreamed.
  * Minor fixes.
  * Translaton updates.</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- package baselibs.conf</changelog>
  <changelog author="sbrabec@suse.cz" date="1294228800">- Updated to version 0.6.6:
  * Compatible with pcsc-lite-1.6.
  * New mapper API.
  * Minor fixes.
  * Translaton updates.</changelog>
  <changelog author="sbrabec@suse.cz" date="1330430400">- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341921600">- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1455019200">- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)</changelog>
  <changelog author="sbrabec@suse.com" date="1500552000">- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.</changelog>
  <changelog author="astieger@suse.com" date="1502280000">- add service file bsc#1049219</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.</changelog>
  <changelog author="sbrabec@suse.com" date="1532347200">- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).</changelog>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
</package>
<package pkgid="32233ad8b70c2401b2bd911f6b57f53dc39f1469cf36c8e5eee5b89d8a27095b" name="pam_pkcs11" arch="x86_64">
  <version epoch="0" ver="0.6.10" rel="150100.3.3.2"/>
  <changelog author="sbrabec@suse.cz" date="1330430400">- Change nssdb path to /etc/pki/nssdb (bnc#463469).
- Make libdir paths in pam_pkcs11.conf biarch-wise.</changelog>
  <changelog author="sbrabec@suse.cz" date="1341921600">- Updated to version 0.6.8:
  * Code cleanup.
  * Bug fixes.
  * Translation updates.</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1455019200">- Fix build for Tumbleweed:
  * Add pam_pkcs11-0.6.8-fix-crypto-cflags.patch
  * Rebuild configure with the bootstrap script (add libtool as
    build dependency)</changelog>
  <changelog author="sbrabec@suse.com" date="1500552000">- Updated to version 0.6.9:
  * Upstream web moved.
  * pkcs11_listcerts: Do not fail on certificate error.
  * Do not fail if card was already unlocked.
  * Other bug fixes.
  * Translation updates.
- Drop upstreamed pam_pkcs11-0.6.8-fix-crypto-cflags.patch.
- Work around incorrect upstream release process not calling
  "make dist".
- Split API documentation into a separate package
  pam_pkcs11-devel-doc.
- Add pam_pkcs11-fsf-address.patch.</changelog>
  <changelog author="astieger@suse.com" date="1502280000">- add service file bsc#1049219</changelog>
  <changelog author="jengelh@inai.de" date="1505044800">- Repair bulletpoint that skidded in description.
  Trim description of %name-devel-doc, it does not cotain
  the programs.</changelog>
  <changelog author="sbrabec@suse.com" date="1532347200">- Fix segfault and fetch problems when checking CRLs
  (pam_pkcs11-crl-check.patch).</changelog>
  <changelog author="vcizek@suse.com" date="1534507200">- Address security issues found by X41 D-Sec audit (bsc#1105012)
  * Authentication Replay
  * Buffer Overflow
  * Memory not cleaned properly before free()
- add patches:
  * 0001-verify-using-a-nonce-from-the-system-not-the-card.patch
  * 0002-fixed-buffer-overflow-with-long-home-directory.patch
  * 0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1548763200">- Update to version 0.6.10:
  * Fix some security issues (thx @frankmorgner):
    https://www.x41-dsec.de/lab/advisories/x41-2018-003-pam_pkcs11/
    (drop 0001-verify-using-a-nonce-from-the-system-not-the-card.patch,
    0002-fixed-buffer-overflow-with-long-home-directory.patch,
    0003-fixed-wiping-secrets-with-OpenSSL_cleanse.patch).
  * Fix buffer overflow with long home directory.
  * Fix wiping secrets (now using OpenSSL_cleanse()).
  * Verify using a nonce from the system, not the card.
  * Fix segfalt when checking CRLs
    (drop pam_pkcs11-crl-check.patch).
- Add rcpkcs11_eventmgr service symlink.</changelog>
  <changelog author="davide.benini@suse.com" date="1715083200">- Fix for bsc#1221255:
  * Add patch 0001-Set-slot_num-configuration-parameter-to-0-by-default.patch</changelog>
</package>
<package pkgid="ffc36e5b7e5e965a6fcb378afcde12affb1b6e66e814a780b25cd1c26c7dd975" name="parted" arch="aarch64">
  <version epoch="0" ver="3.2" rel="150300.21.3.1"/>
  <changelog author="sparschauer@suse.de" date="1505304000">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="anicka@suse.com" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="anicka@suse.com" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
  <changelog author="anicka@suse.com" date="1582804800">- make parted work with pmemXs devices (bsc#1164260)</changelog>
  <changelog author="anicka@suse.com" date="1585137600">- print maximum number of partitions for yast (bsc#1161783)
  - add: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1586347200">- fix null pointer dereference (bsc#1168756)
  - change: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1591704000">- fix support of pmemXs devices (bnc#1164260)
  - remove: libparted-fix-NVDIMM-partition-naming.patch
  - remove: libparted-linux-pmem-path.patch</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1638792000">- fix null pointer dereference (bsc#1193412)
  - add: parted-fix-check-diskp-in-do_name.patch
- update mkpart options in manpage (bsc#1182142)
  - add: parted-mkpart-manpage.patch</changelog>
</package>
<package pkgid="721d49420588cd3f48d9441da154292cabc5b83f5b29270b51daf1dd403a39aa" name="parted" arch="s390x">
  <version epoch="0" ver="3.2" rel="150300.21.3.1"/>
  <changelog author="sparschauer@suse.de" date="1505304000">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="anicka@suse.com" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="anicka@suse.com" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
  <changelog author="anicka@suse.com" date="1582804800">- make parted work with pmemXs devices (bsc#1164260)</changelog>
  <changelog author="anicka@suse.com" date="1585137600">- print maximum number of partitions for yast (bsc#1161783)
  - add: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1586347200">- fix null pointer dereference (bsc#1168756)
  - change: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1591704000">- fix support of pmemXs devices (bnc#1164260)
  - remove: libparted-fix-NVDIMM-partition-naming.patch
  - remove: libparted-linux-pmem-path.patch</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1638792000">- fix null pointer dereference (bsc#1193412)
  - add: parted-fix-check-diskp-in-do_name.patch
- update mkpart options in manpage (bsc#1182142)
  - add: parted-mkpart-manpage.patch</changelog>
</package>
<package pkgid="b411bf81a091da0ef170e9622ce4255bd6450b0c97fa55b0c13faea3183e8538" name="parted" arch="src">
  <version epoch="0" ver="3.2" rel="150300.21.3.1"/>
  <changelog author="sparschauer@suse.de" date="1505304000">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="anicka@suse.com" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="anicka@suse.com" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
  <changelog author="anicka@suse.com" date="1582804800">- make parted work with pmemXs devices (bsc#1164260)</changelog>
  <changelog author="anicka@suse.com" date="1585137600">- print maximum number of partitions for yast (bsc#1161783)
  - add: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1586347200">- fix null pointer dereference (bsc#1168756)
  - change: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1591704000">- fix support of pmemXs devices (bnc#1164260)
  - remove: libparted-fix-NVDIMM-partition-naming.patch
  - remove: libparted-linux-pmem-path.patch</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1638792000">- fix null pointer dereference (bsc#1193412)
  - add: parted-fix-check-diskp-in-do_name.patch
- update mkpart options in manpage (bsc#1182142)
  - add: parted-mkpart-manpage.patch</changelog>
</package>
<package pkgid="2759454ae43fe55277379ab74a380365aa2d36a5ee4ae88756644bd689bd486f" name="parted" arch="x86_64">
  <version epoch="0" ver="3.2" rel="150300.21.3.1"/>
  <changelog author="sparschauer@suse.de" date="1505304000">- Make SUSE parted pass all tests in upstream test suite
  - add: tests-set-optimal-blocks-for-scsi_debug.patch
  - add: tests-increase-scsi_debug-tmo.patch
  - add: tests-use-wait_for_dev_to_-functions.patch
  - add: tests-wait_for_-loop.patch
  - add: tests-update-t0220-t0280-for-swap-flag.patch
  - add: tests-adapt-to-SUSE.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1505908800">- Prepare to fix the resizepart command (bsc#1058667)
  - add: libparted-BLKPG_RESIZE_PARTITION-uses-bytes.patch
  - add: libparted-fix-udev-cookie-leak.patch
  - add: tests-check-extended-partition-length.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1508760000">- Add support for NVDIMM devices (bsc#1064446)
  - add: libparted-Add-support-for-NVDIMM-devices.patch
  - add: libparted-fix-NVDIMM-partition-naming.patch)</changelog>
  <changelog author="sparschauer@suse.de" date="1510574400">- Escape printed device path in machine mode (bsc#1066467)
  - add: parted-escape-printed-device-path.patch</changelog>
  <changelog author="sebastian.parschauer@suse.com" date="1511265600">- Fix the resizepart and rm command (bsc#1058667)
  - fix asking for the partition end for resizepart in interactive mode
    when the partition is busy
  - allow resizepart shrinking and rm of busy partitions in script mode
    by adding the --ignore-busy option
  - allow growing busy partitions in script mode by default
  - print a warning when shrinking a non-busy partition in script mode
  - fix help text printing of long options without short option
  - remove: parted-do-not-warn-when-shrinking-in-script-mode.patch
  - add: parted-add-ignore-busy-option.patch
  - add: parted-fix-resizepart-and-rm-command.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513684800">- fatresize: Fix getting the device name from partition name
  (boo#959181)
  - add: fatresize-fix-getting-dev-name.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1513944000">- Amend patch headers (no functional change)</changelog>
  <changelog author="sparschauer@suse.de" date="1516968000">- libparted: dasd: Use BLKRRPART only when needed (bsc#1065197,
  bsc#1067435)
  - add: libparted-use-BLKRRPART-only-when-needed.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519041600">- libparted: Fix partition device naming for all devices
  (bsc#1078820, bsc#1081547)
  - The "_part%d" suffix which has been used for SLE10 compatibility
    is wrong now as the kernel does not use that any more and
    uses "p%d" instead.
  - amend: libparted-partition-naming.patch
  - refresh: libparted-fix-nvme-partition-naming.patch
  - refresh: libparted-fix-NVDIMM-partition-naming.patch</changelog>
  <changelog author="sparschauer@suse.de" date="1519128000">- libparted: Canonicalize /dev/md/ paths (bsc#1078820)
  - add: libparted-canonicalize-dev-md-paths.patch
  - add: tests-add-helper-require_swap_.patch
  - add: tests-add-dev-md-check-to-t6100.patch</changelog>
  <changelog author="kukuk@suse.de" date="1527163200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sparschauer@suse.de" date="1533124800">- libparted: Include &lt;sys/sysmacros.h&gt; for major() macro with
  glibc &gt;= 2.27
  - add: libparted-sysmacros.patch</changelog>
  <changelog author="anicka@suse.com" date="1561982400">- port fixes for various bugs from upstream (bsc#1136245)
  - add: libparted-dasd-correct-the-offset-where-the-first-pa.patch
  4126d02, correct the offset where the first partition begins.
  This patch implements libparted-dasd-do-not-use-first-tracks.patch
  - remove: libparted-dasd-do-not-use-first-tracks.patch
  - add: parted-fix-crash-due-to-improper-partition-number-in.patch
  149f009, fix crash due to improper partition number input,
  changed call to strtol, use base 0 to fit our parted-type.patch
  - modify: parted-type.patch (removed ui.c part)
  - add: parted-check-the-name-of-partition-first-when-to-nam.patch
  d7a2ff1, check the name of partition first when to name a partition
  - add: libparted-dasd-add-test-cases-for-the-new-fdasd-func.patch
  c11f5c0, 571e078, add test cases for the new fdasd functions
  - add: libparted-dasd-add-an-exception-for-changing-DASD-LD.patch
  ee2c0c2, add an exception for changing DASD-LDL partition table
  - add: libpartd-dasd-improve-flag-processing-for-DASD-LDL.patch
  1545d6d, improve flag processing for DASD-LDL
  - add: clean-the-disk-information-when-commands-fail-in-int.patch
  5a61f15, clean the disk information when commands fail in
  interactive mode
  - add: parted-ui-remove-unneccesary-information-of-command.patch
  0b7946a, remove unneccesary information of command line
  - add: parted-fix-wrong-error-label-jump-in-mkpart.patch
  af150f6, fix wrong error label jump in mkpart
  - refresh: libparted-dasd-unify-vtoc-handling-for-cdl-ldl.patch
  4f25d54, unify vtoc handling for cdl/ldl
  - refresh: libparted-dasd-update-and-improve-fdasd-functions.patch
  db37c8c, update and improve fdasd functions
  - refresh: libparted-dasd-add-new-fdasd-functions.patch
  b9e1281, add new fdasd functions</changelog>
  <changelog author="anicka@suse.com" date="1562760000">- changed: parted-fix-crash-due-to-improper-partition-number-in.patch
  Changed the patch to behave in the same way like before last change
  for numbers with leading zeroes.</changelog>
  <changelog author="anicka@suse.com" date="1582804800">- make parted work with pmemXs devices (bsc#1164260)</changelog>
  <changelog author="anicka@suse.com" date="1585137600">- print maximum number of partitions for yast (bsc#1161783)
  - add: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1586347200">- fix null pointer dereference (bsc#1168756)
  - change: parted-print-max-partitions-for-yast.patch</changelog>
  <changelog author="anicka@suse.com" date="1591704000">- fix support of pmemXs devices (bnc#1164260)
  - remove: libparted-fix-NVDIMM-partition-naming.patch
  - remove: libparted-linux-pmem-path.patch</changelog>
  <changelog author="jeffm@suse.com" date="1616155200">- Direct file system manipulation support was removed in 2011.
  - Removed build dependencies on libreiserfs-devel and
    e2fsprogs-devel.</changelog>
  <changelog author="aschnell@suse.com" date="1638792000">- fix null pointer dereference (bsc#1193412)
  - add: parted-fix-check-diskp-in-do_name.patch
- update mkpart options in manpage (bsc#1182142)
  - add: parted-mkpart-manpage.patch</changelog>
</package>
<package pkgid="5490df4cc18bcd2dd6a8a486666dc34261a3b8e25d2e54259a0cfec17a8e2e4f" name="pciutils" arch="aarch64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="9f79d397feeab25ba1ed2d5199d83760ac930d375656d95374f3b8ef48311ce8" name="pciutils" arch="s390x">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="18c209170cbc8fabc55e9a50fd36aff3385e72d9820342f9127fdc2612505890" name="pciutils" arch="src">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="jengelh@medozas.de" date="1332072000">- Shared library policy: new subpackage libpci3</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356955200">- pciutils-endianh.patch Use the documented/optimized byteswapping
  routines from endian.h</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1375185600">- Update to 3.2.0
  * On newer Linux systems, we use libkmod to look up kernel
    modules (modules.pcimap no longer exists.) To facilitate this,
    libpci is able to look up module aliases in sysfs.
  * Various minor bug fixes.
  * Updated pci.ids to the today's snapshot of the database.
- Update to 3.1.10
  * Decoding of LTR/OBFF in PCIe capabilities.
  * Various minor bug fixes.
  * Updated pci.ids to the today's snapshot of the database.
- rebase patches
- require libkmod</changelog>
  <changelog author="tchvatal@suse.com" date="1399982400">- Remove COPYING from obs it is in tarball directly
- Version bump to 3.2.1:
  * CardBus bridge capabilities are displayed.
  * PCIe L1 PM substates are decoded.
  * Various bugs were fixed in decoding of PCIe capabilities.
  * The sysfs back-end does not spit out unnecessary warnings when
    empty slots report only a partial device address. This actually
    happens on IBM pSeries.
  * Updated pci.ids to the today's snapshot of the database.
- Cleanup with spec-cleaner</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Add obsoletes/provides to baselibs.conf.</changelog>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="da051809c0150d165b146e217514ab650977e991b00bf5eb914e35c987b9e4a4" name="pciutils" arch="x86_64">
  <version epoch="0" ver="3.5.6" rel="150300.13.6.1"/>
  <changelog author="tchvatal@suse.com" date="1416312000">- Version bump to 3.3.0:
  * Device names exported by BIOS are displayed on Linux.
  * On Linux systems, HWDB is used to look up device names
    when our ID database gives no match. (More precisely,
    HWDB is consulted after local pci.ids, but before using
    network to query online pci.ids.) Thanks to Tom Gundersen
    for the initial patch.
  * Added experimental back-end for OS X / Darwin. Thanks to
    Richard Yao for providing it.
  * Filters now support matching by device class. Original
    patch by Matthew Wilcox, wrappers for ABI compatibility
    by me.
  * Interrupt Pin and Interrupt Line registers are displayed
    for bridge devices, too.
  * Several portability bugs have been fixed.
  * Several typos have been fixed. Also, use of questionable
    constructs in man pages has been reduced.
  * PCIe link capabilities now include the ASPMOptComp bit.
  * The "CRS Software Visibility" bit is now decoded properly.
  * Updated pci.ids to the current snapshot of the database.
- Refresh patch:
  * pciutils-endianh.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 3.3.1
  * Removed hacks for backward compatibility with Linux libc5,
    which were breaking newer non-glibc Linux systems. Thanks
    to Felix Janda.
  * Display VirtIO vendor-specific capability. Patch by Gerd
    Hoffmann.
  * Fixed memory leak in name cache.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1447416000">- Update to 3.4.0
  * On Linux, we report NUMA nodes of devices.
  * The sysfs back-end does not die on read errors
    of optional attributes. Instead, a warning is produced.
  * Fixed several minor bugs.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="jengelh@inai.de" date="1448107200">- Summary update</changelog>
  <changelog author="tchvatal@suse.com" date="1452254400">- Version update to 3.4.1:
  * New capabilities decoded: Process Address Space, Page Request
    Interface, Enhanced Allocation. Thanks to David Daney and
    David Woodhouse.
  * DevCap SlotPowerLimit is now decoded for all components with
    upstream ports.</changelog>
  <changelog author="mpluskal@suse.com" date="1463745600">- Update to version 3.5.0:
  * New capabilities decoded: Downstream Port Containment,
    Precision Time Measurement. Thanks to Keith Busch and
    Jonathan Yong.
  * Domain numbers extended to 31 bits. This will be used by the
    Linux kernel on some machines in near future.
  * Enhanced allocation regions are now decoded on Linux.
  * The NetBSD back-end supports PCIe extended configuration space.
  * Updated pci.ids to the current snapshot of the database.</changelog>
  <changelog author="mpluskal@suse.com" date="1464177600">- Update to version 3.5.1:
  * Fixed symbol versioning of pci_init().</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 3.5.4:
  * Previous version broke compilation on systems, for which
    lib/types.h did not provide a 64-bit integer type. It is
    provided everywhere now.
- Changes for version 3.5.3:
  * When lspci looks for Linux kernel modules, it uses the default
  path to module directory provided by libkmod. Previously,
  it tried to construct the path explicitly, which need not
  work on all systems.
  * Improved formatting of memory and I/O ranges behind a bridge.
  * PCIe link capabilities now display GEN4 speed (16GT/s).
  * PCIe device capabilities now show bits related to atomic
    operations.
- Changes for version 3.5.2:
  * The L1 power management capability is now decoded more
  thoroughly. Thanks to Rajat Jain for the patch.
  * The table of configuration registers used by setpci
  had a bug in the definition of SUBSYSTEM_VENDOR_ID.</changelog>
  <changelog author="aavindraa@gmail.com" date="1510401600">- Update to version 3.5.5
  * Better decoding of AER capability.
  * "Slot Implemented" flag is decoded for PCI/PCI-X to PCIe bridges.
  * Minor fixes of decoding other capabilities.
  * As usual, updated pci.ids to the current snapshot of the
    database.
- cleanup with spec-cleaner
- switch from ftp to https
- track signature</changelog>
  <changelog author="aavindraa@gmail.com" date="1511092800">- Update to version 3.5.6
  * MN VPD keyword is decoded correctly.
  * As usual, updated pci.ids to the current snapshot of the
    database.
  * FreeBSD back-end: read-only access for non-root, support
    DragonFly BSD, support extended config space.</changelog>
  <changelog author="msuchanek@suse.com" date="1590062400">- Fix lspci outputs few of the VPD data fields are displayed as unknown (bsc#1170554, ltc#185587).
  Added:
  * pciutils-VPD-When-printing-item-IDs-escape-non-ASCII-characte.patch
  * pciutils-VPD-Cleanup.patch
  * pciutils-Add-decoding-of-vendor-specific-VPD-fields.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1603972800">- Add decode support for RCECs [jsc#SLE-13735]
- added patches
  https://github.com/pciutils/pciutils/commit/e12bd01eea67ca8cf539263124843ba281eb6ecc
  + pciutils-add-decode-support-for-RCECs.patch</changelog>
  <changelog author="vliaskovitis@suse.com" date="1643025600">- Add pciutils-Add-PCIe-5.0-data-rate-32-GT-s-support.patch
  Add pciutils-Add-PCIe-6.0-data-rate-64-GT-s-support.patch
  (bsc#1192862)</changelog>
  <changelog author="psimons@suse.com" date="1696420800">- Apply "lspci-Fixed-buffer-overflows-in-ls-tree.c.patch" to fix a
  buffer overflow error that would cause lspci to crash on systems
  with complex topologies. [bsc#1215265]
- Add "pciutils.keyring" so that the tarball's signature can be
  verified at build time.
- Use "%license" tag instead of "%doc" to install the package's
  license file.</changelog>
</package>
<package pkgid="6c7f17545f254069e41964e97b666cea5aad6d39756134ccda135de5443a3a1e" name="pcre2" arch="src">
  <version epoch="0" ver="10.39" rel="150400.4.9.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1544529600">- Build with --enable-jit-sealloc option, otherwise when
  selinux is enabled or systemd memory protections are on,
  programs will fail to work with execmem violations.</changelog>
  <changelog author="kukuk@suse.de" date="1547467200">- Mark all license files as %license</changelog>
  <changelog author="bwiedemann@suse.com" date="1548244800">- Do not run profiling in parallel for reproducible builds (boo#1040589)</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133274).</changelog>
  <changelog author="jsikes@suse.de" date="1556798400">- Update to 10.33-RC1 to fix issue with LTO (boo#1133274).
  * Callouts from pcre2_substitute() are now available.
  * The POSIX functions are now all called pcre2_regcomp() etc., with wrapper
    functions that use the standard POSIX names. However, in pcre2posix.h the POSIX
    names are defined as macros. This should help avoid linking with the wrong
    library in some environments, while still exporting the POSIX names for
    pre-existing programs that use them.
  * Some new options:
    (a) PCRE2_EXTRA_ESCAPED_CR_IS_LF makes \r behave as \n.
    (b) PCRE2_EXTRA_ALT_BSUX enables support for ECMAScript 6's \u{hh...}
    construct.
    (c) PCRE2_COPY_MATCHED_SUBJECT causes a copy of a matched subject to be
    made, instead of just remembering a pointer.
  * Some new Perl features:
    (a) Perl 5.28's experimental alphabetic names for atomic groups and
    lookaround assertions, for example, (*pla:...) and (*atomic:...).
    (b) The new Perl "script run" features (*script_run:...) and
    (*atomic_script_run:...) aka (*sr:...) and (*asr:...).
    (c) When PCRE2_UTF is set, allow non-ASCII letters and decimal digits in
    capture group names.
  * --disable-percent-zt disables the use of %zu and %td in formatting strings
    in pcre2test. They were already automatically disabled for VC and older C
    compilers.
  * Some changes related to callouts in pcre2grep:
    (a) Support for running an external program under VMS has been added, in
    addition to Windows and fork() support.
    (b) --disable-pcre2grep-callout-fork restricts the callout support in
    to the inbuilt echo facility.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1574424000">- pcre2 10.34:
  * implement the documented maximum number of capturing
    subpatterns of 65535
  * Improve the invalid utf32 support of the JIT compiler
  * Add support for matching in invalid UTF strings to the pcre2_match()
  * Give more error detail for invalid UTF-8 when detected in pcre2grep
  * support for invalid UTF-8 to pcre2grep.
  * Adjust the limit for "must have" code unit searching, in particular,
  * increase it substantially for non-anchored patterns.
  * Allow (*ACCEPT) to be quantified, because an ungreedy quantifier
    with a zero minimum is potentially useful.
  * Some changes to the way the minimum subject length is handled
  * Check for integer overflow when computing lookbehind lengths
  * Implement non-atomic positive lookaround assertions
  * Upgraded to Unicode 12.1.0
  * Make pcre2test -C show if libreadline or libedit is supported
  * Various bug fixes and improvements</changelog>
  <changelog author="schwab@suse.de" date="1574769600">- Enable JIT on aarch64</changelog>
  <changelog author="mcalabkova@suse.com" date="1585310400">- Resubmit the package (bsc#1167890, jsc#SLE-11608)</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1589371200">- Refresh spec-file via spec-cleaner.
  * Add %make_build and %license macros.
- Update to 10.35
  * https://www.pcre.org/changelog.txt
  * Use PCRE2_MATCH_EMPTY flag to detect empty matches in JIT.
  * A JIT bug is fixed which allowed to read the fields
    of the compiled pattern before its existence is checked.
  * Added PCRE2_SUBSTITUTE_LITERAL.
  * Avoid some VS compiler warnings.
  * Added PCRE2_SUBSTITUTE_MATCHED.
  * Added (?* and (?&lt;* as synonms for (*napla: and (*naplb:
    to match another regex engine.
  * Fix *THEN verbs in lookahead assertions in JIT.
  * Added PCRE2_SUBSTITUTE_REPLACEMENT_ONLY.
  * The JIT stack should be freed when the low-level stack
    allocation fails.
  * Changed setting of CMAKE_MODULE_PATH in CMakeLists.txt from SET
    to LIST(APPEND...) to allow a setting from the command line
    to be included.
  * Updated to Unicode 13.0.0.
  * CMake build now checks for secure_getenv() and strerror().
  * Restrict the configuration setting for the SELinux compatible
    execmem allocator (change 10.30/44) to Linux and NetBSD.</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1607169600">- pcre2 10.36:
  * add GNU grep's -m (aka --max-count) option to pcre2grep
  * unify the handling of substitution strings for both -O and
    callouts in pcre2grep, with the addition of $x{...} and
    $o{...} to allow for characters whose code points are greater
    than 255 in Unicode mode</changelog>
  <changelog author="jengelh@inai.de" date="1618401600">- Remove regcomp, regexec etc. from libpcre2-posix.
  (Add pcre2-symbol-clash.patch)</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1622116800">- pcre2 10.37:
  * removal of the actual POSIX names regcomp etc. from the POSIX
    wrapper library because these have caused issues for some
    applications, replacing pcre2-symbol-clash.patch
  * fix a hypothetical NULL dereference
  * fix two bugs related to over-large numbers so the behaviour is
    now the same as Perl
  * Fix propagation of \K back from the full pattern recursion
  * Restore single character repetition optimization in JIT</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1635076800">- pcre2 10.38:
  * Following Perl's lead, \K is now locked out in lookaround
    assertions by default, but an option is provided to re-enable
    the previous behaviour</changelog>
  <changelog author="pgajdos@suse.com" date="1636632000">- added patches
  fix revert https://github.com/PhilipHazel/pcre2/commit/080d7789eba00b570181dfe28809b01aa88c01f8
  + pcre2-readd-wrappers-POSIX.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1647259200">- version update to 10.39
  * Fix incorrect detection of alternatives in first character
    search in JIT
  * Update to Unicode 14.0.0
- 0001-Fixed-atomic-group-backtracking-bug.patch released for 15:Update
  due to bsc#1187937 is already upstreamed
  https://bugzilla.suse.com/show_bug.cgi?id=1187937#c7</changelog>
  <changelog author="pgajdos@suse.com" date="1651752000">- enable jit for s390x [bsc#1199196]</changelog>
  <changelog author="pgajdos@suse.com" date="1651752001">- do not enable jit-sealloc [bsc#1182864] [bsc#1199208]</changelog>
  <changelog author="jsikes@suse.com" date="1655380800">- Added pcre2-10.39-bsc1199232-unicode-property-matching.patch
  * bsc#1199232
  * CVE-2022-1586
  * Fixes unicode property matching issue</changelog>
  <changelog author="jsikes@suse.com" date="1658318400">- Added pcre2-bsc1199235-CVE-2022-1587.patch
  * CVE-2022-1587 / bsc#1199235
  * Fix out-of-bounds read due to bug in recursions
  * Sourced from:
  - https://github.com/PCRE2Project/pcre2/commit/03654e751e7f0700693526b67dfcadda6b42c9d0</changelog>
  <changelog author="pmonreal@suse.com" date="1689940800">- Security fix: [bsc#1213514, CVE-2022-41409]
  * Integer overflow vulnerability in pcre2test before 10.41
    allows attackers to cause a denial of service or other
    unspecified impacts via negative input.
  * Add pcre2-CVE-2022-41409.patch</changelog>
</package>
<package pkgid="ec335a0d871257897a1482fa616d2e4ac8bf36f00a26b40d42f34ad989503aa5" name="perl" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="ce2e1005c3900871d2971319a0f39b8a92f30ba867918d61055e281e7a795e8f" name="perl" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="66db8c25c3e38cfff28737c74942bbf1081642a87ff3e3d1f710383d960ecd1f" name="perl" arch="src">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="e5efffdc48f7b712ab9b970247b53a672d88d7825677fdee00c21f24ceeb7ada" name="perl" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="c98cec4be17fdb37d3421e8360d6ebe489e644f6a9983a9e7caf7f8ee0fdaee2" name="perl" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="aa3758af54b02ae7cf9403206f713d46f5573afcfb0a7c37c94e55c23f904b37" name="perl" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="2be4ddcc0886c07fafb1027e82c27b8ea5a58aced9b6d0a3a593c7e8fc33c025" name="perl" arch="src">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="8e081b0dd9971b4e8e32f3fd559eb11f0cb57ca6f861329c5f871e7673b0783d" name="perl" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="be2b1008a56d16aa53963ced7e7579b243877f9e10615d68668cf108652c57e5" name="perl-Bootloader" arch="aarch64">
  <version epoch="0" ver="0.944" rel="150400.3.6.1"/>
  <changelog author="jreidinger@suse.cz" date="1562155200">- merge gh#openSUSE/perl-bootloader#122
- Replace --suse-signed-grub by --suse-force-signed to follow
  update from boo#1136601
- 0.925</changelog>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
</package>
<package pkgid="41629e5c070f797a62473a82734e4089b806cd20bc0907b8cc46008e117e3216" name="perl-Bootloader" arch="s390x">
  <version epoch="0" ver="0.944" rel="150400.3.6.1"/>
  <changelog author="jreidinger@suse.cz" date="1562155200">- merge gh#openSUSE/perl-bootloader#122
- Replace --suse-signed-grub by --suse-force-signed to follow
  update from boo#1136601
- 0.925</changelog>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
</package>
<package pkgid="104253a1bd214535db6ea23c264336eebd3dcad0217eecf026c4801487666826" name="perl-Bootloader" arch="src">
  <version epoch="0" ver="0.944" rel="150400.3.6.1"/>
  <changelog author="jreidinger@suse.cz" date="1562155200">- merge gh#openSUSE/perl-bootloader#122
- Replace --suse-signed-grub by --suse-force-signed to follow
  update from boo#1136601
- 0.925</changelog>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
</package>
<package pkgid="4fa45f0d12a4220b73ad45bba1346b967df1d87629c8a223cf8b18a1800c018b" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.944" rel="150400.3.6.1"/>
  <changelog author="jreidinger@suse.cz" date="1562155200">- merge gh#openSUSE/perl-bootloader#122
- Replace --suse-signed-grub by --suse-force-signed to follow
  update from boo#1136601
- 0.925</changelog>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
</package>
<package pkgid="b99320be850809ac61b5145f758c27b216ba248e03ab6df15945c3cf6b19d8bc" name="perl-Bootloader" arch="aarch64">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="093cc4162472563605e40c66a0308608485e4b7293c6fc64e98142110819234f" name="perl-Bootloader" arch="s390x">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="ed73bca7fdbdad353bce73043d156bcc81df05129f0deb67d3998c939c7a24af" name="perl-Bootloader" arch="src">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="bbf74264fe14c7f8882a3dd6365d3cd54020ffb42acde5dec5b5ed243b30821f" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.945" rel="150400.3.9.1"/>
  <changelog author="wfeldt@opensuse.org" date="1571054400">- merge gh#openSUSE/perl-bootloader#123
- Accept sysconfig values without quotes
- 0.926</changelog>
  <changelog author="wfeldt@opensuse.org" date="1587729600">- merge gh#openSUSE/perl-bootloader#126
- always install EFI fallback boot for aarch64 (bsc#1167015)
- 0.927</changelog>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
</package>
<package pkgid="51645148ac7fcaa3fa4a7530075c13fc462429a31280cf9cc6d399b6310f6931" name="perl-Bootloader" arch="aarch64">
  <version epoch="0" ver="0.947" rel="150400.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
  <changelog author="wfeldt@opensuse.org" date="1705492800">- merge gh#openSUSE/perl-bootloader#161
- support old grub versions (&lt;= 2.02) that used /usr/lib
  (bsc#1218842)
- create EFI boot fallback directory if necessary
- 0.946</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710763200">- merge gh#openSUSE/perl-bootloader#166
- log grub2-install errors correctly (bsc#1221470)
- 0.947</changelog>
</package>
<package pkgid="4785d0fb34710f17261d0fb9606d8f08bb8bc8d48ca3161bb68d5b2ad18fc2c8" name="perl-Bootloader" arch="s390x">
  <version epoch="0" ver="0.947" rel="150400.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
  <changelog author="wfeldt@opensuse.org" date="1705492800">- merge gh#openSUSE/perl-bootloader#161
- support old grub versions (&lt;= 2.02) that used /usr/lib
  (bsc#1218842)
- create EFI boot fallback directory if necessary
- 0.946</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710763200">- merge gh#openSUSE/perl-bootloader#166
- log grub2-install errors correctly (bsc#1221470)
- 0.947</changelog>
</package>
<package pkgid="2e1b0c6dd7a1236782a1ccefa64cf29aa270230f410ee4e10400f4b7d15db2ee" name="perl-Bootloader" arch="src">
  <version epoch="0" ver="0.947" rel="150400.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
  <changelog author="wfeldt@opensuse.org" date="1705492800">- merge gh#openSUSE/perl-bootloader#161
- support old grub versions (&lt;= 2.02) that used /usr/lib
  (bsc#1218842)
- create EFI boot fallback directory if necessary
- 0.946</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710763200">- merge gh#openSUSE/perl-bootloader#166
- log grub2-install errors correctly (bsc#1221470)
- 0.947</changelog>
</package>
<package pkgid="15162fdc91b105f2233526f504b7ed04fbe3304058dd1e9b274bce94fe9d2674" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.947" rel="150400.3.12.1"/>
  <changelog author="wfeldt@opensuse.org" date="1591185600">- merge gh#openSUSE/perl-bootloader#127
- use correct target name on aarch64 (bsc#1172293)
- 0.928</changelog>
  <changelog author="wfeldt@opensuse.org" date="1594728000">- merge gh#openSUSE/perl-bootloader#128
- Do not warn about missing SECURE_BOOT sysconfig
- 0.929</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595505600">- merge gh#openSUSE/perl-bootloader#130
- Throw less warnings about fstab
- 0.930</changelog>
  <changelog author="wfeldt@opensuse.org" date="1595592000">- merge gh#openSUSE/perl-bootloader#129
- Check tpm.mod in the new grub2 directory (bsc#1174320)
- 0.931</changelog>
  <changelog author="wfeldt@opensuse.org" date="1603108800">- merge gh#openSUSE/perl-bootloader#131
- grub2 install: honor UPDATE_NVRAM in /etc/sysconfig/bootloader
  (bsc#1157550 jsc#SLE-11500).
- 0.932</changelog>
  <changelog author="wfeldt@opensuse.org" date="1613044800">- merge gh#openSUSE/perl-bootloader#133
- use shim on aarch64 (jsc#SLE-15823, jsc#SLE-15020)
- 0.933</changelog>
  <changelog author="wfeldt@opensuse.org" date="1618488000">- merge gh#openSUSE/perl-bootloader#134
- install with --removable if efivars are not writable
  (bsc#1182749, bsc#1174111, bsc#1184160)
- fix whitespace
- 0.934</changelog>
  <changelog author="wfeldt@opensuse.org" date="1627387200">- merge gh#openSUSE/perl-bootloader#135
- fix typo in update-bootloader
- 0.935</changelog>
  <changelog author="wfeldt@opensuse.org" date="1631793600">- merge gh#openSUSE/perl-bootloader#136
- report error if config file could not be updated (bsc#1188768)
- 0.936</changelog>
  <changelog author="wfeldt@opensuse.org" date="1642075200">- merge gh#openSUSE/perl-bootloader#137
- grub2 install: Support secure boot on powerpc (bsc#1192764
  jsc#SLE-18271).
- 0.937</changelog>
  <changelog author="wfeldt@opensuse.org" date="1649332800">- merge gh#openSUSE/perl-bootloader#138
- grub2/install: reset error code when passing through recover code
  (bsc#1198197)
- 0.938</changelog>
  <changelog author="wfeldt@opensuse.org" date="1651060800">- merge gh#openSUSE/perl-bootloader#139
- fix sysconfig parsing (bsc#1198828)
- 0.939</changelog>
  <changelog author="wfeldt@opensuse.org" date="1670241600">- merge gh#openSUSE/perl-bootloader#140
- add basic support for systemd-boot
- 0.940</changelog>
  <changelog author="wfeldt@opensuse.org" date="1673524800">- merge gh#openSUSE/perl-bootloader#141
- systemd-boot: easier initial setup
- 0.941</changelog>
  <changelog author="wfeldt@opensuse.org" date="1682337600">- merge gh#openSUSE/perl-bootloader#142
- use fw_platform_size to distinguish between 32 bit and 64 bit
  UEFI platforms (bsc#1208003)
- 0.942</changelog>
  <changelog author="wfeldt@opensuse.org" date="1685534400">- merge gh#openSUSE/perl-bootloader#147
- UEFI: update also default location, if it is controlled by SUSE
  (bsc#1210799, bsc#1201399)
- 0.943</changelog>
  <changelog author="wfeldt@opensuse.org" date="1688126400">- merge gh#openSUSE/perl-bootloader#152
- use signed grub EFI binary when updating grub in default EFI
  location (bsc#1210799)
- check whether grub2-install supports --suse-force-signed option
- 0.944</changelog>
  <changelog author="wfeldt@opensuse.org" date="1694088000">- merge gh#openSUSE/perl-bootloader#157
- bootloader_entry script can have an optional 'force-default'
  argument (bsc#1215064)
- skip warning about unsupported options when in compat mode
- 0.945</changelog>
  <changelog author="wfeldt@opensuse.org" date="1705492800">- merge gh#openSUSE/perl-bootloader#161
- support old grub versions (&lt;= 2.02) that used /usr/lib
  (bsc#1218842)
- create EFI boot fallback directory if necessary
- 0.946</changelog>
  <changelog author="wfeldt@opensuse.org" date="1710763200">- merge gh#openSUSE/perl-bootloader#166
- log grub2-install errors correctly (bsc#1221470)
- 0.947</changelog>
</package>
<package pkgid="9ec82c75a8b58b1bcbaacf1ec52078facbc2c968227a44a8aa62b53b5a5e1ae1" name="perl-base" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="3b2c3e247ab2adfc3bc065fad752fb25d666bec99b0d8ff9a4b5921b5fdc054a" name="perl-base" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="126353136a805c38abdd0e08219c1de92bafbfaf2c6aa4b8c10422124a0e6613" name="perl-base" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.14.1"/>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
</package>
<package pkgid="30537f28b0d35c2feceb35f97fddd2ad1861419e8237c6d764c6c1b447056bb7" name="perl-base" arch="aarch64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="77da2d70adda2c69f65ec969b34a498caa964790527f429ec4d102f75e5a8c56" name="perl-base" arch="s390x">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="1e9a86b3f6250c54162ef7f3f910650f498e8a73591150c9e70a904a98ae4b92" name="perl-base" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="150300.17.17.1"/>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
  <changelog author="mls@suse.de" date="1542801600">- fix heap-based buffer overflow in regex
  [bnc#1114686] [CVE-2018-18314]
  new patch: perl-extended-charclass-assert.diff
- fix heap-buffer-overflow read if regex contains \0 chars
  [bnc#1114681] [CVE-2018-18313]
  new patch: perl-regcomp-strchr-memchr.diff
- fix reg_node overrun
  [bnc#1114675] [CVE-2018-18312]
  new patch: perl-reg-node-overrun.diff
- fix integer overflow with oversize environment
  [bnc#1114674] [CVE-2018-18311]
  new patch: perl-setenv-integer-wrap.diff</changelog>
  <changelog author="mls@suse.de" date="1580904000">- Backport perl-fix2020.patch to make timelocal calls work in
  the year 2020 [bnc#1102840] [bnc#1160039]
  new patch: perl-fix2020.patch</changelog>
  <changelog author="mls@suse.de" date="1591704000">- Fix various security issues in the study_chunk function
  [bnc#1171863] [CVE-2020-10543]
  [bnc#1171864] [CVE-2020-10878]
  [bnc#1171866] [CVE-2020-12723]
  new patch: perl-study.diff
- Comment out bad warning in features.ph file [bnc#1172348]</changelog>
  <changelog author="mls@suse.de" date="1604059200">- Split DB_File module into a seperate perl-core-DB_File package
  [jsc#SLE-12212]
  * add Recommends: perl-core-DB_File to the perl package
- Fix build with newer glibc versions
  new patch: perl-saltbits.diff</changelog>
  <changelog author="ali.abdallah@suse.com" date="1648728000">- Stabilize Socket::VERSION comparisons [bnc#1193489]
  new patch: perl-Stabilize-Socket-VERSION-comparisons.patch</changelog>
  <changelog author="mls@suse.de" date="1662120000">- fix File::Path rmtree/remove_tree race condition
  [bnc#1047178] [CVE-2017-6512]
  new patch: perl-file_path_rmtree_fchmod.diff</changelog>
  <changelog author="mls@suse.de" date="1688558400">- enable TLS cert verification in CPAN [bnc#1210999] [CVE-2023-31484]
  new patch: perl-cpan_verify_cert.diff</changelog>
  <changelog author="mls@suse.de" date="1715169600">- fix space calculation issues in pp_pack.c [bnc#1082216]
  [CVE-2018-6913]
  * new patch: perl-pack-overflow.diff
- fix heap buffer overflow in regexec.c [bnc#1082233]
  [CVE-2018-6798]
  new patch: perl-regexec-heap-overflow.diff
- make Net::FTP work with TLS 1.3 [bnc#1213638]
  new patch: perl-net-ftp-tls13.diff</changelog>
</package>
<package pkgid="095c33c8babd91c3b071e49d8ae319fa6f8de6ecd968be9ed38315c4e04a1422" name="podman" arch="aarch64">
  <version epoch="0" ver="4.4.4" rel="150400.4.19.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to fix starting containers on btrfs with SELinux
  (gh#opencontainers/selinux#172):
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
- Add patch to fix starting containers as user service with systemd 250
  (boo#1197672, gh#containers/podman#13731):
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch</changelog>
  <changelog author="fvogt@suse.com" date="1649332801">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
</package>
<package pkgid="d23730bb2b62e2f6be47aa74d9e64e43a7d49dd115ec7aab1b6127a543abbaf1" name="podman" arch="s390x">
  <version epoch="0" ver="4.4.4" rel="150400.4.19.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to fix starting containers on btrfs with SELinux
  (gh#opencontainers/selinux#172):
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
- Add patch to fix starting containers as user service with systemd 250
  (boo#1197672, gh#containers/podman#13731):
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch</changelog>
  <changelog author="fvogt@suse.com" date="1649332801">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
</package>
<package pkgid="c6317ee3ed88b312808ba49d82041b7e979eecfbd590687724ef68e7f8620ee2" name="podman" arch="src">
  <version epoch="0" ver="4.4.4" rel="150400.4.19.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to fix starting containers on btrfs with SELinux
  (gh#opencontainers/selinux#172):
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
- Add patch to fix starting containers as user service with systemd 250
  (boo#1197672, gh#containers/podman#13731):
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch</changelog>
  <changelog author="fvogt@suse.com" date="1649332801">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
</package>
<package pkgid="50a7ff9b63017488da4f63b68de51e4f4d27533c09073dc86e7e43683d1f3683" name="podman" arch="x86_64">
  <version epoch="0" ver="4.4.4" rel="150400.4.19.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to fix starting containers on btrfs with SELinux
  (gh#opencontainers/selinux#172):
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
- Add patch to fix starting containers as user service with systemd 250
  (boo#1197672, gh#containers/podman#13731):
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch</changelog>
  <changelog author="fvogt@suse.com" date="1649332801">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
</package>
<package pkgid="f921429b4ef3740d623009d1b380767da08d83d38049d4d6e0a40822bd829d9b" name="podman" arch="aarch64">
  <version epoch="0" ver="4.4.4" rel="150400.4.22.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
  <changelog author="dcermak@suse.com" date="1710849600">- Add patch for CVE-2024-1753/bsc#1221677:
  0001-buildah-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="c2715c2f1183a049a9a0106326c4d666c80d5d9c4b5aeddc3b44a91b680651e7" name="podman" arch="s390x">
  <version epoch="0" ver="4.4.4" rel="150400.4.22.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
  <changelog author="dcermak@suse.com" date="1710849600">- Add patch for CVE-2024-1753/bsc#1221677:
  0001-buildah-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="0aba91b884d052bde6e9927d0fe69d9a5f9ffa45caddc6cf1e2c473e45b1ccd1" name="podman" arch="src">
  <version epoch="0" ver="4.4.4" rel="150400.4.22.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
  <changelog author="dcermak@suse.com" date="1710849600">- Add patch for CVE-2024-1753/bsc#1221677:
  0001-buildah-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="c75afee856f7be2d4413289fa95d433d17ddca6600e668bfa4b18abe1180c2f0" name="podman" arch="x86_64">
  <version epoch="0" ver="4.4.4" rel="150400.4.22.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
  <changelog author="dcermak@suse.com" date="1710849600">- Add patch for CVE-2024-1753/bsc#1221677:
  0001-buildah-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="8108d20509b44e1334792d1f24074b4ede184d0084304e621324c10c9b81e689" name="podman-cni-config" arch="noarch">
  <version epoch="0" ver="4.4.4" rel="150400.4.19.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to fix starting containers on btrfs with SELinux
  (gh#opencontainers/selinux#172):
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
- Add patch to fix starting containers as user service with systemd 250
  (boo#1197672, gh#containers/podman#13731):
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch</changelog>
  <changelog author="fvogt@suse.com" date="1649332801">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
</package>
<package pkgid="8665c708b9e42c5d77d8aeec529860267f5b0e8089512b5016eaddd39c8838be" name="podman-cni-config" arch="noarch">
  <version epoch="0" ver="4.4.4" rel="150400.4.22.1"/>
  <changelog author="fvogt@suse.com" date="1649332800">- Add patch to make buildah happy after selinux change:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch</changelog>
  <changelog author="rbrown@suse.com" date="1649764800">- Require catatonit &gt;= 0.1.7 for pause functionality needed by pods</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport upstream commit be5abf03ababc ("fix: Container.cGroupPath()
  skip empty line to avoid false error logging") for fixing "Error parsing
  cgroup: expected 3 fields but got 1" (see bsc#1199790, as it applies
  to Factory/Tumbleweed too)
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="rbrown@suse.com" date="1655899200">- Update to version 4.1.1:
  * The output of the podman load command now mirrors that of docker load.
  * Podman now supports Docker Compose v2.2 and higher. Please note that it may be necessary to disable the use of Buildkit by setting the environment variable DOCKER_BUILDKIT=0.
  * A new container command has been added, podman container clone. This command makes a copy of an existing container, with the ability to change some settings (e.g. resource limits) while doing so.
  * Podman now supports sending JSON events related to machines to a Unix socket named machine_events.*\.sock in XDG_RUNTIME_DIR/podman or to a socket whose path is set in the PODMAN_MACHINE_EVENTS_SOCK environment variable.
  * Two new volume commands have been added, podman volume mount and podman volume unmount. These allow for Podman-managed named volumes to be mounted and accessed from outside containers.
  * The podman container checkpoint and podman container restore options now support checkpointing to and restoring from OCI images. This allows checkpoints to be distributed via standard image registries.
  * The podman play kube command now supports environment variables that are specified using the fieldRef and resourceFieldRef sources.
  * The podman play kube command will now set default resource limits when the provided YAML does not include them.
  * The podman play kube command now supports a new option, --annotation, to add annotations to created containers.
  * The podman play kube --build command now supports a new option, --context-dir, which allows the user to specify the context directory to use when building the Containerfile.
  * The podman container commit command now supports a new option, --squash, which squashes the generated image into a single layer.
  * The podman pod logs command now supports two new options, --names, which identifies which container generated a log message by name, instead of ID and --color, which colors messages based on what container generated them.
  * The podman rmi command now supports a new option, --ignore, which will ignore errors caused by missing images.
  * The podman network create command now features a new option, --ipam-driver, to specify details about how IP addresses are assigned to containers in the network.
  * The podman machine list command now features a new option, --quiet, to print only the names of configured VMs and no other information.
  * The --ipc option to the podman create, podman run, and podman pod create commands now supports three new modes: none, private, and shareable. The default IPC mode is now shareable, indicating the the IPC namespace can be shared with other containers.
  * The --mount option to the podman create and podman run commands can now set options for created named volumes via the volume-opt parameter.
  * The --mount option to the podman create and podman run commands now allows parameters to be passed in CSV format.
  * The --userns option to the podman create and podman run commands now supports a new option, nomap, that (only for rootless containers) does not map the UID of the user that started the container into the container, increasing security.
  * The podman import command now supports three new options, --arch, --os, and --variant, to specify what system the imported image was built for.
  * The podman inspect command now includes information on the network configuration of containers that joined a pre-configured network namespace with the --net ns: option to podman run, podman create, and podman pod create.
  * The podman run and podman create commands now support a new option, --chrootdirs, which specifies additional locations where container-specific files managed by Podman (e.g. /etc/hosts, `/etc/resolv.conf, etc) will be mounted inside the container (#12961).
  * The podman run and podman create commands now support a new option, --passwd-entry, allowing entries to be added to the container's /etc/passwd file.
  * The podman images --format command now accepts two new format directives: {{.CreatedAt}} and {{.CreatedSince}}.
  * The podman volume create command's -o option now accepts a new argument, o=noquota, to disable XFS quotas entirely and avoid potential issues when Podman is run on an XFS filesystem with existing quotas defined.
  * The podman info command now includes additional information on the machine Podman is running on, including disk utilization on the drive Podman is storing containers and images on, and CPU utilization.
  * Fix CVE-2022-27191 / bsc#1197284
- Drop obsolete patches:
  * 0001-Adjust-buildah-to-opencontainers-selinux-v1.10.1.patch
  * 0001-Relabel-relabel-links-instead-of-their-targets.patch
  * 0002-specgen-do-not-set-OOMScoreAdj-by-default.patch
  * 0004-fix-Container.cGroupPath-skip-empty-line-to-avoid-fa.patch</changelog>
  <changelog author="predivan@mts.rs" date="1656676800">- Fix build on Leap
    Use libexec macro to set correct, per-distribution specific, directory.</changelog>
  <changelog author="michael@stroeder.com" date="1660219200">- Update to version 4.2.0:
  * Features
  - Podman now supports the Gitlab Runner (using the Docker executor), allowing its use in Gitlab CI/CD pipelines.
  - A new command has been added, podman pod clone, to create a copy of an existing pod. It supports several options, including --start to start the new pod, --destroy to remove the original pod, and --name to change the name of the new pod (#12843).
  - A new command has been added, podman volume reload, to sync changes in state between Podman's database and any configured volume plugins (#14207).
  - A new command has been added, podman machine info, which displays information about the host and the versions of various machine components.
  - Pods created by podman play kube can now be managed by systemd unit files. This can be done via a new systemd service, podman-kube@.service - e.g. systemctl --user start podman-play-kube@$(systemd-escape my.yaml).service will run the Kubernetes pod or deployment contained in my.yaml under systemd.
  - The podman play kube command now honors the RunAsUser, RunAsGroup, and SupplementalGroups setting from the Kubernetes pod's security context.
  - The podman play kube command now supports volumes with the BlockDevice and CharDevice types (#13951).
  - The podman play kube command now features a new flag, --userns, to set the user namespace of created pods. Two values are allowed at present: host and auto (#7504).
  - The podman play kube command now supports setting the type of created init containers via the io.podman.annotations.init.container.type annotation.
  - Pods now have include an exit policy (configurable via the --exit-policy option to podman pod create), which determines what will happen to the pod's infra container when the entire pod stops. The default, continue, acts as Podman currently does, while a new option, stop, stops the infra container after the last container in the pod stops, and is used by default for pods from podman play kube (#13464).
  - The podman pod create command now allows the pod's name to be specified as an argument, instead of using the --name option - for example, podman pod create mypod instead of the prior podman pod create --name mypod. Please note that the --name option is not deprecated and will continue to work.
  - The podman pod create command's --share option now supports adding namespaces to the set by prefacing them with + (as opposed to specifying all namespaces that should be shared) (#13422).
  - The podman pod create command has a new option, --shm-size, to specify the size of the /dev/shm mount that will be shared if the pod shares its UTS namespace (#14609).
  - The podman pod create command has a new option, --uts, to configure the UTS namespace that will be shared by containers in the pod.
  - The podman pod create command now supports setting pod-level resource limits via the --cpus, --cpuset-cpus, and --memory options. These will set a limit for all containers in the pod, while individual containers within the pod are allowed to set further limits. Look forward to more options for resource limits in our next release!
  - The podman create and podman run commands now include the -c short option for the --cpu-shares option.
  - The podman create and podman run commands can now create containers from a manifest list (and not an image) as long as the --platform option is specified (#14773).
  - The podman build command now supports a new option, --cpp-flag, to specify options for the C preprocessor when using Containerfile.in files that require preprocessing.
  - The podman build command now supports a new option, --build-context, allowing the user to specify an additional build context.
  - The podman machine inspect command now prints the location of the VM's Podman API socket on the host (#14231).
  - The podman machine init command on Windows now fetches an image with packages pre-installed (#14698).
  - Unused, cached Podman machine VM images are now cleaned up automatically. Note that because Podman now caches in a different directory, this will not clean up old images pulled before this change (#14697).
  - The default for the --image-volume option to podman run and podman create can now have its default set through the image_volume_mode setting in containers.conf (#14230).
  - Overlay volumes now support two new options, workdir and upperdir, to allow multiple overlay volumes from different containers to reuse the same workdir or upperdir (#14427).
  - The podman volume create command now supports two new options, copy and nocopy, to control whether contents from the overmounted folder in a container will be copied into the newly-created named volume (copy-up).
  - Volumes created using a volume plugin can now specify a timeout for all operations that contact the volume plugin (replacing the standard 5 second timeout) via the --opt o=timeout= option to podman volume create (BZ 2080458).
  - The podman volume ls command's --filter name= option now supports regular expression matching for volume names (#14583).
  - When used with a podman machine VM, volumes now support specification of the 9p security model using the security_model option to podman create -v and podman run -v.
  - The remote Podman client's podman push command now supports the --remove-signatures option (#14558).
  - The remote Podman client now supports the podman image scp command.
  - The podman image scp command now supports tagging the transferred image with a new name.
  - The podman network ls command supports a new filter, --filter dangling=, to list networks not presently used by any containers (#14595).
  - The --condition option to podman wait can now be specified multiple times to wait on any one of multiple conditions.
  - The podman events command now includes the -f short option for the --filter option.
  - The podman pull command now includes the -a short option for the --all-tags option.
  - The podman stop command now includes a new flag, --filter, to filter which containers will be stopped (e.g. podman stop --all --filter label=COM.MY.APP).
  - The Podman global option --url now has two aliases: -H and --host.
  - The podman network create command now supports a new option with the default bridge driver, --opt isolate=, which isolates the network by blocking any traffic from it to any other network with the isolate option enabled. This option is enabled by default for networks created using the Docker-compatible API.
  - Added the ability to create sigstore signatures in podman push and podman manifest push.
  - Added an option to read image signing passphrase from a file.
  * Changes
  - Paused containers can now be killed with the podman kill command.
  - The podman system prune command now removes unused networks.
  - The --userns=keep-id and --userns=nomap options to the podman run and podman create commands are no longer allowed (instead of simply being ignored) with root Podman.
  - If the /run directory for a container is part of a volume, Podman will not create the /run/.containerenv file (#14577).
  - The podman machine stop command on macOS now waits for the machine to be completely stopped to exit (#14148).
  - All podman machine commands now only support being run as rootless, given that VMs only functioned when run rootless.
  - The podman unpause --all command will now only attempt to unpause containers that are paused, not all containers.
  - Init containers created with podman play kube now default to the once type (#14877).
  - Pods created with no shared namespaces will no longer create an infra container unless one is explicitly requested (#15048).
  - The podman create, podman run, and podman cp commands can now autocomplete paths in the image or container via the shell completion.
  - The libpod/common package has been removed as it's not used anywhere.
  - The --userns option to podman create and podman run is no longer accepted when an explicit UID or GID mapping is specified (#15233).
  * Bugfixes
  - Fixed a bug where bind-mounting /dev into a container which used the --init flag would cause the container to fail to start (#14251).
  - Fixed a bug where the podman image mount command would not pretty-print its output when multiple images were mounted.
  - Fixed a bug where the podman volume import command would print an unrelated error when attempting to import into a nonexistent volume (#14411).
  - Fixed a bug where the podman system reset command could race against other Podman commands (#9075).
  - Fixed a bug where privileged containers were not able to restart if the layout of host devices changed (#13899).
  - Fixed a bug where the podman cp command would overwrite directories with non-directories and vice versa. A new --overwrite flag to podman cp allows for retaining the old behavior if needed (#14420).
  - Fixed a bug where the podman machine ssh command would not preserve the exit code from the command run via ssh (#14401).
  - Fixed a bug where VMs created by podman machine would fail to start when created with more than 3072MB of RAM on Macs with M1 CPUs (#14303).
  - Fixed a bug where the podman machine init command would fail when run from C:\Windows\System32 on Windows systems (#14416).
  - Fixed a bug where the podman machine init --now did not respect proxy environment variables (#14640).
  - Fixed a bug where the podman machine init command would fail if there is no $HOME/.ssh dir (#14572).
  - Fixed a bug where the podman machine init command would add a connection even if creating the VM failed (#15154).
  - Fixed a bug where interrupting the podman machine start command could render the VM unable to start.
  - Fixed a bug where the podman machine list --format command would still print a heading.
  - Fixed a bug where the podman machine list command did not properly set the Starting field (#14738).
  - Fixed a bug where the podman machine start command could fail to start QEMU VMs when the machine name started with a number.
  - Fixed a bug where Podman Machine VMs with proxy variables could not be started more than once (#14636 and #14837).
  - Fixed a bug where containers created using the Podman API would, when the Podman API service was managed by systemd, be killed when the API service was stopped (BZ 2052697).
  - Fixed a bug where the podman -h command did not show help output.
  - Fixed a bug where the podman wait command (and the associated REST API endpoint) could return before a container had fully exited, breaking some tools like the Gitlab Runner.
  - Fixed a bug where healthchecks generated exec events, instead of health_status events (#13493).
  - Fixed a bug where the podman pod ps command could return an error when run at the same time as podman pod rm (#14736).
  - Fixed a bug where the podman systemd df command incorrectly calculated reclaimable storage for volumes (#13516).
  - Fixed a bug where an exported container checkpoint using a non-default OCI runtime could not be restored.
  - Fixed a bug where Podman, when used with a recent runc version, could not remove paused containers.
  - Fixed a bug where the remote Podman client's podman manifest rm command would remove images, not manifests (#14763).
  - Fixed a bug where Podman did not correctly parse wildcards for device major number in the podman run and podman create commands' --device-cgroup-rule option.
  - Fixed a bug where the podman play kube command on 32 bit systems where the total memory was calculated incorrectly (#14819).
  - Fixed a bug where the podman generate kube command could set ports and hostname incorrectly in generated YAML (#13030).
  - Fixed a bug where the podman system df --format "{{ json . }}" command would not output the Size and Reclaimable fields (#14769).
  - Fixed a bug where the remote Podman client's podman pull command would display duplicate progress output.
  - Fixed a bug where the podman system service command could leak memory when a client unexpectedly closed a connection when reading events or logs (#14879).
  - Fixed a bug where Podman containers could fail to run if the image did not contain an /etc/passwd file (#14966).
  - Fixed a bug where the remote Podman client's podman push command did not display progress information (#14971).
  - Fixed a bug where a lock ordering issue could cause podman pod rm to deadlock if it was run at the same time as a command that attempted to lock multiple containers at once (#14929).
  - Fixed a bug where the podman rm --force command would exit with a non-0 code if the container in question did not exist (#14612).
  - Fixed a bug where the podman container restore command would fail when attempting to restore a checkpoint for a container with the same name as an image (#15055).
  - Fixed a bug where the podman manifest push --rm command could remove image, instead of manifest lists (#15033).
  - Fixed a bug where the podman run --rm command could fail to remove the container if it failed to start (#15049).
  - Fixed a bug where the podman generate systemd --new command would create incorrect unit files when the container was created with the --sdnotify parameter (#15052).
  - Fixed a bug where the podman generate systemd --new command would fail when -h &lt;hostname&gt; was used to create the container (#15124).
  * API
  - The Docker-compatible API now supports API version v1.41 (#14204).
  - Fixed a bug where containers created via the Libpod API had an incorrect umask set (#15036).
  - Fixed a bug where the remote parameter to the Libpod API's Build endpoint for Images was nonfunctional (#13831).
  - Fixed a bug where the Libpod List endpoint for Containers did not return the application/json content type header when there were no containers present (#14647).
  - Fixed a bug where the Compat Stats endpoint for Containers could return incorrect memory limits (#14676).
  - Fixed a bug where the Compat List and Inspect endpoints for Containers could return incorrect strings for container status.
  - Fixed a bug where the Compat Create endpoint for Containers did not properly handle disabling healthchecks (#14493).
  - Fixed a bug where the Compat Create endpoint for Networks did not support the mtu, name, mode, and parent options (#14482).
  - Fixed a bug where the Compat Create endpoint for Networks did not allow the creation of networks name bridge (#14983).
  - Fixed a bug where the Compat Inspect endpoint for Networks did not properly set netmasks in the SecondaryIPAddresses and SecondaryIPv6Addresses fields (#14674).
  - The Libpod Stats endpoint for Pods now supports streaming output via two new parameters, stream and delay (#14674).
  * Misc
  - Podman will now check for nameservers in /run/NetworkManager/no-stub-resolv.conf if the /etc/resolv.conf file only contains a localhost server.
  - The podman build command now supports caching with builds that specify --squash-all by allowing the --layers flag to be used at the same time.
  - Podman Machine support for QEMU installations at non-default paths has been improved.
  - The podman machine ssh command no longer prints spurious warnings every time it is run.
  - When accessing the WSL prompt on Windows, the rootless user will be preferred.
  - The podman info command now includes a field for information on supported authentication plugins for improved Docker compatibility. Authentication plugins are not presently supported by Podman, so this field is always empty.
  - The podman system prune command now no longer prints the Deleted Images header if no images were pruned.
  - The podman system service command now automatically creates and moves to a sub-cgroup when running in the root cgroup (#14573).
  - Updated Buildah to v1.27.0 (fixes CVE-2022-21698 / bsc#1196338)
  - Updated the containers/image library to v5.22.0
  - Updated the containers/storage library to v1.42.0 (fixes bsc#1196751)
  - Updated the containers/common library to v0.49.1
  - Podman will automatically create a sub-cgroup and move itself into it when it detects that it is running inside a container (#14884).
  - Fixed an incorrect release note about regexp.
  - A new MacOS installer (via pkginstaller) is now supported.</changelog>
  <changelog author="asarai@suse.com" date="1663761600">- Update to version 4.2.1:
  * Bump to v4.2.1
  * Add release notes for v4.2.1
  * remove SkipIfNotFedora() from events test
  * fix podman events with custom format
  * Drop stale config value resulting in asymmetric config
  * Fix list of default capabilities
  * Add container GID to additional groups (CVE-2022-2989 / bsc#1202809, removes patch 0001-Add-container-GID-to-additional-groups.patch)
  * libpod: Ensure that generated container names are random
  * Fix bind-mount-option annotation in gen/play kube
  * Improved Windows compatibility for machine command
  * updated apiv2 tests to reflect hash compat fix
  * api: return imageID instead of imageName, for "Image" when Podman API is queried
  * Inhibit SIGTERM during Conmon startup
  * Fix example sections to follow the same format
  * Fix template name inconsistency
  * service: make move to sub-cgroup non fatal
  * Remove duplicate annotations in generated service yaml
  * Compat API image remove events now have 'delete' status
  * [CI:DOCS] Automatically set podman version in pkginstaller
  * Allow colons in windows file paths
  * Fixes isRootfull check using qemu machine on Windows
  * vendor containers/psgo@v1.7.3
  * Allow podman to run in an environment with keys containing spaces
  * Document restrictions on transport in FROM
  * Improved Windows compatibility
  * pass environment variables to container clone
  * podman save: update --compress validation
  * sort hc.Binds returned from compat api
  * Cirrus: Update podman-machine comment
  * podman images and friends can take one image as argument
  * [CI:DOCS] Add .DS_Store to gitignore
  * podman-kube@.service.in: Remove Restart=never option with typo
  * Fix #15499 already connected network
  * [CI:DOCS] Cirrus: Update meta-task for EC2 image
  * fix CI: remove hardcodeded alpine version
  * fix CI: remove hardcodeded alpine version
  * Preserve all unknown PolicyRequirement fields on (podman image trust set)
  * Reorganize the types in policy.go a bit
  * Add support for showing keyPaths in (podman image trust show)
  * Support (image trust show) for sigstoreSigned entries
  * BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
  * Reorganize descriptionsOfPolicyRequirements a bit
  * Use the full descriptionsOfPolicyRequirements for the default scope
  * Rename haveMatchRegistry to registriesDConfigurationForScope
  * Rename tempTrustShowOutput to entry
  * Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
  * Recognize the new lookaside names for simple signing sigstore
  * Add a unit test for trust.PolicyDescription
  * Make the output of (podman image trust show) deterministic
  * Make most of pkg/trust package-private
  * Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
  * Add support for sigstoreSigned in (podman image trust set)
  * Create new policy entries together with validating input
  * Improve validation of data in ImageEngine.SetTrust
  * Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
  * Add a variable for scope
  * Make trust.CreateTempFile private
  * Reorganize pkg/trust
  * Remove an unused trust.ShowOutput type
  * Remove commented out code
  * libpod: UpdateContainerStatus: do not wait for container
  * Skip / update some tests under runc
  * Bump to v4.2.1-dev
  * test: update apply-podman-deltas for new tests
  * build: implement --cache-to,--cache-from and --cache-ttl
  * vendor: bump buildah to v1.27.0</changelog>
  <changelog author="dcermak@suse.com" date="1669118400">- switch to building with go 1.17
- use %%make_* macros
- drop /usr/share/user-tmpfiles.d/podman-docker.conf on SLE &amp; Leap
- remove rpmlintrc (contained only obsolete filters)
- remove obsolete with_libostree (we don't build on anything older than SLE 15)
- add patch: 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  (hotfix for https://github.com/containers/podman/issues/16765)
- Update to version 4.3.1:
  4.3.1:
  [#]## Bugfixes
- Fixed a deadlock between the `podman ps` and `podman container inspect` commands
  [#]## Misc
- Updated the containers/image library to v5.23.1
  4.3.0:
  [#]## Features
- A new command, `podman generate spec`, has been added, which creates a JSON struct based on a given container that can be used with the Podman REST API to create containers.
- A new command, `podman update`, has been added,which makes changes to the resource limits of existing containers. Please note that these changes do not persist if the container is restarted ([#15067](https://github.com/containers/podman/issues/15067)).
- A new command, `podman kube down`, has been added, which removes pods and containers created by the given Kubernetes YAML (functionality is identical to `podman kube play --down`, but it now has its own command).
- The `podman kube play` command now supports Kubernetes secrets using Podman's secrets backend.
- Systemd-managed pods created by the `podman kube play` command now integrate with sd-notify, using the `io.containers.sdnotify` annotation (or `io.containers.sdnotify/$name` for specific containers).
- Systemd-managed pods created by `podman kube play` can now be auto-updated, using the `io.containers.auto-update` annotation (or `io.containers.auto-update/$name` for specific containers).
- The `podman kube play` command can now read YAML from URLs, e.g. `podman kube play https://example.com/demo.yml` ([#14955](https://github.com/containers/podman/issues/14955)).
- The `podman kube play` command now supports the `emptyDir` volume type ([#13309](https://github.com/containers/podman/issues/13309)).
- The `podman kube play` command now supports the `HostUsers` field in the pod spec.
- The `podman play kube` command now supports `binaryData` in ConfigMaps.
- The `podman pod create` command can now set additional resource limits for pods using the new `--memory-swap`, `--cpuset-mems`, `--device-read-bps`, `--device-write-bps`, `--blkio-weight`, `--blkio-weight-device`, and `--cpu-shares` options.
- The `podman machine init` command now supports a new option, `--username`, to set the username that will be used to connect to the VM as a non-root user ([#15402](https://github.com/containers/podman/issues/15402)).
- The `podman volume create` command's `-o timeout=` option can now set a timeout of 0, indicating volume plugin operations will never time out.
- Added support for a new volume driver, `image`, which allows volumes to be created that are backed by images.
- The `podman run` and `podman create` commands support a new option, `--env-merge`, allowing environment variables to be specified relative to other environment variables in the image (e.g. `podman run --env-merge "PATH=$PATH:/my/app" ...`) ([#15288](https://github.com/containers/podman/issues/15288)).
- The `podman run` and `podman create` commands support a new option, `--on-failure`, to allow action to be taken when a container fails health checks, with the following supported actions: `none` (take no action, the default), `kill` (kill the container), `restart` (restart the container), and `stop` (stop the container).
- The `--keep-id` option to `podman create` and `podman run` now supports new options, `uid` and `gid`, to set the UID and GID of the user in the container that will be mapped to the user running Podman (e.g. `--userns=keep-id:uid=11` will made the user running Podman to UID 11 in the container) ([#15294](https://github.com/containers/podman/issues/15294)).
- The `podman generate systemd` command now supports a new option, `--env`/`-e`, to set environment variables in the generated unit file ([#15523](https://github.com/containers/podman/issues/15523)).
- The `podman pause` and `podman unpause` commands now support the `--latest`, `--cidfile`, and `--filter` options.
- The `podman restart` command now supports the `--cidfile` and `--filter` options.
- The `podman rm` command now supports the `--filter` option to select which containers will be removed.
- The `podman rmi` command now supports a new option, `--no-prune`, to prevent the removal of dangling parents of removed images.
- The `--dns-opt` option to `podman create`, `podman run`, and `podman pod create` has received a new alias, `--dns-option`, to improve Docker compatibility.
- The `podman` command now features a new global flag, `--debug`/`-D`, which enables debug-level logging (identical to `--log-level=debug`), improving Docker compatibility.
- The `podman` command now features a new global flag, `--config`. This flag is ignored, and is only included for Docker compatibility ([#14767](https://github.com/containers/podman/issues/14767)).
- The `podman manifest create` command now accepts a new option, `--amend`/`-a`.
- The `podman manifest create`, `podman manifest add` and `podman manifest push` commands now accept a new option, `--insecure` (identical to `--tls-verify=false`), improving Docker compatibility.
- The `podman secret create` command's `--driver` and `--format` options now have new aliases, `-d` for `--driver` and `-f` for `--format`.
- The `podman secret create` command now supports a new option, `--label`/`-l`, to add labels to created secrets.
- The `podman secret ls` command now accepts the `--quiet`/`-q` option.
- The `podman secret inspect` command now accepts a new option, `--pretty`, to print output in human-readable format.
- The `podman stats` command now accepts the `--no-trunc` option.
- The `podman save` command now accepts the `--signature-policy` option ([#15869](https://github.com/containers/podman/issues/15869)).
- The `podman pod inspect` command now allows multiple arguments to be passed. If so, it will return a JSON array of the inspected pods ([#15674](https://github.com/containers/podman/issues/15674)).
- A series of new hidden commands have been added under `podman context` as aliases to existing `podman system connection` commands, to improve Docker compatibility.
- The remote Podman client now supports proxying signals for attach sessions when the `--sig-proxy` option is set ([#14707](https://github.com/containers/podman/issues/14707)).
  [#]## Changes
- Duplicate volume mounts are now allowed with the `-v` option to `podman run`, `podman create`, and `podman pod create`, so long as source, destination, and options all match ([#4217](https://github.com/containers/podman/issues/4217)).
- The `podman generate kube` and `podman play kube` commands have been renamed to `podman kube generate` and `podman kube play` to group Kubernetes-related commands. Aliases have been added to ensure the old command names still function.
- A number of Podman commands (`podman init`, `podman container checkpoint`, `podman container restore`, `podman container cleanup`) now print the user-inputted name of the container, instead of its full ID, on success.
- When an unsupported option (e.g. resource limit) is specified for a rootless container on a cgroups v1 system, a warning message is now printed that the limit will not be honored.
- The installer for the Windows Podman client has been improved.
- The `--cpu-rt-period` and `--cpu-rt-runtime` options to `podman run` and `podman create` now print a warning and are ignored on cgroups v2 systems (cgroups v2 having dropped support for these controllers) ([#15666](https://github.com/containers/podman/issues/15666)).
- Privileged containers running systemd will no longer mount `/dev/tty*` devices other than `/dev/tty` itself into the container ([#15878](https://github.com/containers/podman/issues/15878)).
- Events for containers that are part of a pod now include the ID of the pod in the event.
- SSH functionality for `podman machine` commands has seen a thorough rework, addressing many issues about authentication.
- The `--network` option to `podman kube play` now allows passing `host` to set the pod to use host networking, even if the YAML does not request this.
- The `podman inspect` command on containers now includes the digest of the image used to create the container.
- Pods created by `podman play kube` are now, by default, placed into a network named `podman-kube`. If the `podman-kube` network does not exist, it will be created. This ensures pods can connect to each other by their names, as the network has DNS enabled.
  [#]## Bugfixes
- Fixed a bug where the `podman network prune` and `podman container prune` commands did not properly support the `--filter label!=` option ([#14182](https://github.com/containers/podman/issues/14182)).
- Fixed a bug where the `podman kube generate` command added an unnecessary `Secret: null` line to generated YAML ([#15156](https://github.com/containers/podman/issues/15156)).
- Fixed a bug where the `podman kube generate` command did not set `enableServiceLinks` and `automountServiceAccountToken` to false in generated YAML ([#15478](https://github.com/containers/podman/issues/15478) and [#15243](https://github.com/containers/podman/issues/15243)).
- Fixed a bug where the `podman kube play` command did not properly handle CPU limits ([#15726](https://github.com/containers/podman/issues/15726)).
- Fixed a bug where the `podman kube play` command did not respect default values for liveness probes ([#15855](https://github.com/containers/podman/issues/15855)).
- Fixed a bug where the `podman kube play` command did not bind ports if `hostPort` was not specified but `containerPort` was ([#15942](https://github.com/containers/podman/issues/15942)).
- Fixed a bug where the `podman kube play` command sometimes did not create directories on the host for `hostPath` volumes.
- Fixed a bug where the remote Podman client's `podman manifest push` command did not display progress.
- Fixed a bug where the `--filter "{{.Config.Healthcheck}}"` option to `podman image inspect` did not print the image's configured healthcheck ([#14661](https://github.com/containers/podman/issues/14661)).
- Fixed a bug where the `podman volume create -o timeout=` option could be specified even when no volume plugin was in use.
- Fixed a bug where the `podman rmi` command did not emit `untag` events when removing tagged images ([#15485](https://github.com/containers/podman/issues/15485)).
- Fixed a bug where API forwarding with `podman machine` VMs on windows could sometimes fail because the pipe was not created in time ([#14811](https://github.com/containers/podman/issues/14811)).
- Fixed a bug where the `podman pod rm` command could error if removal of a container in the pod was interrupted by a reboot.
- Fixed a bug where the `exited` and `exec died` events for containers did not include the container's labels ([#15617](https://github.com/containers/podman/issues/15617)).
- Fixed a bug where running Systemd containers on a system not using Systemd as PID 1 could fail ([#15647](https://github.com/containers/podman/issues/15647)).
- Fixed a bug where Podman did not pass all necessary environment variables (including `$PATH`) to Conmon when starting containers ([#15707](https://github.com/containers/podman/issues/15707)).
- Fixed a bug where the `podman events` command could function improperly when no events were present ([#15688](https://github.com/containers/podman/issues/15688)).
- Fixed a bug where the `--format` flag to various Podman commands did not properly handle template strings including a newline (`\n`) ([#13446](https://github.com/containers/podman/issues/13446)).
- Fixed a bug where Systemd-managed pods would kill every container in a pod when a single container exited ([#14546](https://github.com/containers/podman/issues/14546)).
- Fixed a bug where the `podman generate systemd` command would generate incorrect YAML for pods created without the `--name` option.
- Fixed a bug where the `podman generate systemd --new` command did not properly set stop timeout ([#16149](https://github.com/containers/podman/issues/16149)).
- Fixed a bug where a broken OCI spec resulting from the system rebooting while a container is being started could cause the `podman inspect` command to be unable to inspect the container until it was restarted.
- Fixed a bug where creating a container with a working directory on an overlay volume would result in the container being unable to start ([#15789](https://github.com/containers/podman/issues/15789)).
- Fixed a bug where attempting to remove a pod with running containers without `--force` would not error and instead would result in the pod, and its remaining containers, being placed in an unusable state ([#15526](https://github.com/containers/podman/issues/15526)).
- Fixed a bug where memory limits reported by `podman stats` could exceed the maximum memory available on the system ([#15765](https://github.com/containers/podman/issues/15765)).
- Fixed a bug where the `podman container clone` command did not properly handle environment variables whose value contained an `=` character ([#15836](https://github.com/containers/podman/issues/15836)).
- Fixed a bug where the remote Podman client would not print the container ID when running the `podman-remote run --attach stdin` command.
- Fixed a bug where the `podman machine list --format json` command did not properly show machine starting status.
- Fixed a bug where automatic updates would not error when attempting to update a container with a non-fully qualified image name ([#15879](https://github.com/containers/podman/issues/15879)).
- Fixed a bug where the `podman pod logs --latest` command could panic ([#15556](https://github.com/containers/podman/issues/15556)).
- Fixed a bug where Podman could leave lingering network namespace mounts on the system if cleaning up the network failed.
- Fixed a bug where specifying an unsupported URI scheme for `podman system service` to listen at would result in a panic.
- Fixed a bug where the `podman kill` command would sometimes not transition containers to the exited state ([#16142](https://github.com/containers/podman/issues/16142)).
  [#]## API
- Fixed a bug where the Compat DF endpoint reported incorrect reference counts for volumes ([#15720](https://github.com/containers/podman/issues/15720)).
- Fixed a bug in the Compat Inspect endpoint for Networks where an incorrect network option was displayed, causing issues with `docker-compose` ([#15580](https://github.com/containers/podman/issues/15580)).
- The Libpod Restore endpoint for Containers now features a new query parameter, `pod`, to set the pod that the container will be restored into ([#15018](https://github.com/containers/podman/issues/15018)).
- Fixed a bug where the REST API could panic while retrieving images.
- Fixed a bug where a cancelled connection to several endpoints could induce a memory leak.
  [#]## Misc
- Error messages when attempting to remove an image used by a non-Podman container have been improved ([#15006](https://github.com/containers/podman/issues/15006)).
- Podman will no longer print a warning that `/` is not a shared mount when run inside a container ([#15295](https://github.com/containers/podman/issues/15295)).
- Work is ongoing to port Podman to FreeBSD.
- The output of `podman generate systemd` has been adjusted to improve readability.
- A number of performance improvements have been made to `podman create` and `podman run`.
- A major reworking of the manpages to ensure duplicated options between commands have the same description text has been performed.
- Updated Buildah to v1.28.0
- Updated the containers/image library to v5.23.0
- Updated the containers/storage library to v1.43.0
- Updated the containers/common library to v0.50.1</changelog>
  <changelog author="danish.prakash@suse.com" date="1673611200">- Make the priority for picking the storage driver configurable (bsc#1197093)
  (backport of https://github.com/containers/storage/pull/1460)
- add patch: 0002-Make-the-priority-for-picking-the-storage-driver-con.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1673956800">- add patch: 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
    (backport of https://github.com/containers/storage/pull/1468)</changelog>
  <changelog author="dcermak@suse.com" date="1675339200">- Remove patches (merged upstream or resolved otherwise):
  * 0001-Revert-Default-missing-hostPort-to-containerPort-is-.patch
  * 0002-Make-the-priority-for-picking-the-storage-driver-con.patch
  * 0003-Only-override-the-graphdriver-to-vfs-if-the-priority.patch
- remove long obsolete update scriptlets
- Update to version 4.4.0:
  * Bump to v4.4.0
  * Final release notes for v4.4.0
  * Emergency fix for RHEL8 gating tests
  * Do not mount /dev/tty into rootless containers
  * Fixes port collision issue on use of --publish-all
  * Fix usage of absolute windows paths with --image-path
  * fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
  * podman-events: document verbose create events
  * Making gvproxy.exe optional for building Windows installer
  * Add gvproxy to Windows packages
  * Match VT device paths to be blocked from mounting exactly
  * Clean up more language for inclusiveness
  * Set runAsNonRoot=true in gen kube
  * quadlet: Add device support for .volume files
  * fix: running check error when podman is default in wsl
  * fix: don't output "ago" when container is currently up and running
  * journald: podman logs only show logs for current user
  * journald: podman events only show events for current user
  * Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
  * DB: make loading container states optional
  * ps: do not sync container
  * Allow --device-cgroup-rule to be passed in by docker API
  * [v4.4] Bump to Buildah v1.29.0
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC3
  * Create release notes for v4.4.0
  * Cirrus: Update operating branch
  * fix APIv2 python attach test flake
  * ps: query health check in batch mode
  * make example volume import, not import volume
  * Correct output when inspecting containers created with --ipc
  * Vendor containers/(storage, image, common, buildah)
  * Get correct username in pod when using --userns=keep-id
  * ps: get network data in batch mode
  * build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
  * add hack/perf for comparing two container engines
  * systems: retrofit dns options test to honor other search domains
  * ps: do not create copy of container config
  * libpod: set search domain independently of nameservers
  * libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
  * podman: relay custom DNS servers to network stack
  * (fix) mount_program is in storage.options.overlay
  * Change example target to default in doc
  * network create: do not allow `default` as name
  * kube-play: add support for HostPID in podSpec
  * build(deps): bump github.com/docker/docker
  * Let's see if #14653 is fixed or not
  * Add support for podman build --group-add
  * vendor in latests containers/(storage, common, build, image)
  * unskip network update test
  * do not install swagger by default
  * pasta: skip "Local forwarder, IPv4" test
  * add testbindings Makefile target
  * update CI images to include pasta
  * [CI:DOCS] Add CNI deprecation notices to documentation
  * Cirrus: preserve podman-server logs
  * waitPidStop: reduce sleep time to 10ms
  * StopContainer: return if cleanup process changed state
  * StopSignal: add a comment
  * StopContainer: small refactor
  * waitPidStop: simplify code
  * e2e tests: reenable long-skipped build test
  * Add openssh-clients to podmanimage
  * Reworks Windows smoke test to tunnel through interactive session.
  * fix bud-multiple-platform-with-base-as-default-arg flake
  * Remove ReservedAnnotations from kube generate specification
  * e2e: update test/README.md
  * e2e: use isRootless() instead of rootless.IsRootless()
  * Cleanup documentation on --userns=auto
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-rc2
  * Vendor in latest c/common
  * sig-proxy system test: bump timeout
  * build(deps): bump github.com/containernetworking/plugins
  * rootless: rename auth-scripts to preexec-hooks
  * Docs: version-check updates
  * commit: use libimage code to parse changes
  * [CI:DOCS] Remove experimental mac tutorial
  * man: Document the interaction between --systemd and --privileged
  * Make rootless privileged containers share the same tty devices as rootfull ones
  * container kill: handle stopped/exited container
  * Vendor in latest containers/(image,ocicrypt)
  * add a comment to container removal
  * Vendor in latest containers/storage
  * Cirrus: Run machine tests on PR merge
  * fix flake in kube system test
  * kube play: complete container spec
  * E2E Tests: Use inspect instead of actual data to avoid UDP flake
  * Use containers/storage/pkg/regexp in place of regexp
  * Vendor in latest containers/storage
  * Cirrus: Support using updated/latest NV/AV in PRs
  * Limit replica count to 1 when deploying from kubernetes YAML
  * Set StoppedByUser earlier in the process of stopping
  * podman-play system test: refactor
  * Bump to v4.4.0-dev
  * Bump to v4.4.0-RC1
  * network: add support for podman network update and --network-dns-server
  * service container: less verbose error logs
  * Quadlet Kube - add support for PublishPort key
  * e2e: fix systemd_activate_test
  * Compile regex on demand not in init
  * [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
  * E2E Test: Play Kube set deadline to connection to avoid hangs
  * Only prevent VTs to be mounted inside privileged systemd containers
  * e2e: fix play_kube_test
  * Updated error message for supported VolumeSource types
  * Introduce pkg retry logic in win installer task
  * logformatter: include base SHA, with history link
  * Network tests: ping redhat.com, not podman.io
  * cobra: move engine shutdown to Execute
  * Updated options for QEMU on Windows hosts
  * Update Mac installer to use gvproxy v0.5.0
  * podman: podman rm -f doesn't leave processes
  * oci: check for valid PID before kill(pid, 0)
  * linux: add /sys/fs/cgroup if /sys is a bind mount
  * Quadlet: Add support for ConfigMap key in Kube section
  * remove service container _after_ pods
  * Kube Play - allow setting and overriding published host ports
  * oci: terminate all container processes on cleanup
  * Update win-sshproxy to 0.5.0 gvisor tag
  * Vendor in latest containers/common
  * Fix a potential defer logic error around locking
  * logformatter: nicer formatting for bats failures
  * logformatter: refactor verbose line-print
  * e2e tests: stop using UBI images
  * k8s-file: podman logs --until --follow exit after time
  * journald: podman logs --until --follow exit after time
  * journald: seek to time when --since is used
  * podman logs: journald fix --since and --follow
  * Preprocess files in UTF-8 mode
  * Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
  * Vendor in latest containers/(common, image, storage)
  * Switch to C based msi hooks for win installer
  * hack/bats: improve usage message
  * hack/bats: add --remote option
  * hack/bats: fix root/rootless logic
  * Describe copy volume options
  * Support sig-proxy for podman-remote attach and start
  * libpod: fix race condition rm'ing stopping containers
  * e2e: fix run_volume_test
  * Add support for Windows ARM64
  * Add shared --compress to man pages
  * Add container error message to ContainerState
  * Man page checker: require canonical name in SEE ALSO
  * system df: improve json output code
  * kube play: fix the error logic with --quiet
  * System tests: quadlet network test
  * Fix: List container with volume filter
  * adding -dryrun flag
  * Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
  * Kube Play: use passthrough as the default log-driver if service-container is set
  * System tests: add missing cleanup
  * System tests: fix unquoted question marks
  * Build and use a newer systemd image
  * Quadlet Network - Fix the name of the required network service
  * System Test Quadlet - Volume dependency test did not test the dependency
  * fix `podman system connection - tcp` flake
  * vendor: bump c/storage to a747b27
  * Fix instructions about setting storage driver on command-line
  * Test README - point users to hack/bats
  * System test: quadlet kube basic test
  * Fixed `podman update --pids-limit`
  * podman-remote,bindings: trim context path correctly when its emptydir
  * Quadlet Doc: Add section for .kube files
  * e2e: fix containers_conf_test
  * Allow '/' to prefix container names to match Docker
  * Remove references to qcow2
  * Fix typos in man page regarding transient storage mode.
  * make: Use PYTHON var for .install.pre-commit
  * Add containers.conf read-only flag support
  * Explain that relabeling/chowning of volumes can take along time
  * events: support "die" filter
  * infra/abi: refactor ContainerRm
  * When in transient store mode, use rundir for bundlepath
  * quadlet: Support Type=oneshot container files
  * hacks/bats: keep QUADLET env var in test env
  * New system tests for conflicting options
  * Vendor in latest containers/(buildah, image, common)
  * Output Size and Reclaimable in human form for json output
  * podman service: close duplicated /dev/null fd
  * ginkgo tests: apply ginkgolinter fixes
  * Add support for hostPath and configMap subpath usage
  * export: use io.Writer instead of file
  * rootless: always create userns with euid != 0
  * rootless: inhibit copy mapping for euid != 0
  * pkg/domain/infra/abi: introduce `type containerWrapper`
  * vendor: bump to buildah ca578b290144 and use new cache API
  * quadlet: Handle booleans that have defaults better
  * quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
  * Add podman-clean-transient.service service
  * Stop recording annotations set to false
  * Unify --noheading and -n to be consistent on all commands
  * pkg/domain/infra/abi: add `getContainers`
  * Update vendor of containters/(common, image)
  * specfile: Drop user-add depedency from quadlet subpackage.
  * quadlet: Default BINDIR to /usr/bin if tag not specified
  * Quadlet: add network support
  * Add comment for jsonMarshal command
  * Always allow pushing from containers-storage
  * libpod: move NetNS into state db instead of extra bucket
  * Add initial system tests for quadlets
  * quadlet: Add --user option
  * libpod: remove CNI word were no longer applicable
  * libpod: fix header length in http attach with logs
  * podman-kube@ template: use `podman kube`
  * build(deps): bump github.com/docker/docker
  * wait: add --ignore option
  * qudlet: Respect $PODMAN env var for podman binary
  * e2e: Add assert-key-is-regex check to quadlet e2e testsuite
  * e2e: Add some assert to quadlet test to make sure testcases are sane
  * remove unmapped ports from inspect port bindings
  * update podman-network-create for clarity
  * Vendor in latest containers/common with default capabilities
  * pkg/rootless: Change error text ...
  * rootless: add cli validator
  * rootless: define LIBEXECPODMAN
  * doc: fix documentation for idmapped mounts
  * bump golangci-lint to v1.50.1
  * build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
  * [CI:DOCS] podman-mount: s/umount/unmount/
  * create/pull --help: list pull policies
  * Network Create: Add --ignore flag to support idempotent script
  * Make qemu security model none
  * libpod: use OCI idmappings for mounts
  * stop reporting errors removing containers that don't exist
  * test: added test from wait endpoint with to long label
  * quadlet: Default VolatileTmp to off
  * build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
  * docs/options/ipc: fix list syntax
  * Docs: Add dedicated DOWNLOAD doc w/ links to bins
  * Make a consistently-named windows installer
  * checkpoint restore: fix --ignore-static-ip/mac
  * add support for subpath in play kube for named volumes
  * build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
  * golangci-lint: remove three deprecated linters
  * parse-localbenchmarks: separate standard deviation
  * build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
  * podman play kube support container startup probe
  * Add podman buildx version support
  * Cirrus: Collect benchmarks on machine instances
  * Cirrus: Remove escape codes from log files
  * [CI:DOCS] Clarify secret target behavior
  * Fix typo on network docs
  * podman-remote build add --volume support
  * remote: allow --http-proxy for remote clients
  * Cleanup kube play workloads if error happens
  * health check: ignore dependencies of transient systemd units/timers
  * fix: event read from syslog
  * Fixes secret (un)marshaling for kube play.
  * Remove 'you' from man pages
  * build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
  * [CI:DOCS] test/README.md: run tests with podman-remote
  * e2e: keeps the http_proxy value
  * Makefile: Add podman-mac-helper to darwin client zip
  * test/e2e: enable "podman run with ipam none driver" for nv
  * [skip-ci] GHA/Cirrus-cron: Fix execution order
  * kube sdnotify: run proxies for the lifespan of the service
  * Update containers common package
  * podman manpage: Use man-page links instead of file names
  * e2e: fix e2e tests in proxy environment
  * Fix test
  * disable healthchecks automatically on non systemd systems
  * Quadlet Kube: Add support for userns flag
  * [CI:DOCS] Add warning about --opts,o with mount's -o
  * Add podman system prune --external
  * Add some tests for transient store
  * runtime: In transient_store mode, move bolt_state.db to rundir
  * runtime: Handle the transient store options
  * libpod: Move the creation of TmpDir to an earlier time
  * network create: support "-o parent=XXX" for ipvlan
  * compat API: allow MacAddress on container config
  * Quadlet Kube: Add support for relative path for YAML file
  * notify k8s system test: move sending message into exec
  * runtime: do not chown idmapped volumes
  * quadlet: Drop ExecStartPre=rm %t/%N.cid
  * Quadlet Kube: Set SyslogIdentifier if was not set
  * Add a FreeBSD cross build to the cirrus alt build task
  * Add completion for --init-ctr
  * Fix handling of readonly containers when defined in kube.yaml
  * Build cross-compilation fixes
  * libpod: Track healthcheck API changes in healthcheck_unsupported.go
  * quadlet: Use same default capability set as podman run
  * quadlet: Drop --pull=never
  * quadlet: Change default of ReadOnly to no
  * quadlet: Change RunInit default to no
  * quadlet: Change NoNewPrivileges default to false
  * test: podman run with checkpoint image
  * Enable 'podman run' for checkpoint images
  * test: Add tests for checkpoint images
  * CI setup: simplify environment passthrough code
  * Init containers should not be restarted
  * Update c/storage after https://github.com/containers/storage/pull/1436
  * Set the latest release explicitly
  * add friendly comment
  * fix an overriding logic and load config problem
  * Update the issue templates
  * Update vendor of containers/(image, buildah)
  * [CI:DOCS] Skip windows-smoke when not useful
  * [CI:DOCS] Remove broken gate-container docs
  * OWNERS: add Jason T. Greene
  * hack/podmansnoop: print arguments
  * Improve atomicity of VM state persistence on Windows
  * [CI:BUILD] copr: enable podman-restart.service on rpm installation
  * macos: pkg: Use -arm64 suffix instead of -aarch64
  * linux: Add -linux suffix to podman-remote-static binaries
  * linux: Build amd64 and arm64 podman-remote-static binaries
  * container create: add inspect data to event
  * Allow manual override of install location
  * Run codespell on code
  * Add missing parameters for checkpoint/restore endpoint
  * Add support for startup healthchecks
  * Add information on metrics to the `network create` docs
  * Introduce podman machine os commands
  * Document that ignoreRootFS depends on export/import
  * Document ignoreVolumes in checkpoint/restore endpoint
  * Remove leaveRunning from swagger restore endpoint
  * libpod: Add checks to avoid nil pointer dereference if network setup fails
  * Address golangci-lint issues
  * Bump golang version to 1.18
  * Documenting Hyper-V QEMU acceleration settings
  * Kube Play: fix the handling of the optional field of SecretVolumeSource
  * Update Vendor of containers/(common, image, buildah)
  * Fix swapped NetInput/-Output stats
  * libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
  * chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
  * test/tools: rebuild when files are changed
  * ginkgo tests: apply ginkgolinter fixes
  * ginkgo: restructure install work flow
  * Fix manpage emphasis
  * specgen: support CDI devices from containers.conf
  * vendor: update containers/common
  * pkg/trust: Take the default policy path from c/common/pkg/config
  * Add validate-in-container target
  * Adding encryption decryption feature
  * container restart: clean up healthcheck state
  * Add support for podman-remote manifest annotate
  * Quadlet: Add support for .kube files
  * Update vendor of containers/(buildah, common, storage, image)
  * specgen: honor user namespace value
  * [CI:DOCS] Migrate OSX Cross to M1
  * quadlet: Rework uid/gid remapping
  * GHA: Fix cirrus re-run workflow for other repos.
  * ssh system test: skip until it becomes a test
  * shell completion: fix hard coded network drivers
  * libpod: Report network setup errors properly on FreeBSD
  * E2E Tests: change the registry for the search test to avoid authentication
  * pkginstaller: install podman-mac-helper by default
  * Fix language. Mostly spelling a -&gt; an
  * podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
  * [CI:DOCS] Fix spelling and typos
  * Modify man page of "--pids-limit" option to correct a default value.
  * Update docs/source/markdown/podman-remote.1.md
  * Update pkg/bindings/connection.go
  * Add more documentation on UID/GID Mappings with --userns=keep-id
  * support podman-remote to connect tcpURL with proxy
  * Removing the RawInput from the API output
  * fix port issues for CONTAINER_HOST
  * CI: Package versions: run in the 'main' step
  * build(deps): bump github.com/rootless-containers/rootlesskit
  * pkg/domain: Make checkExecPreserveFDs platform-specific
  * e2e tests: fix restart race
  * Fix podman --noout to suppress all output
  * remove pod if creation has failed
  * pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
  * Fix more podman-logs flakes
  * healthcheck system tests: try to fix flake
  * libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
  * GHA: Configure workflows for reuse
  * compat,build: handle docker's preconfigured cacheTo,cacheFrom
  * docs: deprecate pasta network name
  * utils: Enable cgroup utils for FreeBSD
  * pkg/specgen: Disable kube play tests on FreeBSD
  * libpod/lock: Fix build and tests for SHM locks on FreeBSD
  * podman cp: fix copying with "." suffix
  * pkginstaller: bump Qemu to version 7.1.0
  * specgen,wasm: switch to crun-wasm wherever applicable
  * vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
  * libpod: Make unit test for statToPercent Linux only
  * Update vendor of containers/storage
  * fix connection usage with containers.conf
  * Add --quiet and --no-info flags to podman machine start
  * Add hidden podman manifest inspect -v option
  * Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
  * Add podman volume create -d short option for driver
  * Vendor in latest containers/(common,image,storage)
  * Add podman system events alias to podman events
  * Fix search_test to return correct version of alpine
  * Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
  * GHA: Fix undefined secret env. var.
  * Release notes for 4.3.1
  * GHA: Fix make_email-body script reference
  * Add release keys to README
  * GHA: Fix typo setting output parameter
  * GHA: Fix typo.
  * New tool, docs/version-check
  * Formalize our compare-against-docker mechanism
  * Add restart-sec for container service files
  * test/tools: bump module to go 1.17
  * contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
  * Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
  * Bump golang.org/x/term from 0.1.0 to 0.2.0
  * Bump golang.org/x/sys from 0.1.0 to 0.2.0
  * Bump github.com/container-orchestrated-devices/container-device-interface
  * build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
  * libpod: Add FreeBSD support in packageVersion
  * Allow podman manigest push --purge|-p as alias for --rm
  * [CI:DOCS] Add performance tutorial
  * [CI:DOCS] Fix build targets in build_osx.md.
  * fix --format {{json .}} output to match docker
  * remote: fix manifest add --annotation
  * Skip test if `--events-backend` is necessary with podman-remote
  * kube play: update the handling of PersistentVolumeClaim
  * system tests: fix a system test in proxy environment
  * Use single unqualified search registry on Windows
  * test/system: Add, use tcp_port_probe() to check for listeners rather than binds
  * test/system: Add tests for pasta(1) connectivity
  * test/system: Move network-related helpers to helpers.network.bash
  * test/system: Use procfs to find bound ports, with optional address and protocol
  * test/system: Use port_is_free() from wait_for_port()
  * libpod: Add pasta networking mode
  * More log-flake work
  * Fix test flakes caused by improper podman-logs
  * fix incorrect systemd booted check
  * Cirrus: Add tests for GHA scripts
  * GHA: Update scripts to pass shellcheck
  * Cirrus: Shellcheck github-action scripts
  * Cirrus: shellcheck support for github-action scripts
  * GHA: Fix cirrus-cron scripts
  * Makefile: don't install to tmpfiles.d on FreeBSD
  * Make sure we can build and read each line of docker py's api client
  * Docker compat build api - make sure only one line appears per flush
  * Run codespell on code
  * Update vendor of containers/(image, storage, common)
  * Allow namespace path network option for pods.
  * Cirrus: Never skip running Windows Cross task
  * GHA: Auto. re-run failed cirrus-cron builds once
  * GHA: Migrate inline script to file
  * GHA: Simplify script reference
  * test/e2e: do not use apk in builds
  * remove container/pod id file along with container/pod
  * Cirrus: Synchronize windows image
  * Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
  * runtime: add check for valid pod systemd cgroup
  * CI: set and verify DESIRED_NETWORK (netavark, cni)
  * [CI:DOCS] troubleshooting: document keep-id options
  * Man pages: refactor common options: --security-opt
  * Cirrus: Guarantee CNI testing w/o nv/av present
  * Cirrus: temp. disable all Ubuntu testing
  * Cirrus: Update to F37beta
  * buildah bud tests: better handling of remote
  * quadlet: Warn in generator if using short names
  * Add Windows Smoke Testing
  * Add podman kube apply command
  * docs: offer advice on installing test dependencies
  * Fix documentation on read-only-tmpfs
  * version bump to 4.4.0-dev
  * deps: bump go-criu to v6
  * Makefile: Add cross build targets for freebsd
  * pkg/machine: Make this build on FreeBSD/arm64
  * pkg/rctl: Remove unused cgo dependency
  * man pages: assorted underscore fixes
  * Upgrade GitHub actions packages from v2 to v3
  * vendor github.com/godbus/dbus/v5@4b691ce
  * [CI:DOCS] fix --tmpdir typos
  * Do not report that /usr/share/containers/storage.conf has been edited.
  * Eval symlinks on XDG_RUNTIME_DIR
  * hack/podmansnoop
  * rootless: support keep-id with one mapping
  * rootless: add argument to GetConfiguredMappings
  * Update vendor containers/(common,storage,buildah,image)
  * Fix deadlock between 'podman ps' and 'container inspect' commands
  * Add information about where the libpod/boltdb database lives
  * Consolidate the dependencies for the IsTerminal() API
  * Ensure that StartAndAttach locks while sending signals
  * ginkgo testing: fix podman usernamespace join
  * Test runners: nuke podman from $PATH before tests
  * volumes: Fix idmap not working for volumes
  * FIXME: Temporary workaround for ubi8 CI breakage
  * System tests: teardown: clean up volumes
  * update api versions on docs.podman.io
  * system tests: runlabel: use podman-under-test
  * system tests: podman network create: use random port
  * sig-proxy test: bump timeout
  * play kube: Allow the user to import the contents of a tar file into a volume
  * Clarify the docs on DropCapability
  * quadlet tests: Disable kmsg logging while testing
  * quadlet: Support multiple Network=
  * quadlet: Add support for Network=...
  * Fix manpage for podman run --network option
  * quadlet: Add support for AddDevice=
  * quadlet: Add support for setting seccomp profile
  * quadlet: Allow multiple elements on each Add/DropCaps line
  * quadlet: Embed the correct binary name in the generated comment
  * quadlet: Drop the SocketActivated key
  * quadlet: Switch log-driver to passthrough
  * quadlet: Change ReadOnly to default to enabled
  * quadlet tests: Run the tests even for (exected) failed tests
  * quadlet tests: Fix handling of stderr checks
  * Remove unused script file
  * notifyproxy: fix container watcher
  * container/pod id file: truncate instead of throwing an error
  * quadlet: Use the new podman create volume --ignore
  * Add podman volume create --ignore
  * logcollector: include aardvark-dns
  * build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
  * build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
  * docs: generate systemd: point to kube template
  * docs: kube play: mention restart policy
  * Fixes: 15858 (podman system reset --force destroy machine)
  * fix search flake
  * use cached containers.conf
  * adding regex support to the ancestor ps filter function
  * Fix `system df` issues with `-f` and `-v`
  * markdown-preprocess: cross-reference where opts are used
  * Default qemu flags for Windows amd64
  * build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
  * Update main to reflect v4.3.0 release
  * build(deps): bump github.com/docker/docker
  * move quadlet packages into pkg/systemd
  * system df: fix image-size calculations
  * Add man page for quadlet
  * Fix small typo
  * testimage: add iproute2 &amp; socat, for pasta networking
  * Set up minikube for k8s testing
  * Makefile: don't install systemd generator binaries on FreeBSD
  * [CI:BUILD] copr: podman rpm should depend on containers-common-extra
  * Podman image: Set default_sysctls to empty for rootless containers
  * Don't use  github.com/docker/distribution
  * libpod: Add support for 'podman top' on FreeBSD
  * libpod: Factor out jail name construction from stats_freebsd.go
  * pkg/util: Add pid information descriptors for FreeBSD
  * Initial quadlet version integrated in golang
  * bump golangci-lint to v1.49.0
  * Update vendor containers/(common,image,storage)
  * Allow volume mount dups, iff source and dest dirs
  * rootless: fix return value handling
  * Change to correct break statements
  * vendor containers/psgo@v1.8.0
  * Clarify that MacOSX docs are client specific
  * libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
  * Add swagger install + allow version updates in CI
  * Cirrus: Fix windows clone race
  * build(deps): bump github.com/docker/docker
  * kill: wait for the container
  * generate systemd: set --stop-timeout for stopping containers
  * hack/tree_status.sh: print diff at the end
  * Fix markdown header typo
  * markdown-preprocess: add generic include mechanism
  * markdown-preprocess: almost complete OO rewrite
  * Update tests for changed error messages
  * Update c/image after https://github.com/containers/image/pull/1299
  * Man pages: refactor common options (misc)
  * Man pages: Refactor common options: --detach-keys
  * vendor containers/storage@main
  * Man pages: refactor common options: --attach
  * build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
  * KillContainer: improve error message
  * docs: add missing options
  * Man pages: refactor common options: --annotation (manifest)
  * build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
  * system tests: health-on-failure: fix broken logic
  * build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
  * build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
  * ContainerEngine.SetupRootless(): Avoid calling container.Config()
  * Container filters: Avoid use of ctr.Config()
  * Avoid unnecessary calls to Container.Spec()
  * Add and use Container.LinuxResource() helper
  * play kube: notifyproxy: listen before starting the pod
  * play kube: add support for configmap binaryData
  * Add and use libpod/Container.Terminal() helper
  * Revert "Add checkpoint image tests"
  * Revert "cmd/podman: add support for checkpoint images"
  * healthcheck: fix --on-failure=stop
  * Man pages: Add mention of behavior due to XDG_CONFIG_HOME
  * build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
  * Avoid unnecessary timeout of 250msec when waiting on container shutdown
  * health checks: make on-failure action retry aware
  * libpod: Remove 100msec delay during shutdown
  * libpod: Add support for 'podman pod' on FreeBSD
  * libpod: Factor out cgroup validation from (*Runtime).NewPod
  * libpod: Move runtime_pod_linux.go to runtime_pod_common.go
  * specgen/generate: Avoid a nil dereference in MakePod
  * libpod: Factor out cgroups handling from (*Pod).refresh
  * Adds a link to OSX docs in CONTRIBUTING.md
  * Man pages: refactor common options: --os-version
  * Create full path to a directory when DirectoryOrCreate is used with play kube
  * Return error in podman system service if URI scheme is not unix/tcp
  * Man pages: refactor common options: --time
  * man pages: document some --format options: images
  * Clean up when stopping pods
  * Update vendor of containers/buildah v1.28.0
  * Proof of concept: nightly dependency treadmill</changelog>
  <changelog author="fvogt@suse.com" date="1675944000">- Update to version 4.4.1:
  * Bump to v4.4.1
  * Update release notes for Podman 4.4.1
  * kube play: do not teardown unconditionally on error
  * Resolve symlink path for qemu directory if possible
  * events: document journald identifiers
  * Quadlet: exit 0 when there are no files to process
  * Cleanup podman-systemd.unit file
  * Install podman-systemd.unit  man page, make quadlet discoverable
  * Add missing return after errors
  * oci: bind mount /sys with --userns=(auto|pod:)
  * docs: specify order preference for FROM
  * Cirrus: Fix &amp; remove GraphQL API tests
  * test: adapt test to work on cgroupv1
  * make hack/markdown-preprocess parallel-safe
  * Fix default handling of pids-limit
  * system tests: fix volume exec/noexec test
  * Bump to v4.4.1-dev</changelog>
  <changelog author="dcermak@suse.com" date="1676635200">- Add patch to fix bsc#1208364 aka CVE-2023-0778
  Added patch:
  * volume-container-chroot-to-source-before-exporting-content.patch</changelog>
  <changelog author="danish.prakash@suse.com" date="1676980800">- podman.spec: set PREFIX at build stage (boo#1208510)</changelog>
  <changelog author="danish.prakash@suse.com" date="1677240000">- Update to version 4.4.2:
  * Bump to v4.4.2
  * Release notes for v4.4.2
  * Revert "CI: Temporarily disable all AWS EC2-based tasks"
  * kube play: only enforce passthrough in Quadlet
  * Emergency fix for man pages: check for broken includes
  * CI: Temporarily disable all AWS EC2-based tasks
  * quadlet system tests: add useful defaults, logging
  * volume,container: chroot to source before exporting content
  * install sigproxy before start/attach
  * Update to c/image 5.24.1
  * events + container inspect test: RHEL fixes
  * Bump to v4.4.2-dev
- Remove patches (merged upstream):
  * volume-container-chroot-to-source-before-exporting-content.patch
- podman.spec: add `crun` requirement for quadlet
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="dcermak@suse.com" date="1677499200">- Add patch to let quadlet use the default runtime
  Added patch:
  * Quadlet-use-the-default-runtime.patch
  =&gt; Remove dependency on crun</changelog>
  <changelog author="danish.prakash@suse.com" date="1679659200">- Update to version 4.4.3:
  * Bump to v4.4.3
  * Release notes for v4.4.3
  * compat: /auth: parse server address correctly
  * vendor github.com/containers/common@v0.51.1
  * pkginstaller: bump Qemu to version 7.2.0
  * podman machine: Adjust Chrony makestep config
  * [v4.4] fix --health-on-failure=restart in transient unit
  * podman logs passthrough driver support --cgroups=split
  * journald logs: simplify entry parsing
  * podman logs: read journald with passthrough
  * journald: remove initializeJournal()
  * netavark: only use aardvark ip as nameserver
  * compat API: network create return 409 for duplicate
  * fix "podman logs --since --follow" flake
  * system service --log-level=trace: support hijack
  * podman-mac-helper: exit 1 on error
  * bump golang.org/x/net to v0.8.0
  * Fix package restore
  * Quadlet - use the default runtime
  * Bump to v4.4.3-dev
- Remove patch (merged upstream):
  * Quadlet-use-the-default-runtime.patch
    (https://github.com/containers/podman/pull/17601)</changelog>
  <changelog author="danish.prakash@suse.com" date="1680004800">- Update to version 4.4.4:
  * Bump to v4.4.4
  * Release notes for v4.4.4
  * libpod: always use direct mapping
  * macos pkginstaller: do not fail when podman-mac-helper fails
  * podman-mac-helper: install: do not error if already installed
  * Bump to v4.4.4-dev
- spec: Bump required version for libcontainers-common (bsc#1209495)</changelog>
  <changelog author="danish.prakash@suse.com" date="1699012800">- Build against latest stable Go version (bsc#1210299)</changelog>
  <changelog author="dcermak@suse.com" date="1710849600">- Add patch for CVE-2024-1753/bsc#1221677:
  0001-buildah-CVE-2024-1753-container-escape-fix.patch</changelog>
</package>
<package pkgid="49a81900cc35aa29033fda3729b0b69f5eaf4516cbac0e2e192c608aa97fd5c8" name="polkit" arch="aarch64">
  <version epoch="0" ver="0.116" rel="150200.3.12.1"/>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="meissner@suse.com" date="1642075200">- CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
  added CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644235200">- CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
  added CVE-2021-4115.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="0dbfc57aad9245be570c566ebdd93a0486b856aba1562d36e544523cd8ca8029" name="polkit" arch="s390x">
  <version epoch="0" ver="0.116" rel="150200.3.12.1"/>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="meissner@suse.com" date="1642075200">- CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
  added CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644235200">- CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
  added CVE-2021-4115.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="81b6fa29615296f73f871ca04f8830034b3b86c0d3937c4550737521a2a3e007" name="polkit" arch="src">
  <version epoch="0" ver="0.116" rel="150200.3.12.1"/>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="meissner@suse.com" date="1642075200">- CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
  added CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644235200">- CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
  added CVE-2021-4115.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="34c1b049f06e3795d4c541f3381a9666f65b703d1aa814146407259e622c5e57" name="polkit" arch="x86_64">
  <version epoch="0" ver="0.116" rel="150200.3.12.1"/>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1531310400">- Update to version 0.115:
  - Fix CVE-2018-1116: Trusting client-supplied UID (bsc#1099031)
  - jsauthority: pass "%s" format string to remaining report function
    (obsoletes polkit-jsauthority-pass-format-string.patch)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534507200">- Add polkit-fix-possible-resource-leak.patch: Fix possible
  resource leak found by static analyzer.
- Add polkit-fix-leaking-zombie-child-processes.patch: polkitd: fix
  zombie not reaped when js spawned process timed out (fdo#106021).</changelog>
  <changelog author="meissner@suse.com" date="1545307200">- polkit-CVE-2018-19788.patch: Fixed handling of UIDs over MAX_UINT
  (bsc#1118277 CVE-2018-19788)</changelog>
  <changelog author="mvetter@suse.com" date="1556280000">- bsc#1130588: Require shadow instead of old pwdutils
- User proper Requires(pre)/Requires(post) for permissions and
  shadow</changelog>
  <changelog author="dimstar@opensuse.org" date="1557489600">- Use systemd_ordering instead of systemd_requires: strictly
  speaking, polkit does not require systemd to be present. Just
  that when we install on a system with systemd (e.g outside
  containers) we would want systemd to be present before
  installing polkit. Help also reduce a cycle without special hacks
  in systemd.spec.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1559131200">- Update to version 0.116:
  + Leaking zombie child processes.
  + Possible resource leak found by static analyzer.
  + Output messages tuneup.
  + Sanity fixes.
  + pkttyagent tty echo disabled on SIGINT.
  + HACKING: add link to Code of Conduct.
  + polkitbackend: comment typos fix.
  + configure.ac: fix detection of systemd with cgroups v2.
  + CVE-2018-19788 High UIDs overflow fix.
  + CVE-2019-6133 Slowfork vulnerability fix.
  + Allow unset process-uid.
  + Port the JS authority to mozjs-60.
  + Use JS_EncodeStringToUTF8.
  + Updated translations.
- Replace pkgconfig(mozjs-52) with pkgconfig(mozjs-60)
  BuildRequires following upstreams changes.
- Drop patches fixed upstream:
  + polkit-fix-possible-resource-leak.patch
  + polkit-fix-leaking-zombie-child-processes.patch
  + polkit-CVE-2018-19788.patch
- Refresh patches with quilt.</changelog>
  <changelog author="meissner@suse.com" date="1570536000">- polkit-keyinit.patch: add pam_keyinit to the polkit configuration (bsc#1144053)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1575028800">- Fix usage of libexecdir instead of prefix/lib where applicable.</changelog>
  <changelog author="meissner@suse.com" date="1622116800">- CVE-2021-3560: fixed a local privilege escalation using polkit_system_bus_name_get_creds_sync()
  (bsc#1186497)
  CVE-2021-3560.patch</changelog>
  <changelog author="meissner@suse.com" date="1642075200">- CVE-2021-4034: fixed a local privilege escalation in pkexec (bsc#1194568)
  added CVE-2021-4034-pkexec-fix.patch</changelog>
  <changelog author="rfrohl@suse.com" date="1644235200">- CVE-2021-4115: fixed a denial of service via file descriptor leak (bsc#1195542)
  added CVE-2021-4115.patch</changelog>
  <changelog author="jsegitz@suse.com" date="1680091200">- Change permissions for rules folders (bsc#1209282)</changelog>
</package>
<package pkgid="5fd478f6f1f5b0b8792c5cb07e1bdd820179ddaf88116adba1fa3909b81e98c1" name="ppp" arch="aarch64">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="1e0b97e9a9985569ff581d12b29c1e4fb102d12092c7fc42a9983397f31be8c0" name="ppp" arch="s390x">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="fbd40727e45265d28b3557057b8269c3a4f6202f245c074afefc34355c33f63a" name="ppp" arch="src">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="aj@suse.de" date="1294228800">- Fix build of pppol2tp - remove local copy of if_pppol2tp.h
  that is out of sync with kernel definition.
- Remove ppp-makedevice.patch, it is obsolete.</changelog>
  <changelog author="coolo@novell.com" date="1294228801">- refresh patch</changelog>
  <changelog author="coolo@novell.com" date="1313150400">- remove extra dependencies from doc files</changelog>
  <changelog author="coolo@suse.com" date="1361966400">- update license to new format</changelog>
  <changelog author="cfarrell@suse.com" date="1362139200">- license update: BSD-3-Clause and LGPL-2.1+ and GPL-2.0+
  GPL-2.0 matches found in ppp-2.4.5/include/linux/if_pppol2tp.h</changelog>
  <changelog author="max@suse.com" date="1374667200">- ppp-send-padt.patch: Send PADT at the end of a PPPoE session.</changelog>
  <changelog author="max@suse.com" date="1378123200">- Add ppp-terminate-correct.patch, fix the pppd's hang after exit
  (bnc#693469).</changelog>
  <changelog author="aj@ajaissle.de" date="1395316800">- Update to 2.4.6
  + Man page updates.
  + Several bug fixes.
  + Options files can now set and unset environment variables for
    scripts.
  + The timeout for chat scripts can now be taken from an environment
    variable.
  + There is a new option, master_detach, which allows pppd to detach
    from the controlling terminal when it is the multilink bundle master
    but its own link has terminated, even if the nodetach option has
    been given.
- Removed the following patches;
  - ppp-2.4.2-logwtmp.diff -- now checks for HAVE_LOGWTMP
  - ppp-2.4.3-demand-fix.diff -- using 'status'
  - ppp-terminate-correct.patch -- upstream inclusion
- Rebased the following patches:
  * ppp-2.4.3-make.diff as ppp-2.4.6-make.diff
  * ppp-2.4.2-misc.diff as ppp-2.4.6-misc.diff
  * ppp-2.4.2-ifname.diff as ppp-2.4.6-ifname.diff
  * ppp-2.4.4-lib64.patch as ppp-2.4.6-lib64.patch
- Url changed to ppp.samba.org
- Use macros in spec file
- We dont need to cleanup the buildroot</changelog>
  <changelog author="max@suse.com" date="1408622400">- Update to 2.4.7:
  * Fixed a potential security issue in parsing option files
    (CVE-2014-3158, bnc#891489).
  * There is a new "stop-bits" option, which takes an argument of
    1 or 2, indicating the number of stop bits to use for async serial
    ports.
  * Various bug fixes.</changelog>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="adc806b7ba73104dece500e155e383e6ee57756389c6ceded5fb814505a8416d" name="ppp" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="150000.5.13.1"/>
  <changelog author="ledest@gmail.com" date="1416398400">- fix bashisms in redialer script
- add patches:
  * ppp-2.4.7-fix-bashisms.patch</changelog>
  <changelog author="max@suse.com" date="1447416000">- Added ppp-CVE-2015-3310.patch:
  Fix for bnc#927841, CVE-2015-3310: Fix buffer overflow in radius
  plug-in's rc_mksid().</changelog>
  <changelog author="schwab@suse.de" date="1476705600">- fix-header-conflict.patch: avoid conflict with kernel headers</changelog>
  <changelog author="max@suse.com" date="1481284800">- Use system-wide libatm instead of local copy (boo#1013567).</changelog>
  <changelog author="meissner@suse.com" date="1497096000">- ppp-2.4.2-pie.patch: also enable PIE for /usr/sbin/pppstats</changelog>
  <changelog author="kukuk@suse.com" date="1497355200">- Add /etc/ppp, this directory is no longer part of filesystem.
  Most likely requiring sysconfig would be necessary.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511438400">- Add Requires group(dialout) (boo#1067511).</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1511524800">- Refresh spec-file via spec-cleaner.
- Add ppp-modem package for automatic redial to mobile provider.</changelog>
  <changelog author="max@suse.com" date="1581076800">- CVE-2020-8597, bsc#1162610, ppp-CVE-2020-8597.patch: rhostname
  buffer overflow in the eap_request and eap_response functions.</changelog>
  <changelog author="max@suse.com" date="1648728000">- bsc#1197799: Add ppp-2.4.7-DES-openssl.patch to fix build on
  SLE-15-SP3 and SP4.</changelog>
  <changelog author="max@suse.com" date="1703073600">- bsc#1218251, CVE-2022-4603, ppp-CVE-2022-4603.patch: improper
  validation of array index of the component pppdump.</changelog>
</package>
<package pkgid="bd7330c28f8c10fab8e5060701832685e6a3c165dc98073ca2639085e3586499" name="procps" arch="aarch64">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="0125cef96df0ba96a9aaec1f63707010797868128ebec4b8eb2205060c66b6e1" name="procps" arch="s390x">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="eb0377643bf652843d123fe0c49f49f2a8d036ee8d0388e133b589d8a70ec3dd" name="procps" arch="src">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="6309a13fec346626da406a3b29b9a9a49447a8099450bdf03a5f57e3812f8ab2" name="procps" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="150000.7.31.1"/>
  <changelog author="werner@suse.de" date="1499342400">- Add patch procps-ng-3.3.12-sysctl-iobuf.patch to increase I/O
  buffer for reading and writing values below /proc/sys (bsc#1039941)
- Add patch procps-ng-3.3.12-stable_secret.patch to avoid messages
  on unset /proc/sys/net/ipv6/conf/*/stable_secret due EIO</changelog>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
</package>
<package pkgid="d618645680262871a9b45a5380d2e9450395671858665d1f69a4ae867490c089" name="procps" arch="aarch64">
  <version epoch="0" ver="3.3.15" rel="150000.7.34.1"/>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
</package>
<package pkgid="44337690fb5fce1d6d2712fccda07797560df4db8d3048411fd334f2993abba5" name="procps" arch="s390x">
  <version epoch="0" ver="3.3.15" rel="150000.7.34.1"/>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
</package>
<package pkgid="cc73bdea361af280da49753f3986d1db01d412b4ca910f52e1ffa90c7d55463a" name="procps" arch="src">
  <version epoch="0" ver="3.3.15" rel="150000.7.34.1"/>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
</package>
<package pkgid="a889a099878b2c5a5efbe282820b36520cdf611d0b0b5e264493f7c03807a90d" name="procps" arch="x86_64">
  <version epoch="0" ver="3.3.15" rel="150000.7.34.1"/>
  <changelog author="schwab@linux-m68k.org" date="1501675200">- procps-ng-3.3.12-sysctl-iobuf.patch: fix crash</changelog>
  <changelog author="werner@suse.de" date="1513684800">- Add patch procps-ng-3.3.12-sysctl-iobuf-write.patch to use
  increased buffer on writing /proc/sys/net/ipv4/ip_local_reserved_ports</changelog>
  <changelog author="werner@suse.de" date="1517313600">- Remove patch procps-ng-3.3.12-sysctl-iobuf-write.patch (bsc#1077746)
- Add patches
  0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
  0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
  0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
  from my project https://gitlab.com/bitstreamout/procps/tree/procio
  which implements a flexible buffer for reading and writing values
  below /proc/sys (bsc#1039941)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="werner@suse.de" date="1522843200">- Update to procps-ng-3.3.13
  * library: Increment to 7:0:1
    No changes, no removals
    New fuctions: numa_init, numa_max_node, numa_node_of_cpu,
    numa_uninit, xalloc_err_handler
  * doc: Document I idle state in ps.1 and top.1           Debian #886967
  * free: fix some of the SI multiples                     issue #45
  * kill: -l space between name parses correctly           Debian #854407
  * library: dont use vm_min_free on non Linux             Debian #831396
  * library: dont use SIGPWR on FreeBSD                    Debian #832148
  * library: don't strip off wchan prefixes (ps &amp; top)     Redhat #1322111
  * pgrep: warn about 15+ char name only if -f not used
  * pgrep/pkill: only match in same namespace by default   merge #41
  * pidof: specify separator between pids                  merge #58
  * pkill: Return 0 only if we can kill process            Debian #852758
  * pmap: fix duplicate output line under '-x' option      Redhat #1374061
  * ps: avoid eip/esp address truncations                  Debian #846361
  * ps: recognizes SCHED_DEADLINE as valid CPU scheduler
  * ps: display NUMA node under which a thread ran         issue #58
  * ps: Add seconds display for cputime and time           merge #43
  * ps: Add LUID field                                     merge #57 Redhat #1518986
  * sysctl: Permit empty string for value                  issue #74
  * sysctl: Don't segv when file not available             issue #76
  * sysctl: Read and write large buffers                   merge #56
  * top: add config file support for XDG specification
  * top: eliminated minor libnuma memory leak
  * top: show fewer memory decimal places (configurable)   issue #50
  * top: provide command line switch for memory scaling    Redhat #1034466, issue #53
  * top: provide command line switch for CPU States        issue #55
  * top: provides more accurate cpu usage at startup       Redhat #1182327
  * top: display NUMA node under which a thread ran        issue #58
  * top: fix argument parsing quirk resulting in SEGV      Redhat #1450429
  * top: delay interval accepts non-locale radix point     Redhat #1182248
  * top: address a wishlist man page NLS suggestion        Debian #865689
  * top: fix potential distortion in 'Mem' graph display   issue #64
  * top: provide proper multi-byte string handling         issue #68
  * top: startup defaults are fully customizable           Redhat #1153049, #1499410, issues #6, #78
  * see man page 6c. SYSTEM Configuration File
  * watch: define HOST_NAME_MAX where not defined          Debian #830734
  * vmstat: Fix alignment for disk partition format        issue #69
  * watch: Support ANSI 39,49 reset sequences              issue #73
- Removed now patch now upstream
    0001-Preload-sysctl-lines-even-if-longer-than-stdio-buffe.patch
    0002-Add-flexible-buffered-I-O-based-on-fopencookie-3.patch
    0003-Use-new-standard-I-O-for-reading-writing-sysctl-valu.patch
    procps-ng-3.3.12-stable_secret.patch
    procps-ng-3.3.12-strtod.patch
    procps-ng-3.3.12-sysctl-a.patch
    procps-ng-3.3.12-sysctl-iobuf.patch
- Port patches
    procps-ng-3.3.10-bnc634071_procstat2.diff
    procps-ng-3.3.10-errno.patch
    procps-ng-3.3.10-fdleak.dif
    procps-ng-3.3.10-integer-overflow.patch
    procps-ng-3.3.10-large_pcpu.patch
    procps-ng-3.3.10-slab.patch
    procps-ng-3.3.11-pmap4suse.patch
    procps-ng-3.3.8-accuracy.dif
    procps-ng-3.3.8-bnc634840.patch
    procps-ng-3.3.8-ignore-scan_unevictable_pages.patch
    procps-ng-3.3.8-petabytes.patch
    procps-ng-3.3.8-readeof.patch
    procps-ng-3.3.8-tinfo.dif
    procps-ng-3.3.8-top.1.diff
    procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="werner@suse.de" date="1522929600">- Remove sysvinit boot script
- Add procps-rpmlintrc</changelog>
  <changelog author="jengelh@inai.de" date="1522929601">- Update descriptions.</changelog>
  <changelog author="werner@suse.de" date="1523534400">- Update to procps-ng-3.3.14
  * update translations
  * library: build on non-glibc systems
  * free: fix scaling on 32-bit systems
  * Revert "Support running with child namespaces"</changelog>
  <changelog author="werner@suse.de" date="1528200000">- Update to procps-ng-3.3.15 (bsc#1092100)
  * library: Increment to 8:0:1
    No removals, no new functions
    Changes: slab and pid structures
  * library: Just check for SIGLOST and don't delete it    issue #93
  * library: Fix integer overflow and LPE in file2strvec   CVE-2018-1124
  * library: Use size_t for alloc functions                CVE-2018-1126
  * library: Increase comm size to 64
  * pgrep: Fix stack-based buffer overflow                 CVE-2018-1125
  * pgrep: Remove &gt;15 warning as comm can be longer        issue #92
  * ps: Fix buffer overflow in output buffer, causing DOS  CVE-2018-1123
  * ps: Increase command name selection field to 64
  * top: Don't use cwd for location of config              CVE-2018-1122
- Increase so major number</changelog>
  <changelog author="werner@suse.de" date="1528286400">- Reference patch procps-ng-3.3.15-typo.patch</changelog>
  <changelog author="werner@suse.de" date="1547812800">- Add patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753) which
  is a backport of an upstream fix to get the first CPU summary correct</changelog>
  <changelog author="werner@suse.de" date="1576152000">- Add aptch procps-ng-3.3.16-comm_len.patch
  * "ps -C" does not allow anymore an argument longer than 15
    characters (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1600948800">- Replace patch procps-ng-3.3.16-comm_len.patch with upstream
  commitment patch procps-ng-3e1c00d0.patch (bsc#1158830)</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1619697600">- Add upstream patch procps-vmstat-1b9ea611.patch for bsc#1185417
  * Support up to 2048 CPU as well</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="werner@suse.de" date="1680177600">- Add patch bsc1209122-a6c0795d.patch
  * Fix for bsc#1209122 to allow `-´ as leading character to ignore
    possible errors on systctl entries</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
</package>
<package pkgid="2abfdd2efbe0404dbbef5aeedc82097b65d683cca64ac7c2196fa0c7b56b9e26" name="procps" arch="aarch64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="1635fb05c9843f06e08d1d9cca2bd45d8b9775ba32ff75a79d45d95d2d81ee18" name="procps" arch="s390x">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="e2189f2198af7034ccdd2076095e87e3818ec279c084b1aae6104e90022f8ba3" name="procps" arch="src">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="ec3b00c5c38b8dcc8e6d48cf96f7a2e74deddb1091548ea77e14bfd9e79c1936" name="procps" arch="x86_64">
  <version epoch="0" ver="3.3.17" rel="150000.7.37.1"/>
  <changelog author="mliska@suse.cz" date="1602072000">- Add upstream procps-check-sanity-of-SC_ARG_MAX.patch in order to fix
  pgrep: cannot allocate 4611686018427387903 bytes when ulimit -s is unlimited.</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612267200">- Package translations in procps-lang.</changelog>
  <changelog author="werner@suse.de" date="1612958400">- Update to procps-ng-3.3.17
  * library: Incremented to 8:3:0
    (no removals or additions, internal changes only)
  * all: properly handle utf8 cmdline translations         issue #176
  * kill: Pass int to signalled process                    merge #32
  * pgrep: Pass int to signalled process                   merge #32
  * pgrep: Check sanity of SG_ARG_MAX                      issue #152
  * pgrep: Add older than selection                        merge #79
  * pidof: Quiet mode                                      merge #83
  * pidof: show worker threads                             Redhat #1803640
  * ps.1: Mention stime alias                              issue #164
  * ps: check also match on truncated 16 char comm names
  * ps: Add exe output option                              Redhat #1399206
  * ps: A lot more sorting available                       merge #99
  * pwait: New command waits for a process                 merge #97
  * sysctl: Match systemd directory order                  Debian #950788
  * sysctl: Document directory order                       Debian #951550
  * top: ensure config file backward compatibility         Debian #951335
  * top: add command line 'e' for symmetry with 'E'        issue #165
  * top: add '4' toggle for two abreast cpu display        issue #172
  * top: add '!' toggle for combining multiple cpus
  * top: fix potential SEGV involving -p switch            merge #114
  * vmstat: Wide mode gives wider proc columns             merge #48
  * watch: Add environment variable for interval           merge #62
  * watch: Add no linewrap option                          issue #182
  * watch: Support more colors                             merge #106,#109
  * free,uptime,slabtop: complain about extra ops          issue #181
- Remove now obsolete upstream patches
  * procps-check-sanity-of-SC_ARG_MAX.patch
  * procps-ng-3e1c00d0.patch
- Port patches
  * procps-ng-3.3.10-integer-overflow.patch
  * procps-ng-3.3.10-large_pcpu.patch
  * procps-ng-3.3.8-accuracy.dif
  * procps-ng-3.3.8-bnc634840.patch
  * procps-ng-3.3.8-petabytes.patch
  * procps-ng-3.3.8-tinfo.dif
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-v3.3.3-read-sysctls-also-from-boot-sysctl.conf-kernelversion.diff</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1612958401">- Fix directory for Ukrainian man pages translations.
- Move localized man pages to lang package.
- Remove obsolete conditionals.
- Remove obsolete --enable-oomem option.
- Run spec-cleaner.</changelog>
  <changelog author="werner@suse.de" date="1613044800">- Add /usr/share/man/uk dir to file list for lang sub package</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1613995200">- Remove /usr/share/man/uk dir to file list for lang sub package:
  It's now provided by filesystem.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1615377600">- Don't install translated man pages for non-installed binaries
  (uptime, kill).</changelog>
  <changelog author="werner@suse.de" date="1617192000">- Add upstream patch procps-3.3.17-bsc1181976.patch based on
  commit 3dd1661a to fix bsc#1181976 that is change descripton
  of psr, which is for 39th field of /proc/[pid]/stat</changelog>
  <changelog author="werner@suse.de" date="1625227200">- Skip test suite on emulated riscv64 systems as the qemu process
  is unexpected on the command lines of processes</changelog>
  <changelog author="werner@suse.de" date="1642680000">- Correct used URLs</changelog>
  <changelog author="werner@suse.de" date="1643976000">- Add patch bsc1195468-23da4f40.patch to fix bsc#1195468 that is
  ignore SIGURG</changelog>
  <changelog author="werner@suse.de" date="1655899200">- Add the patches
  * procps-3.3.17-library-bsc1181475.patch
  * procps-3.3.17-top-bsc1181475.patch
  which are backports of current newlib tree to solve bug bsc#1181475
  * 'free' command reports misleading "used" value</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Some older products do not know about /usr/share/man/uk</changelog>
  <changelog author="werner@suse.de" date="1671105600">- Extend patch procps-3.3.17-library-bsc1181475.patch (bsc#1206412)
- Make sure that correct library version is installed (bsc#1206412)</changelog>
  <changelog author="lnussel@suse.com" date="1672142400">- Replace transitional %usrmerged macro with regular version check (boo#1206798)</changelog>
  <changelog author="werner@suse.de" date="1692100800">- Add patch CVE-2023-4016.patch
  * CVE-2023-4016: ps buffer overflow (bsc#1214290)</changelog>
  <changelog author="kukuk@suse.com" date="1692187200">- procps-ng-3.3.17-logind.patch: Backport from 4.x git, prefer
  logind over utmp (jsc#PED-3144)</changelog>
  <changelog author="werner@suse.de" date="1692360000">- Modify patches
  * procps-ng-3.3.9-w-notruncate.diff
  * procps-ng-3.3.17-logind.patch
  to real to not truncate output of w with option -n</changelog>
  <changelog author="werner@suse.de" date="1695211200">- Submit latest procps 3.3.17 to SLE-15 tree for jira#PED-3244
  and jira#PED-6369
- The patches now upstream had been dropped meanwhile
  * procps-vmstat-1b9ea611.patch (bsc#1185417)
  - For support up to 2048 CPU as well
  * bsc1209122-a6c0795d.patch (bnc#1209122)
  - allow `-´ as leading character to ignore possible errors
    on systctl entries
  * patch procps-ng-3.3.9-bsc1121753-Cpus.patch (bsc#1121753)
  - was a backport of an upstream fix to get the first CPU
    summary correct
- Enable pidof for SLE-15 as this is provided by sysvinit-tools
- Use a check on syscall __NR_pidfd_open to decide if
  the pwait tool and its manual page will be build</changelog>
</package>
<package pkgid="c19420815f2ae5f1abcd2169722b913aa683dce8ea7a09d2656137182658d57a" name="protobuf" arch="src">
  <version epoch="0" ver="25.1" rel="150400.9.3.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="4c71cd85a7073b85100a5af0c59c2c2aed49dca93b4bf20685033abe63f35b82" name="protobuf" arch="src">
  <version epoch="0" ver="25.1" rel="150400.9.6.1"/>
  <changelog author="dmueller@suse.com" date="1659614400">- add 10355.patch to fix soversioning</changelog>
  <changelog author="dmueller@suse.com" date="1660737600">- update to 21.5:
  PHP
  * Added getContainingOneof and getRealContainingOneof to descriptor.
  * fix PHP readonly legacy files for nested messages
  Python
  * Fixed comparison of maps in Python.</changelog>
  <changelog author="dmueller@suse.com" date="1663588800">- update to 21.6:
  C++:
  * Reduce memory consumption of MessageSet parsing</changelog>
  <changelog author="dmueller@suse.com" date="1667044800">- update to 21.9:
  * Ruby
  * Replace libc strdup usage with internal impl to restore musl compat (#10818)
  * Auto capitalize enums name in Ruby (#10454) (#10763)
  * Other
  * Fix for grpc.tools #17995 &amp; protobuf #7474 (handle UTF-8 paths in argumentfile) (#10721)
  * C++
  * 21.x No longer define no_threadlocal on OpenBSD (#10743)
  * Java
  * Mark default instance as immutable first to avoid race during static initialization of default instances (#10771)
  * Refactoring java full runtime to reuse sub-message builders and prepare to
    migrate parsing logic from parse constructor to builder.
  * Move proto wireformat parsing functionality from the private "parsing
    constructor" to the Builder class.
  * Change the Lite runtime to prefer merging from the wireformat into mutable
    messages rather than building up a new immutable object before merging. This
    way results in fewer allocations and copy operations.
  * Make message-type extensions merge from wire-format instead of building up
    instances and merging afterwards. This has much better performance.
  * Fix TextFormat parser to build up recurring (but supposedly not repeated)
    sub-messages directly from text rather than building a new sub-message and
    merging the fully formed message into the existing field.</changelog>
  <changelog author="dmueller@suse.com" date="1670241600">- update to 21.10:
  * Java
  * Use bit-field int values in buildPartial to skip work on unset groups of
    fields. (#10960)
  * Mark nested builder as clean after clear is called (#10984)</changelog>
  <changelog author="dmueller@suse.com" date="1670500800">- update to 21.11:
  * Python
  * Add license file to pypi wheels (#10936)
  * Fix round-trip bug (#10158)</changelog>
  <changelog author="dmueller@suse.com" date="1671105600">- update to v21.12:
  * Python
  * Fix broken enum ranges (#11171)
  * Stop requiring extension fields to have a sythetic oneof (#11091)
  * Python runtime 4.21.10 not works generated code can not load valid
    proto.</changelog>
  <changelog author="mliska@suse.cz" date="1679572800">- Enable LTO (boo#1133277).</changelog>
  <changelog author="adrian@suse.de" date="1682337600">- update to v22.3
  UPB (Python/PHP/Ruby C-Extension)
  * Remove src prefix from proto import
  * Fix .gitmodules to use the correct absl branch
  * Remove erroneous dependency on googletest
- update to 22.2:
  Java
  * Add version to intra proto dependencies and add kotlin stdlib
    dependency
  * Add $ back for osgi header
  * Remove $ in pom files
- update to 22.1:
  * Add visibility of plugin.proto to python directory
  * Strip "src" from file name of plugin.proto
  * Add OSGi headers to pom files.
  * Remove errorprone dependency from kotlin protos.
  * Version protoc according to the compiler version number.
- update to 22.0:
  * This version includes breaking changes to: Cpp.
    Please refer to the migration guide for information:
    https://protobuf.dev/support/migration/#compiler-22
  * [Cpp] Migrate to Abseil's logging library.
  * [Cpp] `proto2::Map::value_type` changes to `std::pair`.
  * [Cpp] Mark final ZeroCopyInputStream, ZeroCopyOutputStream,
    and DefaultFieldComparator classes.
  * [Cpp] Add a dependency on Abseil (#10416)
  * [Cpp] Remove all autotools usage (#10132)
  * [Cpp] Add C++20 reserved keywords
  * [Cpp] Dropped C++11 Support
  * [Cpp] Delete Arena::Init
  * [Cpp] Replace JSON parser with new implementation
  * [Cpp] Make RepeatedField::GetArena non-const in order to
    support split RepeatedFields.
  * long list of bindings specific fixes see
    https://github.com/protocolbuffers/protobuf/releases/tag/v22.0
- python sub packages version is set 4.22.3 as defined in
  python/google/protobuf/__init__.py to stay compatible
- skip python2 builds by default
- drop patches:
  * 10355.patch,
  * gcc12-disable-__constinit-with-c++-11.patch (merged upstream)
- added patches:
  * add-missing-stdint-header.patch   added for compile fixes</changelog>
  <changelog author="fstrba@suse.com" date="1682596800">- Make possible to build on older systems, like SLE12 that miss
  some of the used macros.</changelog>
  <changelog author="fstrba@suse.com" date="1682683200">- Mention the rpmlintrc file in the spec.</changelog>
  <changelog author="mpluskal@suse.com" date="1683633600">- Fix confusion in versions</changelog>
  <changelog author="dmueller@suse.com" date="1686484800">- drop python2 handling
- fix version handling and package the private libs again</changelog>
  <changelog author="dmueller@suse.com" date="1686657600">- update to 22.5:
  C++
  * Add missing cstdint header
  * Fix: missing -DPROTOBUF_USE_DLLS in pkg-config (#12700)
  * Avoid using string(JOIN..., which requires cmake 3.12
  * Explicitly include GTest package in examples
  * Bump Abseil submodule to 20230125.3 (#12660)
- update to 22.4:
  C++
  * Fix libprotoc: export useful symbols from .so
  * Fix btree issue in map tests.
  Python
  * Fix bug in _internal_copy_files where the rule would fail in
    downstream repositories.
  Other
  * Bump utf8_range to version with working pkg-config (#12584)
  * Fix declared dependencies for pkg-config
  * Update abseil dependency and reorder dependencies to ensure
    we use the version specified in protobuf_deps.
  * Turn off clang::musttail on i386</changelog>
  <changelog author="fvogt@suse.com" date="1686744000">- Add patch to fix linking ThreadSafeArena:
  * 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch
- Drop the protobuf-source package, no longer used</changelog>
  <changelog author="dmueller@suse.com" date="1688385600">- update to 23.3:
  C++
  * Regenerate stale files
  * Use the same ABI for static and shared libraries on non-
    Windows platforms
  * Add a workaround for GCC constexpr bug
  Objective-C
  * Regenerate stale files
  UPB (Python/PHP/Ruby C-Extension)
  * Fixed a bug in `upb_Map_Delete()` that caused crashes in
    map.delete(k) for Ruby when string-keyed maps were in use.
  Compiler
  * Add missing header to Objective-c generator
  * Add a workaround for GCC constexpr bug
  Java
  * Rollback of: Simplify protobuf Java message builder by
    removing methods that calls the super class only.
  Csharp
  * [C#] Replace regex that validates descriptor names
- drop 0001-Use-the-same-ABI-for-static-and-shared-libraries-on-.patch (upstream)</changelog>
  <changelog author="dmueller@suse.com" date="1688731200">- update to 23.4:
  * Add dllexport_decl for generated default instance.
  * Deps: Update Guava to 32.0.1</changelog>
  <changelog author="fstrba@suse.com" date="1698667200">- Build with source and target levels 8
  * fixes build with JDK21
- Install the pom file with the new %%mvn_install_pom macro
- Do not install the pom-only artifacts, since the %%mvn_install_pom
  macro resolves the variables at the install time</changelog>
  <changelog author="dmueller@suse.com" date="1703160000">- build against modern python on sle15</changelog>
  <changelog author="dmueller@suse.com" date="1704196800">- update to 25.1:
  * Raise warnings for deprecated python syntax usages
  * Add support for extensions in CRuby, JRuby, and FFI Ruby
  * Add support for options in CRuby, JRuby and FFI (#14594)
- update to 25.0:
  * Implement proto2/proto3 with editions
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Editions: Introduce functionality to protoc for generating
    edition feature set defaults.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Publish extension declarations with declaration
    verifications.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Protoc: parser rejects explicit use of map_entry option
  * Protoc: validate that reserved range start is before end
  * Protoc: support identifiers as reserved names in addition to
    string literals (only in editions)
  * Drop support for Bazel 5.
  * Allow code generators to specify whether or not they support
    editions.
  [#] C++
  * Set `PROTOBUF_EXPORT` on
    `InternalOutOfLineDeleteMessageLite()`
  * Update stale checked-in files
  * Apply PROTOBUF_NOINLINE to declarations of some functions
    that want it.
  * Implement proto2/proto3 with editions
  * Make JSON UTF-8 boundary check inclusive of the largest
    possible UTF-8 character.
  * Reduce `Map::size_type` to 32-bits. Protobuf containers can't
    have more than that
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Fix bug in reflection based Swap of map fields.
  * Add utf8_validation feature back to the global feature set.
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Add prefetching to arena allocations.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    repeated and map field accessors.
  * Editions: Migrate edition strings to enum in C++ code.
  * Create a reflection helper for ExtensionIdentifier.
  * Editions: Provide an API for C++ generators to specify their
    features.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    string field accessors.
  * Editions: Refactor feature resolution to use an intermediate
    message.
  * Fixes for 32-bit MSVC.
  * Publish extension declarations with declaration
    verifications.
  * Export the constants in protobuf's any.h to support DLL
    builds.
  * Implement AbslStringify for the Descriptor family of types.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    message field accessors.
  * Editions: Stop propagating partially resolved feature sets to
    plugins.
  * Editions: Migrate string_field_validation to a C++ feature
  * Editions: Include defaults for any features in the generated
    pool.
  * Introduce C++ feature for UTF8 validation.
  * Protoc: validate that reserved range start is before end
  * Remove option to disable the table-driven parser in protoc.
  * Lock down ctype=CORD in proto file.
  * Support split repeated fields.
  * In OSS mode omit some extern template specializations.
  * Allow code generators to specify whether or not they support
    editions.
  [#] Java
  * Implement proto2/proto3 with editions
  * Remove synthetic oneofs from Java gencode field accessor
    tables.
  * Timestamps.parse: Add error handling for invalid
    hours/minutes in the timezone offset.
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Add missing debugging version info to Protobuf Java gencode
    when multiple files are generated.
  * Fix a bad cast in putBuilderIfAbsent when already present due
    to using the result of put() directly (which is null if it
    currently has no value)
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Fix a NPE in putBuilderIfAbsent due to using the result of
    put() directly (which is null if it currently has no value)
  * Update Kotlin compiler to escape package names
  * Add MapFieldBuilder and change codegen to generate it and the
    put{field}BuilderIfAbsent method.
  * Introduce recursion limit in Java text format parsing
  * Consider the protobuf.Any invalid if typeUrl.split("/")
    returns an empty array.
  * Mark `FieldDescriptor.hasOptionalKeyword()` as deprecated.
  * Fixed Python memory leak in map lookup.
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Defines Protobuf compiler version strings as macros and
    separates out suffix string definition.
  * Add `ABSL_ATTRIBUTE_LIFETIME_BOUND` attribute on generated
    oneof accessors.
  * Ensure Timestamp.ToDatetime(tz) has correct offset
  * Do not check required field for upb python MergeFrom
  * Setting up version updater to prepare for poison pills and
    embedding version info into C++, Python and Java gencode.
  * Merge the protobuf and upb Bazel repos
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Emit __slots__ in pyi output as a tuple rather than a list
    for --pyi_out.
  * Fix a bug that strips options from descriptor.proto in
    Python.
  * Raise warings for message.UnknownFields() usages and navigate
    to the new add
  * Add protobuf python keyword support in path for stub
    generator.
  * Add tuple support to set Struct
  * ### Python C-Extension (Default)
  * Comparing a proto message with an object of unknown returns
    NotImplemented
  * Check that ffi-compiler loads before using it to define
    tasks.
  [#] UPB (Python/PHP/Ruby C-Extension)
  * Include .inc files directly instead of through a filegroup
  * Loosen upb for json name conflict check in proto2 between
    json name and field
  * Add utf8_validation feature back to the global feature set.
  * Do not check required field for upb python MergeFrom
  * Merge the protobuf and upb Bazel repos
  * Added malloc_trim() calls to Python allocator so RSS will
    decrease when memory is freed
  * Upb: fix a Python memory leak in ByteSize()
  * Support ASAN detection on clang
  * Upb: bugfix for importing a proto3 enum from within a proto2
    file
  * Expose methods needed by Ruby FFI using UPB_API
  * Fix `PyUpb_Message_MergeInternal` segfault</changelog>
</package>
<package pkgid="314e53cad091bbb792bc6bac4f8d14a5947b40bf4b01f48abfb4ff57f0f15bc7" name="protobuf" arch="src">
  <version epoch="0" ver="3.9.2" rel="150200.4.21.1"/>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new upstream release 3.5.0
  * Proto3 messages are now preserving unknown fields by default.
    If you rely on unknowns fields being dropped, use
    DiscardUnknownFields() explicitly.
  * Deprecated the unsafe_arena_release_* and
    unsafe_arena_add_allocated_* methods for string fields.
  * Added move constructor and move assignment to RepeatedField,
    RepeatedPtrField and google::protobuf::Any.
  * Added perfect forwarding in Arena::CreateMessage.
  * In-progress experimental support for implicit weak fields
    with lite protos. This feature allows the linker to strip out
    more unused messages and reduce binary size.
- Rename %soname to %sover to better reflect its use.</changelog>
  <changelog author="tchvatal@suse.com" date="1516622400">- Conditionalize python2 and python3 in order to be able to build
  without python2 present in distribution
  * Use singlespec macros to simplify the logic
- Run fdupes on python modules to avoid duplicates
- Remove shebangs from import-only code</changelog>
  <changelog author="mlin@suse.com" date="1519387200">- Add adding-Release_CompareAndSwap-64-bit-variant.patch
  * Fix compile error undefined reference to
    `google::protobuf::internal::Release_CompareAndSwap(long volatile*, long, long)'
    on s390x https://github.com/google/protobuf/issues/3937</changelog>
  <changelog author="tbechtold@suse.com" date="1526299200">update to version v3.5.2:
  * Update release date
  * Disable pip cache when testing uploaded packages
  * Replace private timelib_update_ts with public date_timestamp_get
  * Remove py2.6 support.
  * Cherrypick for csharp, including:
  * Update changelog
  * Update changelog for 3.5.1
  * Fix uploading binary wheel.
  * Fix memory leak when creating map field via array.
  * Update rake file to build of 2.1.6.
  * Avoid using php_date_get_date_ce() in case date extension is not
  * Update protoc-artfacts
  * Fix string::back() usage in googletest.cc
  * Fix memory leak in php7
  * Support ruby2.5
  * io_win32: support non-ASCII paths
  * Explicitly propagate the status of Flush().
  * Add discard unknown API in ruby. (#3990)
  * Update version for 3.5.0.post1
  * remove nullptr
  * Fix more memory leak for php c extension (#4211)
  * Bumping number to fix ruby 2.1 on mac
  * io_win32_unittest: remove incorrect error check
  * Fix memory leak when creating repeated field via array.
  * Update version number for php c extension (#3896)
  * Fix file permission for python package.
  * Create containing directory before generating well_known_types_embed.cc
  * Replace C++11 only method std::map::at
  * Recursively clear unknown fields in submessages. (#3982)
  * Update version number to 3.5.1
  * io_win32_unittest: fix condition in GetCwdAsUtf8
  * Add release log
  * io_win32_unittest: use CWD as last tempdir
  * Add PROTOBUF_ENABLE_TIMESTAMP to let user decide whether timestamp util
  * Add support for Windows ARM64 build
  * Add protobuf-all in post release
  * Use fully qualifed name for DescriptorPool in Any.php to avoid name (#3886)
  * Add _file_desc_by_toplevel_extension back
  * Fix setup.py for windows build.
  * io_win32_unittest: make //:win32_test run again
  * Provide discardUnknonwnFields API in php (#3976)
  * Update php c extension version number to 3.5.0.1
  * Fix ruby gc_test in ruby 2.4 (#4011)
  * Remove duplicate typedef. (#3975)
  * Accept DatetimeInterface in fromDatetime
  * io_win32: add more encoding-related tests
  * Bump version number to 3.5.2
  * Bump protoc-artifact version for a patch rebuild
  * Call php method via function name instead of calling directly.
  * Well known types are not initialized properly. (#4139)
  * Use matching enum type for IsPOD.
  * Fix several more memory leak
  * Fix for php5.5
  * Add backslach to make class explict in global namespace</changelog>
  <changelog author="tbechtold@suse.com" date="1536753600">- update to version v3.6.1:
  * PHP namespaces for nested messages and enums (#4536)
  * Allows the json marshaller to be passed json marshal options (#4252)
  * Make sure to delete temporary maps used by FileDescriptorTables
  * fix python cpp kokoro build
  * Change C# reflection to avoid using expression trees
  * Updated checked-in generated code
  * Removed unused variables in repeated_scalar_container.cc
  * Removed unused code pertaining to shared_ptr
  * Include no_package.proto in Python test
  * Only check filenames when end with .py in _CalledFromGeneratedFile() (#4262)
  * Convert descriptortype to type for upb_msgval_sizeof (#4357)
  * Removed duplicate using statement from ReflectionUtil.cs
  * Add support for power ppc64le
  * Cat the test-suite.log on errors for presubits
  * Address review comments
  * Add third-party RPC implementation: raster - a network framework supports pbrpc by 'service' keyword.
  * Delete javanano kokoro build configs.
  * Updated Ruby conformance test failure list
  * Removed use of some type traits
  * Adopt php_metadata_namespace in php code generator (#4622)
  * Move to Xcode 9.3 which also means a High Sierra image.
  * Add protoc release script for Linux build.
  * protoc-artifacts: Avoid storing temporary files and use fewer layers
  * Rewrite go_benchmark
  * Add files to build ruby artifact for mac on kokoro (#4814)
  * Remove javanano.
  * Comment out unused command from release script.
  * Avoid direct check of class name (#4601)
  * The JsonParseOptions::ignore_unknown_fields option behavior treats
  * Fix php memory leak test (#4692)
  * Fix benchmark build
  * Add VS2017 optional component dependency details to the C# readme (#4128)
  * Fix initialization with Visual Studio
  * For windows, all python version should use /MT (#4468)
  * use brew install instead of easy_install in OSX (#4537)
  * Sync upb change (#4373)
  * Always add -std=c++11 for mac (#4684)
  * Add kokoro build status badges.
  * Removed unrecognized option from no_package.proto
  * Fixed up proto3_lite_unittest.cc
  * Update Xcode settings
  * Cleanup LICENSE file.
  * Remove js_embed binary. (#4709)
  * Fixed JS parsing of unspecified map keys
  * Update version number to 3.6.0
  * Deliberately call simple code to avoid Unity linker pruning
  * Revert "Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources."
  * protoc-artifacts: Use ENTRYPOINT to enable devtoolset-1.1
  * MinGW build failed
  * Support using MSVC intrinsics in Log2FloorNonZero
  * Fix array constructor in c extension for compatibility (#4667)
  * Add space between class name and concat message (#4577)
  * fix python
  * Add performance.md and add instruction for linking tcmalloc
  * Add script for run and upload the benchmark result to bq
  * Add test for failing write of raw pointer to output stream
  * [objectivec] Fix memory leak of exceptions raised by RaiseException() (#4556)
  * Remove stray indent on normal imports.
  * Fix python ext build on kokoro (#4527)
  * Add compile test sources for to test include order.
  * Fixed a Visual Studio 2017 build error. (#4488)
  * fix linux kokoro build in docker
  * Fixes MSVC compiler warning C4800 "Forcing value to bool 'true' or 'false'" (#4350)
  * Updated Docker setup to use GCC 4.8
  * Remove broken build status icons.
  * Run autogen.sh in release script.
  * Output *_pb2_grpc.py when use_grpc_plugin=True
  * Adopt ruby_package in ruby generated code. (#4627)
  * Cygwin build failed
  * Work around an "old runtime" issue with reflection
  * Added Kokoro protoc release build for OS X (#4770)
  * Updated change log for 3.6.1 release
  * Move methods out of class (#4697)
  * Fix to allow AOT compilers to play nicely with reflection
  * Update Makefile.am for Java lite files.
  * Added map_lite_test.proto to fix LiteTest
  * Introduce a compatiblity shim to support .NET 3.5 delegate creation
  * Revert "Removed mention of Buffer in byteSourceToUint8Array"
  * Add gogo benchmark
  * Set ext.no_native = true for non mac platform
  * Removed atomicops.h since it is no longer used
  * Rename a shadowed variable.
  * Add kokoro bazel configs for 3.6.x branch.
  * Deleted scoped_ptr.h
  * Check the message to be encoded is the wrong type. (#4885) (#4949)
  * protoc-artifacts: Avoid checking out protobuf code
  * Add conformance test for null value in list JSON
  * Build ruby gem on kokoro (#4819)
  * Try using a new version of Visual Studio on AppVeyor
  * Make ruby release configs consistent with protoc.
  * fix for API change in PHP 7.3 (#4898)
  * Add .proto files to extract_includes.bat
  * Update protoc build scripts.
  * Blacklist all WELL_KNOWN_PROTOS from Bazel C++ code generation.
  * Additional support for building and deploying ppcle_64 artifacts
  * Fix php tests
  * Cleanup + documentation for Java Lite runtime.
  * Added Kokoro Windows release build config for protoc (#4766)
  * typo
  * fix golang kokoro linux build
  * Fix spelling error of __GNUC_MINOR__
  * Update code to work for Xcode 10b1 (#4729)
  * Added pyext/thread_unsafe_shared_ptr.h
  * Added missing .inc files to BUILD
  * js message support for jstype string on integers (#4332)
  * Improve error message when googletest is missing.
  * Make assertEquals pass for message (#4947)
  * Sync internal benchmark changes
  * Removed some unused C++ source files
  * Fix missing LIBPROTOC_EXPORT.
  * Added new test source files to Makefile.am
  * Update php version to 3.6.0 (#4736)
  * Fix RepeatedField#delete_if (#4292)
  * Merge branch (#4466)
  * Implement array constructor in php c extension.
  * protoc-artifacts: Update centos base from 6.6 to 6.9
  * PHP array constructors for protobuf messages (#4530)
  * Fix problem: cmake build failed in c++11  by clang
  * Don't assume Windows builds use MSVC.
  * Use legacy name in php runtime (#4741)
  * Add file option php_metadata_namespace and ruby_package (#4609)
  * Fix cpp benchmark dependency on mac
  * Use the first enum value instead of 0 in DefaultValueObjectWriter::FindEnumDefault
  * Check return value on write of raw pointer
  * Delete unused directories.
  * Replace //:protoc and similar default macro arguments with
  * Add extra C# file to Makefile.am
  * includes the expected class in the exception, otherwise the error is harder to track down (#3371)
  * Update instructions about getting protobuf source.
  * Add cpp tests under release docker image.
  * fix java benchmark, fix dashboard build
  * `update_file_lists.sh` depends on Bash features, thus needs Bash sebang.
  * Rename build_artifacts.cfg to release.cfg (#4818)
  * Fix bug: whether always_print_enums_as_ints is true or false, it always print the default value of enums as strings
  * source code info for interpreted options; fix source code info for extension range options (#4342)
  * Updated version numbers to 3.6.1
  * Trim imports for bundled generated protos.
  * Require C++11 and pass -std=c++11
  * Remove the iOS Test App.
  * fix duplicate mkdir in update_file_lists.sh
  * Updated csharp/README.md to reflect testing changes
  * Fix bazel build of examples.
  * Add missing ruby/tests/test_ruby_package.proto
  * Fix cpp_distcheck
  * Updated the change log with changes for 3.6.0
  * some fix
  * CMake: Update CXX Standard management
  * Add the files added in #4485.
  * Change to deal all messages in one loop
  * Fix php conformance test.
  * Add __init__.py files to compiler and util subpackages (#4117)
  * Updated .gitignore to exclude downloaded gmock/ directory
  * Fix error in Clang UndefinedBehaviorSanitizer
  * Work around MSVC issue with std::atomic initialization (#4777)
  * Updated conformance failure lists
  * Add back GeneratedClassName to public (#4686)
  * Add continuous test for ruby 2.3, 2.4 and 2.5 (#4829)
  * Throw error if user want to access message properties (#4603)
  * fix json_decode call parameters (#4381)
  * Move `compiler/plugin.pb.cc` to libprotobuf with the other WKT sources.
  * PHP: fixed typo in message.c
  * Add go benchmark
  * Allow list values to be null when parsing
  * Added instruction for existing ZLIB configuration
  * Fix 32bit php tests
  * Removed javanano from post_process_dist.sh
  * Don't generate imports for the WKTs unless generating the WKTs.
  * For encoding upb needs descriptor type instead of type. (#4354)
  * Include googletest as a submodule (#3993)
  * Write messages to backing field in generated C# cloning code (#4440)
  * Integrated internal changes from Google
- Drop adding-Release_CompareAndSwap-64-bit-variant.patch . Applied
  upstream.
- bump soname version</changelog>
  <changelog author="fstrba@suse.com" date="1545048000">- Add maven pom files to the protobuf-java package</changelog>
  <changelog author="mrostecki@suse.de" date="1546948800">- Add protobuf-source package - some programs using gRPC and
  protobuf need protobuf definitions which are included inside the
  source code, but are not included in the devel package.</changelog>
  <changelog author="mrostecki@opensuse.org" date="1550664000">- Add upstream patch which fixes build with Bazel 0.22.0.
  * 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch</changelog>
  <changelog author="mliska@suse.cz" date="1556107200">- Disable LTO (boo#1133277).</changelog>
  <changelog author="jengelh@inai.de" date="1559736000">- Update to new upstream release 3.8.0
  * Introduced new MOMI (maybe-outside-memory-interval) parser.
  * Added use of C++ override keyword where appropriate.
  * Always declare enums to be int-sized.
  * Append '_' to C++ reserved keywords for message, enum, extension.
- Remove 0001-remove-PACKAGE_NAME-and-REPOSITORY_NAME-deprecated.patch
  (upstreamed)</changelog>
  <changelog author="fstrba@suse.com" date="1559995200">- Specify java source and target levels in order to build
  compatible protobuf-java binaries</changelog>
  <changelog author="jengelh@inai.de" date="1566475200">- Update to new upstream release 3.9.1
  * Optimized the implementation of RepeatedPtrFieldBase.
  * Added delimited parse and serialize util.
  * Added FieldDescriptor::PrintableNameForExtension() and
    DescriptorPool::FindExtensionByPrintableName(). The latter
    will replace Reflection::FindKnownExtensionByName().
  * Created a new Add method in repeated field that allows adding
    a range of elements all at once.
  * Drop building wheel for Python 3.4.</changelog>
  <changelog author="fstrba@suse.com" date="1569585600">- Package also the protobuf-bom pom file</changelog>
  <changelog author="mmnelemane@suse.com" date="1576756800">- Updated to version 3.9.2 (bsc#1162343)
  (Objective-C)
  * Remove OSReadLittle* due to alignment requirements. (#6678)
  * Don't use unions and instead use memcpy for the type swaps. (#6672)</changelog>
  <changelog author="mpluskal@suse.com" date="1576843200">- Use tarball provided by upstream
- Small package cleanup</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Add missing dependency of python subpackages on python-six
  (bsc#1177127).</changelog>
  <changelog author="mcepl@suse.com" date="1612958400">- Fix Requires for python3 to python3-six.</changelog>
  <changelog author="mlin@suse.com" date="1647000000">- Fix incorrect parsing of nullchar in the proto symbol, CVE-2021-22570,
  bsc#1195258
  * Add protobuf-CVE-2021-22570.patch</changelog>
  <changelog author="mlin@suse.com" date="1664884800">- Fix potential Denial of Service in protobuf-java in the parsing procedure
  for binary data, CVE-2021-22569, bsc#1194530
  * Add protobuf-improve-performance-of-parsing-unknown-fields-in-Java.patch</changelog>
  <changelog author="mlin@suse.com" date="1666267200">- Fix a potential DoS issue in protobuf-cpp and protobuf-python,
  CVE-2022-1941, bsc#1203681
  * Add protobuf-CVE-2022-1941.patch
- Fix a potential DoS issue when parsing with binary data in
  protobuf-java, CVE-2022-3171, bsc#1204256
  * Add protobuf-CVE-2022-3171.patch
- Refresh protobuf-CVE-2021-22570.patch
- Backport changes from 3.16.x tree for apply recent CVE patches
  * Add protobuf-51026d922970e06475f005b39287963594134b96.patch
  * Add protobuf-6ee16a9c60e734104aeb738503fe3f411c97bd88.patch
  * Add protobuf-73e0d748b9acdc40b693f2879ce82ecb1a849b81.patch
  * Add protobuf-7bff8393cab939bfbb9b5c69b3fe76b4d83c41ee.patch
  * Add protobuf-4f02f056b5cea99052bfdfb6698afe47a3cf2964.patch
  * Add protobuf-763c3588740b97e8e80b1b1a1a2dc4f417647133.patch
  * Add protobuf-6c92f9dff1807c142edf6780d775b58a3b078591.patch
  * Add protobuf-4e93585e8bb234efeacb7737b8d080968c5ab91e.patch
  * Add protobuf-58d4420e2dd8a3cd354fff9db0052881c25369ce.patch
- Reorganize patch set ordering</changelog>
</package>
<package pkgid="87b1e4bb8be7090e984b90e935adc06e6fd13ed8a62a1a2ce24340e1fe3307dc" name="psmisc" arch="aarch64">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="b0f86ff0194d03fcbe3d2381af283cb10b1dabd1d3fe54edff28b8c626adec76" name="psmisc" arch="s390x">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="923635f6a3370a2941eeb76981310a7b4b42dcbd5b300bdfd0135f681601edbf" name="psmisc" arch="src">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="7ddc64d7d38eb5278472270a1e7c1503bc9da3833579c425ab19cb404f381856" name="psmisc" arch="x86_64">
  <version epoch="0" ver="23.0" rel="150000.6.25.1"/>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
  <changelog author="werner@suse.de" date="1529668800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to make fuser option -m &lt;block_device&gt; work even with mountinfo
  (bsc#1098697)</changelog>
  <changelog author="werner@suse.de" date="1540296000">- Support also btrFS entries in mountinfo, that is use stat(2) to
  determine the device of the mounted subvolume (bsc#1098697, bsc#1112780)
  this modifies patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1542196800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to handle sub volumes of the btrFS (bsc#1112780)</changelog>
  <changelog author="werner@suse.de" date="1543579200">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Always initialize head of simple linked list (bsc#1098697)
  * stat(2) on binary does not see subvol dev</changelog>
  <changelog author="werner@suse.de" date="1587988800">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Allow not unique mounts as well as not unique mountpoint (bsc#1170247)</changelog>
  <changelog author="werner@suse.de" date="1614945600">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1178407: fuser does not show open kvm storage image files
    such as qcow2 files. Patch from Ali Abdallah &lt;ali.abdallah@suse.com&gt;</changelog>
  <changelog author="werner@suse.de" date="1621339200">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Fix bsc#1185208 to make private mount namespaces work as well
    as to distinguish NFS mounts from same remote device share.</changelog>
  <changelog author="werner@suse.de" date="1644840000">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Determine the namespace of a process only once to speed
    up the parsing of fdinfo (bsc#1194172).</changelog>
  <changelog author="werner@suse.de" date="1646222400">- Change patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  * Add a fallback if the system call name_to_handle_at() is
    not supported by the used file system.
- Add patch psmisc-22.21-semaphores.patch
  * Replace the synchronizing over pipes of the sub process for the
    stat(2) system call with mutex and conditions from pthreads(7)
    (bsc#1194172)
- Add patch psmisc-22.21-statx.patch
  * Use statx(2) or SYS_statx system call to replace the stat(2)
    system call and avoid the sub process at all (bsc#1194172)</changelog>
  <changelog author="werner@suse.de" date="1698062400">- Fix version at configure time as there was no .tarball-version</changelog>
</package>
<package pkgid="342ef49c655cf4bcecd2391b39fb6567f2657b7adf19a90700d2ed247f206557" name="pulseaudio" arch="src">
  <version epoch="0" ver="15.0" rel="150400.4.2.2"/>
  <changelog author="tiwai@suse.de" date="1611921600">- Drop the bad patch: pulseaudio-wrong-memset.patch
  the patch has been wrongly refreshed, mutated into a harmful form.
  The original bug has been already fixed in the upstream commit 764eabd10.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Provide pulseaudio-daemon capability so pipewire-pulseaudio can
  also provide that capability instead of providing 'pulseaudio'
  itself which makes it difficult to recommend the pulseaudio
  package (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Let pulseaudio-utils require any pulseaudio-daemon provider
  so parecord and the other utils can be used with other
  pulseaudio implementations</changelog>
  <changelog author="tiwai@suse.de" date="1614600000">- Upstream fixes for supporting HFP in native backend (bsc#1167940):
  0001-bluetooth-use-consistent-profile-names.patch
  0002-bluetooth-separate-HSP-and-HFP.patch
  0003-bluetooth-add-correct-HFP-rfcomm-negotiation.patch
  0004-bluetooth-make-native-the-default-backend.patch
  0005-bluetooth-enable-module-bluez5-discover-argument-ena.patch
  0006-bluetooth-fix-headset-auto-ofono-handover.patch
  0007-bluetooth-prefer-headset-HFP-HF-connection-with-nati.patch
  0008-bluetooth-complete-bluetooth-profile-separation.patch
  0009-bluetooth-use-device-flag-to-prevent-assertion-failu.patch
  0010-bluetooth-rename-enable_hs_role-to-enable_shared_pro.patch
  0011-bluetooth-clean-up-rfcomm_write-usage.patch</changelog>
  <changelog author="mwilck@suse.com" date="1615809600">- Fix "Failed to open audio file" for FLAC and OGG (bsc#1183546)
  parecord-fix-Failed-to-open-audio-file-for-FLAC-and-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- move license to licensedir</changelog>
  <changelog author="mwilck@suse.com" date="1618833600">- Really fix recording OGG with parecord (bsc#1183546)
  parecord-really-fix-recording-OGG.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1624708800">- Change to using systemd-sysusers
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers</changelog>
  <changelog author="oholecek@suse.com" date="1627992000">- Update to PulseAudio 15
  - drop esound compat support
  - drop gconf support
  - convert to mason build system
  - disable doxygen doc generation
  - droped patches:
    drop bluetooth patches integrated in release:
    0001-bluetooth-use-consistent-profile-names.patch
    0002-bluetooth-separate-HSP-and-HFP.patch
    0003-bluetooth-add-correct-HFP-rfcomm-negotiation.patch
    0004-bluetooth-make-native-the-default-backend.patch
    0005-bluetooth-enable-module-bluez5-discover-argument-ena.patch
    0006-bluetooth-fix-headset-auto-ofono-handover.patch
    0007-bluetooth-prefer-headset-HFP-HF-connection-with-nati.patch
    0008-bluetooth-complete-bluetooth-profile-separation.patch
    0009-bluetooth-use-device-flag-to-prevent-assertion-failu.patch
    0010-bluetooth-rename-enable_hs_role-to-enable_shared_pro.patch
    0011-bluetooth-clean-up-rfcomm_write-usage.patch
    drop parecord patches integrated in release
    parecord-fix-Failed-to-open-audio-file-for-FLAC-and-.patch
    parecord-really-fix-recording-OGG.patch
  - refresh disabled-start.diff patch
  - new features:
  * Support for LDAC and AptX bluetooth codecs, plus "SBC XQ" (SBC with higher-quality parameters)
  * Support for HFP bluetooth profiles
  * Support for Bluetooth A2DP AVRCP Absolute Volume
  * ALSA path configuration files can now be placed in user home directory
  * module-virtual-surround-sink rewritten
  * More options for module-jackdbus-detect
  * Improved hardware support
  * SteelSeries Arctis 9
  * HP Thunderbolt Dock 120W G2
  * Behringer U-Phoria UMC22
  * OnePlus Type-C Bullets
  * Sennheiser GSX 1000/1200 PRO
  * New udev variable: PULSE_MODARGS
  * max_latency_msec argument added to module-null-source
  * module-filter-apply can take filter parameters from device properties
  * module-match can now be loaded multiple times
  * Improvements to FreeBSD support
  * Windows support added to Meson
  * Additional commands for pactl
  * Card profiles can be set to sticky
  * The startup script can now read additional configuration from the /etc/pulse/default.pa.d/ directory
  * * Notes for application developers
  * New API for sending messages from clients to PulseAudio objects
  * New mechanism for applications to disable shared memory on their connection to PulseAudio
  ( https://www.freedesktop.org/wiki/Software/PulseAudio/Notes/15.0/ )</changelog>
  <changelog author="tiwai@suse.de" date="1629892800">- Drop SDL_AUDIODRIVER override, as SDL already prefers PA as
  default; this also fixes the recent breakage with SDL2 (bsc#1189778)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).
- Require perl-XML-Parser explicitly, it's needed by build.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633348800">- Split sysusers.d file to separate package as needed by brltty
  (bsc#1191465)</changelog>
  <changelog author="jengelh@inai.de" date="1633694400">- Make system-user-pulse noarch</changelog>
  <changelog author="tiwai@suse.de" date="1637064000">- Use system-user-pulse instead of user(pulse) for PreReq;
  otherwise a new project can't resolve</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637150400">- Revert last change and BuildIgnore user(pulse) instead.</changelog>
  <changelog author="tiwai@suse.de" date="1637668800">- Improving the handling with pipewire (bsc#1188516):
  * Split the setup script to a sub-package pulseaudio-setup to be
    shared with pipewire-pulseaudio package
  * Modified setup script to adapt pipewire-pulse</changelog>
  <changelog author="tiwai@suse.de" date="1640865600">- Fix a typo in padsp LD_PRELOAD setup (bsc#1194074)</changelog>
  <changelog author="dimstar@opensuse.org" date="1641384000">- Fix parameters passed to meson:
  * access-group, =&gt; access_group, system-group =&gt; system_group,
    and system-user =&gt; system_user for them to actually have an
    effect.</changelog>
  <changelog author="tiwai@suse.de" date="1642161600">- Workaround for spurious errors in dump-modules command
  (bsc#1194379):
  pulseaudio-dump-module-Ignore-invalid-module-init-tools.patch</changelog>
</package>
<package pkgid="6c293e0c3176a46b62dc4c45577e963f7ede4960517157027555f92ed501c306" name="pulseaudio" arch="src">
  <version epoch="0" ver="15.0" rel="150400.4.4.1"/>
  <changelog author="tiwai@suse.de" date="1611921600">- Drop the bad patch: pulseaudio-wrong-memset.patch
  the patch has been wrongly refreshed, mutated into a harmful form.
  The original bug has been already fixed in the upstream commit 764eabd10.</changelog>
  <changelog author="alarrosa@suse.com" date="1614254400">- Provide pulseaudio-daemon capability so pipewire-pulseaudio can
  also provide that capability instead of providing 'pulseaudio'
  itself which makes it difficult to recommend the pulseaudio
  package (boo#1182730).</changelog>
  <changelog author="alarrosa@suse.com" date="1614254401">- Let pulseaudio-utils require any pulseaudio-daemon provider
  so parecord and the other utils can be used with other
  pulseaudio implementations</changelog>
  <changelog author="tiwai@suse.de" date="1614600000">- Upstream fixes for supporting HFP in native backend (bsc#1167940):
  0001-bluetooth-use-consistent-profile-names.patch
  0002-bluetooth-separate-HSP-and-HFP.patch
  0003-bluetooth-add-correct-HFP-rfcomm-negotiation.patch
  0004-bluetooth-make-native-the-default-backend.patch
  0005-bluetooth-enable-module-bluez5-discover-argument-ena.patch
  0006-bluetooth-fix-headset-auto-ofono-handover.patch
  0007-bluetooth-prefer-headset-HFP-HF-connection-with-nati.patch
  0008-bluetooth-complete-bluetooth-profile-separation.patch
  0009-bluetooth-use-device-flag-to-prevent-assertion-failu.patch
  0010-bluetooth-rename-enable_hs_role-to-enable_shared_pro.patch
  0011-bluetooth-clean-up-rfcomm_write-usage.patch</changelog>
  <changelog author="mwilck@suse.com" date="1615809600">- Fix "Failed to open audio file" for FLAC and OGG (bsc#1183546)
  parecord-fix-Failed-to-open-audio-file-for-FLAC-and-.patch</changelog>
  <changelog author="dmueller@suse.com" date="1615896000">- move license to licensedir</changelog>
  <changelog author="mwilck@suse.com" date="1618833600">- Really fix recording OGG with parecord (bsc#1183546)
  parecord-really-fix-recording-OGG.patch</changelog>
  <changelog author="gmbr3@opensuse.org" date="1624708800">- Change to using systemd-sysusers
- Remove old SUSE RPM constructs</changelog>
  <changelog author="gmbr3@opensuse.org" date="1626609600">- Remove unneeded shadow dependency, no longer required due to
  systemd-sysusers</changelog>
  <changelog author="oholecek@suse.com" date="1627992000">- Update to PulseAudio 15
  - drop esound compat support
  - drop gconf support
  - convert to mason build system
  - disable doxygen doc generation
  - droped patches:
    drop bluetooth patches integrated in release:
    0001-bluetooth-use-consistent-profile-names.patch
    0002-bluetooth-separate-HSP-and-HFP.patch
    0003-bluetooth-add-correct-HFP-rfcomm-negotiation.patch
    0004-bluetooth-make-native-the-default-backend.patch
    0005-bluetooth-enable-module-bluez5-discover-argument-ena.patch
    0006-bluetooth-fix-headset-auto-ofono-handover.patch
    0007-bluetooth-prefer-headset-HFP-HF-connection-with-nati.patch
    0008-bluetooth-complete-bluetooth-profile-separation.patch
    0009-bluetooth-use-device-flag-to-prevent-assertion-failu.patch
    0010-bluetooth-rename-enable_hs_role-to-enable_shared_pro.patch
    0011-bluetooth-clean-up-rfcomm_write-usage.patch
    drop parecord patches integrated in release
    parecord-fix-Failed-to-open-audio-file-for-FLAC-and-.patch
    parecord-really-fix-recording-OGG.patch
  - refresh disabled-start.diff patch
  - new features:
  * Support for LDAC and AptX bluetooth codecs, plus "SBC XQ" (SBC with higher-quality parameters)
  * Support for HFP bluetooth profiles
  * Support for Bluetooth A2DP AVRCP Absolute Volume
  * ALSA path configuration files can now be placed in user home directory
  * module-virtual-surround-sink rewritten
  * More options for module-jackdbus-detect
  * Improved hardware support
  * SteelSeries Arctis 9
  * HP Thunderbolt Dock 120W G2
  * Behringer U-Phoria UMC22
  * OnePlus Type-C Bullets
  * Sennheiser GSX 1000/1200 PRO
  * New udev variable: PULSE_MODARGS
  * max_latency_msec argument added to module-null-source
  * module-filter-apply can take filter parameters from device properties
  * module-match can now be loaded multiple times
  * Improvements to FreeBSD support
  * Windows support added to Meson
  * Additional commands for pactl
  * Card profiles can be set to sticky
  * The startup script can now read additional configuration from the /etc/pulse/default.pa.d/ directory
  * * Notes for application developers
  * New API for sending messages from clients to PulseAudio objects
  * New mechanism for applications to disable shared memory on their connection to PulseAudio
  ( https://www.freedesktop.org/wiki/Software/PulseAudio/Notes/15.0/ )</changelog>
  <changelog author="tiwai@suse.de" date="1629892800">- Drop SDL_AUDIODRIVER override, as SDL already prefers PA as
  default; this also fixes the recent breakage with SDL2 (bsc#1189778)</changelog>
  <changelog author="sbrabec@suse.com" date="1631793600">- Remove obsolete translation-update-upstream support
  (jsc#SLE-21105).
- Require perl-XML-Parser explicitly, it's needed by build.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1633348800">- Split sysusers.d file to separate package as needed by brltty
  (bsc#1191465)</changelog>
  <changelog author="jengelh@inai.de" date="1633694400">- Make system-user-pulse noarch</changelog>
  <changelog author="tiwai@suse.de" date="1637064000">- Use system-user-pulse instead of user(pulse) for PreReq;
  otherwise a new project can't resolve</changelog>
  <changelog author="gmbr3@opensuse.org" date="1637150400">- Revert last change and BuildIgnore user(pulse) instead.</changelog>
  <changelog author="tiwai@suse.de" date="1637668800">- Improving the handling with pipewire (bsc#1188516):
  * Split the setup script to a sub-package pulseaudio-setup to be
    shared with pipewire-pulseaudio package
  * Modified setup script to adapt pipewire-pulse</changelog>
  <changelog author="tiwai@suse.de" date="1640865600">- Fix a typo in padsp LD_PRELOAD setup (bsc#1194074)</changelog>
  <changelog author="dimstar@opensuse.org" date="1641384000">- Fix parameters passed to meson:
  * access-group, =&gt; access_group, system-group =&gt; system_group,
    and system-user =&gt; system_user for them to actually have an
    effect.</changelog>
  <changelog author="tiwai@suse.de" date="1642161600">- Workaround for spurious errors in dump-modules command
  (bsc#1194379):
  pulseaudio-dump-module-Ignore-invalid-module-init-tools.patch</changelog>
</package>
<package pkgid="619a7c965c928f4765006d367d81b32df363fcb0c6497725907ea321ce744749" name="python-Jinja2" arch="src">
  <version epoch="0" ver="2.10.1" rel="150000.3.13.1"/>
  <changelog author="dmueller@suse.com" date="1373544000">- update to 2.7:
  - Choice and prefix loaders now dispatch source and template lookup
    separately in order to work in combination with module loaders as
    advertised.
  - Fixed filesizeformat.
  - Added a non-silent option for babel extraction.
  - Added `urlencode` filter that automatically quotes values for
    URL safe usage with utf-8 as only supported encoding.  If applications
    want to change this encoding they can override the filter.
  - Added `keep-trailing-newline` configuration to environments and
    templates to optionally preserve the final trailing newline.
  - Accessing `last` on the loop context no longer causes the iterator
    to be consumed into a list.
  - Python requirement changed: 2.6, 2.7 or &gt;= 3.3 are required now,
    supported by same source code, using the "six" compatibility library.
  - Allow `contextfunction` and other decorators to be applied to `__call__`.
  - Added support for changing from newline to different signs in the `wordwrap`
    filter.
  - Added support for ignoring memcache errors silently.
  - Added support for keeping the trailing newline in templates.
  - Added finer grained support for stripping whitespace on the left side
    of blocks.
  - Added `map`, `select`, `reject`, `selectattr` and `rejectattr`
    filters.
  - Added support for `loop.depth` to figure out how deep inside a recursive
    loop the code is.
  - Disabled py_compile for pypy and python 3.</changelog>
  <changelog author="dmueller@suse.com" date="1376395200">- update to 2.7.1:
  - Fixed a bug with ``call_filter`` not working properly on environment
  and context filters.
  - Fixed lack of Python 3 support for bytecode caches.
  - Reverted support for defining blocks in included templates as this
  broke existing templates for users.
  - Fixed some warnings with hashing of undefineds and nodes if Python
  is run with warnings for Python 3.
  - Added support for properly hashing undefined objects.
  - Fixed a bug with the title filter not working on already uppercase
  strings.</changelog>
  <changelog author="speilicke@suse.com" date="1378123200">- Avoid "Recommends:" on old rpm distros</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="dmueller@suse.com" date="1389614400">- update to 2.7.2:
  - Prefix loader was not forwarding the locals properly to
    inner loaders.  This is now fixed.
  - Security issue: Changed the default folder for the filesystem cache to be
    user specific and read and write protected on UNIX systems.  See `Debian bug
    734747`_ for more information.</changelog>
  <changelog author="dmueller@suse.com" date="1398513600">- avoid rebuildcycle with vim</changelog>
  <changelog author="hpj@urpla.net" date="1399550400">- fix package build (file selection missing)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Update to 2.7.3 (bnc#858239, CVE-2014-0012)
  - Security issue: Corrected the security fix for the cache folder.
    This fix was provided by RedHat.</changelog>
  <changelog author="mcihar@suse.cz" date="1408104000">- adjust dependency to use up to date package name for python-MarkupSafe</changelog>
  <changelog author="mcihar@suse.cz" date="1408104001">- run testsuite during build</changelog>
  <changelog author="jengelh@inai.de" date="1437566400">- Use %python_version over %py_ver: better portability to RHEL</changelog>
  <changelog author="aplanas@suse.com" date="1447934400">- Update to 2.8
  - Added `target` parameter to urlize function.
  - Added support for `followsymlinks` to the file system loader.
  - The truncate filter now counts the length.
  - Added equalto filter that helps with select filters.
  - Changed cache keys to use absolute file names if available
    instead of load names.
  - Fixed loop length calculation for some iterators.
  - Changed how Jinja2 enforces strings to be native strings in
    Python 2 to work when people break their default encoding.
  - Added :func:`make_logging_undefined` which returns an undefined
    object that logs failures into a logger.
  - If unmarshalling of cached data fails the template will be
    reloaded now.
  - Implemented a block ``set`` tag.
  - Default cache size was incrased to 400 from a low 50.
  - Fixed ``is number`` test to accept long integers in all Python versions.
  - Changed ``is number`` to accept Decimal as a number.
  - Added a check for default arguments followed by non-default arguments. This
    change makes ``{% macro m(x, y=1, z) %}...{% endmacro %}`` a syntax error. The
    previous behavior for this code was broken anyway (resulting in the default
    value being applied to `y`).
  - Add ability to use custom subclasses of ``jinja2.compiler.CodeGenerator`` and
    ``jinja2.runtime.Context`` by adding two new attributes to the environment
    (`code_generator_class` and `context_class`) (pull request ``#404``).
  - added support for context/environment/evalctx decorator functions on
    the finalize callback of the environment.
  - escape query strings for urlencode properly.  Previously slashes were not
    escaped in that place.
  - Add 'base' parameter to 'int' filter.
- Tests are removed from the package (not distributed in the tar.gz)</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to 2.9.5  (bsc#1132174, CVE-2016-10745)
  (see the changes in /usr/share/doc/packages/python-Jinja2/CHANGES)
- updated source URL</changelog>
  <changelog author="dmueller@suse.com" date="1490184000">- fix requires</changelog>
  <changelog author="jmatejek@suse.com" date="1491307200">- update for singlespec
- update to 2.9.6
  * fixed custom context behavior in fast resolve mode</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- specfile:
  * CHANGES -&gt; CHANGES.rst
  * added README.rst to %doc section
- update to version 2.10:
  * Added a new extension node called "OverlayScope" which can be used
    to create an unoptimized scope that will look up all variables
    from a derived context.
  * Added an "in" test that works like the in operator.  This can be
    used in combination with "reject" and "select".
  * Added "previtem" and "nextitem" to loop contexts, providing access
    to the previous/next item in the loop. If such an item does not
    exist, the value is undefined.
  * Added "changed(*values)" to loop contexts, providing an easy way
    of checking whether a value has changed since the last iteration
    (or rather since the last call of the method)
  * Added a "namespace" function that creates a special object which
    allows attribute assignment using the "set" tag.  This can be used
    to carry data across scopes, e.g. from a loop body to code that
    comes after the loop.
  * Added a "trimmed" modifier to "{% trans %}" to strip linebreaks
    and surrounding whitespace. Also added a new policy to enable this
    for all "trans" blocks.
  * The "random" filter is no longer incorrectly constant folded and
    will produce a new random choice each time the template is
    rendered. (`#478`_)
  * Added a "unique" filter. (`#469`_)
  * Added "min" and "max" filters. (`#475`_)
  * Added tests for all comparison operators: "eq", "ne", "lt", "le",
    "gt", "ge". (`#665`_)
  * "import" statement cannot end with a trailing comma. (`#617`_,
    `#618`_)
  * "indent" filter will not indent blank lines by default. (`#685`_)
  * Add "reverse" argument for "dictsort" filter. (`#692`_)
  * Add a "NativeEnvironment" that renders templates to native Python
    types instead of strings. (`#708`_)
  * Added filter support to the block "set" tag. (`#489`_)
  * "tojson" filter marks output as safe to match documented behavior.
    (`#718`_)
  * Resolved a bug where getting debug locals for tracebacks could
    modify template context.
  * Fixed a bug where having many "{% elif ... %}" blocks resulted in
    a "too many levels of indentation" error.  These blocks now
    compile to native "elif ..:" instead of "else: if ..:" (`#759`_)</changelog>
  <changelog author="arun@gmx.de" date="1555156800">- update to version 2.10.1 (bsc#1132323, CVE-2019-10906, bsc#1125815, CVE-2019-8341):
  * "SandboxedEnvironment" securely handles "str.format_map" in order
    to prevent code execution through untrusted format strings.  The
    sandbox already handled "str.format".</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have
  been called with untrusted user data (bsc#1181944).
  Added CVE-2020-28493.patch</changelog>
  <changelog author="atoptsoglou@suse.com" date="1613649600">- Fixed IndentationError in CVE-2020-28493.patch (bsc#1182244)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34064.patch upstream patch
  (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4)
  Also fixes (CVE-2024-22195, bsc#1218722)</changelog>
</package>
<package pkgid="23c1a377fe8dcc80c361f906782f888c0166ae166d2c2527f7084333232f5644" name="python-apipkg" arch="src">
  <version epoch="0" ver="1.4" rel="150000.3.6.1"/>
  <changelog author="saschpe@suse.de" date="1353412800">- Initial version</changelog>
  <changelog author="tbechtold@suse.com" date="1457697600">- update to 1.4:
  - revert the automated version gathering
  - fix issue2 - adapt tests on Jython
  - handle jython __pkgpath__ missabstraction when running python from jar files
  - alias modules pointing to unimportable modules will return None for
    all their attributes instead of raising ImportError.  This addresses
    python3.4 where any call to getframeinfo() can choke on sys.modules
    contents if pytest is not installed (because py.test.* imports it).
  - introduce apipkg.distribution_version(name) as helper to
    obtain the current version number of a package from install metadata
    its used by default with the package name
  - add an eagerloading option and eagerload automatically
    if bpython is used (workaround for their monkeypatching)
- Switch to use .tar.gz sdist instead of zip
- Install LICENSE
- BuildRequires python-setuptools</changelog>
  <changelog author="aloisio@gmx.com" date="1492776000">- Converted to single-spec
- Enabled tests</changelog>
  <changelog author="aloisio@gmx.com" date="1493294400">- Fixed source URL</changelog>
</package>
<package pkgid="cee41f6d454c6f6e5b8e92c52c818366663ca274162cb21a7028d1c8025a4c34" name="python-botocore" arch="src">
  <version epoch="0" ver="1.29.89" rel="150200.37.14.1"/>
  <changelog author="dmueller@suse.com" date="1665576000">- drop remove-six.patch, rejected by upstream and breaks
  all dependent projects of botocore</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666008000">- Update to 1.27.91
  * api-change:``mediaconvert``: MediaConvert now supports specifying the minimum percentage of the
    HRD buffer available at the end of each encoded video segment.
- from version 1.27.90
  * api-change:``amplifyuibuilder``: We are releasing the ability for fields to be configured as
    arrays.
  * api-change:``appflow``: With this update, you can choose which Salesforce API is used by Amazon
    AppFlow to transfer data to or from your Salesforce account. You can choose the Salesforce REST API
    or Bulk API 2.0. You can also choose for Amazon AppFlow to pick the API automatically.
  * api-change:``connect``: This release adds support for a secondary email and a mobile number for
    Amazon Connect instance users.
  * api-change:``ds``: This release adds support for describing and updating AWS Managed Microsoft AD
    set up.
  * api-change:``ecs``: Documentation update to address tickets.
  * api-change:``guardduty``: Add UnprocessedDataSources to CreateDetectorResponse which specifies
    the data sources that couldn't be enabled during the CreateDetector request. In addition, update
    documentations.
  * api-change:``iam``: Documentation updates for the AWS Identity and Access Management API
    Reference.
  * api-change:``iotfleetwise``: Documentation update for AWS IoT FleetWise
  * api-change:``medialive``: AWS Elemental MediaLive now supports forwarding SCTE-35 messages
    through the Event Signaling and Management (ESAM) API, and can read those SCTE-35 messages from an
    inactive source.
  * api-change:``mediapackage-vod``: This release adds SPEKE v2 support for MediaPackage VOD. Speke
    v2 is an upgrade to the existing SPEKE API to support multiple encryption keys, based on an
    encryption contract selected by the customer.
  * api-change:``panorama``: Pause and resume camera stream processing with
    SignalApplicationInstanceNodeInstances. Reboot an appliance with CreateJobForDevices. More
    application state information in DescribeApplicationInstance response.
  * api-change:``rds-data``: Doc update to reflect no support for schema parameter on
    BatchExecuteStatement API
  * api-change:``ssm-incidents``: Update RelatedItem enum to support Tasks
  * api-change:``ssm``: Support of AmazonLinux2022 by Patch Manager
  * api-change:``transfer``: This release adds an option for customers to configure workflows that
    are triggered when files are only partially received from a client due to premature session
    disconnect.
  * api-change:``translate``: This release enables customers to specify multiple target languages in
    asynchronous batch translation requests.
  * api-change:``wisdom``: This release updates the GetRecommendations API to include a trigger event
    list for classifying and grouping recommendations.
- from version 1.27.89
  * api-change:``codeguru-reviewer``: Documentation update to replace broken link.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``greengrassv2``: This release adds error status details for deployments and
    components that failed on a device and adds features to improve visibility into component
    installation.
  * api-change:``quicksight``: Amazon QuickSight now supports SecretsManager Secret ARN in place of
    CredentialPair for DataSource creation and update. This release also has some minor documentation
    updates and removes CountryCode as a required parameter in GeoSpatialColumnGroup
- from version 1.27.88
  * api-change:``resiliencehub``: Documentation change for AWS Resilience Hub. Doc-only update to fix
    Documentation layout
- from version 1.27.87
  * api-change:``glue``: This SDK release adds support to sync glue jobs with source control
    provider. Additionally, a new parameter called SourceControlDetails will be added to Job model.
  * api-change:``network-firewall``: StreamExceptionPolicy configures how AWS Network Firewall
    processes traffic when a network connection breaks midstream
  * api-change:``outposts``: This release adds the Asset state information to the ListAssets
    response. The ListAssets request supports filtering on Asset state.
- from version 1.27.86
  * api-change:``connect``: Updated the CreateIntegrationAssociation API to support the CASES_DOMAIN
    IntegrationType.
  * api-change:``connectcases``: This release adds APIs for Amazon Connect Cases. Cases allows your
    agents to quickly track and manage customer issues that require multiple interactions, follow-up
    tasks, and teams in your contact center.  For more information, see
    https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``ec2``: Added EnableNetworkAddressUsageMetrics flag for ModifyVpcAttribute,
    DescribeVpcAttribute APIs.
  * api-change:``ecs``: Documentation updates to address various Amazon ECS tickets.
  * api-change:``s3control``: S3 Object Lambda adds support to allow customers to intercept
    HeadObject and ListObjects requests and introduce their own compute. These requests were previously
    proxied to S3.
  * api-change:``workmail``: This release adds support for impersonation roles in Amazon WorkMail.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666267200">- Remove version constraint for python-pytest in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666699200">- Update to 1.28.0
  * feature:Endpoints: Implemented new endpoint ruleset system to dynamically derive endpoints and
    settings for services
  * api-change:``acm-pca``: AWS Private Certificate Authority (AWS Private CA) now offers usage modes
    which are combination of features to address specific use cases.
  * api-change:``batch``: This release adds support for AWS Batch on Amazon EKS.
  * api-change:``datasync``: Added support for self-signed certificates when using object storage
    locations; added BytesCompressed to the TaskExecution response.
  * api-change:``sagemaker``: SageMaker Inference Recommender now supports a new API
    ListInferenceRecommendationJobSteps to return the details of all the benchmark we create for an
    inference recommendation job.
- from version 1.27.96
  * api-change:``cognito-idp``: This release adds a new "DeletionProtection" field to the UserPool in
    Cognito. Application admins can configure this value with either ACTIVE or INACTIVE value. Setting
    this field to ACTIVE will prevent a user pool from accidental deletion.
  * api-change:``sagemaker``: CreateInferenceRecommenderjob API now supports passing endpoint details
    directly, that will help customers to identify the max invocation and max latency they can achieve
    for their model and the associated endpoint along with getting recommendations on other instances.
- from version 1.27.95
  * api-change:``devops-guru``: This release adds information about the resources DevOps Guru is
    analyzing.
  * api-change:``globalaccelerator``: Global Accelerator now supports AddEndpoints and
    RemoveEndpoints operations for standard endpoint groups.
  * api-change:``resiliencehub``: In this release, we are introducing support for regional
    optimization for AWS Resilience Hub applications. It also includes a few documentation updates to
    improve clarity.
  * api-change:``rum``: CloudWatch RUM now supports Extended CloudWatch Metrics with Additional
    Dimensions
- from version 1.27.94
  * api-change:``chime-sdk-messaging``: Documentation updates for Chime Messaging SDK
  * api-change:``cloudtrail``: This release includes support for exporting CloudTrail Lake query
    results to an Amazon S3 bucket.
  * api-change:``config``: This release adds resourceType enums for AppConfig, AppSync, DataSync,
    EC2, EKS, Glue, GuardDuty, SageMaker, ServiceDiscovery, SES, Route53 types.
  * api-change:``connect``: This release adds API support for managing phone numbers that can be used
    across multiple AWS regions through telephony traffic distribution.
  * api-change:``events``: Update events client to latest version
  * api-change:``managedblockchain``: Adding new Accessor APIs for Amazon Managed Blockchain
  * api-change:``s3``: Updates internal logic for constructing API endpoints. We have added
    rule-based endpoints and internal model parameters.
  * api-change:``s3control``: Updates internal logic for constructing API endpoints. We have added
    rule-based endpoints and internal model parameters.
  * api-change:``support-app``: This release adds the RegisterSlackWorkspaceForOrganization API. You
    can use the API to register a Slack workspace for an AWS account that is part of an organization.
  * api-change:``workspaces-web``: WorkSpaces Web now supports user access logging for recording
    session start, stop, and URL navigation.
- from version 1.27.93
  * api-change:``frauddetector``: Documentation Updates for Amazon Fraud Detector
  * api-change:``sagemaker``: This change allows customers to enable data capturing while running a
    batch transform job, and configure monitoring schedule to monitoring the captured data.
  * api-change:``servicediscovery``: Updated the ListNamespaces API to support the NAME and HTTP_NAME
    filters, and the BEGINS_WITH filter condition.
  * api-change:``sesv2``: This release allows subscribers to enable Dedicated IPs (managed) to send
    email via a fully managed dedicated IP experience. It also adds identities' VerificationStatus in
    the response of GetEmailIdentity and ListEmailIdentities APIs, and ImportJobs counts in the
    response of ListImportJobs API.
- from version 1.27.92
  * api-change:``greengrass``: This change allows customers to specify FunctionRuntimeOverride in
    FunctionDefinitionVersion. This configuration can be used if the runtime on the device is different
    from the AWS Lambda runtime specified for that function.
  * api-change:``sagemaker``: This release adds support for C7g, C6g, C6gd, C6gn, M6g, M6gd, R6g, and
    R6gn Graviton instance types in Amazon SageMaker Inference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667563200">- Update to 1.29.2
  * api-change:``memorydb``: Adding support for r6gd instances for MemoryDB Redis with data tiering.
    In a cluster with data tiering enabled, when available memory capacity is exhausted, the least
    recently used data is automatically tiered to solid state drives for cost-effective capacity
    scaling with minimal performance impact.
  * api-change:``sagemaker``: Amazon SageMaker now supports running training jobs on ml.trn1 instance
    types.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.1
  * api-change:``iotsitewise``: This release adds the ListAssetModelProperties and
    ListAssetProperties APIs. You can list all properties that belong to a single asset model or asset
    using these two new APIs.
  * api-change:``s3control``: S3 on Outposts launches support for Lifecycle configuration for
    Outposts buckets. With S3 Lifecycle configuration, you can mange objects so they are stored cost
    effectively. You can manage objects using size-based rules and specify how many noncurrent versions
    bucket will retain.
  * api-change:``sagemaker``: This release updates Framework model regex for ModelPackage to support
    new Framework version xgboost, sklearn.
  * api-change:``ssm-incidents``: Adds support for tagging replication-set on creation.
- from version 1.29.0
  * feature:Endpoints: Migrate all services to use new AWS Endpoint Resolution framework
  * Enhancement:Endpoints: Discontinued use of `sslCommonName` hosts as detailed in 1.27.0 (see
    `#2705 &lt;https://github.com/boto/botocore/issues/2705&gt;`__ for more info)
  * api-change:``rds``: Relational Database Service - This release adds support for configuring
    Storage Throughput on RDS database instances.
  * api-change:``textract``: Add ocr results in AnalyzeIDResponse as blocks
- from version 1.28.5
  * api-change:``apprunner``: This release adds support for private App Runner services. Services may
    now be configured to be made private and only accessible from a VPC. The changes include a new
    VpcIngressConnection resource and several new and modified APIs.
  * api-change:``connect``: Amazon connect now support a new API DismissUserContact to dismiss or
    remove terminated contacts in Agent CCP
  * api-change:``ec2``: Elastic IP transfer is a new Amazon VPC feature that allows you to transfer
    your Elastic IP addresses from one AWS Account to another.
  * api-change:``iot``: This release adds the Amazon Location action to IoT Rules Engine.
  * api-change:``logs``: SDK release to support tagging for destinations and log groups with
    TagResource. Also supports tag on create with PutDestination.
  * api-change:``sesv2``: This release includes support for interacting with the Virtual
    Deliverability Manager, allowing you to opt in/out of the feature and to retrieve recommendations
    and metric data.
  * api-change:``textract``: This release introduces additional support for 30+ normalized fields
    such as vendor address and currency. It also includes OCR output in the response and accuracy
    improvements for the already supported fields in previous version
- from version 1.28.4
  * api-change:``apprunner``: AWS App Runner adds .NET 6, Go 1, PHP 8.1 and Ruby 3.1 runtimes.
  * api-change:``appstream``: This release includes CertificateBasedAuthProperties in
    CreateDirectoryConfig and UpdateDirectoryConfig.
  * api-change:``cloud9``: Update to the documentation section of the Cloud9 API Reference guide.
  * api-change:``cloudformation``: This release adds more fields to improves visibility of AWS
    CloudFormation StackSets information in following APIs: ListStackInstances, DescribeStackInstance,
    ListStackSetOperationResults, ListStackSetOperations, DescribeStackSetOperation.
  * api-change:``gamesparks``: Add LATEST as a possible GameSDK Version on snapshot
  * api-change:``mediatailor``: This release introduces support for SCTE-35 segmentation descriptor
    messages which can be sent within time signal messages.
- from version 1.28.3
  * api-change:``ec2``: Feature supports the replacement of instance root volume using an updated AMI
    without requiring customers to stop their instance.
  * api-change:``fms``: Add support NetworkFirewall Managed Rule Group Override flag in
    GetViolationDetails API
  * api-change:``glue``: Added support for custom datatypes when using custom csv classifier.
  * api-change:``redshift``: This release clarifies use for the ElasticIp parameter of the
    CreateCluster and RestoreFromClusterSnapshot APIs.
  * api-change:``sagemaker``: This change allows customers to provide a custom entrypoint script for
    the docker container to be run while executing training jobs, and provide custom arguments to the
    entrypoint script.
  * api-change:``wafv2``: This release adds the following: Challenge rule action, to silently verify
    client browsers; rule group rule action override to any valid rule action, not just Count; token
    sharing between protected applications for challenge/CAPTCHA token; targeted rules option for Bot
    Control managed rule group.
- from version 1.28.2
  * api-change:``iam``: Doc only update that corrects instances of CLI not using an entity.
  * api-change:``kafka``: This release adds support for Tiered Storage. UpdateStorage allows you to
    control the Storage Mode for supported storage tiers.
  * api-change:``neptune``: Added a new cluster-level attribute to set the capacity range for Neptune
    Serverless instances.
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports specifying Grid
    Search strategy for tuning jobs, which evaluates all hyperparameter combinations exhaustively based
    on the categorical hyperparameters provided.
- from version 1.28.1
  * api-change:``accessanalyzer``: This release adds support for six new resource types in IAM Access
    Analyzer to help you easily identify public and cross-account access to your AWS resources. Updated
    service API, documentation, and paginators.
  * api-change:``location``: Added new map styles with satellite imagery for map resources using HERE
    as a data provider.
  * api-change:``mediatailor``: This release is a documentation update
  * api-change:``rds``: Relational Database Service - This release adds support for exporting DB
    cluster data to Amazon S3.
  * api-change:``workspaces``: This release adds new enums for supporting Workspaces Core features,
    including creating Manual running mode workspaces, importing regular Workspaces Core images and
    importing g4dn Workspaces Core images.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668427200">- Update to 1.29.8
  * api-change:``glue``: Added links related to enabling job bookmarks.
  * api-change:``iot``: This release add new api listRelatedResourcesForAuditFinding and new member
    type IssuerCertificates for Iot device device defender Audit.
  * api-change:``license-manager``: AWS License Manager now supports onboarded Management Accounts or
    Delegated Admins to view granted licenses aggregated from all accounts in the organization.
  * api-change:``marketplace-catalog``: Added three new APIs to support tagging and tag-based
    authorization: TagResource, UntagResource, and ListTagsForResource. Added optional parameters to
    the StartChangeSet API to support tagging a resource while making a request to create it.
  * api-change:``rekognition``: Adding support for ImageProperties feature to detect dominant colors
    and image brightness, sharpness, and contrast, inclusion and exclusion filters for labels and label
    categories, new fields to the API response, "aliases" and "categories"
  * api-change:``securityhub``: Documentation updates for Security Hub
  * api-change:``ssm-incidents``: RelatedItems now have an ID field which can be used for referencing
    them else where. Introducing event references in TimelineEvent API and increasing maximum length of
    "eventData" to 12K characters.
- from version 1.29.7
  * api-change:``autoscaling``: This release adds a new price capacity optimized allocation strategy
    for Spot Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling,
    EC2 Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability
    and Spot Instance price.
  * api-change:``ec2``: This release adds a new price capacity optimized allocation strategy for Spot
    Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2
    Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability and
    Spot Instance price.
  * api-change:``ecs``: This release adds support for task scale-in protection with
    updateTaskProtection and getTaskProtection APIs. UpdateTaskProtection API can be used to protect a
    service managed task from being terminated by scale-in events and getTaskProtection API to get the
    scale-in protection status of a task.
  * api-change:``es``: Amazon OpenSearch Service now offers managed VPC endpoints to connect to your
    Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature allows
    you to privately access OpenSearch Service domain without using public IPs or requiring traffic to
    traverse the Internet.
  * api-change:``resource-explorer-2``: Text only updates to some Resource Explorer descriptions.
  * api-change:``scheduler``: AWS introduces the new Amazon EventBridge Scheduler. EventBridge
    Scheduler is a serverless scheduler that allows you to create, run, and manage tasks from one
    central, managed service.
- from version 1.29.6
  * api-change:``connect``: This release adds new fields SignInUrl, UserArn, and UserId to
    GetFederationToken response payload.
  * api-change:``connectcases``: This release adds the ability to disable templates through the
    UpdateTemplate API. Disabling templates prevents customers from creating cases using the template.
    For more information see https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``ec2``: Amazon EC2 Trn1 instances, powered by AWS Trainium chips, are purpose built
    for high-performance deep learning training. u-24tb1.112xlarge and u-18tb1.112xlarge High Memory
    instances are purpose-built to run large in-memory databases.
  * api-change:``groundstation``: This release adds the preview of customer-provided ephemeris
    support for AWS Ground Station, allowing space vehicle owners to provide their own position and
    trajectory information for a satellite.
  * api-change:``mediapackage-vod``: This release adds "IncludeIframeOnlyStream" for Dash endpoints.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.5
  * api-change:``acm``: Support added for requesting elliptic curve certificate key algorithm types
    P-256 (EC_prime256v1) and P-384 (EC_secp384r1).
  * api-change:``billingconductor``: This release adds the Recurring Custom Line Item feature along
    with a new API ListCustomLineItemVersions.
  * api-change:``ec2``: This release enables sharing of EC2 Placement Groups across accounts and
    within AWS Organizations using Resource Access Manager
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
  * api-change:``fms``: AWS Firewall Manager now supports importing existing AWS Network Firewall
    firewalls into Firewall Manager policies.
  * api-change:``lightsail``: This release adds support for Amazon Lightsail to automate the
    delegation of domains registered through Amazon Route 53 to Lightsail DNS management and to
    automate record creation for DNS validation of Lightsail SSL/TLS certificates.
  * api-change:``opensearch``: Amazon OpenSearch Service now offers managed VPC endpoints to connect
    to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature
    allows you to privately access OpenSearch Service domain without using public IPs or requiring
    traffic to traverse the Internet.
  * api-change:``polly``: Amazon Polly adds new voices: Elin (sv-SE), Ida (nb-NO), Laura (nl-NL) and
    Suvi (fi-FI). They are available as neural voices only.
  * api-change:``resource-explorer-2``: This is the initial SDK release for AWS Resource Explorer.
    AWS Resource Explorer lets your users search for and discover your AWS resources across the AWS
    Regions in your account.
  * api-change:``route53``: Amazon Route 53 now supports the Europe (Zurich) Region (eu-central-2)
    for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
- from version 1.29.4
  * api-change:``athena``: Adds support for using Query Result Reuse
  * api-change:``autoscaling``: This release adds support for two new attributes for attribute-based
    instance type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
  * api-change:``cloudtrail``: This release includes support for configuring a delegated
    administrator to manage an AWS Organizations organization CloudTrail trails and event data stores,
    and AWS Key Management Service encryption of CloudTrail Lake event data stores.
  * api-change:``ec2``: This release adds support for two new attributes for attribute-based instance
    type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
  * api-change:``elasticache``: Added support for IPv6 and dual stack for Memcached and Redis
    clusters. Customers can now launch new Redis and Memcached clusters with IPv6 and dual stack
    networking support.
  * api-change:``lexv2-models``: Update lexv2-models client to latest version
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for setting the
    SDR reference white point for HDR conversions and conversion of HDR10 to DolbyVision without
    mastering metadata.
  * api-change:``ssm``: This release includes support for applying a CloudWatch alarm to multi
    account multi region Systems Manager Automation
  * api-change:``wafv2``: The geo match statement now adds labels for country and region. You can
    match requests at the region level by combining a geo match statement with label match statements.
  * api-change:``wellarchitected``: This release adds support for integrations with AWS Trusted
    Advisor and AWS Service Catalog AppRegistry to improve workload discovery and speed up your
    workload reviews.
  * api-change:``workspaces``: This release adds protocols attribute to workspaces properties data
    type. This enables customers to migrate workspaces from PC over IP (PCoIP) to WorkSpaces Streaming
    Protocol (WSP) using create and modify workspaces public APIs.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.3
  * api-change:``ec2``: This release adds API support for the recipient of an AMI account share to
    remove shared AMI launch permissions.
  * api-change:``emr-containers``: Adding support for Job templates. Job templates allow you to
    create and store templates to configure Spark applications parameters. This helps you ensure
    consistent settings across applications by reusing and enforcing configuration overrides in data
    pipelines.
  * api-change:``logs``: Doc-only update for bug fixes and support of export to buckets encrypted
    with SSE-KMS
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- Add psuffix on the name to have the multibuild flavor packages identify themselves by a different name</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669982400">- Update to 1.29.21
  * api-change:``codecatalyst``: This release adds operations that support customers using the AWS
    Toolkits and Amazon CodeCatalyst, a unified software development service that helps developers
    develop, deploy, and maintain applications in the cloud. For more information, see the
    documentation.
  * api-change:``comprehend``: Comprehend now supports semi-structured documents (such as PDF files
    or image files) as inputs for custom analysis using the synchronous APIs (ClassifyDocument and
    DetectEntities).
  * api-change:``gamelift``: GameLift introduces a new feature, GameLift Anywhere. GameLift Anywhere
    allows you to integrate your own compute resources with GameLift. You can also use GameLift
    Anywhere to iteratively test your game servers without uploading the build to GameLift for every
    iteration.
  * api-change:``pipes``: AWS introduces new Amazon EventBridge Pipes which allow you to connect
    sources (SQS, Kinesis, DDB, Kafka, MQ) to Targets (14+ EventBridge Targets) without any code, with
    filtering, batching, input transformation, and an optional Enrichment stage (Lambda, StepFunctions,
    ApiGateway, ApiDestinations)
  * api-change:``stepfunctions``: Update stepfunctions client to latest version
- from version 1.29.20
  * api-change:``accessanalyzer``: This release adds support for S3 cross account access points. IAM
    Access Analyzer will now produce public or cross account findings when it detects bucket delegation
    to external account access points.
  * api-change:``athena``: This release includes support for using Apache Spark in Amazon Athena.
  * api-change:``dataexchange``: This release enables data providers to license direct access to data
    in their Amazon S3 buckets or AWS Lake Formation data lakes through AWS Data Exchange. Subscribers
    get read-only access to the data and can use it in downstream AWS services, like Amazon Athena,
    without creating or managing copies.
  * api-change:``docdb-elastic``: Launched Amazon DocumentDB Elastic Clusters. You can now use the
    SDK to create, list, update and delete Amazon DocumentDB Elastic Cluster resources
  * api-change:``glue``: This release adds support for AWS Glue Data Quality, which helps you
    evaluate and monitor the quality of your data and includes the API for creating, deleting, or
    updating data quality rulesets, runs and evaluations.
  * api-change:``s3control``: Amazon S3 now supports cross-account access points. S3 bucket owners
    can now allow trusted AWS accounts to create access points associated with their bucket.
  * api-change:``sagemaker-geospatial``: This release provides Amazon SageMaker geospatial APIs to
    build, train, deploy and visualize geospatial models.
  * api-change:``sagemaker``: Added Models as part of the Search API. Added Model shadow deployments
    in realtime inference, and shadow testing in managed inference. Added support for shared spaces,
    geospatial APIs, Model Cards, AutoMLJobStep in pipelines, Git repositories on user profiles and
    domains, Model sharing in Jumpstart.
- from version 1.29.19
  * api-change:``ec2``: This release adds support for AWS Verified Access and the Hpc6id Amazon EC2
    compute optimized instance type, which features 3rd generation Intel Xeon Scalable processors.
  * api-change:``firehose``: Allow support for the Serverless offering for Amazon OpenSearch Service
    as a Kinesis Data Firehose delivery destination.
  * api-change:``kms``: AWS KMS introduces the External Key Store (XKS), a new feature for customers
    who want to protect their data with encryption keys stored in an external key management system
    under their control.
  * api-change:``omics``: Amazon Omics is a new, purpose-built service that can be used by healthcare
    and life science organizations to store, query, and analyze omics data. The insights from that data
    can be used to accelerate scientific discoveries and improve healthcare.
  * api-change:``opensearchserverless``: Publish SDK for Amazon OpenSearch Serverless
  * api-change:``securitylake``: Amazon Security Lake automatically centralizes security data from
    cloud, on-premises, and custom sources into a purpose-built data lake stored in your account.
    Security Lake makes it easier to analyze security data, so you can improve the protection of your
    workloads, applications, and data
  * api-change:``simspaceweaver``: AWS SimSpace Weaver is a new service that helps customers build
    spatial simulations at new levels of scale - resulting in virtual worlds with millions of dynamic
    entities. See the AWS SimSpace Weaver developer guide for more details on how to get started.
    https://docs.aws.amazon.com/simspaceweaver
- from version 1.29.18
  * api-change:``arc-zonal-shift``: Amazon Route 53 Application Recovery Controller Zonal Shift is a
    new service that makes it easy to shift traffic away from an Availability Zone in a Region. See the
    developer guide for more information:
    https://docs.aws.amazon.com/r53recovery/latest/dg/what-is-route53-recovery.html
  * api-change:``compute-optimizer``: Adds support for a new recommendation preference that makes it
    possible for customers to optimize their EC2 recommendations by utilizing an external metrics
    ingestion service to provide metrics.
  * api-change:``config``: With this release, you can use AWS Config to evaluate your resources for
    compliance with Config rules before they are created or updated. Using Config rules in proactive
    mode enables you to test and build compliant resource templates or check resource configurations at
    the time they are provisioned.
  * api-change:``ec2``: Introduces ENA Express, which uses AWS SRD and dynamic routing to increase
    throughput and minimize latency, adds support for trust relationships between Reachability Analyzer
    and AWS Organizations to enable cross-account analysis, and adds support for Infrastructure
    Performance metric subscriptions.
  * api-change:``eks``: Adds support for additional EKS add-ons metadata and filtering fields
  * api-change:``fsx``: This release adds support for 4GB/s / 160K PIOPS FSx for ONTAP file systems
    and 10GB/s / 350K PIOPS FSx for OpenZFS file systems (Single_AZ_2). For FSx for ONTAP, this also
    adds support for DP volumes, snapshot policy, copy tags to backups, and Multi-AZ route table
    updates.
  * api-change:``glue``: This release allows the creation of Custom Visual Transforms (Dynamic
    Transforms) to be created via AWS Glue CLI/SDK.
  * api-change:``inspector2``: This release adds support for Inspector to scan AWS Lambda.
  * api-change:``lambda``: Adds support for Lambda SnapStart, which helps improve the startup
    performance of functions. Customers can now manage SnapStart based functions via CreateFunction and
    UpdateFunctionConfiguration APIs
  * api-change:``license-manager-user-subscriptions``: AWS now offers fully-compliant,
    Amazon-provided licenses for Microsoft Office Professional Plus 2021 Amazon Machine Images (AMIs)
    on Amazon EC2. These AMIs are now available on the Amazon EC2 console and on AWS Marketplace to
    launch instances on-demand without any long-term licensing commitments.
  * api-change:``macie2``: Added support for configuring Macie to continually sample objects from S3
    buckets and inspect them for sensitive data. Results appear in statistics, findings, and other data
    that Macie provides.
  * api-change:``quicksight``: This release adds new Describe APIs and updates Create and Update APIs
    to support the data model for Dashboards, Analyses, and Templates.
  * api-change:``s3control``: Added two new APIs to support Amazon S3 Multi-Region Access Point
    failover controls: GetMultiRegionAccessPointRoutes and SubmitMultiRegionAccessPointRoutes. The
    failover control APIs are supported in the following Regions: us-east-1, us-west-2, eu-west-1,
    ap-southeast-2, and ap-northeast-1.
  * api-change:``securityhub``: Adding StandardsManagedBy field to DescribeStandards API response
- from version 1.29.17
  * api-change:``backup``: AWS Backup introduces support for legal hold and application stack
    backups. AWS Backup Audit Manager introduces support for cross-Region, cross-account reports.
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``drs``: Non breaking changes to existing APIs, and additional APIs added to support
    in-AWS failing back using AWS Elastic Disaster Recovery.
  * api-change:``ecs``: This release adds support for ECS Service Connect, a new capability that
    simplifies writing and operating resilient distributed applications. This release updates the
    TaskDefinition, Cluster, Service mutation APIs with Service connect constructs and also adds a new
    ListServicesByNamespace API.
  * api-change:``efs``: Update efs client to latest version
  * api-change:``iot-data``: This release adds support for MQTT5 properties to AWS IoT HTTP Publish
    API.
  * api-change:``iot``: Job scheduling enables the scheduled rollout of a Job with start and end
    times and a customizable end behavior when end time is reached. This is available for continuous
    and snapshot jobs. Added support for MQTT5 properties to AWS IoT TopicRule Republish Action.
  * api-change:``iotwireless``: This release includes a new feature for customers to calculate the
    position of their devices by adding three new APIs: UpdateResourcePosition, GetResourcePosition,
    and GetPositionEstimate.
  * api-change:``kendra``: Amazon Kendra now supports preview of table information from HTML tables
    in the search results. The most relevant cells with their corresponding rows, columns are displayed
    as a preview in the search result. The most relevant table cell or cells are also highlighted in
    table preview.
  * api-change:``logs``: Updates to support CloudWatch Logs data protection and CloudWatch
    cross-account observability
  * api-change:``mgn``: This release adds support for Application and Wave management. We also now
    support custom post-launch actions.
  * api-change:``oam``: Amazon CloudWatch Observability Access Manager is a new service that allows
    configuration of the CloudWatch cross-account observability feature.
  * api-change:``organizations``: This release introduces delegated administrator for AWS
    Organizations, a new feature to help you delegate the management of your Organizations policies,
    enabling you to govern your AWS organization in a decentralized way. You can now allow member
    accounts to manage Organizations policies.
  * api-change:``rds``: This release enables new Aurora and RDS feature called Blue/Green Deployments
    that makes updates to databases safer, simpler and faster.
  * api-change:``textract``: This release adds support for classifying and splitting lending
    documents by type, and extracting information by using the Analyze Lending APIs. This release also
    includes support for summarized information of the processed lending document package, in addition
    to per document results.
  * api-change:``transcribe``: This release adds support for 'inputType' for post-call and real-time
    (streaming) Call Analytics within Amazon Transcribe.
- from version 1.29.16
  * api-change:``grafana``: This release includes support for configuring a Grafana workspace to
    connect to a datasource within a VPC as well as new APIs for configuring Grafana settings.
  * api-change:``rbin``: This release adds support for Rule Lock for Recycle Bin, which allows you to
    lock retention rules so that they can no longer be modified or deleted.
- from version 1.29.15
  * bugfix:Endpoints: Resolve endpoint with default partition when no region is set
  * bugfix:s3: fixes missing x-amz-content-sha256 header for s3 object lambda
  * api-change:``appflow``: Adding support for Amazon AppFlow to transfer the data to Amazon Redshift
    databases through Amazon Redshift Data API service. This feature will support the Redshift
    destination connector on both public and private accessible Amazon Redshift Clusters and Amazon
    Redshift Serverless.
  * api-change:``kinesisanalyticsv2``: Support for Apache Flink 1.15 in Kinesis Data Analytics.
- from version 1.29.14
  * api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Hyderabad) Region
    (ap-south-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
    region.
- from version 1.29.13
  * api-change:``appflow``: AppFlow provides a new API called UpdateConnectorRegistration to update a
    custom connector that customers have previously registered. With this API, customers no longer need
    to unregister and then register a connector to make an update.
  * api-change:``auditmanager``: This release introduces a new feature for Audit Manager: Evidence
    finder. You can now use evidence finder to quickly query your evidence, and add the matching
    evidence results to an assessment report.
  * api-change:``chime-sdk-voice``: Amazon Chime Voice Connector, Voice Connector Group and PSTN
    Audio Service APIs are now available in the Amazon Chime SDK Voice namespace. See
    https://docs.aws.amazon.com/chime-sdk/latest/dg/sdk-available-regions.html for more details.
  * api-change:``cloudfront``: CloudFront API support for staging distributions and associated
    traffic management policies.
  * api-change:``connect``: Added AllowedAccessControlTags and TagRestrictedResource for Tag Based
    Access Control on Amazon Connect Webpage
  * api-change:``dynamodb``: Updated minor fixes for DynamoDB documentation.
  * api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
  * api-change:``ec2``: This release adds support for copying an Amazon Machine Image's tags when
    copying an AMI.
  * api-change:``glue``: AWSGlue Crawler - Adding support for Table and Column level Comments with
    database level datatypes for JDBC based crawler.
  * api-change:``iot-roborunner``: AWS IoT RoboRunner is a new service that makes it easy to build
    applications that help multi-vendor robots work together seamlessly. See the IoT RoboRunner
    developer guide for more details on getting started.
    https://docs.aws.amazon.com/iotroborunner/latest/dev/iotroborunner-welcome.html
  * api-change:``quicksight``: This release adds the following: 1) Asset management for centralized
    assets governance 2) QuickSight Q now supports public embedding 3) New Termination protection flag
    to mitigate accidental deletes 4) Athena data sources now accept a custom IAM role 5) QuickSight
    supports connectivity to Databricks
  * api-change:``sagemaker``: Added DisableProfiler flag as a new field in ProfilerConfig
  * api-change:``servicecatalog``: This release 1. adds support for Principal Name Sharing with
    Service Catalog portfolio sharing. 2. Introduces repo sourced products which are created and
    managed with existing SC APIs. These products are synced to external repos and auto create new
    product versions based on changes in the repo.
  * api-change:``ssm-sap``: AWS Systems Manager for SAP provides simplified operations and management
    of SAP applications such as SAP HANA. With this release, SAP customers and partners can automate
    and simplify their SAP system administration tasks such as backup/restore of SAP HANA.
  * api-change:``stepfunctions``: Update stepfunctions client to latest version
  * api-change:``transfer``: Adds a NONE encryption algorithm type to AS2 connectors, providing
    support for skipping encryption of the AS2 message body when a HTTPS URL is also specified.
- from version 1.29.12
  * api-change:``amplify``: Adds a new value (WEB_COMPUTE) to the Platform enum that allows customers
    to create Amplify Apps with Server-Side Rendering support.
  * api-change:``appflow``: AppFlow simplifies the preparation and cataloging of SaaS data into the
    AWS Glue Data Catalog where your data can be discovered and accessed by AWS analytics and ML
    services. AppFlow now also supports data field partitioning and file size optimization to improve
    query performance and reduce cost.
  * api-change:``appsync``: This release introduces the APPSYNC_JS runtime, and adds support for
    JavaScript in AppSync functions and AppSync pipeline resolvers.
  * api-change:``dms``: Adds support for Internet Protocol Version 6 (IPv6) on DMS Replication
    Instances
  * api-change:``ec2``: This release adds a new optional parameter "privateIpAddress" for the
    CreateNatGateway API. PrivateIPAddress will allow customers to select a custom Private IPv4 address
    instead of having it be auto-assigned.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``emr-serverless``: Adds support for AWS Graviton2 based applications. You can now
    select CPU architecture when creating new applications or updating existing ones.
  * api-change:``ivschat``: Adds LoggingConfiguration APIs for IVS Chat - a feature that allows
    customers to store and record sent messages in a chat room to S3 buckets, CloudWatch logs, or
    Kinesis firehose.
  * api-change:``lambda``: Add Node 18 (nodejs18.x) support to AWS Lambda.
  * api-change:``personalize``: This release provides support for creation and use of metric
    attributions in AWS Personalize
  * api-change:``polly``: Add two new neural voices - Ola (pl-PL) and Hala (ar-AE).
  * api-change:``rum``: CloudWatch RUM now supports custom events. To use custom events, create an
    app monitor or update an app monitor with CustomEvent Status as ENABLED.
  * api-change:``s3control``: Added 34 new S3 Storage Lens metrics to support additional customer use
    cases.
  * api-change:``secretsmanager``: Documentation updates for Secrets Manager.
  * api-change:``securityhub``: Added SourceLayerArn and SourceLayerHash field for security findings.
    Updated AwsLambdaFunction Resource detail
  * api-change:``servicecatalog-appregistry``: This release adds support for tagged resource
    associations, which allows you to associate a group of resources with a defined resource tag key
    and value to the application.
  * api-change:``sts``: Documentation updates for AWS Security Token Service.
  * api-change:``textract``: This release adds support for specifying and extracting information from
    documents using the Signatures feature within Analyze Document API
  * api-change:``workspaces``: The release introduces CreateStandbyWorkspaces, an API that allows you
    to create standby WorkSpaces associated with a primary WorkSpace in another Region.
    DescribeWorkspaces now includes related WorkSpaces properties. DescribeWorkspaceBundles and
    CreateWorkspaceBundle now return more bundle details.
- from version 1.29.11
  * api-change:``batch``: Documentation updates related to Batch on EKS
  * api-change:``billingconductor``: This release adds a new feature BillingEntity pricing rule.
  * api-change:``cloudformation``: Added UnsupportedTarget HandlerErrorCode for use with CFN Resource
    Hooks
  * api-change:``comprehendmedical``: This release supports new set of entities and traits. It also
    adds new category (BEHAVIORAL_ENVIRONMENTAL_SOCIAL).
  * api-change:``connect``: This release adds a new MonitorContact API for initiating monitoring of
    ongoing Voice and Chat contacts.
  * api-change:``eks``: Adds support for customer-provided placement groups for Kubernetes control
    plane instances when creating local EKS clusters on Outposts
  * api-change:``elasticache``: for Redis now supports AWS Identity and Access Management
    authentication access to Redis clusters starting with redis-engine version 7.0
  * api-change:``iottwinmaker``: This release adds the following: 1) ExecuteQuery API allows users to
    query their AWS IoT TwinMaker Knowledge Graph 2) Pricing plan APIs allow users to configure and
    manage their pricing mode 3) Support for property groups and tabular property values in existing
    AWS IoT TwinMaker APIs.
  * api-change:``personalize-events``: This release provides support for creation and use of metric
    attributions in AWS Personalize
  * api-change:``proton``: Add support for sorting and filtering in ListServiceInstances
  * api-change:``rds``: This release adds support for container databases (CDBs) to Amazon RDS Custom
    for Oracle. A CDB contains one PDB at creation. You can add more PDBs using Oracle SQL. You can
    also customize your database installation by setting the Oracle base, Oracle home, and the OS user
    name and group.
  * api-change:``ssm-incidents``: Add support for PagerDuty integrations on ResponsePlan,
    IncidentRecord, and RelatedItem APIs
  * api-change:``ssm``: This release adds support for cross account access in CreateOpsItem,
    UpdateOpsItem and GetOpsItem. It introduces new APIs to setup resource policies for SSM resources:
    PutResourcePolicy, GetResourcePolicies and DeleteResourcePolicy.
  * api-change:``transfer``: Allow additional operations to throw ThrottlingException
  * api-change:``xray``: This release adds new APIs - PutResourcePolicy, DeleteResourcePolicy,
    ListResourcePolicies for supporting resource based policies for AWS X-Ray.
- from version 1.29.10
  * bugfix:s3: fixes missing x-amz-content-sha256 header for s3 on outpost
  * enhancement:sso: Add support for loading sso-session profiles from the aws config
  * api-change:``connect``: This release updates the APIs: UpdateInstanceAttribute,
    DescribeInstanceAttribute, and ListInstanceAttributes. You can use it to programmatically
    enable/disable enhanced contact monitoring using attribute type ENHANCED_CONTACT_MONITORING on the
    specified Amazon Connect instance.
  * api-change:``greengrassv2``: Adds new parent target ARN paramater to CreateDeployment,
    GetDeployment, and ListDeployments APIs for the new subdeployments feature.
  * api-change:``route53``: Amazon Route 53 now supports the Europe (Spain) Region (eu-south-2) for
    latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
  * api-change:``workspaces``: This release introduces ModifyCertificateBasedAuthProperties, a new
    API that allows control of certificate-based auth properties associated with a WorkSpaces
    directory. The DescribeWorkspaceDirectories API will now additionally return certificate-based auth
    properties in its responses.
- from version 1.29.9
  * api-change:``customer-profiles``: This release enhances the SearchProfiles API by providing
    functionality to search for profiles using multiple keys and logical operators.
  * api-change:``lakeformation``: This release adds a new parameter "Parameters" in the
    DataLakeSettings.
  * api-change:``managedblockchain``: Updating the API docs data type: NetworkEthereumAttributes, and
    the operations DeleteNode, and CreateNode to also include the supported Goerli network.
  * api-change:``proton``: Add support for CodeBuild Provisioning
  * api-change:``rds``: This release adds support for restoring an RDS Multi-AZ DB cluster snapshot
    to a Single-AZ deployment or a Multi-AZ DB instance deployment.
  * api-change:``workdocs``: Added 2 new document related operations, DeleteDocumentVersion and
    RestoreDocumentVersions.
  * api-change:``xray``: This release enhances GetServiceGraph API to support new type of edge to
    represent links between SQS and Lambda in event-driven applications.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1670587200">- Update to 1.29.26
  * enhancement:Endpoint Provider Standard Library: Correct spelling of 'library' in
    ``StandardLibrary`` class
  * api-change:``autoscaling``: Adds support for metric math for target tracking scaling policies,
    saving you the cost and effort of publishing a custom metric to CloudWatch. Also adds support for
    VPC Lattice by adding the Attach/Detach/DescribeTrafficSources APIs and a new health check type to
    the CreateAutoScalingGroup API.
  * api-change:``iottwinmaker``: This release adds the following new features: 1) New APIs for
    managing a continuous sync of assets and asset models from AWS IoT SiteWise. 2) Support user
    friendly names for component types (ComponentTypeName) and properties (DisplayName).
  * api-change:``migrationhubstrategy``: This release adds known application filtering, server
    selection for assessments, support for potential recommendations, and indications for configuration
    and assessment status. For more information, see the AWS Migration Hub documentation at
    https://docs.aws.amazon.com/migrationhub/index.html
- from version 1.29.25
  * api-change:``ce``: This release adds the LinkedAccountName field to the GetAnomalies API response
    under RootCause
  * api-change:``cloudfront``: Introducing UpdateDistributionWithStagingConfig that can be used to
    promote the staging configuration to the production.
  * api-change:``eks``: Adds support for EKS add-ons configurationValues fields and
    DescribeAddonConfiguration function
  * api-change:``kms``: Updated examples and exceptions for External Key Store (XKS).
- from version 1.29.24
  * api-change:``billingconductor``: This release adds the Tiering Pricing Rule feature.
  * api-change:``connect``: This release provides APIs that enable you to programmatically manage
    rules for Contact Lens conversational analytics and third party applications. For more information,
    see   https://docs.aws.amazon.com/connect/latest/APIReference/rules-api.html
  * api-change:``dynamodb``: Endpoint Ruleset update: Use http instead of https for the "local"
    region.
  * api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
  * api-change:``rds``: This release adds the BlueGreenDeploymentNotFoundFault to the
    AddTagsToResource, ListTagsForResource, and RemoveTagsFromResource operations.
  * api-change:``sagemaker-featurestore-runtime``: For online + offline Feature Groups, added ability
    to target PutRecord and DeleteRecord actions to only online store, or only offline store. If target
    store parameter is not specified, actions will apply to both stores.
- from version 1.29.23
  * api-change:``ce``: This release introduces two new APIs that offer a 1-click experience to
    refresh Savings Plans recommendations. The two APIs are
    StartSavingsPlansPurchaseRecommendationGeneration and
    ListSavingsPlansPurchaseRecommendationGeneration.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``ivschat``: Adds PendingVerification error type to messaging APIs to block the
    resource usage for accounts identified as being fraudulent.
  * api-change:``rds``: This release adds the InvalidDBInstanceStateFault to the
    RestoreDBClusterFromSnapshot operation.
  * api-change:``transcribe``: Amazon Transcribe now supports creating custom language models in the
    following languages: Japanese (ja-JP) and German (de-DE).
- from version 1.29.22
  * api-change:``appsync``: Fixes the URI for the evaluatecode endpoint to include the /v1 prefix
    (ie. "/v1/dataplane-evaluatecode").
  * api-change:``ecs``: Documentation updates for Amazon ECS
  * api-change:``fms``: AWS Firewall Manager now supports Fortigate Cloud Native Firewall as a
    Service as a third-party policy type.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for
    configurable ID3 eMSG box attributes and the ability to signal them with InbandEventStream tags in
    DASH and CMAF outputs.
  * api-change:``medialive``: Updates to Event Signaling and Management (ESAM) API and documentation.
  * api-change:``polly``: Add language code for Finnish (fi-FI)
  * api-change:``proton``: CreateEnvironmentAccountConnection RoleArn input is now optional
  * api-change:``redshift-serverless``: Add Table Level Restore operations for Amazon Redshift
    Serverless. Add multi-port support for Amazon Redshift Serverless endpoints. Add Tagging support to
    Snapshots and Recovery Points in Amazon Redshift Serverless.
  * api-change:``sns``: This release adds the message payload-filtering feature to the SNS Subscribe,
    SetSubscriptionAttributes, and GetSubscriptionAttributes API actions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1672660800">- Update to 1.29.41
  * api-change:``cloudfront``: Extend response headers policy to support removing headers from viewer
    responses
  * api-change:``iotfleetwise``: Update documentation - correct the epoch constant value of default
    value for expiryTime field in CreateCampaign request.
- from version 1.29.40
  * api-change:``apigateway``: Documentation updates for Amazon API Gateway
  * api-change:``emr``: Update emr client to latest version
  * api-change:``secretsmanager``: Added owning service filter, include planned deletion flag, and
    next rotation date response parameter in ListSecrets.
  * api-change:``wisdom``: This release extends Wisdom CreateContent and StartContentUpload APIs to
    support PDF and MicrosoftWord docx document uploading.
- from version 1.29.39
  * api-change:``elasticache``: This release allows you to modify the encryption in transit setting,
    for existing Redis clusters. You can now change the TLS configuration of your Redis clusters
    without the need to re-build or re-provision the clusters or impact application availability.
  * api-change:``network-firewall``: AWS Network Firewall now provides status messages for firewalls
    to help you troubleshoot when your endpoint fails.
  * api-change:``rds``: This release adds support for Custom Engine Version (CEV) on RDS Custom SQL
    Server.
  * api-change:``route53-recovery-control-config``: Added support for Python paginators in the
    route53-recovery-control-config List* APIs.
- from version 1.29.38
  * api-change:``memorydb``: This release adds support for MemoryDB Reserved nodes which provides a
    significant discount compared to on-demand node pricing. Reserved nodes are not physical nodes, but
    rather a billing discount applied to the use of on-demand nodes in your account.
  * api-change:``transfer``: Add additional operations to throw ThrottlingExceptions
- from version 1.29.37
  * api-change:``connect``: Support for Routing Profile filter, SortCriteria, and grouping by Routing
    Profiles for GetCurrentMetricData API. Support for RoutingProfiles, UserHierarchyGroups, and Agents
    as filters, NextStatus and AgentStatusName for GetCurrentUserData. Adds ApproximateTotalCount to
    both APIs.
  * api-change:``connectparticipant``: Amazon Connect Chat introduces the Message Receipts feature.
    This feature allows agents and customers to receive message delivered and read receipts after they
    send a chat message.
  * api-change:``detective``: This release adds a missed AccessDeniedException type to several
    endpoints.
  * api-change:``fsx``: Fix a bug where a recent release might break certain existing SDKs.
  * api-change:``inspector2``: Amazon Inspector adds support for scanning NodeJS 18.x and Go 1.x AWS
    Lambda function runtimes.
- from version 1.29.36
  * api-change:``compute-optimizer``: This release enables AWS Compute Optimizer to analyze and
    generate optimization recommendations for ecs services running on Fargate.
  * api-change:``connect``: Amazon Connect Chat introduces the Idle Participant/Autodisconnect
    feature, which allows users to set timeouts relating to the activity of chat participants, using
    the new UpdateParticipantRoleConfig API.
  * api-change:``iotdeviceadvisor``: This release adds the following new features: 1) Documentation
    updates for IoT Device Advisor APIs. 2) Updated required request parameters for IoT Device Advisor
    APIs. 3) Added new service feature: ability to provide the test endpoint when customer executing
    the StartSuiteRun API.
  * api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
    stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
    processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
    as well as media ingestion to the cloud.
  * api-change:``rds``: Add support for managing master user password in AWS Secrets Manager for the
    DBInstance and DBCluster.
  * api-change:``secretsmanager``: Documentation updates for Secrets Manager
- from version 1.29.35
  * api-change:``connect``: Amazon Connect Chat now allows for JSON (application/json) message types
    to be sent as part of the initial message in the StartChatContact API.
  * api-change:``connectparticipant``: Amazon Connect Chat now allows for JSON (application/json)
    message types to be sent in the SendMessage API.
  * api-change:``license-manager-linux-subscriptions``: AWS License Manager now offers cross-region,
    cross-account tracking of commercial Linux subscriptions on AWS. This includes subscriptions
    purchased as part of EC2 subscription-included AMIs, on the AWS Marketplace, or brought to AWS via
    Red Hat Cloud Access Program.
  * api-change:``macie2``: This release adds support for analyzing Amazon S3 objects that use the S3
    Glacier Instant Retrieval (Glacier_IR) storage class.
  * api-change:``sagemaker``: This release enables adding RStudio Workbench support to an existing
    Amazon SageMaker Studio domain. It allows setting your RStudio on SageMaker environment
    configuration parameters and also updating the RStudioConnectUrl and RStudioPackageManagerUrl
    parameters for existing domains
  * api-change:``scheduler``: Updated the ListSchedules and ListScheduleGroups APIs to allow the
    NamePrefix field to start with a number. Updated the validation for executionRole field to support
    any role name.
  * api-change:``ssm``: Doc-only updates for December 2022.
  * api-change:``support``: Documentation updates for the AWS Support API
  * api-change:``transfer``: This release adds support for Decrypt as a workflow step type.
- from version 1.29.34
  * api-change:``batch``: Adds isCancelled and isTerminated to DescribeJobs response.
  * api-change:``ec2``: Adds support for pagination in the EC2 DescribeImages API.
  * api-change:``lookoutequipment``: This release adds support for listing inference schedulers by
    status.
  * api-change:``medialive``: This release adds support for two new features to AWS Elemental
    MediaLive. First, you can now burn-in timecodes to your MediaLive outputs. Second, we now now
    support the ability to decode Dolby E audio when it comes in on an input.
  * api-change:``nimble``: Amazon Nimble Studio now supports configuring session storage volumes and
    persistence, as well as backup and restore sessions through launch profiles.
  * api-change:``resource-explorer-2``: Documentation updates for AWS Resource Explorer.
  * api-change:``route53domains``: Use Route 53 domain APIs to change owner, create/delete DS record,
    modify IPS tag, resend authorization. New: AssociateDelegationSignerToDomain,
    DisassociateDelegationSignerFromDomain, PushDomain, ResendOperationAuthorization. Updated:
    UpdateDomainContact, ListOperations, CheckDomainTransferability.
  * api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for new objective metrics in
    CreateAutoMLJob API.
  * api-change:``transcribe``: Enable our batch transcription jobs for Swedish and Vietnamese.
- from version 1.29.33
  * api-change:``athena``: Add missed InvalidRequestException in
    GetCalculationExecutionCode,StopCalculationExecution APIs. Correct required parameters (Payload and
    Type) in UpdateNotebook API. Change Notebook size from 15 Mb to 10 Mb.
  * api-change:``ecs``: This release adds support for alarm-based rollbacks in ECS, a new feature
    that allows customers to add automated safeguards for Amazon ECS service rolling updates.
  * api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
    stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
    processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
    as well as media ingestion to the cloud.
  * api-change:``kinesisvideo``: Amazon Kinesis Video Streams offers capabilities to stream video and
    audio in real-time via WebRTC to the cloud for storage, playback, and analytical processing.
    Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming, as well as
    media ingestion to the cloud.
  * api-change:``rds``: Add support for --enable-customer-owned-ip to RDS
    create-db-instance-read-replica API for RDS on Outposts.
  * api-change:``sagemaker``: AWS Sagemaker - Sagemaker Images now supports Aliases as secondary
    identifiers for ImageVersions. SageMaker Images now supports additional metadata for ImageVersions
    for better images management.
- from version 1.29.32
  * api-change:``appflow``: This release updates the ListConnectorEntities API action so that it
    returns paginated responses that customers can retrieve with next tokens.
  * api-change:``cloudfront``: Updated documentation for CloudFront
  * api-change:``datasync``: AWS DataSync now supports the use of tags with task executions. With
    this new feature, you can apply tags each time you execute a task, giving you greater control and
    management over your task executions.
  * api-change:``efs``: Update efs client to latest version
  * api-change:``guardduty``: This release provides the valid characters for the Description and Name
    field.
  * api-change:``iotfleetwise``: Updated error handling for empty resource names in
    "UpdateSignalCatalog" and "GetModelManifest" operations.
  * api-change:``sagemaker``: AWS sagemaker - Features: This release adds support for random seed,
    it's an integer value used to initialize a pseudo-random number generator. Setting a random seed
    will allow the hyperparameter tuning search strategies to produce more consistent configurations
    for the same tuning job.
- from version 1.29.31
  * api-change:``backup-gateway``: This release adds support for VMware vSphere tags, enabling
    customer to protect VMware virtual machines using tag-based policies for AWS tags mapped from
    vSphere tags. This release also adds support for customer-accessible gateway-hypervisor interaction
    log and upload bandwidth rate limit schedule.
  * api-change:``connect``: Added support for "English - New Zealand" and "English - South African"
    to be used with Amazon Connect Custom Vocabulary APIs.
  * api-change:``ecs``: This release adds support for container port ranges in ECS, a new capability
    that allows customers to provide container port ranges to simplify use cases where multiple ports
    are in use in a container. This release updates TaskDefinition mutation APIs and the Task
    description APIs.
  * api-change:``eks``: Add support for Windows managed nodes groups.
  * api-change:``glue``: This release adds support for AWS Glue Crawler with native DeltaLake tables,
    allowing Crawlers to classify Delta Lake format tables and catalog them for query engines to query
    against.
  * api-change:``kinesis``: Added StreamARN parameter for Kinesis Data Streams APIs. Added a new
    opaque pagination token for ListStreams. SDKs will auto-generate Account Endpoint when accessing
    Kinesis Data Streams.
  * api-change:``location``: This release adds support for a new style, "VectorOpenDataStandardLight"
    which can be used with the new data source, "Open Data Maps (Preview)".
  * api-change:``m2``: Adds an optional create-only `KmsKeyId` property to Environment and
    Application resources.
  * api-change:``sagemaker``: SageMaker Inference Recommender now allows customers to load tests
    their models on various instance types using private VPC.
  * api-change:``securityhub``: Added new resource details objects to ASFF, including resources for
    AwsEc2LaunchTemplate, AwsSageMakerNotebookInstance, AwsWafv2WebAcl and AwsWafv2RuleGroup.
  * api-change:``translate``: Raised the input byte size limit of the Text field in the TranslateText
    API to 10000 bytes.
- from version 1.29.30
  * api-change:``ce``: This release supports percentage-based thresholds on Cost Anomaly Detection
    alert subscriptions.
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``networkmanager``: Appliance Mode support for AWS Cloud WAN.
  * api-change:``redshift-data``: This release adds a new --client-token field to ExecuteStatement
    and BatchExecuteStatement operations. Customers can now run queries with the additional client
    token parameter to ensures idempotency.
  * api-change:``sagemaker-metrics``: Update SageMaker Metrics documentation.
- from version 1.29.29
  * api-change:``cloudtrail``: Merging mainline branch for service model into mainline release
    branch. There are no new APIs.
  * api-change:``rds``: This deployment adds ClientPasswordAuthType field to the Auth structure of
    the DBProxy.
- from version 1.29.28
  * bugfix:Endpoint provider: Updates ARN parsing ``resourceId`` delimiters
  * api-change:``customer-profiles``: This release allows custom strings in PartyType and Gender
    through 2 new attributes in the CreateProfile and UpdateProfile APIs: PartyTypeString and
    GenderString.
  * api-change:``ec2``: This release updates DescribeFpgaImages to show supported instance types of
    AFIs in its response.
  * api-change:``kinesisvideo``: This release adds support for public preview of Kinesis Video Stream
    at Edge enabling customers to provide configuration for the Kinesis Video Stream EdgeAgent running
    on an on-premise IoT device. Customers can now locally record from cameras and stream videos to the
    cloud on configured schedule.
  * api-change:``lookoutvision``: This documentation update adds kms:GenerateDataKey as a required
    permission to StartModelPackagingJob.
  * api-change:``migration-hub-refactor-spaces``: This release adds support for Lambda alias service
    endpoints. Lambda alias ARNs can now be passed into CreateService.
  * api-change:``rds``: Update the RDS API model to support copying option groups during the
    CopyDBSnapshot operation
  * api-change:``rekognition``: Adds support for "aliases" and "categories", inclusion and exclusion
    filters for labels and label categories, and aggregating labels by video segment timestamps for
    Stored Video Label Detection APIs.
  * api-change:``sagemaker-metrics``: This release introduces support SageMaker Metrics APIs.
  * api-change:``wafv2``: Documents the naming requirement for logging destinations that you use with
    web ACLs.
- from version 1.29.27
  * api-change:``iotfleetwise``: Deprecated assignedValue property for actuators and attributes.
    Added a message to invalid nodes and invalid decoder manifest exceptions.
  * api-change:``logs``: Doc-only update for CloudWatch Logs, for Tagging Permissions clarifications
  * api-change:``medialive``: Link devices now support buffer size (latency) configuration. A higher
    latency value means a longer delay in transmitting from the device to MediaLive, but improved
    resiliency. A lower latency value means a shorter delay, but less resiliency.
  * api-change:``mediapackage-vod``: This release provides the approximate number of assets in a
    packaging group.</changelog>
  <changelog author="dmueller@suse.com" date="1673265600">- correct requires
- update to 1.29.45:
  * api-change:``acm-pca``: Added revocation parameter validation: bucket names
    must match S3 bucket naming rules and CNAMEs conform to RFC2396 restrictions
    on the use of special characters in URIs.
  * api-change:``auditmanager``: This release introduces a new data retention
    option in your Audit Manager settings. You can now use the
    DeregistrationPolicy parameter to specify if you want to delete your data
    when you deregister Audit Manager.
  * api-change:``amplifybackend``: Updated GetBackendAPIModels response to
    include ModelIntrospectionSchema json string
  * api-change:``apprunner``: This release adds support of securely referencing
    secrets and configuration data that are stored in Secrets Manager and SSM
    Parameter Store by adding them as environment secrets in your App Runner
    service.
  * api-change:``connect``: Documentation update for a new Initiation Method
    value in DescribeContact API
  * api-change:``emr-serverless``: Adds support for customized images. You can
    now provide runtime images when creating or updating EMR Serverless
    Applications.
  * api-change:``lightsail``: Documentation updates for Amazon Lightsail.
  * api-change:``mwaa``: MWAA supports Apache Airflow version 2.4.3.
  * api-change:``rds``: This release adds support for specifying which
    certificate authority (CA) to use for a DB instance's server certificate
    during DB instance creation, as well as other CA enhancements.
  * api-change:``application-autoscaling``: Customers can now use the existing
    DescribeScalingActivities API to also see the detailed and machine-readable
    reasons for Application Auto Scaling not scaling their resources and, if
    needed, take the necessary corrective actions.
  * api-change:``logs``: Update to remove sequenceToken as a required field in
    PutLogEvents calls.
  * api-change:``ssm``: Adding support for QuickSetup Document Type in Systems
    Manager
  * api-change:``securitylake``: Allow CreateSubscriber API to take string input
    that allows setting more descriptive SubscriberDescription field. Make
    souceTypes field required in model level for UpdateSubscriberRequest as it is
    required for every API call on the backend. Allow ListSubscribers take any
    String as nextToken param.</changelog>
  <changelog author="dmueller@suse.com" date="1673870400">- update to 1.29.50:
  * api-change:``connect``: This release updates the responses of
    UpdateContactFlowContent, UpdateContactFlowMetadata, UpdateContactFlowName
    and DeleteContactFlow API with empty responses.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``outposts``: This release adds POWER_30_KVA as an option for
    PowerDrawKva. PowerDrawKva is part of the RackPhysicalProperties structure
    in the CreateSite request.
  * api-change:``resource-groups``: AWS Resource Groups customers can now turn
    on Group Lifecycle Events in their AWS account. When you turn this on,
    Resource Groups monitors your groups for changes to group state or
    membership. Those changes are sent to Amazon EventBridge as events that you
    can respond to using rules you create.
  * api-change:``cleanrooms``: Initial release of AWS Clean Rooms
  * api-change:``lambda``: Add support for MaximumConcurrency parameter for SQS
    event source. Customers can now limit the maximum concurrent invocations
    for their SQS Event Source Mapping.
  * api-change:``logs``: Bug fix: logGroupName is now not a required field in
    GetLogEvents, FilterLogEvents, GetLogGroupFields, and DescribeLogStreams
    APIs as logGroupIdentifier can be provided instead
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added
    support for compact DASH manifest generation, audio normalization using
    TruePeak measurements, and the ability to clip the sample range in the
    color corrector.
  * api-change:``secretsmanager``: Update documentation for new ListSecrets and DescribeSecret parameters
  * api-change:``kendra``: This release adds support to new document types -
    RTF, XML, XSLT, MS_EXCEL, CSV, JSON, MD
  * api-change:``location``: This release adds support for two new route travel
    models, Bicycle and Motorcycle which can be used with Grab data source.
  * api-change:``rds``: This release adds support for configuring allocated
    storage on the CreateDBInstanceReadReplica,
    RestoreDBInstanceFromDBSnapshot, and RestoreDBInstanceToPointInTime APIs.
  * api-change:``ecr-public``: This release for Amazon ECR Public makes several
    change to bring the SDK into sync with the API.
  * api-change:``kendra-ranking``: Introducing Amazon Kendra Intelligent
    Ranking, a new set of Kendra APIs that leverages Kendra semantic ranking
    capabilities to improve the quality of search results from other search
    services (i.e. OpenSearch, ElasticSearch, Solr).
  * api-change:``network-firewall``: Network Firewall now supports the Suricata
    rule action reject, in addition to the actions pass, drop, and alert.
  * api-change:``ram``: Enabled FIPS aws-us-gov endpoints in SDK.
  * api-change:``workspaces-web``: This release adds support for a new portal
    authentication type: AWS IAM Identity Center (successor to AWS Single
    Sign-On).</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674129600">- Update to 1.29.52
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``efs``: Update efs client to latest version
  * api-change:``ivschat``: Updates the range for a Chat Room's maximumMessageRatePerSecond field.
  * api-change:``wafv2``: Improved the visibility of the guidance for updating AWS WAF resources,
    such as web ACLs and rule groups.
- from version 1.29.51
  * api-change:``billingconductor``: This release adds support for SKU Scope for pricing plans.
  * api-change:``cloud9``: Added minimum value to AutomaticStopTimeMinutes parameter.
  * api-change:``imagebuilder``: Add support for AWS Marketplace product IDs as input during
    CreateImageRecipe for the parent-image parameter. Add support for listing third-party components.
  * api-change:``network-firewall``: Network Firewall now allows creation of dual stack endpoints,
    enabling inspection of IPv6 traffic.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to 1.29.58
  * api-change:``events``: Update events client to latest version
  * api-change:``iotfleetwise``: Add model validation to BatchCreateVehicle and BatchUpdateVehicle
    operations that invalidate requests with an empty vehicles list.
  * api-change:``s3``: Allow FIPS to be used with path-style URLs.
- from version 1.29.57
  * api-change:``cloudformation``: Enabled FIPS aws-us-gov endpoints in SDK.
  * api-change:``ec2``: This release adds new functionality that allows customers to provision IPv6
    CIDR blocks through Amazon VPC IP Address Manager (IPAM) as well as allowing customers to utilize
    IPAM Resource Discovery APIs.
  * api-change:``m2``: Add returnCode, batchJobIdentifier in GetBatchJobExecution response, for user
    to view the batch job execution result &amp; unique identifier from engine. Also removed unused headers
    from REST APIs
  * api-change:``polly``: Add 5 new neural voices - Sergio (es-ES), Andres (es-MX), Remi (fr-FR),
    Adriano (it-IT) and Thiago (pt-BR).
  * api-change:``redshift-serverless``: Added query monitoring rules as possible parameters for
    create and update workgroup operations.
  * api-change:``s3control``: Add additional endpoint tests for S3 Control. Fix missing endpoint
    parameters for PutBucketVersioning and GetBucketVersioning. Prior to this fix, those operations may
    have resulted in an invalid endpoint being resolved.
  * api-change:``sagemaker``: SageMaker Inference Recommender now decouples from Model Registry and
    could accept Model Name to invoke inference recommendations job; Inference Recommender now provides
    CPU/Memory Utilization metrics data in recommendation output.
  * api-change:``sts``: Doc only change to update wording in a key topic
- from version 1.29.56
  * api-change:``databrew``: Enabled FIPS us-gov-west-1 endpoints in SDK.
  * api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Melbourne) Region
    (ap-southeast-4) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
    region.
  * api-change:``ssm-sap``: This release provides updates to documentation and support for listing
    operations performed by AWS Systems Manager for SAP.
- from version 1.29.55
  * api-change:``lambda``: Release Lambda RuntimeManagementConfig, enabling customers to better
    manage runtime updates to their Lambda functions. This release adds two new APIs,
    GetRuntimeManagementConfig and PutRuntimeManagementConfig, as well as support on existing
    Create/Get/Update function APIs.
  * api-change:``sagemaker``: Amazon SageMaker Inference now supports P4de instance types.
- from version 1.29.54
  * api-change:``ec2``: C6in, M6in, M6idn, R6in and R6idn instances are powered by 3rd Generation
    Intel Xeon Scalable processors (code named Ice Lake) with an all-core turbo frequency of 3.5 GHz.
  * api-change:``ivs``: API and Doc update. Update to arns field in BatchGetStreamKey. Also updates
    to operations and structures.
  * api-change:``quicksight``: This release adds support for data bars in QuickSight table and
    increases pivot table field well limit.
- from version 1.29.53
  * api-change:``appflow``: Adding support for Salesforce Pardot connector in Amazon AppFlow.
  * api-change:``codeartifact``: Documentation updates for CodeArtifact
  * api-change:``connect``: Amazon Connect Chat introduces Persistent Chat, allowing customers to
    resume previous conversations with context and transcripts carried over from previous chats,
    eliminating the need to repeat themselves and allowing agents to provide personalized service with
    access to entire conversation history.
  * api-change:``connectparticipant``: This release updates Amazon Connect Participant's
    GetTranscript api to provide transcripts of past chats on a persistent chat session.
  * api-change:``ec2``: Adds SSM Parameter Resource Aliasing support to EC2 Launch Templates. Launch
    Templates can now store parameter aliases in place of AMI Resource IDs. CreateLaunchTemplateVersion
    and DescribeLaunchTemplateVersions now support a convenience flag, ResolveAlias, to return the
    resolved parameter value.
  * api-change:``glue``: Release Glue Studio Hudi Data Lake Format for SDK/CLI
  * api-change:``groundstation``: Add configurable prepass and postpass times for
    DataflowEndpointGroup. Add Waiter to allow customers to wait for a contact that was reserved
    through ReserveContact
  * api-change:``logs``: Bug fix - Removed the regex pattern validation from CoralModel to avoid
    potential security issue.
  * api-change:``medialive``: AWS Elemental MediaLive adds support for SCTE 35 preRollMilliSeconds.
  * api-change:``opensearch``: This release adds the enhanced dry run option, that checks for
    validation errors that might occur when deploying configuration changes and provides a summary of
    these errors, if any. The feature will also indicate whether a blue/green deployment will be
    required to apply a change.
  * api-change:``panorama``: Added AllowMajorVersionUpdate option to OTAJobConfig to make appliance
    software major version updates opt-in.
  * api-change:``sagemaker``: HyperParameterTuningJobs now allow passing environment variables into
    the corresponding TrainingJobs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675166400">- Update to 1.29.60
  * api-change:``clouddirectory``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``cloudformation``: This feature provides a method of obtaining which regions a
    stackset has stack instances deployed in.
  * api-change:``discovery``: Update ImportName validation to 255 from the current length of 100
  * api-change:``dlm``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: We add Prefix Lists as a new route destination option for LocalGatewayRoutes.
    This will allow customers to create routes to Prefix Lists. Prefix List routes will allow customers
    to group individual CIDR routes with the same target into a single route.
  * api-change:``imagebuilder``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``kafka``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``mediaconvert``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``swf``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.59
  * api-change:``application-autoscaling``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``appstream``: Fixing the issue where Appstream waiters hang for fleet_started and
    fleet_stopped.
  * api-change:``elasticbeanstalk``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``fis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``glacier``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``greengrass``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``greengrassv2``: Enabled FIPS endpoints for GovCloud (US) in SDK.
  * api-change:``mediatailor``: This release introduces the As Run logging type, along with API and
    documentation updates.
  * api-change:``outposts``: Adding support for payment term in GetOrder, CreateOrder responses.
  * api-change:``sagemaker-runtime``: Update sagemaker-runtime client to latest version
  * api-change:``sagemaker``: This release supports running SageMaker Training jobs with container
    images that are in a private Docker registry.
  * api-change:``serverlessrepo``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to 1.29.66
  * api-change:``transfer``: Updated the documentation for the ImportCertificate API call, and added
    examples.
- from version 1.29.65
  * api-change:``compute-optimizer``: AWS Compute optimizer can now infer if Kafka is running on an
    instance.
  * api-change:``customer-profiles``: This release deprecates the PartyType and Gender enum data
    types from the Profile model and replaces them with new PartyTypeString and GenderString
    attributes, which accept any string of length up to 255.
  * api-change:``frauddetector``: My AWS Service (Amazon Fraud Detector) - This release introduces
    Cold Start Model Training which optimizes training for small datasets and adds intelligent methods
    for treating unlabeled data. You can now train Online Fraud Insights or Transaction Fraud Insights
    models with minimal historical-data.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added improved scene change
    detection capabilities and a bandwidth reduction filter, along with video quality enhancements, to
    the AVC encoder.
  * api-change:``outposts``: Adds OrderType to Order structure. Adds PreviousOrderId and
    PreviousLineItemId to LineItem structure. Adds new line item status REPLACED. Increases maximum
    length of pagination token.
- from version 1.29.64
  * enhancement:AWSCRT: Upgrade awscrt version to 0.16.9
  * api-change:``proton``: Add new GetResourcesSummary API
  * api-change:``redshift``: Corrects descriptions of the parameters for the API operations
    RestoreFromClusterSnapshot, RestoreTableFromClusterSnapshot, and CreateCluster.
- from version 1.29.63
  * api-change:``appconfig``: AWS AppConfig introduces KMS customer-managed key (CMK) encryption of
    configuration data, along with AWS Secrets Manager as a new configuration data source. S3 objects
    using SSE-KMS encryption and SSM Parameter Store SecureStrings are also now supported.
  * api-change:``connect``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``keyspaces``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``quicksight``: QuickSight support for Radar Chart and Dashboard Publish Options
  * api-change:``redshift``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``sso-admin``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.62
  * bugfix:``s3``: boto3 no longer overwrites user supplied `Content-Encoding` with `aws-chunked`
    when user also supplies `ChecksumAlgorithm`.
  * api-change:``devops-guru``: This release adds filter support ListAnomalyForInsight API.
  * api-change:``forecast``: This release will enable customer select INCREMENTAL as ImportModel in
    Forecast's CreateDatasetImportJob API. Verified latest SDK containing required attribute, following
    https://w.amazon.com/bin/view/AWS-Seer/Launch/Trebuchet/
  * api-change:``iam``: Documentation updates for AWS Identity and Access Management (IAM).
  * api-change:``mediatailor``: The AWS Elemental MediaTailor SDK for Channel Assembly has added
    support for program updates, and the ability to clip the end of VOD sources in programs.
  * api-change:``sns``: Additional attributes added for set-topic-attributes.
- from version 1.29.61
  * api-change:``accessanalyzer``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``appsync``: This release introduces the feature to support EventBridge as AppSync
    data source.
  * api-change:``cloudtrail-data``: Add CloudTrail Data Service to enable users to ingest activity
    events from non-AWS sources into CloudTrail Lake.
  * api-change:``cloudtrail``: Add new "Channel" APIs to enable users to manage channels used for
    CloudTrail Lake integrations, and "Resource Policy" APIs to enable users to manage the
    resource-based permissions policy attached to a channel.
  * api-change:``codeartifact``: This release introduces a new DeletePackage API, which enables
    deletion of a package and all of its versions from a repository.
  * api-change:``connectparticipant``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: This launch allows customers to associate up to 8 IP addresses to their NAT
    Gateways to increase the limit on concurrent connections to a single destination by eight times
    from 55K to 440K.
  * api-change:``groundstation``: DigIF Expansion changes to the Customer APIs.
  * api-change:``iot``: Added support for IoT Rules Engine Cloudwatch Logs action batch mode.
  * api-change:``kinesis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``opensearch``: Amazon OpenSearch Service adds the option for a VPC endpoint
    connection between two domains when the local domain uses OpenSearch version 1.3 or 2.3. You can
    now use remote reindex to copy indices from one VPC domain to another without a reverse proxy.
  * api-change:``outposts``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``polly``: Amazon Polly adds two new neural American English voices - Ruth, Stephen
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports more completion
    criteria for Hyperparameter Optimization.
  * api-change:``securityhub``: New fields have been added to the AWS Security Finding Format.
    Compliance.SecurityControlId is a unique identifier for a security control across standards.
    Compliance.AssociatedStandards contains all enabled standards in which a security control is
    enabled.
  * api-change:``support``: This fixes incorrect endpoint construction when a customer is explicitly
    setting a region.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to 1.29.71
  * api-change:``appconfig``: AWS AppConfig now offers the option to set a version label on hosted
    configuration versions. Version labels allow you to identify specific hosted configuration versions
    based on an alternate versioning scheme that you define.
  * api-change:``datasync``: With this launch, we are giving customers the ability to use older SMB
    protocol versions, enabling them to use DataSync to copy data to and from their legacy storage
    arrays.
  * api-change:``ec2``: With this release customers can turn host maintenance on or off when
    allocating or modifying a supported dedicated host. Host maintenance is turned on by default for
    supported hosts.
- from version 1.29.70
  * api-change:``account``: This release of the Account Management API enables customers to view and
    manage whether AWS Opt-In Regions are enabled or disabled for their Account. For more information,
    see https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html
  * api-change:``appconfigdata``: AWS AppConfig now offers the option to set a version label on
    hosted configuration versions. If a labeled hosted configuration version is deployed, its version
    label is available in the GetLatestConfiguration response.
  * api-change:``snowball``: Adds support for EKS Anywhere on Snowball. AWS Snow Family customers can
    now install EKS Anywhere service on Snowball Edge Compute Optimized devices.
- from version 1.29.69
  * api-change:``autoscaling``: You can now either terminate/replace, ignore, or wait for EC2 Auto
    Scaling instances on standby or protected from scale in. Also, you can also roll back changes from
    a failed instance refresh.
  * api-change:``connect``: This update provides the Wisdom session ARN for contacts enabled for
    Wisdom in the chat channel.
  * api-change:``ec2``: Adds support for waiters that automatically poll for an imported snapshot
    until it reaches the completed state.
  * api-change:``polly``: Amazon Polly adds two new neural Japanese voices - Kazuha, Tomoko
  * api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for selecting algorithms in
    CreateAutoMLJob API.
  * api-change:``sns``: This release adds support for SNS X-Ray active tracing as well as other
    updates.
- from version 1.29.68
  * api-change:``chime-sdk-meetings``: Documentation updates for Chime Meetings SDK
  * api-change:``emr-containers``: EMR on EKS allows configuring retry policies for job runs through
    the StartJobRun API. Using retry policies, a job cause a driver pod to be restarted automatically
    if it fails or is deleted. The job's status can be seen in the DescribeJobRun and ListJobRun APIs
    and monitored using CloudWatch events.
  * api-change:``evidently``: Updated entity overrides parameter to accept up to 2500 overrides or a
    total of 40KB.
  * api-change:``lexv2-models``: Update lexv2-models client to latest version
  * api-change:``lexv2-runtime``: Update lexv2-runtime client to latest version
  * api-change:``lightsail``: Documentation updates for Lightsail
  * api-change:``migration-hub-refactor-spaces``: This release adds support for creating environments
    with a network fabric type of NONE
  * api-change:``workdocs``: Doc only update for the WorkDocs APIs.
  * api-change:``workspaces``: Removed Windows Server 2016 BYOL and made changes based on IAM
    campaign.
- from version 1.29.67
  * api-change:``backup``: This release added one attribute (resource name) in the output model of
    our 9 existing APIs in AWS backup so that customers will see the resource name at the output. No
    input required from Customers.
  * api-change:``cloudfront``: CloudFront Origin Access Control extends support to AWS Elemental
    MediaStore origins.
  * api-change:``glue``: DirectJDBCSource + Glue 4.0 streaming options
  * api-change:``lakeformation``: This release removes the LFTagpolicyResource expression limits.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to 1.29.78
  * api-change:``appflow``: This release enables the customers to choose whether to use Private Link
    for Metadata and Authorization call when using a private Salesforce connections
  * api-change:``ecs``: This release supports deleting Amazon ECS task definitions that are in the
    INACTIVE state.
  * api-change:``grafana``: Doc-only update. Updated information on attached role policies for
    customer provided roles
  * api-change:``guardduty``: Updated API and data types descriptions for CreateFilter, UpdateFilter,
    and TriggerDetails.
  * api-change:``iotwireless``: In this release, we add additional capabilities for the FUOTA which
    allows user to configure the fragment size, the sending interval and the redundancy ratio of the
    FUOTA tasks
  * api-change:``location``: This release adds support for using Maps APIs with an API Key in
    addition to AWS Cognito. This includes support for adding, listing, updating and deleting API Keys.
  * api-change:``macie2``: This release adds support for a new finding type,
    Policy:IAMUser/S3BucketSharedWithCloudFront, and S3 bucket metadata that indicates if a bucket is
    shared with an Amazon CloudFront OAI or OAC.
  * api-change:``wafv2``: You can now associate an AWS WAF v2 web ACL with an AWS App Runner service.
- from version 1.29.77
  * api-change:``chime-sdk-voice``: This release introduces support for Voice Connector media metrics
    in the Amazon Chime SDK Voice namespace
  * api-change:``cloudfront``: CloudFront now supports block lists in origin request policies so that
    you can forward all headers, cookies, or query string from viewer requests to the origin *except*
    for those specified in the block list.
  * api-change:``datasync``: AWS DataSync has relaxed the minimum length constraint of AccessKey for
    Object Storage locations to 1.
  * api-change:``opensearch``: This release lets customers configure Off-peak window and software
    update related properties for a new/existing domain. It enhances the capabilities of
    StartServiceSoftwareUpdate API; adds 2 new APIs - ListScheduledActions &amp; UpdateScheduledAction; and
    allows Auto-tune to make use of Off-peak window.
  * api-change:``rum``: CloudWatch RUM now supports CloudWatch Custom Metrics
  * api-change:``ssm``: Document only update for Feb 2023
- from version 1.29.76
  * api-change:``quicksight``: S3 data sources now accept a custom IAM role.
  * api-change:``resiliencehub``: In this release we improved resilience hub application creation and
    maintenance by introducing new resource and app component crud APIs, improving visibility and
    maintenance of application input sources and added support for additional information attributes to
    be provided by customers.
  * api-change:``securityhub``: Documentation updates for AWS Security Hub
  * api-change:``tnb``: This is the initial SDK release for AWS Telco Network Builder (TNB). AWS
    Telco Network Builder is a network automation service that helps you deploy and manage telecom
    networks.
- from version 1.29.75
  * bugfix:SSO: Fixes aws/aws-cli`#7496 &lt;https://github.com/aws/aws-cli/issues/7496&gt;`__ by using the
    correct profile name rather than the one set in the session.
  * api-change:``auditmanager``: This release introduces a ServiceQuotaExceededException to the
    UpdateAssessmentFrameworkShare API operation.
  * api-change:``connect``: Reasons for failed diff has been approved by SDK Reviewer
- from version 1.29.74
  * api-change:``apprunner``: This release supports removing MaxSize limit for
    AutoScalingConfiguration.
  * api-change:``glue``: Release of Delta Lake Data Lake Format for Glue Studio Service
- from version 1.29.73
  * api-change:``emr``: Update emr client to latest version
  * api-change:``grafana``: With this release Amazon Managed Grafana now supports inbound Network
    Access Control that helps you to restrict user access to your Grafana workspaces
  * api-change:``ivs``: Doc-only update. Updated text description in DeleteChannel, Stream, and
    StreamSummary.
  * api-change:``wafv2``: Added a notice for account takeover prevention (ATP). The interface
    incorrectly lets you to configure ATP response inspection in regional web ACLs in Region US East
    (N. Virginia), without returning an error. ATP response inspection is only available in web ACLs
    that protect CloudFront distributions.
- from version 1.29.72
  * api-change:``cloudtrail``: This release adds an InsufficientEncryptionPolicyException type to the
    StartImport endpoint
  * api-change:``efs``: Update efs client to latest version
  * api-change:``frauddetector``: This release introduces Lists feature which allows customers to
    reference a set of values in Fraud Detector's rules. With Lists, customers can dynamically manage
    these attributes in real time. Lists can be created/deleted and its contents can be modified using
    the Fraud Detector API.
  * api-change:``glue``: Fix DirectJDBCSource not showing up in CLI code gen
  * api-change:``privatenetworks``: This release introduces a new StartNetworkResourceUpdate API,
    which enables return/replacement of hardware from a NetworkSite.
  * api-change:``rds``: Database Activity Stream support for RDS for SQL Server.
  * api-change:``wafv2``: For protected CloudFront distributions, you can now use the AWS WAF Fraud
    Control account takeover prevention (ATP) managed rule group to block new login attempts from
    clients that have recently submitted too many failed login attempts.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to 1.29.89
  * api-change:``ivschat``: This release adds a new exception returned when calling AWS IVS chat
    UpdateLoggingConfiguration. Now UpdateLoggingConfiguration can return ConflictException when
    invalid updates are made in sequence to Logging Configurations.
  * api-change:``secretsmanager``: The type definitions of SecretString and SecretBinary now have a
    minimum length of 1 in the model to match the exception thrown when you pass in empty values.
- from version 1.29.88
  * api-change:``codeartifact``: This release introduces the generic package format, a mechanism for
    storing arbitrary binary assets. It also adds a new API, PublishPackageVersion, to allow for
    publishing generic packages.
  * api-change:``connect``: This release adds a new API, GetMetricDataV2, which returns metric data
    for Amazon Connect.
  * api-change:``evidently``: Updated entity override documentation
  * api-change:``networkmanager``: This update provides example usage for TransitGatewayRouteTableArn.
  * api-change:``quicksight``: This release has two changes: add state persistence feature for
    embedded dashboard and console in GenerateEmbedUrlForRegisteredUser API; add properties for hidden
    collapsed row dimensions in PivotTableOptions.
  * api-change:``redshift-data``: Added support for Redshift Serverless workgroup-arn wherever the
    WorkgroupName parameter is available.
  * api-change:``sagemaker``: Amazon SageMaker Inference now allows SSM access to customer's model
    container by setting the "EnableSSMAccess" parameter for a ProductionVariant in
    CreateEndpointConfig API.
  * api-change:``servicediscovery``: Updated all AWS Cloud Map APIs to provide consistent throttling
    exception (RequestLimitExceeded)
  * api-change:``sesv2``: This release introduces a new recommendation in Virtual Deliverability
    Manager Advisor, which detects missing or misconfigured Brand Indicator for Message Identification
    (BIMI) DNS records for customer sending identities.
- from version 1.29.87
  * api-change:``athena``: A new field SubstatementType is added to GetQueryExecution API, so
    customers have an error free way to detect the query type and interpret the result.
  * api-change:``dynamodb``: Adds deletion protection support to DynamoDB tables. Tables with
    deletion protection enabled cannot be deleted. Deletion protection is disabled by default, can be
    enabled via the CreateTable or UpdateTable APIs, and is visible in TableDescription. This setting
    is not replicated for Global Tables.
  * api-change:``ec2``: Introducing Amazon EC2 C7g, M7g and R7g instances, powered by the latest
    generation AWS Graviton3 processors and deliver up to 25% better performance over Graviton2-based
    instances.
  * api-change:``lakeformation``: This release adds two new API support "GetDataCellsFiler" and
    "UpdateDataCellsFilter", and also updates the corresponding documentation.
  * api-change:``mediapackage-vod``: This release provides the date and time VOD resources were
    created.
  * api-change:``mediapackage``: This release provides the date and time live resources were created.
  * api-change:``route53resolver``: Add dual-stack and IPv6 support for Route 53 Resolver
    Endpoint,Add IPv6 target IP in Route 53 Resolver Forwarding Rule
  * api-change:``sagemaker``: There needs to be a user identity to specify the SageMaker user who
    perform each action regarding the entity. However, these is a not a unified concept of user
    identity across SageMaker service that could be used today.
- from version 1.29.86
  * api-change:``dms``: This release adds DMS Fleet Advisor Target Recommendation APIs and exposes
    functionality for DMS Fleet Advisor. It adds functionality to start Target Recommendation
    calculation.
  * api-change:``location``: Documentation update for the release of 3 additional map styles for use
    with Open Data Maps: Open Data Standard Dark, Open Data Visualization Light &amp; Open Data
    Visualization Dark.
- from version 1.29.85
  * api-change:``account``: AWS Account alternate contact email addresses can now have a length of
    254 characters and contain the character "|".
  * api-change:``ivs``: Updated text description in DeleteChannel, Stream, and StreamSummary.
- from version 1.29.84
  * api-change:``dynamodb``: Documentation updates for DynamoDB.
  * api-change:``ec2``: This release adds support for a new boot mode for EC2 instances called 'UEFI
    Preferred'.
  * api-change:``macie2``: Documentation updates for Amazon Macie
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has improved handling for
    different input and output color space combinations.
  * api-change:``medialive``: AWS Elemental MediaLive adds support for Nielsen watermark timezones.
  * api-change:``transcribe``: Amazon Transcribe now supports role access for these API operations:
    CreateVocabulary, UpdateVocabulary, CreateVocabularyFilter, and UpdateVocabularyFilter.
- from version 1.29.83
  * api-change:``iot``: A recurring maintenance window is an optional configuration used for rolling
    out the job document to all devices in the target group observing a predetermined start time,
    duration, and frequency that the maintenance window occurs.
  * api-change:``migrationhubstrategy``: This release updates the File Import API to allow importing
    servers already discovered by customers with reduced pre-requisites.
  * api-change:``organizations``: This release introduces a new reason code,
    ACCOUNT_CREATION_NOT_COMPLETE, to ConstraintViolationException in CreateOrganization API.
  * api-change:``pi``: This release adds a new field PeriodAlignment to allow the customer specifying
    the returned timestamp of time periods to be either the start or end time.
  * api-change:``pipes``: This release fixes some input parameter range and patterns.
  * api-change:``sagemaker``: Add a new field "EndpointMetrics" in SageMaker Inference Recommender
    "ListInferenceRecommendationsJobSteps" API response.
- from version 1.29.82
  * api-change:``codecatalyst``: Published Dev Environments StopDevEnvironmentSession API
  * api-change:``pricing``: This release adds 2 new APIs - ListPriceLists which returns a list of
    applicable price lists, and GetPriceListFileUrl which outputs a URL to retrieve your price lists
    from the generated file from ListPriceLists
  * api-change:``s3outposts``: S3 on Outposts introduces a new API ListOutpostsWithS3, with this API
    you can list all your Outposts with S3 capacity.
- from version 1.29.81
  * enhancement:Documentation: Splits service documentation into multiple sub-pages for better
    organization and faster loading time.
  * api-change:``comprehend``: Amazon Comprehend now supports flywheels to help you train and manage
    new model versions for custom models.
  * api-change:``ec2``: This release allows IMDS support to be set to v2-only on an existing AMI, so
    that all future instances launched from that AMI will use IMDSv2 by default.
  * api-change:``kms``: AWS KMS is deprecating the RSAES_PKCS1_V1_5 wrapping algorithm option in the
    GetParametersForImport API that is used in the AWS KMS Import Key Material feature. AWS KMS will
    end support for this wrapping algorithm by October 1, 2023.
  * api-change:``lightsail``: This release adds Lightsail for Research feature support, such as GUI
    session access, cost estimates, stop instance on idle, and disk auto mount.
  * api-change:``managedblockchain``: This release adds support for tagging to the accessor resource
    in Amazon Managed Blockchain
  * api-change:``omics``: Minor model changes to accomodate batch imports feature
- from version 1.29.80
  * api-change:``devops-guru``: This release adds the description field on ListAnomaliesForInsight
    and DescribeAnomaly API responses for proactive anomalies.
  * api-change:``drs``: New fields were added to reflect availability zone data in source server and
    recovery instance description commands responses, as well as source server launch status.
  * api-change:``internetmonitor``: CloudWatch Internet Monitor is a a new service within CloudWatch
    that will help application developers and network engineers continuously monitor internet
    performance metrics such as availability and performance between their AWS-hosted applications and
    end-users of these applications
  * api-change:``lambda``: This release adds the ability to create ESMs with Document DB change
    streams as event source. For more information see
    https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for HDR10 to
    SDR tone mapping, and animated GIF video input sources.
  * api-change:``timestream-write``: This release adds the ability to ingest batched historical data
    or migrate data in bulk from S3 into Timestream using CSV files.
- from version 1.29.79
  * api-change:``connect``: StartTaskContact API now supports linked task creation with a new
    optional RelatedContactId parameter
  * api-change:``connectcases``: This release adds the ability to delete domains through the
    DeleteDomain API. For more information see
    https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``redshift``: Documentation updates for Redshift API bringing it in line with IAM best
    practices.
  * api-change:``securityhub``: New Security Hub APIs and updates to existing APIs that help you
    consolidate control findings and enable and disable controls across all supported standards
  * api-change:``servicecatalog``: Documentation updates for Service Catalog</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires
- Remove version constraint on python-pytest in BuildRequires
- Revert changes to Requires that introduced new incompatible syntax</changelog>
</package>
<package pkgid="ba5ac5c40f8f246de9231cbc79b3c8bec9c302f03ad421a6f2948548108e8704" name="python-chardet" arch="src">
  <version epoch="0" ver="3.0.4" rel="150000.5.3.1"/>
  <changelog author="alexandre@exatati.com.br" date="1264420800">- Initial package (2.0.1) for openSUSE.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1301140800">- Regenerate spec file with py2pack;
- Bzip2 source file.</changelog>
  <changelog author="coolo@suse.com" date="1323345600">- the license seems to be LGPL-2.1+</changelog>
  <changelog author="alexandre@exatati.com.br" date="1325073600">- Standard in spec file;
- Remove CFLAGS and %clean section from spec file.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1343390400">- Update to 1.1:
  - Sorry, no changelog.</changelog>
  <changelog author="alexandre@exatati.com.br" date="1349179200">- Update to 2.1.1:
  - Sorry, no changelog.</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="aloisio@gmx.com" date="1423569600">- Update to version 2.3.0
  * Added support for CP932 detection (thanks to @hashy)
  * Fixed an issue where UTF-8 with a BOM would not be detected
    as UTF-8-SIG (#8)
  * Modified chardetect to use argparse for argument parsing
  * Moved docs to a gh-pages branch. You can now access them
    at http://chardet.github.io
- Changelog on https://github.com/chardet/chardet/commits/2.3.0
- Other minor changes</changelog>
  <changelog author="arun@gmx.de" date="1431345600">- specfile:
  * added update alternative to prevent conflicts with python3 version
  * add tests</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Include in SLE 12 (bsc#1002895, FATE#321630)</changelog>
  <changelog author="aloisio@gmx.com" date="1489924800">- Converted to single spec.</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- do not use %py_ver, replace with %python_version</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 3.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1498737600">- fix source link</changelog>
  <changelog author="dmueller@suse.com" date="1502798400">- add update-alternative support for py2/py3 coinstallability</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- Fix build for Leap-42.3</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add update-alternatives post-requires</changelog>
  <changelog author="daniel.garcia@suse.com" date="1705406400">- Fix update-alternative in %postun, bsc#1218765</changelog>
</package>
<package pkgid="687be3ecf1459783c88a1783656a2abc71b9928ed7d59e644766888289668e28" name="python-configobj" arch="src">
  <version epoch="0" ver="5.0.6" rel="150000.3.3.1"/>
  <changelog author="poeml@suse.de" date="1178884800">- package created (copy from packman package) - 4.4.0</changelog>
  <changelog author="peter+rpmspam@suntel.com.tr" date="1180267200">- add "unzip" as a builddep so it builds on Factory - 4.4.0</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1279627200">- update to 4.7.1
- split out -docs subpackage</changelog>
  <changelog author="dimstar@opensuse.org" date="1284379200">- Update to version 4.7.2:
  + BUGFIX: Restore Python 2.3 compatibility
  + BUGFIX: Members that were lists were being returned as copies
    due to interpolation introduced in 4.7. Lists are now only
    copies if interpolation changes a list member.
  + BUGFIX: pop now does interpolation in list values as well.
  + BUGFIX: where interpolation matches a section name rather
    than a value it is ignored instead of raising an exception on
    fetching the item.
  + BUGFIX: values that use interpolation to reference members
    that don't exist can now be repr'd.
  + BUGFIX: Fix to avoid writing '\r\r\n' on Windows when given a
    file opened in text write mode ('w').</changelog>
  <changelog author="coolo@suse.com" date="1323345600">- fix license to be in spdx.org format</changelog>
  <changelog author="saschpe@suse.de" date="1323432000">- Spec file cleanup:
  * Use upstream tarball
  * Obsoleted empty doc package
  * Fix SLE-11 build
  * Use upstream description</changelog>
  <changelog author="bwiedemann@suse.com" date="1327406400">- fix Obsoletes</changelog>
  <changelog author="dimstar@opensuse.org" date="1328443200">- Really make the obsoletes sane: The package was called
  python-configobj-docs before, so that's what we need to obsolete
  (not -doc).
- The Obsoletes tag is for &lt;= %{version}, as the package existed in
  version 4.7.2, which is also when it was merged back. Obsoleting
  only &lt; 4.7.2 would cause conflicts when installing the newly
  merged package.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947200">- Spec file cleanups</changelog>
  <changelog author="cfarrell@suse.com" date="1338292800">- license update: BSD-3-Clause
  Refers only to the license available at
  http://www.voidspace.org.uk/python/license.shtml (which is BSD-3-Clause)</changelog>
  <changelog author="fcastelli@suse.com" date="1406116800">- Update to version 5.0.5:
  * BUGFIX: error in writing out config files to disk with non-ascii
    characters
  * BUGFIX: correcting that the code path fixed in 5.0.3 didn’t cover
    reading in config files
  * BUGFIX: not handling unicode encoding well, especially with respect to
    writing out files
  * Specific error message for installing version this version on Python
    versions older than 2.5
  * Documentation corrections
  * BUGFIX: Fixed regression on python 2.x where passing an encoding parameter
    did not convert a bytestring config file (which is the most common) to
    unicode. Added unit tests for this and related cases
  * BUGFIX: A particular error message would fail to display with a type error
    on python 2.6 only
  * Python 3 single-source compatibility at the cost of a more restrictive set
    of versions: 2.6, 2.7, 3.2, 3.3 (otherwise unchanged)</changelog>
  <changelog author="fcastelli@suse.com" date="1406203200">- Added runtime depedency: python-six</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 5.0.6
  * Improves error messages in certain edge cases</changelog>
  <changelog author="toddrme2178@gmail.com" date="1495627200">- Implement single-spec version.
- Fix source URL.</changelog>
  <changelog author="mmachova@suse.com" date="1688472000">- Add CVE-2023-26112.patch (bsc#1210070)</changelog>
</package>
<package pkgid="8615c8b43f152a6335e69d7eb7a4620a7a14cf64bf6bb40117d66fcc7839c719" name="python-cssselect" arch="src">
  <version epoch="0" ver="1.0.3" rel="150000.3.5.1"/>
  <changelog author="iacobcatalin@gmail.com" date="1357646400">- Initial package 0.7.1</changelog>
  <changelog author="saschpe@suse.de" date="1358164800">- Minimal cleanup</changelog>
  <changelog author="arun@gmx.de" date="1364472000">- updated to 0.8
  Changelog (http://pythonhosted.org/cssselect/#changelog):
    Released on 2013-03-15.
    Improvements:
    [#22] Let extended translators override what XPathExpr class is used
    [#19] Use the built-in lang() XPath function for implementing the :lang() pseudo-class with XML documents. This is probably faster than ancestor-or-self::.
    Bug fixes:
    [#14] Fix non-ASCII pseudo-classes. (Invalid selector instead of crash.)
    [#20] As per the spec, elements containing only whitespace are not considered empty for the :empty pseudo-class.</changelog>
  <changelog author="arun@gmx.de" date="1373371200">- Packaged LICENSE file
  fixes bnc#828513
  Bug 828513 - LICENSE not packaged in python3-cssselect 0.8</changelog>
  <changelog author="p.drouand@gmail.com" date="1385208000">- Update to version 0.9.1
  + **Backward incompatible change from 0.9**:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to ignoring
    pseudo-elements, as it did in 0.8 and previous versions.
    (:meth:`~GenericTranslator.css_to_xpath` doesn’t change.)
  + Drop official support for Python 2.4 and 3.1,
    as testing was becoming difficult. Nothing will break overnight,
    but future releases may on may not work on these versions.
    Older releases will remain available on PyPI.
- Changes from 0.9
  + Add parser support for :attr:`functional pseudo-elements
    &lt;Selector.pseudo_element&gt;`.
  + This version accidentally introduced a backward incompatible change:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to rejecting
    pseudo-elements instead of ignoring them.
- Remove useless CFLAGS definition
- Add README.rst, CHANGES and AUTHORS in package documentation</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- update to 1.0.1:
  * Add support for Python 3.6.
  * Documentation hosted `on Read the Docs &lt;https://cssselect.readthedocs.io/&gt;`_
  * Add code coverage reports.
  * Fix ``:nth-*(an+b)`` pseudo-classes selectors.
    (except ``*:nth-child()`` which looks untranslatable to XPath 1.0.)
  * Distribute as universal wheel.
  * Add support for Python 3.3, 3.4 and 3.5.
  * Drop support for Python 2.5 as testing is getting difficult.
  * Improve tests on pseudo-elements.
- Switch to singlespec approach</changelog>
  <changelog author="arun@gmx.de" date="1515240000">- specfile:
  * update copyright year
- update to version 1.0.3:
  * Fix artifact uploads to pypi
- changes from version 1.0.2:
  * Drop support for Python 2.6 and Python 3.3.
  * Fix deprecation warning in Python 3.6.
  * Minor cleanups.</changelog>
</package>
<package pkgid="13aeb3164200b36ac67ae6f387d0995b3979082010005e51e12a34088ee8f991" name="python-docutils" arch="src">
  <version epoch="0" ver="0.14" rel="150000.3.4.1"/>
  <changelog author="toddrme2178@gmail.com" date="1335528000">- Fix building python 3 package on openSUSE 11.4 x86_64</changelog>
  <changelog author="cfarrell@suse.com" date="1335787200">- license update: Python-2.0 and BSD-2-Clause and GPL-2.0+ and GPL-3.0+ and
  SUSE-Public-Domain
  tools/editors/emacs/rst.el is GPL-3.0+ - see also COPYING file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1336046400">- Update to version 0.9:
  * reStructuredText "code" role and directive with syntax
    highlighting by Pygments_.
  * "code" option of the "include" directive.
  * Fix [ 3402314 ] allow non-ASCII whitespace, punctuation
    characters and "international" quotes around inline markup.
  * Fix handling of missing stylesheets.
  * Fix [ 2971827 ] and [ 3442827 ] extras/roman.py moved to
    docutils/utils/roman.py
  * docutils.utils is now a package (providing a place for
    sub-modules)
  * change default for `math-output` setting to MathJax
  * Support the `abbreviation` and `acronym` standard roles.
  * Record only files required to generate the LaTeX source as
    dependencies.
  * Use ``\setcounter{secnumdepth}{0}`` instead of ``*``-versions
    when suppressing LaTeX section numbering.
- Cleaned up spec files
- Fix rpmlint warnings</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1351252800">- patch from upstream for python3.3 support
  * Fix [3541369] Relative __import__ also with Python 3.3</changelog>
  <changelog author="saschpe@suse.de" date="1353412800">- Run testsuite
- Correctly fix non-excutable script warning
- Remove outdated macros
- Also remove "*.py" ending in egg-info files</changelog>
  <changelog author="dmueller@suse.com" date="1372852800">- update to 0.10:
  - add rpmlint-non-executable-scripts.diff
  * SmartQuotes transform for typographic quotes and dashes.
  * FileInput/FileOutput: no system-exit on IOError. The handle_io_errors option is ignored.
  * &lt;code&gt; tag for inline "code", do not drop nested inline nodes (syntax highlight tokens).
  * Customizable MathJax URL (based on patch by Dmitry Shachnev).
  * No line break after opening inline math tag.</changelog>
  <changelog author="tchvatal@suse.com" date="1379332800">- Use update-alternatives to allow switching between py2 and py3
  version of doctool binaries.</changelog>
  <changelog author="tchvatal@suse.com" date="1379332801">- Drop r7486-python33-compat.patch as it is not needed.</changelog>
  <changelog author="tchvatal@suse.com" date="1379332802">- Fix the symlink creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1380024000">- Update to 0.11
  * Fix for the overwritting of document attributes.
  * Support embedded aliases within hyperlink references.
  * try local import of docutils components (reader, writer, parser,
    language module) before global search.
  * Python 3.3 checks CVS syntax only if "strict" is True.
  * Now, it is easy to add a custom stylesheet to Docutils' default
    stylesheet with, e.g.,
  - -stylesheet_path='html4css1.css, mystyle.css'
  * If there is a file html4css1.css in the working directory of the
    process at launch, it is used instead of the one provided by
    Docutils in the writer source directory.
  * New default for math-output: HTML math.css.
  * Avoid repeated class declarations in html4css1 writer
  * Drop the simple algorithm replacing straight double quotes with
    English typographic ones. Activate the SmartQuotes transform if
    you want this feature.
  * New setting stylesheet_dirs: Comma-separated list of directories
    where stylesheets are found. Used by stylesheet_path when
    expanding relative path arguments.
  * handle lines starting with a period.
  * Fix option separating comma was bold (thanks to Bill Morris).
- Use pypi url and download
- Replace rpmlint-non-executable-scripts.diff with sed in the spec
  file</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Update to 0.12
  * docs/ref/rst/directives.txt
  - Update "math" and "csv-table" descriptions.
  * docutils/parsers/rst/directives/images.py
  - Fix [258] figwidth="image" generates unitless width value.
  * docutils/parsers/rst/states.py
  - Improve error report when a non-ASCII character is specified as
    delimiter, quote or escape character under Python 2.
    Fixes [ 249 ] and [ 250 ].
  * docutils/writers/html4css1/__init__.py
  - Don't add newline after inline math.
    Thanks to Yury G. Kudryashov for the patch.
  * docutils/writers/latex2e/__init__.py
  - Fix [ 239 ] Latex writer glues paragraphs with figure floats.
  - Apply [ 116 ] by Kirill Smelkov. Don't hardcode \large for subtitle.
  * docutils/writers/odf_odt/__init__.py
  - Apply patch by Jakub Wilk to fix bug [ 100 ].
  * test/test_error_reporting.py
  - Fix [ 223 ] by removing redundant tests we do not have control over.
  * test/test_nodes.py
  - Apply [ 115 ] respect fixed 2to3 string literal conversion behavior.</changelog>
  <changelog author="ledest@gmail.com" date="1414584000">- fix bashisms in pre script</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="dmueller@suse.com" date="1489060800">- update to 0.13.1:
  * New HTML writer generating HTML 5.
  * languages: persian/farsi (fa) and latvian (la) mappings.
  * change default base url for :rfc: to http://tools.ietf.org/html/
  latex2e: Fix admonition width, remove deprecated options,
  better tablewidth auto, ...</changelog>
  <changelog author="aloisio@gmx.com" date="1490356800">- Converted to single-spec
- Added python-docutils-rpmlintrc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492689600">- Fix url
- Executables are python-independent so only have the python3
  version provide them.
- Implement update-alternatives to avoid conflict with rst2html5</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493640000">- Make only the python2 package provide the "docutils" package.</changelog>
  <changelog author="jmatejek@suse.com" date="1496750400">- only emit rst2html5 alternatives for python 3
- switch the "docutils" provides to the python 3 package (all the comands live there)
  (this fixes bsc#1039394)</changelog>
  <changelog author="arun@gmx.de" date="1510315200">- specfile:
  * add binary rst2html4
- update to version 0.14:
  * Enable validation of Docutils XML documents against the DTD:
    Use attribute type NMTOKEN instead of REFID for the `refid` attribute
    and NMTOKENS for `backrefs`: REFID refers to an ID type instance,
    however, the `ids` attribute cannot use the ID type because `XML only
    allows one ID per Element Type`__ and doesn't support a multiple-ID
    "IDS" attribute type.
  * Added documentation for escaped whitespace in URI contexts.
  * Clarify use of Unicode character categories.
  * Added functionality: escaped whitespace in URI contexts.
  * Consistent handling of all whitespace characters in inline markup
    recognition. Fixes [ 307 ] and [ 3402314 ] (now [ 173 ]).
  * Added support for escaped whitespace in URI contexts.
  * Rework patch [ 120 ] (revert change to "Table.get_column_widths()"
    that led to problems in an application with a custom table
    directive).
  * Fix [ 320 ] Russian docinfo fields not recognized.
  * Don't add a second ID to problematic references.
  * Fix SmartQuotes: warn only once if language is unsupported, keep
    "rawsource" when "educating" quotes.
  * Added "split_escaped_whitespace" function, support for escaped
    whitespace in URI contexts.
  * Fix [ 321 ] Import block might cause name error.
  * Update quote definitions for languages et, fi, fr, ro, sv, tr, uk.
  * New quote definitions for hr, hsb, hu, lv, sh, sl, sr.
  * Fix [ 313 ] Differentiate apostrophe from closing single quote (if
    possible).
  * Fix [ 317 ] Extra space inserted with French smartquotes.
  * Add command line interface for stand-alone use (requires 2.7).
  * Provide default title in metadata (required by HTML5).
  * Fix [ 312 ] HTML writer generates invalid HTML if the table has
    two tags.
  * Fix [ 319 ] The MathJax CDN shut down on April 30, 2017. For
    security reasons, we don't use a third party public installation as default but
    warn if math-output_ is set to MathJax without specifying a URL.
  * Apply [ 125 ] HTML writer: respect automatic table column sizing.
  * Handle class arguments for block-level elements by wrapping them
    in a "DUclass" environment. This replaces the special handling for
    "epigraph" and "topic" elements.
  * Apply [ 141 ] Handling inline in manpage writer.
  * Command setting "language" now sets the default language of the
    generated ODF document.
  * The use of image directive options :width: (%), :scale:, etc now
    set the width/height/size of images in the generated ODF
    documents.
  * The heading/title of admonitions now reflects the language
    specified by the "language" setting.
  * Fixed [ 306 ] only first of multiple "image" directives with the
    same URL shown in output.
  * Fixed [ 282 ] python3: AttributeError.
  * tools/rst2html4.py: New front-end.
  * tools/dev/generate_punctuation_chars.py: New skript to test and
    update utils.punctuation_chars.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707134400">- Use update-alternatives for all binary scripts and provide
  /usr/bin/docutils to avoid conflict with python311-docutils
  bsc#1219501</changelog>
</package>
<package pkgid="58aa13f73ef94c060f8f1edc23ae0e69f45b7ee47cf3c490a83899d537aa008a" name="python-idna" arch="src">
  <version epoch="0" ver="2.6" rel="150000.3.3.1"/>
  <changelog author="nemysis@gmx.ch" date="1437134400">- Initial package creation</changelog>
  <changelog author="tbechtold@suse.com" date="1489665600">- update to version v2.5
  * only store scripts that are specifically referenced in logic
  * Fix validation for U+30FB KATAKANA MIDDLE DOT code point (#47)
  * range-based integer containment code
  * Documentation Updates
  * Make test runners Python 2.6 compatible (issue #20)
  * remove DISALLOWED codepoints from datafile, since they're unread
  * Avoid using bare 'except' (#39)
  * Add Python 3.5 support
  * Mark Python Wheels as universal (supports Python 2 and 3)
  * Skip tests that won't work on Python 2.6 (fixes #20)
  * Update Travis configuration to test against Python 2.6 and 3.6
  * Use relative imports (fixes #26)
  * Documentation tidy up
  * Revert to basing IDNAError on UnicodeError (issue #43) (#45)
  * rebuild idnadata
  * Update history with Java-related change
  * ignore vim swapfiles
  * Update Travis CI coverage to 3.6 and 3.7-dev
  * Reduce memory usage even further. (#41)
  * Update trove classifier for Python 3.6
  * Properly report label length exceptions (issue #36)
  * Segment uts46data to avoid Jython limits (#28)
- Switch to singlespec approach</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- point download url to PyPI
- drop %oname</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- update to version 2.6:
  * Allows generation of IDNA and UTS 46 table data for different
    versions of Unicode, by deriving properties directly from Unicode
    data.
  * Ability to generate RFC 5892/IANA-style table data
  * Diagnostic output of IDNA-related Unicode properties and derived
    calculations for a given codepoint
  * Support for idna.__version__ to report version
  * Support for idna.idnadata.__version__ and
    idna.uts46data.__version__ to report Unicode version of underlying
    IDNA and UTS 46 data respectively.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- Add CVE-2024-3651.patch, backported from upstream commit
  gh#kjd/idna#172/commits/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7
  (bsc#1222842, CVE-2024-3651)</changelog>
</package>
<package pkgid="e5f90e45d51400fdc591903b3837e59a09e8df76840352e4c1bcf7fb600ff26d" name="python-iniconfig" arch="src">
  <version epoch="0" ver="1.1.1" rel="150000.1.11.1"/>
  <changelog author="mcalabkova@suse.com" date="1598270400">- Initial packaging (v1.0.1)
- Build the tests separately because it deadlocks with pytest</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- update to 1.1.1:
  * fix version determination (thanks @florimondmanca)
  * typing stubs (thanks @bluetech)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647259200">- Include in SLE-15 (bsc#1195916, bsc#1196696, jsc#PM-3356, jsc#SLE-23972)</changelog>
</package>
<package pkgid="4e8aba7b04e73e8941ea29d4883a0dbec7f4779c7c5a68b93f01bce21881744e" name="python-jmespath" arch="src">
  <version epoch="0" ver="0.9.3" rel="150000.3.3.4"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="a6bcff0fe835d8dc7db56371c2ce3400ad915c48d725f630068ca3e3f3c49fb7" name="python-jmespath" arch="src">
  <version epoch="0" ver="0.9.3" rel="150000.3.5.1"/>
  <changelog author="rschweikert@suse.com" date="1390046400">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="cace173030124353fdd13b528d1ea46f550c45b83f5fc3bc4012a78349c87b8c" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.59.1"/>
  <changelog author="dcassany@suse.com" date="1615464000">- Bump version: 9.23.19 → 9.23.20
  This version upgrade includes several fixes:
  * Refactor grub2 installation
    This commit refactors grub2 installation method to split it in two
    parts. Former grub2.install method was meant to run the grub2-install
    tool, however, in addition it was also running the secure boot
    installation shim-install. The install method in KIWI is skipped for
    those architectures and firmware combinations for which bios support
    doesn't exist. This was leading to skip the secure boot installation.
    The current approach strips the secure boot installation logic from the
    grub2.install method, so skipping the install method does not
    automatically result in skipping the secure boot installation.
    Fixes bsc#1182211
  * Fix lsblk flags to get sorted output
    This commit modifies the lsblk command flags to get a sorted output
    according to the disk layout.
    This is related to 176c7eab commita and it fixes bsc#1182264,
    bsc#1182963 and bsc#1183059
  * Avoid using generators in pre-mount hooks
    This commit deletes the generator that was creating the sysroot.mount
    unit for ramdisk deployments. Generators, specially the sysroot.mount is
    expected to be created on very early stages of the boot procedure as
    this has impact on relevant targets such as initrd-root-fs.target, which
    does not depend on sysroot.mount if the unit is not there.
    In ramdisk deployments some data is known on pre-mount stage as
    as it is downloaded from the PXE server. At this stage it is not safe to
    generate a sysroot.mount unit that depends on initrd-root-fs.target as
    the target is close to finalize or even finalized already and could
    potentially skip sysroot.mount exection.
    Instead we include a mount hook which is only executed on ramdisk
    deployments that simply runs the mount command to mount /sysroot.
    This fixes bsc#1178670</changelog>
  <changelog author="dcassany@suse.com" date="1615464001">- Turn fb-util-for-appx requirement into a recommendation
  This commit relaxes the requirement for `fb-util-for-appx` since
  the utiliy is not part of all SLE-15 service packs.</changelog>
  <changelog author="dcassany@suse.com" date="1615464002">- Add a requirement for kiwi-systemdeps-iso-media on disk images
  This commit adds a requirement for `kiwi-systemdeps-iso-media` in
  `kiwi-systemdeps-disk-images`. This is to ensure that installing
  `kiwi-systemdeps-disk-images` is enough to build OEM images including
  install media.
  (cherry picked from commit 307b7e0234c01846587024c008166310e8d7d8b0)</changelog>
  <changelog author="dcassany@suse.com" date="1615464003">- Require qemu-img in any filesystem based image
  This commit moves the qemu-img requirement into the
  `kiwi-systemdeps-filesystems` to ensure ISO, OEM and PXE images include
  it in the build service. Also this is required for images that are
  simple root-trees in a filesystem (image=ext4).
  (cherry picked from commit 4e91e028eba763321a0958ff0febee107d944af8)</changelog>
  <changelog author="dcassany@suse.com" date="1618228800">- Recommend kiwi-systemdeps-containers
  This commit recommends kiwi-systemdeps-containers instead of a hard
  requirement in kiwi-systemdeps package for SLE builds. This is needed
  because the containers tool chain is spread in different SLE modules.</changelog>
  <changelog author="dcassany@suse.com" date="1618574400">- Fix appx manifest for WSL containers
  This patch is two fold
  * This commit prevents KIWI from setting Identity Name attribute and
    DisplayName and PublisherDisplayName elements.
    Fixes #1780
  * Fix WSL appx filemap relative paths not preserved
    During WSL appx image type creation step the file hierarchy under
    metadata_path is written to a temporary file for eventual use as
    argument to utility appx. The file hierarchy information is dropped
    resulting in all filemap entries appearing to be at the metadata_path
    root. The resulting image will side load and run but without icon and
    other resources. Stricter checks at Windows Store submission will
    fail due to mismatch between image manifest and contents.
    Fix by preserving relative path of filemap entries relative
    to metadata_path. Add log output showing both input absolute path
    and output relative path.
    This is related to jsc#SLE-12986</changelog>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
</package>
<package pkgid="34da21f73d3da063b0fa692437800c2da2331237cff6d75e4f46abd9463e8dcb" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.62.1"/>
  <changelog author="ms@suse.de" date="1635163200">- Bump version: 9.23.20 → 9.24.2
  This version upgrade includes several fixes:
  * Fixed secure boot fallback setup
    Make sure MokManager gets copied. The name and location of
    the mok manager is distribution specific in the same way as
    the shim loader. Thus we need to apply a similar concept
    for looking it up. This Fixes bsc#1187515
  * Allow creation of LUKS system with empty key
    To support cloud platforms better we should allow the
    creation of an initial(insecure) LUKS encrypted image
    with an empty passphrase/keyfile. This Fixes
    bsc#1187461 and bsc#1187460
  * Delete obsolete ddb.adapterType patching
    When building a vmdk image with pvscsi as adapter type, kiwi
    implicitly changed the adapter_type from pvscsi to lsilogic
    because qemu only knows lsilogic. At the end kiwi patched
    the adapter type in the descriptor of the vmdk header back
    to pvscsi. That patching seems to be wrong according to
    information from users and VMware support. This commit
    deletes the descriptor patching and only leaves the pvscsi
    setting in the guest configuration(vmx).
    This Fixes bsc#1180539 and Fixes #1847
  * Make dracut version check more robust
    The check_dracut_module_versions_compatible_to_kiwi() runtime
    check calls the package manager from the host and reads the
    package database from the image root. Doing this requires
    the package database in the image to be compatible with the
    package manager on the host. However this cannot be guarenteed
    and it is more robust to chroot into the image root and call
    the package manager from there. However, this change also comes
    with the cost that it's required to have a package manager
    available in the image root tree. Therefore along with the
    chroot based call, eventual exceptions from the call are now
    catched and leads to a debug message in the log file but will
    not lead the runtime check to fail. I consider the cases
    without a package database inside of the image to be less
    critical than the incompatibility issue between the host
    tooling and the package database in the image.
    This Fixes bsc#1185937
  * Fixed setup of repository architecture
    Unfortunately the architecture reported by uname is not
    necessarily the same name as used in the repository metadata.
    Therefore it was not a good idea to set the architecture
    and manage the name via a mapping table. It also has turned
    out that repo arch names are distro specific which causes
    more complexity on an eventual mapping table. In the end
    this commit changes the way how the repository architecture
    is setup in a way that we only set the architecture if
    a name was explicitly specified such that the user keeps
    full control over it without any mapping magic included
    This Fixes bsc#1185287
  * Do not apply default subcommand for derivate containers
    This commit does not apply the default subcommand for derivate
    containers. Fixes bsc#1184823
  * Added openssl to the core requires
    openssl is used in kiwi to construct a password hash
    if the plaintext password feature for user settings
    is used. This Fixes bsc#1184128</changelog>
  <changelog author="dcassany@suse.com" date="1643630400">- Bump version: 9.24.15 → 9.24.16
  This version upgrade includes several fixes:
  * Fixed regression in compression detection
    The change from 282529de8f612dee32d54ee868c2365dcd829220
    Introduced a bad regression. The assumption was made that the
    xz tool could be used to detect if a file is compressed or not.
    However, this requires the file to be locally present. In the
    scope of the method call is_compressed() and within a remote
    deployment e.g PXE this is not the case. Therefore the former
    way to "detect" the compression according to the .xz postfix
    of the source filename was restored. In addition the function
    name was changed to is_xz_compressed() because that's what the
    method can do and not more. This Fixes #2015
    Fixes a regression in the scope of bsc#1192975 (#c16)
  * index.rst: Change title (bsc#1189294#c2)
  * 'KIWI NG 9: KIWI NG Documentation' -&gt; 'Building Linux System Appliances with KIWI Next Generation (KIWI NG &lt;VERSION&gt;)
  * suggested in bsc#1189294#c2 for more clarity
  * change has been discussed with and approved by main author (Marcus S.)
  * Care for different snapper template locations
    snapper recently changed their config template location
    from etc/ to usr/. This commit handles the two locations
    and Fixes bsc#1192940
  * Do not force dracut into a compression setting
    So far we called dracut with --xz which forces the initrd
    to be xz compressed. There are other compression formats
    used by the distributions and they might differe from xz.
    The selection for a compression tool is done by a dist
    configuration in dracut.conf.d which is provided by the
    distributions as they see fit. For us this means not
    forcing dracut into a specific compression setting allows
    to make use of the distro provided setting and also
    allows to change/override this setting by an overlay
    file. This Fixes bsc#1192975</changelog>
  <changelog author="dcassany@suse.com" date="1643630401">- Ensure backward compatibility on deprecated methods
  This commit ensures backward compatibility for deprecated
  config bash script utilities.
  Fixes bsc#1195229
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="fvogt@suse.de" date="1646222400">- Don't exit the script on deprecated function use (bsc#1196644)
  The "exit 0" there stops processing of the calling script with a success exit
  code, which leads to incomplete and broken images.</changelog>
  <changelog author="dcassany@suse.com" date="1646222401">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
</package>
<package pkgid="3ec196f3fecc1cc54d082045a61b25e464b884f73f774d49186a1432f25eaef9" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.65.1"/>
  <changelog author="dcassany@suse.com" date="1646222400">- Stick to pytest v6.x.y
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1648555200">- Bump version: 9.24.16 → 9.24.17
  This version includes fixes for:
  * Fix booting GRUB submenu entries with hybrid images (linux/linuxefi)
    Variables assigned with "set" are not visible in submenus for some reason.
    Export $linux and $initrd, so that they also work in submenu entries.
    Fixes bsc#1192523</changelog>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
</package>
<package pkgid="27b938948a4dab88cf439f795eeb593a06944936fe3c374efc69c986f12f7512" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.68.1"/>
  <changelog author="dcassany@suse.com" date="1653307200">- Bump version up to v9.24.36
  This version includes fixes for:
  * Preserve LABEL setting (#2108)
    Preserve the LABEL= setting when the grub config file is re-generated.
    the GRUB_ENABLE_LINUX_LABEL setting does not exists upstream and
    not in any SUSE distribution. Set the grub setting such that LABEL
    is preserved on SUSE distros. (bsc#1197616)
  * Add ensure_empty_tmpdirs option for OCI containers (bsc#1197783)
    Since #1759 was merged, the contents of /run/ and /tmp/ are excluded from
    built images.  This causes problems for some containers, notably Ceph when
    deployed in a Rook/k8s environment, which needs to have certain directories
    present inside /run/.  This commit adds the ability to return to the previous
    behaviour and *not* empty those temporary directories, if you specify
    &lt;image&gt;&lt;preferences&gt;&lt;type [...] ensure_empty_tmpdirs="false"&gt;.
    Fixes: https://github.com/OSInside/kiwi/issues/2093
    Signed-off-by: Tim Serong &lt;tserong@suse.com&gt;
  * Set /.snapshots subvolume to mode 0700 (bsc#1194992)
    Avoid that users other than root can enter or even change the content.
    This is what snapper does as well.</changelog>
  <changelog author="dcassany@suse.com" date="1653393600">- Remove mailmap so email is not updated for old changelog entries in IBS
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;</changelog>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
</package>
<package pkgid="2e32bfe3cb2cd232bdfb18eb0edfd4bf9d74168776979e7731edd077e927b35a" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.71.1"/>
  <changelog author="dcassany@suse.com" date="1666958400">- Bump version up to 9.24.43
  This version includes:
  * Fixed error handling for setfiles policy lookup
    Errors from os.scandir were not catched. In addition the path
    to run scandir was not properly created
  * Prefer file based syscall in kexec when possible (bsc#1203896)
    Use file based syscall in kexec if available. This is needed to
    support boot on an secure boot enabled system and is in general
    more reliable to boot into the system on real hardware platforms
  * Correct setfiles relabeling
    This change was inspired by a change done on Fedora's livecd-tools
    from here: livecd-tools/livecd-tools#236. The patch corrects issues
    with the setfiles SELinux relabel command. The issues become apparent
    when the host and guest policies differ. Thus it becomes required
    to explicitly set the policy to decouple from eventual unwanted
    host settings.
  * Fix helper method to detect dracut outfile format
    The method _get_boot_image_output_file_format_from_dracut_code
    is used in kiwi to match parts of the dracut code for the used
    output file format. Beginning with dracut-056 the code part
    checked has changed syntactically such that the match did
    no longer work. This commit increases the scope of the match
    and replace pattern and Fixes #2149
  * Fixed handling of signing_keys in cmdline options
    When passing signing_keys with the --add-repo|--set-repo
    commandline options the delimiter to separate the single
    key information is a colon(:). However, this is stupid when
    kiwi expects the signing key to be references as an URI
    format like file://... Therefore this patch changes the
    delimiter from colon(:) to semicolon(;)
  * Setup SELinux on every system prepare / build (#2148)
    Setup SELinux on every system prepare / build such that all image
    types benefit from it not only the disk (oem) type
  * Install all of QEMU to Ubuntu arm integration test
  * rename user to ubuntu for Ubuntu integration test
  * Move to sphinx&gt;=5.0.0
  * Fixed sphinx extlinks rendering
    In Sphinx v5 warning will be treated as errors. This results in the following
    warning to be an error: extlinks: Sphinx-6.0 will require a caption string to
    contain exactly one '%s' and all other '%' need to be escaped as '%%'.
    This commit applies the required quoting
  * Added example aarch64 integration test for Ubuntu
    Created a RaspberryPI image description for Ubuntu(jammy)
    as integration test for building aarch64 images and added
    it to the integration test matrix
  * Added --target-arch for image info
    Allow cross arch dependency solving
  * Add support for group id in users setting
    Allow to specify the group id in the groups list a user
    should belong to. The group id can be placed as part of
    the group name separated by a colon like in the following
    example:
    &lt;users&gt;
    &lt;user groups="kiwi,admin:42,users" password="..." name="kiwi"/&gt;
    &lt;/users&gt;
    Please note kiwi checks if the provided group already
    exists and only creates a group if it is not already present in
    the system. As default groups are usually provided by the OS
    itself including its preferred group id, you will intentionally
    not be able to overwrite group id for existing groups.
    This Fixes #2064</changelog>
  <changelog author="dcassany@suse.com" date="1666958401">- Fixed kexec options setup in kiwi-dump-reboot
  The dracut module 99kiwi-dump-reboot creates an options
  list for kexec. Under certain conditions the options
  list can contain multiple spaces which leads to an error
  when calling kexec. This commit makes sure to trim
  white spaces. This Fixes #2178
  Backported from upstream c694e25b22</changelog>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
</package>
<package pkgid="5571b73d20e40927472fb31062476432be492512e3c058fd12dc6899eb90ce60" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.24.43" rel="150100.3.76.1"/>
  <changelog author="dcassany@suse.com" date="1680177600">- Add parted dependency for s390
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit cc993f47cd93551ae6b87ca9ac39cb2291ab57f6)</changelog>
  <changelog author="dcassany@suse.com" date="1680523200">- Expand DASD partition table with parted
  Fixes bsc#1209247
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit b12ebcedb7cb18e05ce6a19e3312c16f5c5529a9)</changelog>
  <changelog author="dcassany@suse.com" date="1681300800">- Use parted only in s390 arch
  This commit ensures parted is only called in dracut-kiwi-lib for s390
  arch. It also fixes the spec to only require parted for
  s390 builds.
  In addition parted requirement has been removed from dracut-kiwi-live
  package since parted is not used in any other dracut module beyond
  kiwi-lib.
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 0947fce33a39eaa7c4f1f83481782c41b4e15488)</changelog>
  <changelog author="dcassany@suse.com" date="1681300801">- Adding a comment to explain the s390 specific path
  Signed-off-by: David Cassany &lt;dcassany@suse.com&gt;
  (cherry picked from commit 8b9c5d766eb2113e55132eb4b4043c960b981b90)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1688472000">- Add alternative re-reading of the partition table
  To inform the kernel about disk geometry changes, kiwi uses
  partprobe as a primary tool. However it is provided by parted
  and not necessarily available due to the package requirements
  on the dracut module. A second attempt via blockdev which
  is expected to exist is therefore made by this commit
  Part of bsc#1216465
  (cherry picked from commit 4ab089ac5244c1d867be850ec99bc81814466bf7)</changelog>
  <changelog author="jesus.bv@suse.com" date="1689681600">- Add SECURE_BOOT no when the firmware is efi
  This Fixes bsc#1211102</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1690200000">- Cleanup condition for SECURE_BOOT=yes|no
  The statement serves the purpose for an if/else construction
  to become a better read. In addition delete the probably
  left-over print statement from the test</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310400">- Update CI workflows
  Update tox and workflow files to run with a newer tox version
  as it's been used upstream</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310401">- Temporary disable mypy checking
  The current code base is not mypy clean when called on newer
  versions of mypy. This will be fixed with the next full
  upstream port</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310402">- Fixed unit tests</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1693310403">- Fixed linter errors
  Fixed white space issues now reported by flake8</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698321600">- Create live persistent storage without busy state
  With the former logic the live ISO was already mounted when an
  eventual persistent storage partition was created. This leads
  to an issue on re-reading the partition table, not for all but
  several tools. This commit changes the order of tasks such that
  the setup of the persistent write storage is performed prior
  mounting the live ISO. In addition to this change an alternative
  method using blockdev to re-read the partition was added in case
  partprobe is not present. This also allows to get rid of the
  parted dependency which provides partprobe
  Part of bsc#1216465
  (cherry picked from commit 53ddc4ecbedd6dc98294e4d0387370908f0bc657)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698408000">- Change partprobe fallback to partx
  Informing the kernel about a new partition geometry can be done in a
  busy state and is also effective for new devices and new mounts based
  on the new geometry. busy state mounts of course will not see it until
  swap of the busy state but a complete refuse of operation like it
  happens with blockdev is imho not required. Just as partprobe, partx
  is less restrictive on the busy state. That's why this commit changes
  the partprobe fallback to use partx instead of blockdev
  Part of bsc#1216465
  (cherry picked from commit db9042af8ed36ede0dfe9572d9fe2c546c25b901)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1698840000">- Add partx to module-setup of kiwi-lib too
  Part of bsc#1216465
  (cherry picked from commit cf125437776b07e77900b6a53aeb065cd1572367)</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1700654400">- Allow install disk overwrite from cmdline
  Add rd.kiwi.oem.installdevice=DEVICE. Configures the disk device
  that should be used in an OEM installation. This overwrites any
  other oem device setting, e.g device filter or maxdisk and just
  continues the installation on the given device. However, the
  device must exist and must be a block special.
  This Fixes jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1704369600">- Fix overwrite of kiwi_oemunattended
  In case rd.kiwi.oem.installdevice is set, there is an overwrite
  of the kiwi_oemunattended setting. However the variable was set
  in local scope of a function and therefore the change was not
  effective in other methods which also evaluates this variable.
  This commit fixes it such that the overwrite happens in the early
  initialize method which provides the environment for all code
  running in the dracut module. This is related to jira#PED-7180</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1705579200">- Fixed grub terminal setup
  The grub terminal setup is divided into the setting for the output
  and the input console. For both settings different parameters exists.
  So far kiwi did not differentiate between the two parts of the
  console setup and that could lead to a wrong setting if only one
  value is provided in kiwi's console= attribute which lead to the
  grub setting, GRUB_TERMINAL=value. If value is set to e.g gfxterm
  grub takes this for both input and output and it's obviously
  wrong for the input. To make this less error prune the kiwi code
  changes with this commit to set GRUB_TERMINAL_INPUT and
  GRUB_TERMINAL_OUTPUT rather than GRUB_TERMINAL and also runs sanity
  checks on the provided values if they are applicable. The information
  for setting up the console in the schema stays untouched though.
  That's because it's used for all bootloaders and also because grub
  supports multiple values for the console in/out setting in one
  GRUB_TERMINAL variable even though kiwi does no longer use it.
  To make this clear for the users also the documentation for the
  console attribute setup has been updated. If we want to wish two
  distinct attributes for input and output console settings a schema
  change and also differentiation between bootloaders is needed and
  that I only see for the kiwi-10 branch if at all. This Fixes #2419
  and Fixes bsc#1218095</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1710849600">- Fixup cleanup of zipl templates
  Make sure temporary modifications to the zipl template
  and config file are not effective in the later system.
  This Fixes bsc#1221469</changelog>
  <changelog author="marcus.schaefer@gmail.com" date="1711368000">- Live ISO Wait for udev events after repart
  Make sure to wait for the event queue to become empty after
  the creation of the write partition. When kiwi calls the
  code to create the write partition this emits new udev events.
  It's important to wait for the event queue to become empty
  to avoid a potential regression on the use of the device nodes.
  In the processing of the events it can happen that a device
  gets removed and re-added. If we don't want for udev
  to process the entire queue it can happen that the
  wrong block device is used. This wrong selection is only
  possible because the way how hybrid ISOs are designed exposes
  both, the disk and the partition for the root device with
  the same label. This Fixes bsc#1213595</changelog>
  <changelog author="marcus.schaefer@suse.com" date="1712232000">- Set default output console to gfxterm for grub
  If no console setting is done in the image description for grub
  the default output console is set to: gfxterm and the default
  input console is set to: console. This Fixes bsc#1219074</changelog>
</package>
<package pkgid="b07c5c7a36629404a38b70df79a29e1052d9f332ad1be01670213a13f2ed12c0" name="python-looseversion" arch="src">
  <version epoch="0" ver="1.0.2" rel="150100.3.3.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679313600">- Initial package: looseversion 1.0.2</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679486400">- Fix package build with old setuptools versions
- Added:
  * add_compatible_setup_py_file.patch</changelog>
</package>
<package pkgid="35c7c8f9f9227fe301909cbe8687cfb2c0c95f6d6e8b1738d348eadc586e10d8" name="python-lxml" arch="src">
  <version epoch="0" ver="4.7.1" rel="150200.3.12.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1505736000">- spec changes:
  - add fdupes
- update to 4.0.0:
  Features added:
  - The ElementPath implementation is now compiled using Cython,
    which speeds up the .find*() methods quite significantly.
  - The modules lxml.builder, lxml.html.diff and lxml.html.clean
    are also compiled using Cython in order to speed them up.
  - xmlfile() supports async coroutines using async with and await.
  - iterwalk() has a new method skip_subtree() that prevents
    walking into the descendants of the current element.
  - RelaxNG.from_rnc_string() accepts a base_url argument to allow
    relative resource lookups.
  - The XSLT result object has a new method .write_output(file)
    that serialises output data into a file according to the
    &lt;xsl:output&gt; configuration.
  Bugs fixed:
  - GH#251: HTML comments were handled incorrectly by the
    soupparser. Patch by mozbugbox.
  - LP#1654544: The html5parser no longer passes the useChardet
    option if the input is a Unicode string, unless explicitly
    requested. When parsing files, the default is to enable it when
    a URL or file path is passed (because the file is then opened in
    binary mode), and to disable it when reading from a file(-like) object.
    Note: This is a backwards incompatible change of the default configuration.
    If your code parses byte strings/streams and depends on character
    detection, please pass the option guess_charset=True explicitly, which
    already worked in older lxml versions.
  - LP#1703810: etree.fromstring() failed to parse UTF-32 data with BOM.
  - LP#1526522: Some RelaxNG errors were not reported in the error log.
  - LP#1567526: Empty and plain text input raised a TypeError in soupparser.
  - LP#1710429: Uninitialised variable usage in HTML diff.
  - LP#1415643: The closing tags context manager in xmlfile() could continue
    to output end tags even after writing failed with an exception.
  - LP#1465357: xmlfile.write() now accepts and ignores None as input argument.
  - Compilation under Py3.7-pre failed due to a modified function signature.
  Other changes:
  - The main module source files were renamed from lxml.*.pyx to plain *.pyx
    (e.g. etree.pyx) to simplify their handling in the build process. Care was
    taken to keep the old header files as fallbacks for code that compiles
    against the public C-API of lxml, but it might still be worth validating
    that third-party code does not notice this change.</changelog>
  <changelog author="jmatejek@suse.com" date="1509451200">- run tests only when the appropriate pythons are available</changelog>
  <changelog author="mimi.vx@gmail.com" date="1518091200">- update to 4.1.1
  - ElementPath supports text predicates for current node, like "[.='text']".
  - ElementPath allows spaces in predicates.
  - Custom Element classes and XPath functions can now be registered with
    a decorator rather than explicit dict assignments.
  - LP#1722776: Requesting non-Element objects like comments from
    a document with PythonElementClassLookup could fail with a TypeError.</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Version update to 4.2.0:
  * GH#255: ``SelectElement.value`` returns more standard-compliant and
    browser-like defaults for non-multi-selects.  If no option is selected, the
    value of the first option is returned (instead of None).  If multiple options
    are selected, the value of the last one is returned (instead of that of the
    first one).  If no options are present (not standard-compliant)
    ``SelectElement.value`` still returns ``None``.
  * GH#261: The ``HTMLParser()`` now supports the ``huge_tree`` option.
    Patch by stranac.
  * LP#1551797: Some XSLT messages were not captured by the transform error log.
  * LP#1737825: Crash at shutdown after an interrupted iterparse run with XMLSchema
    validation.
- Add patch python-lxml-assert.patch to pass test fail on threading</changelog>
  <changelog author="hpj@urpla.net" date="1522238400">- Version update to 4.2.1:
  * LP#1755825: iterwalk() failed to return the 'start' event for the initial
    element if a tag selector is used.
  * LP#1756314: Failure to import 4.2.0 into PyPy due to a missing library symbol.
  * LP#1727864, GH#258: Add "-isysroot" linker option on MacOS as needed by XCode 9.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533643200">- Update to 4.2.4 (2018-08-03)
  + Features added
  * GH#259: Allow using ``pkg-config`` for build configuration.
    Patch by Patrick Griffis.
  + Bugs fixed
  * LP#1773749, GH#268: Crash when moving an element to another document with
    ``Element.insert()``.
    Patch by Alexander Weggerle.
- Update to 4.2.3
  + Bugs fixed
  * Reverted GH#265: lxml links against zlib as a shared library again.
- Update to 4.2.2
  + Bugs fixed
  * GH#266: Fix sporadic crash during GC when parse-time schema validation is used
    and the parser participates in a reference cycle.
    Original patch by Julien Greard.
  * GH#265: lxml no longer links against zlib as a shared library, only on static builds.
    Patch by Nehal J Wani.</changelog>
  <changelog author="comurphy@suse.com" date="1535976000">- Fix threading tests patch for 42.3
  * Add 0001-Make-test-more-resilient-against-changes-in-latest-l.patch
  * Remove python-lxml-assert.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1542369600">- Update to 4.2.5
  * Javascript URLs that used URL escaping were not removed by the HTML cleaner.
    Security problem found by Omar Eissa.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550145600">- Update to v4.3.1
  * Fixed crash when appending a child subtree that contains unsubstituted
    entity references
- from v4.3.0
  * Features
    + The module ``lxml.sax`` is compiled using Cython in order to speed it up.
    + lxml.sax.ElementTreeProducer now preserves the namespace prefixes.
    If two prefixes point to the same URI, the first prefix in alphabetical
    order is used.
    + Updated ISO-Schematron implementation to 2013 version (now MIT licensed)
    and the corresponding schema to the 2016 version (with optional "properties").
  * Other
    + Support for Python 2.6 and 3.3 was removed.
    + The minimum dependency versions were raised to libxml2 2.9.2 and libxslt 1.1.27,
    which were released in 2014 and 2012 respectively.
- from v4.2.6
  * Fix a DeprecationWarning in Py3.7+.
  * Import warnings in Python 3.6+ were resolved.
- Remove no longer needed
  0001-Make-test-more-resilient-against-changes-in-latest-l.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1551787200">- Update to 4.3.2:
  * Crash in 4.3.1 when appending a child subtree with certain text nodes.</changelog>
  <changelog author="tchvatal@suse.com" date="1554465600">- Update to 4.3.3:
  * Fix leak of output buffer and unclosed files in ``_XSLTResultTree.write_output()``.</changelog>
  <changelog author="tchvatal@suse.com" date="1562068800">- Remove generated files</changelog>
  <changelog author="toddrme2178@gmail.com" date="1563796800">- Update to 4.3.4
  * Rebuilt with Cython 0.29.10 to support Python 3.8.
    Note: documentation is not updated</changelog>
  <changelog author="pgajdos@suse.com" date="1564660800">- version update to 4.4.0
  * ``Element.clear()`` accepts a new keyword argument ``keep_tail=True`` to
    clear everything but the tail text.  This is helpful in some document-style
    use cases.
  * When creating attributes or namespaces from a dict in Python 3.6+, lxml now
    preserves the original insertion order of that dict, instead of always sorting
    the items by name.  A similar change was made for ElementTree in CPython 3.8.
    See https://bugs.python.org/issue34160
  * Integer elements in ``lxml.objectify`` implement the ``__index__()`` special method.
  * GH#269: Read-only elements in XSLT were missing the ``nsmap`` property.
    Original patch by Jan Pazdziora.
  * ElementInclude can now restrict the maximum inclusion depth via a ``max_depth``
    argument to prevent content explosion.  It is limited to 6 by default.
  * The ``target`` object of the XMLParser can have ``start_ns()`` and ``end_ns()``
    callback methods to listen to namespace declarations.
  * The ``TreeBuilder`` has new arguments ``comment_factory`` and ``pi_factory`` to
    pass factories for creating comments and processing instructions, as well as
    flag arguments ``insert_comments`` and ``insert_pis`` to discard them from the
    tree when set to false.
  * A `C14N 2.0 &lt;https://www.w3.org/TR/xml-c14n2/&gt;`_ implementation was added as
    ``etree.canonicalize()``, a corresponding ``C14NWriterTarget`` class, and
    a ``c14n2`` serialisation method.
  * bugfixes, see CHANGES.txt
- deleted sources
  - lxmldoc-4.3.3.pdf (renamed)
- added sources
  + lxmldoc-4.4.0.pdf
  + world.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 4.4.1:
  * LP#1838252: The order of an OrderedDict was lost in 4.4.0 when passing it as attrib mapping during element creation.
  * LP#1838521: The package metadata now lists the supported Python versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1573992000">- Add lxml-libxml-2.9.10.patch: Fix build against libxml 2.9.10.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579694400">- Update to 4.4.2:
  * LP#1835708: ElementInclude incorrectly rejected repeated
    non-recursive includes as recursive.
  * Remove patch lxml-libxml-2.9.10.patch which is now upstream</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1643630400">- With the new update to 4.7.1, the old Bugzilla entries are also
  fixed:
  - bsc#1118088 (related to CVE-2018-19787)
  - bsc#1184177 (related to CVE-2021-28957)
- Update to 4.7.1 (officially released 2021-12-13)
  Features added
  - Chunked Unicode string parsing via parser.feed() now encodes the input
    data to the native UTF-8 encoding directly, instead of going through
    Py_UNICODE / wchar_t encoding first, which previously required duplicate
    recoding in most cases.
  Bugs fixed
  - The standard namespace prefixes were mishandled during "C14N2"
  serialisation
    on Python 3.
    See
  https://mail.python.org/archives/list/lxml@python.org/thread/
  6ZFBHFOVHOS5GFDOAMPCT6HM5HZPWQ4Q/
  - lxml.objectify previously accepted non-XML numbers with underscores
    (like "1_000") as integers or float values in Python 3.6 and later.
    It now adheres to the number format of the XML spec again.
  - LP#1939031: Static wheels of lxml now contain the header files of zlib
    and libiconv (in addition to the already provided headers of
    libxml2/libxslt/libexslt).
  Other changes
  - Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows).
- Update to 4.7.0 (2021-12-13)
  - Release retracted due to missing files in lxml/includes/.
- UPdate to 4.6.5 (2021-12-12)
  Bugs fixed
  - A vulnerability (GHSL-2021-1038) in the HTML cleaner
  - allowed sneaking script content through SVG images
  - (bnc#1193752, CVE-2021-43818).
  - A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed
  - sneaking script content through CSS imports and other crafted
  - constructs (CVE-2021-43818).
- Update 4.6.4 (2021-11-01)
  Features added
  - GH#317: A new property system_url was added to DTD entities.
  - Patch by Thirdegree.
  - GH#314: The STATIC_* variables in setup.py can now be passed
  - via env vars.
  - Patch by Isaac Jurado.
- Update 4.6.3 (2021-03-21)
  Bugs fixed
  - A vulnerability (CVE-2021-28957) was discovered in the HTML
  - Cleaner by Kevin Chung, which allowed JavaScript to pass through.
  - The cleaner now removes the HTML5 formaction attribute.
- Update 4.6.2 (2020-11-26)
  Bugs fixed
  - A vulnerability (bnc#1179534, CVE-2020-27783) was discovered in the HTML
    Cleaner
  - by Yaniv Nizry, which allowed JavaScript to pass through. The cleaner
  - now removes more sneaky "style" content.
- Update 4.6.1 (2020-10-18)
  Bugs fixed
  - A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry,
  - which allowed JavaScript to pass through. The cleaner now removes
  - more sneaky "style" content.
- Update 4.6.0 (2020-10-17)
  Features added
  - GH#310: lxml.html.InputGetter supports __len__() to count the number
  - of input fields. Patch by Aidan Woolley.
  - lxml.html.InputGetter has a new .items() method to ease processing
  - all input fields.
  - lxml.html.InputGetter.keys() now returns the field names in document
  - order.
  - GH-309: The API documentation is now generated using sphinx-apidoc.
  - Patch by Chris Mayo.
  Bugs fixed
  - LP#1869455: C14N 2.0 serialisation failed for unprefixed attributes
  - when a default namespace was defined.
  - TreeBuilder.close() raised AssertionError in some error cases where
  - it should have raised XMLSyntaxError. It now raises a combined
  - exception to keep up backwards compatibility, while switching to
  - XMLSyntaxError as an interface.
- Update 4.5.2 (2020-07-09)
  Bugs fixed
  - Cleaner() now validates that only known configuration options
  - can be set.
  - LP#1882606: Cleaner.clean_html() discarded comments and PIs
  - regardless of the corresponding configuration option, if
  - remove_unknown_tags was set.
  - LP#1880251: Instead of globally overwriting the document loader
  - in libxml2, lxml now sets it per parser run, which improves the
  - interoperability with other users of libxml2 such as libxmlsec.
  - LP#1881960: Fix build in CPython 3.10 by using Cython 0.29.21.
  - The setup options "--with-xml2-config" and "--with-xslt-config"
  - were accidentally renamed to "--xml2-config" and "--xslt-config"
  - in 4.5.1 and are now available again.
- Update 4.5.1 (2020-05-19)
  Bugs fixed
  - LP#1570388: Fix failures when serialising documents larger than
  - 2GB in some cases.
  - LP#1865141, GH#298: QName values were not accepted by the
  - el.iter() method. Patch by xmo-odoo.
  - LP#1863413, GH#297: The build failed to detect libraries on Linux
  - that are only configured via pkg-config. Patch by Hugh McMaster.
- Update 4.5.0 (2020-01-29)
  Features added
  - A new function indent() was added to insert tail whitespace for
  - pretty-printing an XML tree.
  Bugs fixed
  - LP#1857794: Tail text of nodes that get removed from a document
    using item deletion disappeared silently instead of sticking with
    the node that was removed.
  Other changes
  - MacOS builds are 64-bit-only by default. Set CFLAGS and LDFLAGS
    explicitly to override it.
  - Linux/MacOS Binary wheels now use libxml2 2.9.10 and libxslt 1.1.34.
  - LP#1840234: The package version number is now available as
    lxml.__version__.
- Update 4.4.3 (2020-01-28)
  Bugs fixed
  - LP#1844674: itertext() was missing tail text of comments and PIs
    since 4.4.0.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- add CVE-2022-2309.patch (bsc#1201253, CVE-2022-2309)</changelog>
</package>
<package pkgid="a6111798bccf28a665d1a82b97a328773d7d36ada13fe3b3b8fc217a78c20a76" name="python-packaging" arch="src">
  <version epoch="0" ver="21.3" rel="150200.3.3.1"/>
  <changelog author="tbechtold@suse.com" date="1565092800">- update to 19.1:
  * Add the ``packaging.tags`` module.
  * Correctly handle two-digit versions in ``python_version``</changelog>
  <changelog author="dcermak@suse.com" date="1565265600">- Add Requires:python-attrs as this is a new dependency
  this fixes bsc#1144506</changelog>
  <changelog author="dcermak@suse.com" date="1565265601">- Enable tests via _multibuild
  Add patches from https://github.com/pypa/packaging/pull/176:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  (these fix the tests on non-x86 platforms and can be dropped on the next
  release)</changelog>
  <changelog author="tchvatal@suse.com" date="1565870400">- Fix a bit the multibuild conversion
- Remove the attrs from the deps as they are no longer needed</changelog>
  <changelog author="dcermak@suse.com" date="1566216000">- Remove dependency on attrs
  Add: 0005-Drop-dependency-on-attrs.patch
  this fixes bsc#1144506</changelog>
  <changelog author="tchvatal@suse.com" date="1570536000">- Update to 19.2:
  * Many buildsystem tweaks to accomodate for distribution shipping
- Remove all the merged patches:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  * 0005-Drop-dependency-on-attrs.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580904000">- Update to 20.1
  * Fix a bug caused by reuse of an exhausted iterator.
  * Add type hints
  * Add proper trove classifiers for PyPy support
  * Scale back depending on ctypes for manylinux support detection
  * Use sys.implementation.name where appropriate for packaging.tags
  * Expand upon the API provded by packaging.tags
  * Officially support Python 3.8
  * Add major, minor, and micro aliases to packaging.version.Version
  * Properly mark packaging has being fully typed by adding a py.typed file</changelog>
  <changelog author="mimi.vx@gmail.com" date="1581336000">- add issue_254.patch to fix tests under non-x86_64 pplatforms</changelog>
  <changelog author="mcalabkova@suse.com" date="1583928000">- Update to 20.3
  * Fix a bug that caused a 32-bit OS that runs on a 64-bit ARM CPU
    (e.g. ARM-v8, aarch64), to report the wrong bitness.
- Drop already upstreamed patch issue_254.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1588680000">- Ignore clamav scan as it bogusly calls one file to be infected
  while it is just a testcase of malformed binary:
  [#]!BuildIgnore: post-build-checks-malwarescan</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 20.4:
  * Canonicalize version before comparing specifiers. (:issue:`282`)
  * Change type hint for ``canonicalize_name`` to return
  ``packaging.utils.NormalizedName``.
  This enables the use of static typing tools (like mypy) to detect mixing of
  normalized and un-normalized names.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 20.8:
  * Revert back to setuptools for compatibility purposes for some Linux distros (:issue:`363`)
  * Do not insert an underscore in wheel tags when the interpreter version number
    is more than 2 digits (:issue:`372`)
  * Fix flit configuration, to include LICENSE files (:issue:`357`)
  * Make `intel` a recognized CPU architecture for the `universal` macOS platform tag (:issue:`361`)
  * Add some missing type hints to `packaging.requirements` (issue:`350`)
  * Officially support Python 3.9 (:issue:`343`)
  * Deprecate the ``LegacyVersion`` and ``LegacySpecifier`` classes (:issue:`321`)
  * Handle ``OSError`` on non-dynamic executables when attempting to resolve
    the glibc version string.</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 20.9:
  * Run [isort](https://pypi.org/project/isort/) over the code base (:issue:`377`)
  * Add support for the ``macosx_10_*_universal2`` platform tags (:issue:`379`)
  * Introduce ``packaging.utils.parse_wheel_filename()`` and ``parse_sdist_filename()``</changelog>
  <changelog author="dmueller@suse.com" date="1619870400">- add no-legacyversion-warning.patch to restore compatibility with 20.4</changelog>
  <changelog author="code@bnavigator.de" date="1623931200">- Add Provides: for python*dist(packaging): work around boo#1186870
- skip tests failing because of no-legacyversion-warning.patch</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 21.2:
  * Update documentation entry for 21.1.
  * Update pin to pyparsing to exclude 3.0.0.
  * PEP 656: musllinux support
  * Drop support for Python 2.7, Python 3.4 and Python 3.5.
  * Replace distutils usage with sysconfig
  * Add support for zip files in ``parse_sdist_filename``
  * Use cached ``_hash`` attribute to short-circuit tag equality comparisons
  * Specify the default value for the ``specifier`` argument to ``SpecifierSet``
  * Proper keyword-only "warn" argument in packaging.tags
  * Correctly remove prerelease suffixes from ~= check
  * Fix type hints for ``Version.post`` and ``Version.dev``
  * Use typing alias ``UnparsedVersion``
  * Improve type inference for ``packaging.specifiers.filter()``
  * Tighten the return type of ``canonicalize_version()``</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755200">- update to 21.3:
  * Add a pp3-none-any tag (gh#pypa/packaging#311)
  * Replace the blank pyparsing 3 exclusion with a 3.0.5 exclusion
    (gh#pypa/packaging#481), (gh#pypa/packaging#486)
  * Fix a spelling mistake (gh#pypa/packaging#479)</changelog>
  <changelog author="hui.zhi.zhao@suse.com" date="1650888000">- Ignore python3.6.2 since the test doesn't support it.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1653825600">- Add patch to fix testsuite on big-endian targets
  + fix-big-endian-build.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="a4c436278facb61425dc28d45336ef15d6ce1b086acdb83715f74de583c2278e" name="python-ply" arch="src">
  <version epoch="0" ver="3.10" rel="150000.3.3.4"/>
  <changelog author="maw@suse.de" date="1176465600">- Initial import into the build service
- Rename ply.spec to python-ply.spec as that is what the resultant
  package is called.</changelog>
  <changelog author="maw@suse.de" date="1193140800">- Don't build as noarch.</changelog>
  <changelog author="maw@suse.de" date="1205755200">- Import into autobuild
- Add a -doc subpackage
- Add python-ply-shebangs.patch</changelog>
  <changelog author="maw@suse.de" date="1217246400">- Update to version 2.5:
  + Various bug fixes
  + Some performance improvements
  + For a blow-by-blow account of changes, see the file CHANGES
    in the package python-ply-doc.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- Use new python macros</changelog>
  <changelog author="coolo@novell.com" date="1284465600">- Update to 3.3:
  + PLY-3.3 is a minor bug fix release, it supports both Python 2
    and Python 3.
- License changed to BSD</changelog>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="636fa49828f21383bce26be738b1d26168ac35b80cd0fb94dfd89212f8e230d8" name="python-ply" arch="src">
  <version epoch="0" ver="3.10" rel="150000.3.5.1"/>
  <changelog author="maw@suse.de" date="1176465600">- Initial import into the build service
- Rename ply.spec to python-ply.spec as that is what the resultant
  package is called.</changelog>
  <changelog author="maw@suse.de" date="1193140800">- Don't build as noarch.</changelog>
  <changelog author="maw@suse.de" date="1205755200">- Import into autobuild
- Add a -doc subpackage
- Add python-ply-shebangs.patch</changelog>
  <changelog author="maw@suse.de" date="1217246400">- Update to version 2.5:
  + Various bug fixes
  + Some performance improvements
  + For a blow-by-blow account of changes, see the file CHANGES
    in the package python-ply-doc.</changelog>
  <changelog author="coolo@novell.com" date="1249819200">- Use new python macros</changelog>
  <changelog author="coolo@novell.com" date="1284465600">- Update to 3.3:
  + PLY-3.3 is a minor bug fix release, it supports both Python 2
    and Python 3.
- License changed to BSD</changelog>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="42676d7b01f01add47a4dd44e3e1b55eba11abb73784ae4117e1f65729e2ad30" name="python-psutil" arch="src">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="953069f8ab29eb22f1bbf7f1959b7763bfbfaac0bfac257c45bde8e96c87e123" name="python-pyasn1" arch="src">
  <version epoch="0" ver="0.4.2" rel="150000.3.5.1"/>
  <changelog author="michael@stroeder.com" date="1358510400">- updated to upstrean release 0.1.6
  - The compact (valueless) way of encoding zero INTEGERs introduced in
    0.1.5 seems to fail miserably as the world is filled with broken
    BER decoders. So we had to back off the *encoder* for a while.
    There's still the IntegerEncoder.supportCompactZero flag which
    enables compact encoding form whenever it evaluates to True.
  - Report package version on debugging code initialization.
- Changes from version 0.1.5:
  - Documentation updated and split into chapters to better match
    web-site contents.
  - Make prettyPrint() working for non-initialized pyasn1 data objects. It
    used to throw an exception.
  - Fix to encoder to produce empty-payload INTEGER values for zeros
  - Fix to decoder to support empty-payload INTEGER and REAL values
  - Fix to unit test suites imports to be able to run each from
    their current directory</changelog>
  <changelog author="michael@stroeder.com" date="1367928000">- updated to upstrean release 0.1.7
  - License updated to vanilla BSD 2-Clause to ease package use
    (http://opensource.org/licenses/BSD-2-Clause).
  - Test suite made discoverable by unittest/unittest2 discovery feature.
  - Fix to decoder working on indefinite length substrate -- end-of-octets
    marker is now detected by both tag and value. Otherwise zero values may
    interfere with end-of-octets marker.
  - Fix to decoder to fail in cases where tagFormat indicates inappropriate
    format for the type (e.g. BOOLEAN is always PRIMITIVE, SET is always
    CONSTRUCTED and OCTET STRING is either of the two)
  - Fix to REAL type encoder to force primitive encoding form encoding.
  - Fix to CHOICE decoder to handle explicitly tagged, indefinite length
    mode encoding
  - Fix to REAL type decoder to handle negative REAL values correctly. Test
    case added.</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)
- Fix changes file</changelog>
  <changelog author="lchiquitto@suse.com" date="1425384000">- Reflect license change (from BSD-3-Clause to BSD-2-Clause) which
  happened in version 0.1.7 in the spec file</changelog>
  <changelog author="mcihar@suse.cz" date="1429704000">- Run testsuite in %check</changelog>
  <changelog author="michael@stroeder.com" date="1436011200">- updated to upstrean release 0.1.8 (fate#318838)
  - ObjectIdentifier codec fixed to work properly with arc 0 and arc 2 values.
  - Explicit limit on ObjectIdentifier arc value size removed.
  - Unicode initializer support added to OctetString type and derivatives.
  - New prettyPrintType() abstract method implemented to base pyasn1 types
    to facilitate encoding errors analisys.
  - The __str__() method implemented to Tag, TagSet and TagMap classes to
    ease encoding errors troubleshooting.
    easing encoding errors
  - Fix to SEQUENCE and SET types to give them their private componentTypes
    collection (which is a NamedTypes object) so that they won't collide in
    a MT execution environment.
  - Missing T61String,ISO646String character types and ObjectDescriptor useful
    type added.
  - Distribute is gone, switched to setuptools completely.
  - Missing NamedValues.__repr__() added.
  - The base.NoValue() class, that indicates uninitialized ASN.1 object,
    made public.
  - The base.NoValue() class instances now support __repr__() what makes
    possible to perform repr() on uninitialized pyasn1 types objects.
  - When comparing ASN.1 types, by-tag and/or by-constraints matching
    can now be performed with the isSuperTypeOf()/isSameTypeWith() optional
    flags.
  - Constructed types now verify their consistency by invoking
    isSameTypeWith(matchTags=True, matchConstraints=False) and
    isSuperTypeOf(matchTags=False, matchConstraints=True) for each of their
    components rather than isSuperTypeOf() as it used to be. Constriants check
    could be enforced to isSameTypeWith() with the strictConstraints=True
    constructed classes attribute.
  - Constructed types can now be initialized with new .setComponents() method
    which accepts both var-args and keyword-args. Default repr() modified to
    reflect this change.
  - NamedTypes() and NamedValues() made comparable.
  - Test coverage extended to cover pyasn1 types __repr__() function.
  - The abs(Integer()) &amp; abs(Real()) operation now returns respective pyasn1
    type, not a Python type.
  - More Python magic methods implementations added to Integer &amp; Real classes
    (e.g.  __pos__, __neg__, __round__, __floor__, __ceil__, __trunc__)
  - The Integer.__invert__ Python magic method implemented.
  - The OctetString.__int__() and .__float__() magic methods implemented.
  - Handle the case of null writer at Debug printer.
  - BitString encoder/decoder performance improved.
  - Built-in debugging is now based on Python logging module.
  - Fix to NamedType.__repr__() to work properly.
  - Fixes to __repr__() implementation of many built-in ASN.1 types to take into
    account all of their initializers such as tagSet, subtypeSpec etc.
  - String typed float initializer to REAL type now supported.
  - Float typed mantissa initializer to REAL type for base 2 added.
  - Encoding bases 8 and 16 support for REAL type binary encoder added.
  - More strict CER/DER encoders added for GeneralizedTime and UTCTime types.
  - Asn1Item.hasValue() added to easily distinguish initalized ASN.1 objects
    from uninitialized ones (e.g. pure types).
  - Fix to REAL type binary decoder to handle different bases and scale factor.
  - Fix to TagSet.repr() to include [obsolete] baseTag information.
  - Fix to broken REAL type decoding handling.
  - Fix to BitString and OctetString decoders dealing with constructed
    encoding -- it used to be possible to embed other types in substrate.
  - Fix to end-of-octest sentinel handling:
  * require strict two-zeros sentinel encoding
  * recognize EOO sentinel only when explicitly requested by caller
    of the decoder via allowEoo=True parameter (warning: API change)
  - DER codec hardened not to tolerate indefinite length encoding/decoding.</changelog>
  <changelog author="hpj@urpla.net" date="1444132800">- updated to upstream release 0.1.9
  - Wheel distribution format now supported.
  - Extensions added to text files, CVS attic flushed.
  - Fix to make uninitilaized pyasn1 objects failing properly on hash().
  - Fix to ObjectIdentifier initialization from unicode string.
  - Fix to CER/DER Boolean decoder - fail on non single-octet payload.</changelog>
  <changelog author="michael@stroeder.com" date="1486468800">- updated to upstream release 0.2.2 with security fixes
- updated project and source URLs and list of doc files
  Revision 0.2.2, released 07-02-2017
- FIX TO A SECURITY WEAKNESS: define length only decoders could have successfully
  processed indefinite length serialization.
- FIX TO A SECURITY WEAKNESS: canonical decoders (CER/DER) may have successfully
  consumed non-canonical variations of (otherwise valid) serialization.
- Broken Enumerated subtyping fixed.
  Revision 0.2.1, released 05-02-2017
- FIX TO A SECURITY WEAKNESS: BER decoder improperly cached long tags.
- New "native" codec implemented to transform pyasn1 types to Python built-in types and back.
- Switched to new-style classes.
- Sphinx documentation added.
- BitString improvements:
  * simple string of binary digits is now supported as initializer
  * default str() yields string of binary digits (used to yield str(tuple())
  * binValue and hexValue initializers added
  * .asNumbers(), .asOctets() and asInteger() representation added
- Components of constructed ASN.1 types can now be populated with
  uninitialized ASN.1 objects by assigning either noValue sentinel or
  setupComponent() function return in addition to now-legacy None sentinel.
  This should improve code readability.
- NoValue class improved to become a singleton and catch more kinds
  of access to it.
- Compatibility wrappers str2octs() and oct2strs() fixed to run over
  iso-8859-1 encoding.
- Integer changed to emit Real instance if division produces a float.
- True division operation now supported by Integer type.
- The __contains__(), __reverse__() methods implemented for container types
- Iterator protocol support implemented for all container types.
  Warning, warning, warning: this change may potentially affect backward
  compatibility when:
  * user class overrides __getitem__() without overriding __iter__()
  * when user code iterates over SEQUENCE object to get its components (now keys will be yielded)
- Almost complete Python list and dict protocols added to SequenceOf/SetOf and
  Sequence/Set respectively
- Fix to divmod operation implementation in Integer type.
- Fix to IntegerDecoder's precomputed value map on Python 3.
- Fix to base ASN.1 types to run in "unicode_literals" mode.
- Fix to composite constraints "+" operands ordering (AbstractConstraintSet.__radd__)
- Fix to constraints merge in .subtype() -- on merge existing constraints are
  expanded to accommodate new constraints, not the other way round. When existing
  constraints are wrapped in ConstraintsIntersection composite, additional
  constraints being added on subtyping effectively further narrow the set of
  allowed values, which aligns well with the notion of subtyping.
- Fix to NamedTypes methods to handle .getTagMap() returning None
- Fix to Set/Sequence.setDefaultComponents() to return self
- Copyright notice added to non-trivial source code files.
- Author's email changed, copyright extended to 2017</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- updated to upstream release 0.2.3
  Revision 0.2.3, released 25-02-2017
- Improved SEQUENCE/SET/CHOICE decoding performance by maintaining a single shared
  NamedType object for all instances of SEQUENCE/SET object.
- Improved INTEGER encoding/decoding by switching to Python's built-in
  integer serialization functions.
- Improved BitString performance by rebasing it onto Python int type and leveraging
  fast Integer serialization functions.
- BitString type usability improved in many ways: for example bitshifting and
  numeric operation on BitString is now possible.
- Minor ObjectIdentifier type performance optimization.
- ASN.1 character types refactored to keep unicode contents internally
  (rather than serialized octet stream) and duck-type it directly.
- ASN.1 OctetString initialized from a Python object performs bytes()
  on it when running on Python 3 (used to do str() which is probably
  less logical).
- Missing support for NoValue.__sizeof__ added.
- Added checks to make sure SEQUENCE/SET components being assigned
  match the prototypes.
- Setter methods for constructed types consistently accept matchTags
  and matchConstraints flags to control the strictness of inner
  components compatibility verification. Previously, these checks
  were tied to verifyConstraints flag, now they are all independent.
- General documentation improvements here and there.
- Fix to __reversed__() magic to make it returning an iterator.
- Test suite simplified and unified.
- The __all__ variable added to most of the Python modules.
- The "test" directory renamed into "tests" not to collide with
  the "test" module.</changelog>
  <changelog author="tbechtold@suse.com" date="1489665600">- Switch to singlespec approach</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="okurz@suse.com" date="1497873600">- Cleanup duplicates with fdupes</changelog>
  <changelog author="michael@stroeder.com" date="1501329600">- updated to upstream release 0.3.1
- do not ship doc/source/
  Revision 0.3.1, released 26-07-2017
- ASN.1 types __init__(), .clone() and .subtype() signatures
  refactored into keyword arguments to simplify their signatures.
- ASN.1 types initialization refactored to minimize the use of
  relatively expensive isNoValue() call
- Lazily pre-populate list of values of Sequence/Set/Choice types
- NamedTypes comparison made more efficient
- More efficient constraints computation and code clean up
- The __getitem__() implementation of some ASN.1 types &amp; tag object
  refactored for better performance
- BER/CER/DER value encoders refactored to produce either tuple of
  bytes or octet-stream depending on what is more optimal
- Reduced the frequency of expensive isinstance() calls
- Tag-related classes optimized, refactored into properties and
  documented.
- The NamedValues implementation refactored to mimic Python dict, its use
  in ASN.1 types refactored into properties and better documented.
  WARNING: this change introduces a deviation from original API.
- NamedType family of classes overhauled, optimized and documented.
- The `componentType` attribute of constructed ASN.1 types turned
  read-only on instances.
- Sequence/Set DER/CER/DER decoder optimized to skip the case of
  reordered components handling when not necessary.
- Tags and constraints-related getter methods refactored into read-only
  instance attributes.
- The .hasValue() method refactored into .isValue property. All ASN.1
  objects now support them, not just scalars.
- The Real.{isInfinity, isPlusInfinity, isMinusInfinity} methods
  refactored into properties and renamed into IsInf, IsPlusInf and isMinusInf
- The end-of-octets type refactored to ensure it is a singleton. Codecs
  changed to rely on that for better performance.
- Codecs lookup made more efficient at BER/CER/DER decoder main loop by
  assigning `typeId` to every ASN.1 type, not just ambiguous ones.
- The .getComponent*() methods of constructed ASN.1 types changed
  to lazily instantiate underlying type rather than return `None`.
  This should simplify its API as initialization like `X[0][1] = 2` becomes
  possible.
  WARNING: this change introduces a deviation from the original API.
- The .setComponent*() methods of SetOf/SequenceOf types changed not
  to allow uninitialized "holes" inside the sequences of their components.
  They now behave similarly to Python lists.
  WARNING: this change introduces a deviation from the original API.
- Default and optional components en/decoding of Constructed type
  refactored towards better efficiency and more control.
- OctetsString and Any decoder optimized to avoid creating ASN.1
  objects for chunks of substrate. Instead they now join substrate
  chunks together and create ASN.1 object from it just once.
- The GeneralizedTime and UTCTime types now support to/from Python
  datetime object conversion.
- Unit tests added for the `compat` sub-package.
- Fixed BitString named bits initialization bug.
- Fixed non-functional tag cache (when running Python 2) at DER decoder.
- Fixed chunked encoding restriction on DER encoder.
- Fixed SET components ordering at DER encoder.
- Fixed BIT STRING &amp; OCTET STRING encoding to be always non-chunked (e.g.
  primitive) at DER encoder
- Fixed `compat.integer.from_bytes()` behaviour on empty input.</changelog>
  <changelog author="michael@stroeder.com" date="1502798400">- updated to upstream release 0.3.2
  Revision 0.3.2, released 04-08-2017
- Fixed SequenceOf/SetOf types initialization syntax to remain
  backward compatible with pyasn1 0.2.*
- Rectified thread safety issues by moving lazy, run-time computation
  into object initializer.
- Fixed .isValue property to return True for empty SetOf/SequenceOf
  objects
- Fixed GeneralizedTime/UTCTime CER/DER codecs to actually get invoked
- Fixed DER/CER encoders handling optional SEQUENCE/SET fields containing
  nested SEQUENCE/SET with optional fields.
- Fixed crash in SequenceOf/SetOf pretty printing and decoding (in some
  cases)
- Fixed documentation markup issues.</changelog>
  <changelog author="michael@stroeder.com" date="1504785600">- updated to upstream release 0.3.4
  Revision 0.3.4, released 07-09-2017
- Fixed Native encoder to handle SEQUENCE/SET objects without
  the componentType property
- Added missing component-less SEQUENCE/SET objects dict duck-typing support
- Fixed unnecessary duplicate tags detection at NamesType.tagMap
- Fixed crash at SEQUENCE and SEQUENCE OF CER encoder when running
  in schemaless mode
- Fixed Character types instantiation from OctetString type -- double
  unicode decoding may have scrambled the data
  Revision 0.3.3, released 27-08-2017
- Improved ASN.1 types instantiation performance
- Improved BER/CER/DER decoder performance by not unconditionally casting
  substrate into str/bytes.
- Fixed exponential index size growth bug when building ambiguous
  NamedTypes tree
- Fixed constructed types decoding failure at BER codec if running
  in schema-less mode
- Fixed crash on prettyPrint'ing a SEQUENCE with no defined components
- Fixed SetOf ordering at CER/DER encoder
- Fixed crash on conditional binascii module import
- Fix to TagSet hash value build</changelog>
  <changelog author="michael@stroeder.com" date="1505822400">- updated to upstream release 0.3.5
  - Codecs signatures unified and pass the options kwargs through the
    call chain
  - Explicit tag encoding optimized to avoid unnecessary copying
  - End-of-octets sentinel encoding optimized
  - Refactored ASN.1 codecs properties to silently enforce proper
    length and chunk size encoding modes
  - Fixed DER encoder to always produce primitive encoding
  - Fixed crash at SequenceOf native decoder
  - Fixed Real.prettyPrint() to fail gracefully on overflow
  - Fixed a couple of crashes when debug mode is enabled</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- updated to upstream release 0.3.6
  * End-of-octets encoding optimized at ASN.1 encoders
  * The __getitem__/__setitem__ behavior of Set/Sequence and
    SetOf/SequenceOf objects aligned with the canonical Mapping
    and Sequence protocols in part
  * Fixed crash in ASN.1 encoder when encoding an explicitly tagged
    component of a Sequence</changelog>
  <changelog author="michael@stroeder.com" date="1507809600">- updated to upstream release 0.3.7
  * Fixed ASN.1 time types pickling/deepcopy'ing</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 0.4.2:
  * Fixed explicit tag splitting in chunked encoding mode at
    OctetString and BitString encoders
- changes from version 0.4.1:
  * ANY DEFINED BY clause support implemented
  * Encoders refactored to take either a value (as ASN.1 object) or a
    Python value plus ASN.1 schema
  * BitString decoder optimised for better performance when running on
    constructed encoding
  * Constructed types' .getComponentBy*() methods accept the `default`
    parameter to return instead if schema object is to be returned
  * Constructed types' .getComponentBy*() methods accept the
    `instantiate` parameter to disable automatic inner component
    instantiation
  * The ASN.1 types' `__repr__` implementation reworked for better
    readability at the cost of not being `eval`-compliant
  * Most ASN.1 types' `__str__` magic methods (except for OctetString
    and character types) reworked to call `.prettyPrint()` rather than
    `.prettyPrint` calling `__str__` as it was before. The intention
    is to eventually deprecate `.prettyPrint()` in favor of `str()`.
    The other related change is that `str()` of enumerations and
    boolean types will return string label instead of number.
  * Fixed Choice.clear() to fully reset internal state of the object
  * Sphinx documentation rearranged, simplified and reworded
  * The `isValue` singleton is now the only way to indicate ASN.1
    schema as opposed to ASN.1 schema instance. The legacy `None`
    initializer support has been removed.
  * Changed `Null` object initialization behaviour: previous default
    value (`''`) is not set anymore. Thus `Null()` call produces a
    ASN.1 schema object, while `Null('')` - value object.
  * Migrated all docs and references from SourceForge
  * Imports PEP8'ed
  * Fixed ASN.1 encoder not to omit empty substrate produced for inner
    component if the inner component belongs to the simple class (as
    opposed to constructed class)
  * Fixed CER/DER encoders to respect tagged CHOICE when ordering SET
    components
  * Fixed ASN.1 types not to interfere with the Pickle protocol
  * Fixed Sequence/SequenceOf types decoding heuristics in schema-less
    decoding mode</changelog>
  <changelog author="steven.kowalik@suse.com" date="1688126400">- To avoid users of this package having to recompile bytecode
  files, change the mtime of any __init__.py. (bsc#1207805)</changelog>
</package>
<package pkgid="e71b500e39c7fb1f660e94ee1d56b215f2a94d5de9cda0d89c0523ff5812ed61" name="python-pyzmq" arch="src">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="speilicke@suse.com" date="1364385600">- Update to version 13.0.0:
  + PyPy support
  + The Threadsafe ZMQStream experiment in 2.2.0.1 was deemed inappropriate and not useful,
    and has been removed.
  + The zmq.web experiment has been removed, to be developed as a standalone project
  + Fixes bnc#811890
- Add rpmlintrc
- Drop useless macros
- Run testsuite</changelog>
  <changelog author="cfarrell@suse.com" date="1365163200">- license update: LGPL-3.0+ and BSD-3-Clause
  the core is LGPL-3.0+ but most of what is outside the code is
  BSD-3-Clause</changelog>
  <changelog author="toddrme2178@gmail.com" date="1365768000">- Changes suggests to recommends since there is no way to install suggets currently</changelog>
  <changelog author="p.drouand@gmail.com" date="1385294400">- Update to version 14.0.0
  + Update bundled libzmq to current (4.0.1).
  + Backends are now implemented in ``zmq.backend`` instead of ``zmq.core``.
    This has no effect on public APIs.
  + Various build improvements for Cython and CFFI backends (PyPy
    compiles at build time).
  + Various GIL-related performance improvements - the GIL is no longer
    touched from a zmq IO thread.
  + Adding a constant should now be a bit easier - only zmq/sugar/constant
  _names should need updating,
    all other constant-related files should be automatically updated by
    ``setup.py constants``.
  + add support for latest libzmq-4.0.1
    (includes ZMQ_CURVE security and socket event monitoring).
- Changes from version 13.1.0
  + The main new feature is improved tornado 3 compatibility.
    PyZMQ ships a 'minitornado' submodule, which contains a small
    subset of tornado 3.0.1,
    in order to get the IOLoop base class.  zmq.eventloop.ioloop.IOLoop
    is now a simple subclass, and if the system tornado is ≥ 3.0, then
    the zmq IOLoop is a proper registered subclass of the tornado one itself,
    and minitornado is entirely unused.
- Changes from version 13.0.2
  + EAGAIN was unconditionally turned into KeyboardInterrupt
  + fix use of totally deprecated ctypes_configure to generate constants in CFFI backend
  + fix memory leak in CFFI backend for PyPy
  + typo prevented IPC_PATH_MAX_LEN from ever being defined
  + various build fixes - linking with librt, Cython compatibility, etc.</changelog>
  <changelog author="dmueller@suse.com" date="1392206400">- disable testsuite for qemu-linux-user builds</changelog>
  <changelog author="dimstar@opensuse.org" date="1406808000">- Rename rpmlintrc to %{name}-rpmlintrc.
  Follow the packaging guidelines.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1412164800">- Update to 14.3.1
  + Minor bugfixes to pyzmq 14.3:
  * Fixes to building bundled libzmq on OS X &lt; 10.9
  * Fixes to import-failure warnings on Python 3.4
  * Fixes to tests
  * Pull upstream fixes to zmq.ssh for ssh multiplexing
- Update to 14.3.0
  + PyZMQ no longer calls :meth:`.Socket.close` or
    :meth:`.Context.term` during process cleanup.
    Changes to garbage collection in Python 3.4 make this
    impossible to do sensibly.
  + :meth:`ZMQStream.close` closes its socket immediately,
    rather than scheduling a timeout.
  + Raise the original ImportError when importing zmq fails.
    Should be more informative than `no module cffi...`.
- Update to 14.2.0
  + New Stuff
  * Raise new ZMQVersionError when a requested method is not
    supported by the linked libzmq.
    For backward compatibility, this subclasses
    NotImplementedError.
  + Bugs Fixed
  * Memory leak introduced in pyzmq-14.0 in zero copy.
  * OverflowError on 32 bit systems in zero copy.
- Update to 14.1.0
  + Security
    The headline features for 14.1 are adding better support for
    libzmq's security features.
  * When libzmq is bundled as a Python extension
    (e.g. wheels, eggs), libsodium is also bundled
    (excluding Windows), ensuring that libzmq security is
    available to users who install from wheels
  * New :mod:`zmq.auth`, implementing zeromq's ZAP authentication,
    modeled on czmq zauth.
    For more information, see the
    `examples &lt;https://github.com/zeromq/pyzmq/tree/master/examples/&gt;`_.
  + Other New Stuff
  * Add PYZMQ_BACKEND for enabling use of backends outside the
    pyzmq codebase.
  * Add :attr:`~.Context.underlying` property and
    :meth:`~.Context.shadow` method to Context and Socket, for
    handing off sockets and contexts. between pyzmq and other
    bindings (mainly pyczmq_).
  * Add TOS, ROUTER_HANDOVER, and IPC_FILTER constants from
    libzmq-4.1-dev.
  * Add Context option support in the CFFI backend.
  * Various small unicode and build fixes, as always.
  * :meth:`~.Socket.send_json` and :meth:`~.Socket.recv_json`
    pass any extra kwargs to ``json.dumps/loads``.
  + Deprecations
  * ``Socket.socket_type`` is deprecated, in favor of
    ``Socket.type``, which has been available since 2.1.
- Update to 14.0.1
  + Bugfix release
  * Update bundled libzmq to current (4.0.3).
  * Fix bug in :meth:`.Context.destroy` with no open sockets.
  * Threadsafety fixes in the garbage collector.
  * Python 3 fixes in :mod:`zmq.ssh`.</changelog>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="3bba106158dd6052b6ee7afe2978027afbef7b2b3005bb71f3d627b1aba85694" name="python-requests" arch="src">
  <version epoch="0" ver="2.24.0" rel="150300.3.3.1"/>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py’s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="arun@gmx.de" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0 bsc#1111622:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="arun@gmx.de" date="1542974400">- update to version 2.20.1:
  * Bugfixes
    + Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)
- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="29967b4694c6e33845d7e729c440cc59d74176bc30439138d653aeb3694ee364" name="python-requests" arch="src">
  <version epoch="0" ver="2.25.1" rel="150300.3.6.1"/>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="aefa20c7e63e3c91b20eaf8396a46e1a2a5fd4c0ee4fb83f40afa9b1fba4fd27" name="python-requests" arch="src">
  <version epoch="0" ver="2.25.1" rel="150300.3.9.1"/>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
  <changelog author="mmachova@suse.com" date="1716292800">- Add CVE-2024-35195.patch (CVE-2024-35195, bsc#1224788)
- Add httpbin.patch to fix a test failure caused by the previous patch.</changelog>
</package>
<package pkgid="b582e188b82ce71451237072fab01e2e3910dae928eb355bc5c7f6fb1bf00576" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="cthiel@suse.de" date="1223467200">- added libelf-devel to BuildRequires to fix build</changelog>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="f3ae829f53f77c36f47dc0bdf7902180b62589bfa4a7dc83e4f01e1b90b0d6bc" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="dc0f349fb8076ccf4d9824c8b9f75441ef55206774c4e8f05cf1ae0b55e17cf1" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="f54c2e85398a78d4b01a455b41f935627d6f45f84088bb3ba23956e8e99311e1" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="701f028033dfb5963353f33a6c84a8d16425e6b40faabe57ff220bd8dbee07bb" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="64e40f4a9374f5a5d998b1ab2ba67e970f2a132a030cecda0f343563f4cedc39" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="5a0cbb6e769ccc875125bdec65654cdf0f1b0a624907bd8612451ee2acb8dea8" name="python-s3transfer" arch="src">
  <version epoch="0" ver="0.6.0" rel="150200.9.7.1"/>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 0.1.11:
  + Properly handle unicode exceptions in the context manager</changelog>
  <changelog author="mimi.vx@gmail.com" date="1524139200">- update to 0.1.13 (bsc#1075263)
- add system-requests.patch - use system python-requests
  * Plumb ``RequestPayer` argument to the ``CompleteMultipartUpload` operation
  * enhancement:max_bandwidth: Add ability to set maximum bandwidth consumption
  for streaming of S3 uploads and downloads</changelog>
  <changelog author="tchvatal@suse.com" date="1525780800">- Make sure to really not use any damn bundles:
  * no-bundled-packages.patch
  * Never rely on some bundled package version just use system libs
- Enable testsuite and make it pass thanks to above patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Avoid running tests on 32bit as they fail there on oom</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550059200">- Update to version 0.2.0
  * feature:``ProcessPoolDownloader``: Add ``ProcessPoolDownloader`` class
    to speed up download throughput by using processes instead of threads.
- Drop obsolete patch
  + system-requests.patch
- Refresh patches for new version
  + hide_py_pckgmgmt.patch
  + no-bundled-packages.patch
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1560340800">- Update to version 0.2.1 (bsc#1146853)
  * enhancment:ProcessPool: Adds user agent suffix.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1566475200">- Update in SLE-15 (bsc#1146854)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1580126400">- Update to version 0.3.2
  * bugfix:s3: Fixes boto/botocore`#1916 &lt;https://github.com/boto/botocore/issues/1916&gt;`__
- from version 0.3.1
  * enhancement:TransferManager: Expose client and config properties
  * enhancement:Tags: Add support for Tagging and TaggingDirective
- from version 0.3.0
  * feature:Python: Dropped support for Python 2.6 and 3.3.
- Refresh patches for new version
  + hide_py_pckgmgmt.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1582804800">- Update to 0.3.3:
  * bugfix:dependency: Updated botocore version range
- Drop patch hide_py_pckgmgmt.patch it should not be needed
  * we updated setuptools on SLE 12 to handle complex dependencies
- Use pytest for test execution:
  * the nose is used by upstream but really not needed and it
    will get borked with python 3.10</changelog>
  <changelog author="tchvatal@suse.com" date="1583841600">- Skip test failing on python 3.8, it is race condition that needs
  to be fixed in tests</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1586260800">- Fix build on SLE-12
  + Add python to BuildRequires for suse_version &lt; 1500
  + Add python-scandir to BuildRequires for suse_version &lt; 1500</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1586520000">- Update in SLE-15 (bsc#1168943)</changelog>
  <changelog author="rjschwei@suse.com" date="1606392000">- Only build Python3 flavors for distributions 15 and greater</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to 0.3.4:
  * enhancement:s3: Add server side encryption context into allowed list</changelog>
  <changelog author="alarrosa@suse.com" date="1621425600">- Update to 0.4.2:
  * enhancement:s3: Add support for ExpectedBucketOwner. Fixes #181.
- Update to 0.4.1:
  * enhancement:crt: Add set_exception to CRTTransferFuture to allow setting exceptions in subscribers.
- Update to 0.4.0:
  * feature:crt: Add optional AWS Common Runtime (CRT) support. The AWS CRT provides a C-based S3 transfer client that can improve transfer throughput.
- Update to 0.3.7:
  * bugfix:ReadFileChunk: Fix seek behavior in ReadFileChunk class
- Update to 0.3.6:
  * bugfix:packaging: Fix setup.py metadata for futures on Python 2.7
- Update to 0.3.5:
  * enhancement:s3: Block TransferManager methods for S3 Object Lambda resources</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1627387200">- Update 0.5.0: (bsc#1189649)
  * feature:Python: Dropped support for Python 2.7
- Disable Python2 builds for all SUSE distributions
- Remove Python2 build dependencies from spec file</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1654257600">- Update to 0.6.0
  * feature:Python: Dropped support for Python 3.6
- from version 0.5.2
  * enhancement:``s3``: Added support for flexible checksums
    when uploading or downloading objects.
- from version 0.5.1
  * enhancement:Python: Officially add Python 3.10 support
- Drop unused python-mock dependency from BuildRequires
- Refresh patches for new version
  + no-bundled-packages.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires</changelog>
</package>
<package pkgid="b6d66060b7065a8f0ce4c85d6148307a3f5af0048fcf914f27cc2b758303e5b6" name="python-simplejson" arch="src">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benny.gaechter@gmail.com" date="1368014400">- Update to version 3.3.0
  * Unpaired surrogates once again pass through the decoder, to match older
    behavior and the RFC-4627 spec.
    https://github.com/simplejson/simplejson/issues/62</changelog>
  <changelog author="dmueller@suse.com" date="1382356800">- update to 3.3.1:
  * JSONDecodeError exceptions can now be pickled</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1400587200">- Update to 3.4.1
  * Fixed tests to run on Python 3.4
- Update to 3.4.0
  * Native setuptools support re-introduced
    https://github.com/simplejson/simplejson/pull/92
- Update to 3.3.3
  * Improve test suite's Python 3.4 compatibility
    https://github.com/simplejson/simplejson/issues/87
- Update to 3.3.2
  * Docstring fix for decoded string types
    https://github.com/simplejson/simplejson/pull/82</changelog>
  <changelog author="dmueller@suse.com" date="1401537600">- update to 3.5.2:
  * Fix Windows build with VS2008
  Version 3.5.1 released 2014-05-21
  * Consistently reject int_as_string_bitcount settings that are not
    positive integers
  Version 3.5.0 released 2014-05-20
  * Added int_as_string_bitcount encoder option
  * Fixed potential crash when encoder created with incorrect options</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="f36b59375e5cb94b56d5b5548f58d6f0d9c81d4ddd06474c5f1609ba84c21051" name="python-simplejson" arch="src">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benny.gaechter@gmail.com" date="1368014400">- Update to version 3.3.0
  * Unpaired surrogates once again pass through the decoder, to match older
    behavior and the RFC-4627 spec.
    https://github.com/simplejson/simplejson/issues/62</changelog>
  <changelog author="dmueller@suse.com" date="1382356800">- update to 3.3.1:
  * JSONDecodeError exceptions can now be pickled</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1400587200">- Update to 3.4.1
  * Fixed tests to run on Python 3.4
- Update to 3.4.0
  * Native setuptools support re-introduced
    https://github.com/simplejson/simplejson/pull/92
- Update to 3.3.3
  * Improve test suite's Python 3.4 compatibility
    https://github.com/simplejson/simplejson/issues/87
- Update to 3.3.2
  * Docstring fix for decoded string types
    https://github.com/simplejson/simplejson/pull/82</changelog>
  <changelog author="dmueller@suse.com" date="1401537600">- update to 3.5.2:
  * Fix Windows build with VS2008
  Version 3.5.1 released 2014-05-21
  * Consistently reject int_as_string_bitcount settings that are not
    positive integers
  Version 3.5.0 released 2014-05-20
  * Added int_as_string_bitcount encoder option
  * Fixed potential crash when encoder created with incorrect options</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="398f4f8b1890932d444b0d6b9c76c35c105bc4311d6ed13ff6ed1789c943c1f7" name="python-tornado" arch="src">
  <version epoch="0" ver="4.5.3" rel="150000.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1449662400">- Switch to pypi tarball.  It uses "4.3" instead of "4.3.0"</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1450872000">- add singledispatch and backports_abc dependencies
  as stated in docs/releases/v4.3.0.rst
  * Tornado has several new dependencies: (...)
  ``singledispatch`` on all Python versions prior to 3.4 (This was an
  optional dependency in prior versions of Tornado, and is now
  mandatory), and ``backports_abc&gt;=0.4`` on all versions prior to
  3.5
  Since this python module works with python version &gt;= 2.7.9 (otherwise it would be called python3-tornado, afaiu)</changelog>
  <changelog author="dmueller@suse.com" date="1479124800">- update to 4.4.2:
  * Tornado now requires Python 2.7 or 3.3+; versions 2.6 and 3.2 are no
  longer supported. Pypy3 is still supported even though its latest
  release is mainly based on Python 3.2.
  * The `monotonic &lt;https://pypi.python.org/pypi/monotonic&gt;`_ package is
  now supported as an alternative to `Monotime
  &lt;https://pypi.python.org/pypi/Monotime&gt;`_ for monotonic clock support
  on Python 2.</changelog>
  <changelog author="jmatejek@suse.com" date="1491480000">- tornado-configtest.patch: fix test failure when __file__ is not absolute
- tornado-async-deprecations.patch: filter test failures due to async
  deprecation warnings, to fix build on python 3.6
- update for multipython build
- enable test suite</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491566400">- update to 4.4.3
  * The `tornado.auth` module has been updated for compatibility with `a
    change to Facebook's access_token endpoint.</changelog>
  <changelog author="dmueller@suse.com" date="1496232000">- require python-backports.ssl_hostname only on python 2.x</changelog>
  <changelog author="jmatejek@suse.com" date="1497355200">- replace the complicated condition for requiring backports.ssl_match_hostname
  with unconditional requirement for Python &gt;= 2.7.9</changelog>
  <changelog author="jmatejek@suse.com" date="1498219200">- in %pre, remove egg-info file if installed, because it's being
  replaced by a directory (bsc#1035604)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502280000">- Fix tests</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1508241600">- added certifi to BuildRequires, to fix 'ImportError: No module named certifi'</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1508241601">- added %{python_module backports.ssl_match_hostname}
  on SLES12 GA aka SP0, to avoid build errors
- explicit BuildRequires for certifi on SLES12 GA aka SP0 only</changelog>
  <changelog author="arun@gmx.de" date="1511352000">- specfile:
  * removed tornado-configtest.patch: fixed upstream
  * update tornado-async-deprecation.patch (partly integrated)
- update to version 4.5.2:
  * Tornado now sets the FD_CLOEXEC flag on all file descriptors it
    creates. This prevents hanging client connections and resource
    leaks when the tornado.autoreload module (or
    Application(debug=True)) is used.
- changes from version 4.5.1:
  * tornado.log
    + Improved detection of libraries for colorized logging.
  * tornado.httputil
    + url_concat once again treats None as equivalent to an empty
    sequence.
- changes from version 4.5.0:
  * long changelog, see http://www.tornadoweb.org/en/stable/releases/v4.5.0.html
    for details</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Distribute license file</changelog>
  <changelog author="jmatejek@suse.com" date="1515067200">- only buildrequire futures / singledispatch if python2 is present
  (fixes build in environments that don't have python2 at all)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1518523200">- Update to version 4.5.3
  + tornado.curl_httpclient
  * Improved debug logging on Python 3.
  + tornado.httpserver
  * ``Content-Length`` and ``Transfer-Encoding`` headers are no longer
    sent with 1xx or 204 responses (this was already true of 304
    responses).
  * Reading chunked requests no longer leaves the connection in a broken
    state.
  + tornado.iostream
  * Writing a `memoryview` can no longer result in "BufferError:
    Existing exports of data: object cannot be re-sized".
  + tornado.options
  * Duplicate option names are now detected properly whether they use
    hyphens or underscores.
  + tornado.testing
  * `.AsyncHTTPTestCase.fetch` now uses ``127.0.0.1`` instead of
    ``localhost``, improving compatibility with systems that have
    partially-working ipv6 stacks.
  + tornado.web
  * It is no longer allowed to send a body with 1xx or 204 responses.
  + tornado.websocket
  * Requests with invalid websocket headers now get a response with
    status code 400 instead of a closed connection.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="ro@suse.de" date="1521201600">- add tornado-testsuite_timeout.patch (bsc#1085661)
  extend timeouts in testsuite to allow successful build on ppc64le</changelog>
  <changelog author="vcizek@suse.com" date="1568721600">- Add patch to skip tests failing with OpenSSL 1.1.1 (bsc#1149792)
  * it happens only when using TLS 1.3, so if user wants to use
    tornado, they can hand disable the TLS 1.3 and continue
  * add tornado-skip-failing-tests.patch</changelog>
  <changelog author="qzhao@suse.com" date="1685361600">- Add tornado-Fix-an-open-redirect-in-StaticFileHandler.patch:
  Backport from upstream, Fix an open redirect in StaticFileHandler.
  Under some configurations the default_filename redirect could be
  exploited to redirect to an attacker-controlled site. This change
  refuses to redirect to URLs that could be misinterpreted
  (CVE-2023-28370 bsc#1211741).</changelog>
</package>
<package pkgid="882401f0d532f0d6a3ceee3d563820d4c42b8385903228426ddfa9232946e2be" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.25.10" rel="150300.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1559131200">- Add more test to skip as with new openssl some behaviour changed
  and we can't rely on them anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
</package>
<package pkgid="7c3dfd62f4b79457933aeea8c579bb32899439bfbc9483ecdd712d942d107ce3" name="python-urllib3" arch="src">
  <version epoch="0" ver="1.25.10" rel="150300.4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698235200">- Add CVE-2023-45803.patch (bsc#1216377, CVE-2023-45803)
  gh#urllib3/urllib3@4e98d57809da</changelog>
</package>
<package pkgid="3709b7c1def9bc958917eb66a61cb78963f62c98ec2bd8739780f55babb9be85" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="93864082cddd6cb76365a4c39210c6adad89c5c1835ffcbb0daf234e01f561f3" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="a264488cbf82a20c6790a9332e30530da3ce4314259fb0276f76ce69521fbfb7" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="679c62e4d65fbee4bb3d6d65d739fc72ea9a452f320406e3da5ecaa36821c75c" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="553e421609d93103ddf558f265be4b072ed03cce8249920c5f7ecf0d138851bb" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="1cbc674ada21cf920f385ac9a48a673623a4412370fc5fcac8b1e2da5cf119c5" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="0402b49dd026dafd3b59efb0f7df16be97be83f39c3d3370dee939f96b824925" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="7cd185ef9c3d2b83b76f7ec2c3596510c7aac3442324ccd796d9cff7fb708852" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="1b45d0a2452d94cef9988e2731258d04b8deee2d00576e3c5c8ebd9f24640a21" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="eb60d20012544afa451688d95122c4098dbd2e1663f4e4a02aca5c3721315eeb" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="2689c2d8d0cb475d07666f9e19132b6f71deac378afcc5a56d99e9618860b177" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="b5450f23f7948307558bd46c936a063e4b89fd79b1d2d5115dc197aec133d286" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="16b7766f0341cd5f25bb86618ca361be7bf88fb5aff20e9bc555fb36e6614e4f" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="f75cbbaa6e5f18dd9a2032fe9c9e5ed6bde5eac116868de0f3eccbfe5b98ace2" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="688abb4b4ade249dc8c5503d4d084db2ed4d62c2989ca7789d294550d601bb3c" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="fba48a211368c614b7021cecc667fc1628b7b977f20d2fe668f4e3fb98fbfd02" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="3f0655932c019b04a8816d77fc90eb338fd4a859d30303929e440d6ffc2475c8" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="38815f3342e37de6d81d51133de7fe799752fe62109840337d900c2ad99bf999" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="88e508636ffb3c3d46adbb8919f1decfef577f2042ba156ecaeaf019f6e38583" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="022c38ba86d074c2cfd4e1ce03eed60ce7acfdf4ca89351dece9f84f143d2c89" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="0c5450f4190f92ac92f393b7ef6bcc7a83ff118dc3cb4b325975e4b0033ef905" name="python3" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="969cb043f516d5d6ed9ce7985fde244078d434f13e757c3ba75d5a81145b7b47" name="python3" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="75d192c77bcf59f06c68681e715aad16f3f7bebd6a0ba46eeccc9fce224fd3ef" name="python3" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="c04bd7360a027ffeb3956ba9ca1a0c92160ce159ece15dbdd8437e6952d588de" name="python3" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="affc3829e86cae5713ba714fdb438564e17f84a9943ca6a7281b76102e8ee87b" name="python3-Jinja2" arch="noarch">
  <version epoch="0" ver="2.10.1" rel="150000.3.13.1"/>
  <changelog author="jengelh@inai.de" date="1437566400">- Use %python_version over %py_ver: better portability to RHEL</changelog>
  <changelog author="aplanas@suse.com" date="1447934400">- Update to 2.8
  - Added `target` parameter to urlize function.
  - Added support for `followsymlinks` to the file system loader.
  - The truncate filter now counts the length.
  - Added equalto filter that helps with select filters.
  - Changed cache keys to use absolute file names if available
    instead of load names.
  - Fixed loop length calculation for some iterators.
  - Changed how Jinja2 enforces strings to be native strings in
    Python 2 to work when people break their default encoding.
  - Added :func:`make_logging_undefined` which returns an undefined
    object that logs failures into a logger.
  - If unmarshalling of cached data fails the template will be
    reloaded now.
  - Implemented a block ``set`` tag.
  - Default cache size was incrased to 400 from a low 50.
  - Fixed ``is number`` test to accept long integers in all Python versions.
  - Changed ``is number`` to accept Decimal as a number.
  - Added a check for default arguments followed by non-default arguments. This
    change makes ``{% macro m(x, y=1, z) %}...{% endmacro %}`` a syntax error. The
    previous behavior for this code was broken anyway (resulting in the default
    value being applied to `y`).
  - Add ability to use custom subclasses of ``jinja2.compiler.CodeGenerator`` and
    ``jinja2.runtime.Context`` by adding two new attributes to the environment
    (`code_generator_class` and `context_class`) (pull request ``#404``).
  - added support for context/environment/evalctx decorator functions on
    the finalize callback of the environment.
  - escape query strings for urlencode properly.  Previously slashes were not
    escaped in that place.
  - Add 'base' parameter to 'int' filter.
- Tests are removed from the package (not distributed in the tar.gz)</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to 2.9.5  (bsc#1132174, CVE-2016-10745)
  (see the changes in /usr/share/doc/packages/python-Jinja2/CHANGES)
- updated source URL</changelog>
  <changelog author="dmueller@suse.com" date="1490184000">- fix requires</changelog>
  <changelog author="jmatejek@suse.com" date="1491307200">- update for singlespec
- update to 2.9.6
  * fixed custom context behavior in fast resolve mode</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- specfile:
  * CHANGES -&gt; CHANGES.rst
  * added README.rst to %doc section
- update to version 2.10:
  * Added a new extension node called "OverlayScope" which can be used
    to create an unoptimized scope that will look up all variables
    from a derived context.
  * Added an "in" test that works like the in operator.  This can be
    used in combination with "reject" and "select".
  * Added "previtem" and "nextitem" to loop contexts, providing access
    to the previous/next item in the loop. If such an item does not
    exist, the value is undefined.
  * Added "changed(*values)" to loop contexts, providing an easy way
    of checking whether a value has changed since the last iteration
    (or rather since the last call of the method)
  * Added a "namespace" function that creates a special object which
    allows attribute assignment using the "set" tag.  This can be used
    to carry data across scopes, e.g. from a loop body to code that
    comes after the loop.
  * Added a "trimmed" modifier to "{% trans %}" to strip linebreaks
    and surrounding whitespace. Also added a new policy to enable this
    for all "trans" blocks.
  * The "random" filter is no longer incorrectly constant folded and
    will produce a new random choice each time the template is
    rendered. (`#478`_)
  * Added a "unique" filter. (`#469`_)
  * Added "min" and "max" filters. (`#475`_)
  * Added tests for all comparison operators: "eq", "ne", "lt", "le",
    "gt", "ge". (`#665`_)
  * "import" statement cannot end with a trailing comma. (`#617`_,
    `#618`_)
  * "indent" filter will not indent blank lines by default. (`#685`_)
  * Add "reverse" argument for "dictsort" filter. (`#692`_)
  * Add a "NativeEnvironment" that renders templates to native Python
    types instead of strings. (`#708`_)
  * Added filter support to the block "set" tag. (`#489`_)
  * "tojson" filter marks output as safe to match documented behavior.
    (`#718`_)
  * Resolved a bug where getting debug locals for tracebacks could
    modify template context.
  * Fixed a bug where having many "{% elif ... %}" blocks resulted in
    a "too many levels of indentation" error.  These blocks now
    compile to native "elif ..:" instead of "else: if ..:" (`#759`_)</changelog>
  <changelog author="arun@gmx.de" date="1555156800">- update to version 2.10.1 (bsc#1132323, CVE-2019-10906, bsc#1125815, CVE-2019-8341):
  * "SandboxedEnvironment" securely handles "str.format_map" in order
    to prevent code execution through untrusted format strings.  The
    sandbox already handled "str.format".</changelog>
  <changelog author="atoptsoglou@suse.com" date="1612872000">- CVE-2020-28493: Fixed a ReDOS vulnerability where urlize could have
  been called with untrusted user data (bsc#1181944).
  Added CVE-2020-28493.patch</changelog>
  <changelog author="atoptsoglou@suse.com" date="1613649600">- Fixed IndentationError in CVE-2020-28493.patch (bsc#1182244)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1715083200">- Add CVE-2024-34064.patch upstream patch
  (CVE-2024-34064, bsc#1223980, gh#pallets/jinja@0668239dc6b4)
  Also fixes (CVE-2024-22195, bsc#1218722)</changelog>
</package>
<package pkgid="9a2ee31be2f2c39dadd865b9d96b927a66dbde53e615968985a34bc11e1e9170" name="python3-M2Crypto" arch="aarch64">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="faa8655e9831d2af625b1ed043ab2999b5075cbce76337f4356f6b0377940a92" name="python3-M2Crypto" arch="ppc64le">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="83de0b3d553a4d6b232f7f593d1826bf50cfd0a8eec3bcd31669744c74e55b4c" name="python3-M2Crypto" arch="s390x">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="52fb4d0f1e48e509332e8ab2ec7dbc5465127320fc3cc8832baf2dcc9f386c46" name="python3-M2Crypto" arch="src">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="b3ffd4d562ccca88efed68aca4db609263684060b8233c18c532a476efec1545" name="python3-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.38.0" rel="150400.10.1"/>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
  <changelog author="dmueller@suse.com" date="1667822400">- add openssl-stop-parsing-header.patch (bsc#1205042)
- add m2crypto-0.38-ossl3-tests.patch</changelog>
  <changelog author="otto.hollmann@suse.com" date="1678968000">- Adapt tests for OpenSSL v3.1.0
  * Add openssl-adapt-tests-for-3.1.0.patch</changelog>
  <changelog author="dmueller@suse.com" date="1687867200">- add timeout_300hz.patch to accept a small deviation from time
  in the testsuite (bsc#1212757)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1706097600">- Disable broken tests with openssl 3.2, bsc#1217782</changelog>
</package>
<package pkgid="46948686c236fb80860e7415e0c79b349b499ada426292739b8bcfee0e012c9a" name="python3-M2Crypto" arch="aarch64">
  <version epoch="0" ver="0.38.0" rel="150400.7.64"/>
  <changelog author="mcepl@suse.com" date="1551787200">- Update to 0.32.0:
  * 471582f - setup.py: use ${CPP} as path to cpp &lt;Duncan Macleod&gt;
  * efb1580 - Bump pipeline OpenSSL from 1.1.0i to 1.1.0j
  * 35bb71b - Stub wchar_t helpers and ignore unused WCHAR defs
  * effc7be - Add type comment to setup.py  &lt;Matěj Cepl&gt;</changelog>
  <changelog author="mcepl@suse.com" date="1551960000">- Fix for compatibility with OpenSSL 1.1.0h by adding the patch
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch</changelog>
  <changelog author="mcepl@suse.com" date="1556280000">- Upgrade to 0.33.0 (bsc#1135009):
  - eb4525c - Stop pretending to support Python 3.4.
  - 6a89548 - Fix use of urlunsplit (25 hours ago)
  - 0a5a356 - tests/test_ssl: use -ciphercuites for TLS1.3 cipher in
    openssl1.1
  - 8a0a3e3 - There are apparently multiword CPP variables. Taking that
    into account.
- Remove
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch
  as it included in the latest release.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559822400">- Upgrade to 0.34.0
- no upstream changelog</changelog>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
</package>
<package pkgid="8e3e5b261faad545612083ba4041ffc25bcc8ae464da717490d39f767e752542" name="python3-M2Crypto" arch="ppc64le">
  <version epoch="0" ver="0.38.0" rel="150400.7.64"/>
  <changelog author="mcepl@suse.com" date="1551787200">- Update to 0.32.0:
  * 471582f - setup.py: use ${CPP} as path to cpp &lt;Duncan Macleod&gt;
  * efb1580 - Bump pipeline OpenSSL from 1.1.0i to 1.1.0j
  * 35bb71b - Stub wchar_t helpers and ignore unused WCHAR defs
  * effc7be - Add type comment to setup.py  &lt;Matěj Cepl&gt;</changelog>
  <changelog author="mcepl@suse.com" date="1551960000">- Fix for compatibility with OpenSSL 1.1.0h by adding the patch
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch</changelog>
  <changelog author="mcepl@suse.com" date="1556280000">- Upgrade to 0.33.0 (bsc#1135009):
  - eb4525c - Stop pretending to support Python 3.4.
  - 6a89548 - Fix use of urlunsplit (25 hours ago)
  - 0a5a356 - tests/test_ssl: use -ciphercuites for TLS1.3 cipher in
    openssl1.1
  - 8a0a3e3 - There are apparently multiword CPP variables. Taking that
    into account.
- Remove
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch
  as it included in the latest release.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559822400">- Upgrade to 0.34.0
- no upstream changelog</changelog>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
</package>
<package pkgid="92a6deacd36beac99a1156946b1bac4fa74488ba9bcaf821dcf39682ef2a9ea5" name="python3-M2Crypto" arch="s390x">
  <version epoch="0" ver="0.38.0" rel="150400.7.64"/>
  <changelog author="mcepl@suse.com" date="1551787200">- Update to 0.32.0:
  * 471582f - setup.py: use ${CPP} as path to cpp &lt;Duncan Macleod&gt;
  * efb1580 - Bump pipeline OpenSSL from 1.1.0i to 1.1.0j
  * 35bb71b - Stub wchar_t helpers and ignore unused WCHAR defs
  * effc7be - Add type comment to setup.py  &lt;Matěj Cepl&gt;</changelog>
  <changelog author="mcepl@suse.com" date="1551960000">- Fix for compatibility with OpenSSL 1.1.0h by adding the patch
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch</changelog>
  <changelog author="mcepl@suse.com" date="1556280000">- Upgrade to 0.33.0 (bsc#1135009):
  - eb4525c - Stop pretending to support Python 3.4.
  - 6a89548 - Fix use of urlunsplit (25 hours ago)
  - 0a5a356 - tests/test_ssl: use -ciphercuites for TLS1.3 cipher in
    openssl1.1
  - 8a0a3e3 - There are apparently multiword CPP variables. Taking that
    into account.
- Remove
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch
  as it included in the latest release.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559822400">- Upgrade to 0.34.0
- no upstream changelog</changelog>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
</package>
<package pkgid="a461da870f961ab016b34f2279cba6780945f9d25806e2a2b24c94753a6a0ad1" name="python3-M2Crypto" arch="src">
  <version epoch="0" ver="0.38.0" rel="150400.7.64"/>
  <changelog author="mcepl@suse.com" date="1551787200">- Update to 0.32.0:
  * 471582f - setup.py: use ${CPP} as path to cpp &lt;Duncan Macleod&gt;
  * efb1580 - Bump pipeline OpenSSL from 1.1.0i to 1.1.0j
  * 35bb71b - Stub wchar_t helpers and ignore unused WCHAR defs
  * effc7be - Add type comment to setup.py  &lt;Matěj Cepl&gt;</changelog>
  <changelog author="mcepl@suse.com" date="1551960000">- Fix for compatibility with OpenSSL 1.1.0h by adding the patch
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch</changelog>
  <changelog author="mcepl@suse.com" date="1556280000">- Upgrade to 0.33.0 (bsc#1135009):
  - eb4525c - Stop pretending to support Python 3.4.
  - 6a89548 - Fix use of urlunsplit (25 hours ago)
  - 0a5a356 - tests/test_ssl: use -ciphercuites for TLS1.3 cipher in
    openssl1.1
  - 8a0a3e3 - There are apparently multiword CPP variables. Taking that
    into account.
- Remove
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch
  as it included in the latest release.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559822400">- Upgrade to 0.34.0
- no upstream changelog</changelog>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
</package>
<package pkgid="b061f1b5ca7185c64d9748eb1680a4d801a8f79e676a6a82c36cd9ed9a11cba8" name="python3-M2Crypto" arch="x86_64">
  <version epoch="0" ver="0.38.0" rel="150400.7.64"/>
  <changelog author="mcepl@suse.com" date="1551787200">- Update to 0.32.0:
  * 471582f - setup.py: use ${CPP} as path to cpp &lt;Duncan Macleod&gt;
  * efb1580 - Bump pipeline OpenSSL from 1.1.0i to 1.1.0j
  * 35bb71b - Stub wchar_t helpers and ignore unused WCHAR defs
  * effc7be - Add type comment to setup.py  &lt;Matěj Cepl&gt;</changelog>
  <changelog author="mcepl@suse.com" date="1551960000">- Fix for compatibility with OpenSSL 1.1.0h by adding the patch
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch</changelog>
  <changelog author="mcepl@suse.com" date="1556280000">- Upgrade to 0.33.0 (bsc#1135009):
  - eb4525c - Stop pretending to support Python 3.4.
  - 6a89548 - Fix use of urlunsplit (25 hours ago)
  - 0a5a356 - tests/test_ssl: use -ciphercuites for TLS1.3 cipher in
    openssl1.1
  - 8a0a3e3 - There are apparently multiword CPP variables. Taking that
    into account.
- Remove
  0001-tests-test_ssl-use-ciphercuites-for-TLS1.3-cipher-in.patch
  as it included in the latest release.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559822400">- Upgrade to 0.34.0
- no upstream changelog</changelog>
  <changelog author="mcepl@suse.com" date="1559908800">- Add fix_OpenSSL111c.patch patch to ensure compatibility with
  OpenSSL 1.1.1c. gl#m2crypto/m2crypto#258 and jsc#SLE-9135.</changelog>
  <changelog author="mcepl@suse.com" date="1559995200">- Replace fix_OpenSSL111c.patch with proper new release 0.35.1
  (there is really not much more in it; bsc#1149792).</changelog>
  <changelog author="mcepl@suse.com" date="1560168000">- Update to fix release 0.35.2 ... just fixing the test suite
  (bsc#1172226).</changelog>
  <changelog author="marco.strigl@suse.com" date="1583755200">- in python3.8 the fp is wrapped in a Buffer. SSL.Connection.makefile
  returns a socketIO which is no buffer.
  Added: 001-fix-buffering-for-python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1586347200">- Do not pull in py2 pkg on doc subpkg</changelog>
  <changelog author="mcepl@suse.com" date="1594641600">Update to 0.36.0:
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - SSL.Connection.close accepts an argument to force the socket closing
    &lt;Christophe Haen&gt;
  - SSL.Connection: make the clientPostConnectionCheck an instance
    attribute &lt;Christophe Haen&gt;
  - Fixed bug with usage of unexisting method getreply at SSL_Transport
    &lt;roman-nagaev&gt;
  - Add appveyor builds for python 3.7 and 3.8 &lt;Daniel A. Wozniak&gt;
  - Fixed syntax warning on line 44. &lt;randomfox&gt;
  - Update M2Crypto.six to 1.13.0 &lt;Matěj Cepl&gt;
  - base64.decodestring() was finally removed in Python 3.8. &lt;Matěj Cepl&gt;
  - wrap SocketIO in io.Buffered* for makefile &lt;lethliel&gt;
  - NULL is legal argument for key and iv paramters of EVP_CipherInit(3)
    &lt;Matěj Cepl&gt;
  - Expose X509_V_FLAG_ALLOW_PROXY_CERTS verification flag and
    X509_STORE_SET_FLAGS function &lt;Christophe Haen&gt;
  - Stop testing for 2.6 and 3.4 on Travis. Start testing 3.8 &lt;Matěj Cepl&gt;
  - Extend test cert validity to 2049 &lt;Bernhard M. Wiedemann&gt;
  - Revert using typing module in 2.6. It is just not worthy. &lt;Matěj Cepl&gt;
  - Update Debian/stable SSL as well &lt;Matěj Cepl&gt;
  - Make tests pass again. &lt;Matěj Cepl&gt;
  - Stop using string module, which has been deprecated. &lt;Matěj Cepl&gt;
  - Tiny fixes to make pyls more happy &lt;Matěj Cepl&gt;
  - CI: Rework Fedora CI configuration &lt;Neal Gompa&gt;
- Remove upstream merged patch 001-fix-buffering-for-python38.patch.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Update to 0.37.1:
  - Remove support for CentOS 6 and Python 2.6 (remove
    tests.vendor module). Python 2.7 is still fully supported.
  - Remodel CI:
  - on GitHub switched from Travis-CI to GH Actions
  - on GitLab-CI: stop testing 2.7 on Fedora, add centos7
  - update appveyor.yml
  - Stop playing with swig in setup.py, we don't support swig 1.*
    anymore.
  - Fix dereferencing of pointers (gl#m2crypto/m2crypto#281)
  - Replace deprecated PyObject_AsReadBuffer with our own shim
    (thanks to Casey Deccio for saving my bacon there).
  - Use parametrized to create parametrized tests (new external
    dependency).
  - Only use DigestSign() and DigestUpdate() with OpenSSL &gt;= 1.1.1
  - Expose all the X509_V_FLAG
  - Add support for DigestSign* and DigestVerify*</changelog>
  <changelog author="mcepl@suse.com" date="1610539200">- Dr. Strangelove or: How I Learned to Stop Worrying and Love pytest</changelog>
  <changelog author="pmonreal@suse.com" date="1613563200">- Add source signature file</changelog>
  <changelog author="pmonreal@suse.com" date="1613563201">- OpenSSL allows the verificaton to continue on
  UNABLE_TO_VERIFY_LEAF_SIGNATURE
  * This unifies the behaviour of a single certificate with an
    unknown CA certificate with a self-signed certificate.
- Add python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch
  (Thanks for Debian,
  https://salsa.debian.org/python-team/packages/m2crypto/-/commit/e0e9ad5cfff8)</changelog>
  <changelog author="mcepl@suse.com" date="1613736000">- Add 293_sslv23_padding.patch to avoid using RSA_SSLV23_PADDING
  (gl#m2crypto/m2crypto#293, gh#openssl/openssl#14216).</changelog>
  <changelog author="mcepl@suse.com" date="1619092800">- Add no-need-parameterized.patch ... we don't need run-time requirement
  of parameterized package (bsc#1185150).</changelog>
  <changelog author="mcepl@suse.com" date="1623672000">- Update to 0.38.0:
  - Remove the last use of setup.py test idiom.
  - Use m2_PyObject_AsReadBuffer instead of PyObject_AsReadBuffer.
  - Add support for arm64 big endian &lt;Steev Klimaszewski&gt;
  - Make support of RSA_SSLV23_PADDING optional (it has been deprecated).
  - Move project to src/ layout
  - Allow verify_cb_* to be called with ok=True  &lt;Casey Deccio&gt;
  - Be prepared if any of constants in x509_vfy.h is not available.
  - But we do support 3.8
  - We DO NOT support Python 2.6.
- All patches were upstreamed:
  - 293_sslv23_padding.patch
  - no-need-parameterized.patch
  - python-M2Crypto-Allow-on-UNABLE_TO_VERIFY_LEAF_SIGNATURE.patch</changelog>
  <changelog author="mcepl@suse.com" date="1649332800">- Add missing bug references to this changelog.</changelog>
  <changelog author="mcepl@suse.com" date="1657627200">- Add CVE-2020-25657-Bleichenbacher-attack.patch (CVE-2020-25657,
  bsc#1178829), which mitigates the Bleichenbacher timing attacks
  in the RSA decryption API.
- Add python-M2Crypto.keyring to verify GPG signature of tarball.</changelog>
  <changelog author="dmueller@suse.com" date="1659528000">- update CVE-2020-25657-Bleichenbacher-attack.patch to actually
  contain the fix rather than just being empty (CVE-2020-25657,
  bsc#1178829)</changelog>
</package>
<package pkgid="51d727f7f06d0ce4d138c76823e2282338bd0b20ab2c1fabe733cd152491435e" name="python3-apipkg" arch="noarch">
  <version epoch="0" ver="1.4" rel="150000.3.6.1"/>
  <changelog author="saschpe@suse.de" date="1353412800">- Initial version</changelog>
  <changelog author="tbechtold@suse.com" date="1457697600">- update to 1.4:
  - revert the automated version gathering
  - fix issue2 - adapt tests on Jython
  - handle jython __pkgpath__ missabstraction when running python from jar files
  - alias modules pointing to unimportable modules will return None for
    all their attributes instead of raising ImportError.  This addresses
    python3.4 where any call to getframeinfo() can choke on sys.modules
    contents if pytest is not installed (because py.test.* imports it).
  - introduce apipkg.distribution_version(name) as helper to
    obtain the current version number of a package from install metadata
    its used by default with the package name
  - add an eagerloading option and eagerload automatically
    if bpython is used (workaround for their monkeypatching)
- Switch to use .tar.gz sdist instead of zip
- Install LICENSE
- BuildRequires python-setuptools</changelog>
  <changelog author="aloisio@gmx.com" date="1492776000">- Converted to single-spec
- Enabled tests</changelog>
  <changelog author="aloisio@gmx.com" date="1493294400">- Fixed source URL</changelog>
</package>
<package pkgid="bf23231acbfc0860ca92816a180d59be16c578d27670994a5a164fb7164a72ae" name="python3-audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="127a2f24207d3907be26790b58e6d583955a7d51b865ec88241a4848ba2d4e54" name="python3-audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="a65adaeac57258638b1934439e9c70bc12910c20ab9d6857e4e46f6be1938416" name="python3-audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.10.1"/>
  <changelog author="jengelh@inai.de" date="1553169600">- Reduce scriptlets' hard dependency on systemd.</changelog>
  <changelog author="tonyj@suse.com" date="1578916800">- Update to version 2.8.5:
  * Fix segfault on shutdown
  * Fix hang on startup (#1587995)
  * Add sleep to script to dump state so file is ready when needed
  * Add auparse_normalizer support for SOFTWARE_UPDATE event
  * Mark netlabel events as simple events so that get processed quicker
  * When audispd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
  * Add 30-ospp-v42.rules to meet new Common Criteria requirements
  * Update lookup tables for the 4.18 kernel
  * In aureport, fix segfault in file report
  * Add auparse_normalizer support for labeled networking events
  * Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
  * Event aging is off by a second
  * In ausearch/auparse, correct event ordering to process oldest first
  * auparse_reset was not clearing everything it should
  * Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
  * In ausearch/report, lightly parse selinux portion of USER_AVC events
  * In ausearch/report, limit record size when malformed
  * In auditd, fix extract_type function for network originating events
  * In auditd, calculate right size and location for network originating events
  * Treat all network originating events as VER2 so dispatcher doesn't format it
  * In audisp-remote do an initial connection attempt (#1625156)
  * In auditd, allow expression of space left as a percentage (#1650670)
  * On PPC64LE systems, only allow 64 bit rules (#1462178)
  * Make some parts of auditd state report optional based on config
  * Fix ausearch when checkpointing a single file (Burn Alting)
  * Fix scripting in 31-privileged.rules wrt filecap (#1662516)
  * In ausearch, do not checkpt if stdin is input source
  * In libev, remove __cold__ attribute for functions to allow proper hardening
  * Add tests to configure.ac for openldap support
  * Make systemd support files use /run rather than /var/run (Christian Hesse)
  * Fix minor memory leak in auditd kerberos credentials code
  * Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
  * In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Fix build errors when using gcc-10 no-common default (bsc#1160384)
  New patch: audit-fno-common.patch
- Refresh audit-allow-manual-stop.patch</changelog>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
</package>
<package pkgid="d6bfd8f9c58e55a5625537ce10ccc4179c996a7500ef3b4b2ba872115fe9eb4a" name="python3-audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="daf02a8b4d579b635f84a3c238fe0584d963b5169d7776ba3be439d27ab5eeaa" name="python3-audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="b7dcadac12e427536531a9b5b9962442b2566c77baab8dbcce312e89df4207e8" name="python3-audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.13.1"/>
  <changelog author="lnussel@suse.de" date="1602849600">- prepare usrmerge (boo#1029961)</changelog>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
</package>
<package pkgid="3682edc67ed33d2c6362fe19ad7e1a341b64323878f29c73c69b4283d4f5c772" name="python3-audit" arch="aarch64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="e1c9f0742b0db3efd81ef569c9d7abc1380534ebd1966c5147ba4993dff08797" name="python3-audit" arch="s390x">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="7719b4409cf32b069148e1a632d9080ab4385574564c33ae69dce749f5dcb169" name="python3-audit" arch="x86_64">
  <version epoch="0" ver="3.0.6" rel="150400.4.16.1"/>
  <changelog author="abergmann@suse.com" date="1606910400">- Enable Aarch64 processor support. (bsc#1179515 bsc#1179806)</changelog>
  <changelog author="ematsumiya@suse.com" date="1611835200">- Create new "audit" group for read access to logs (bsc#1178154)
  * add change-default-log_group.patch
  * update audit-secondary.spec</changelog>
  <changelog author="dimstar@opensuse.org" date="1612180800">- Do not explicitly provide group(audit) in system-users-audit:
  this is automatically handled by rpm/providers.</changelog>
  <changelog author="ematsumiya@suse.com" date="1623672000">- Adjust audit.spec and audit-secondary.spec to support new version
- Include fix for libev
  * add libev-werror.patch
- Update to version 3.0.2
- In audispd-statsd pluging, use struct sockaddr_storage (Ville Heikkinen)
- Optionally interpret auid in auditctl -l
- Update some syscall argument interpretations
- In auditd, do not allow spaces in the hostname name format
- Big documentation cleanup (MIZUTA Takeshi)
- Update syscall table to the 5.12 kernel
- Update the auparse normalizer for new event types
- Fix compiler warnings in ids subsystem
- Block a couple signals from flush &amp; reconfigure threads
- In auditd, don't wait on flush thread when exiting
- Output error message if the path of input files are too long ausearch/report
  Included fixes from 3.0.1
- Update syscall table to the 5.11 kernel
- Add new --eoe-timeout option to ausearch and aureport (Burn Alting)
- Only enable periodic timers when listening on the network
- Upgrade libev to 4.33
- Add auparse_new_buffer function to auparse library
- Use the select libev backend unless aggregating events
- Add sudoers to some base audit rules
- Update the auparse normalizer for some new syscalls and event types
  Included fixes from 3.0
- Generate checkpoint file even when no results are returned (Burn Alting)
- Fix log file creation when file logging is disabled entirely (Vlad Glagolev)
- Convert auparse_test to run with python3 (Tomáš Chvátal)
- Drop support for prelude
- Adjust backlog_wait_time in rules to the kernel default (#1482848)
- Remove ids key syntax checking of rules in auditctl
- Use SIGCONT to dump auditd internal state (#1504251)
- Fix parsing of virtual timestamp fields in ausearch_expression (#1515903)
- Fix parsing of uid &amp; success for ausearch
- Add support for not equal operator in audit by executable (Ondrej Mosnacek)
- Hide lru symbols in auparse
- Add systemd process protections
- Fix aureport summary time range reporting
- Allow unlimited retries on startup for remote logging
- Add queue_depth to remote logging stats and increase default queue_depth size
- Fix segfault on shutdown
- Merge auditd and audispd code
- Close on execute init_pipe fd (#1587995)
- Breakout audisp syslog plugin to be standalone program
- Create a common internal library to reduce code
- Move all audispd config files under /etc/audit/
- Move audispd.conf settings into auditd.conf
- Add queue depth statistics to internal state dump report
- Add network statistics to internal state dump report
- SIGUSR now also restarts queue processing if its suspended
- Update lookup tables for the 4.18 kernel
- Add auparse_normalizer support for SOFTWARE_UPDATE event
- Add 30-ospp-v42.rules to meet new Common Criteria requirements
- Deprecate enable_krb and replace with transport config opt for remote logging
- Mark netlabel events as simple events so that get processed quicker
- When auditd is reconfiguring, only SIGHUP plugins with valid pid (#1614833)
- In aureport, fix segfault in file report
- Add auparse_normalizer support for labeled networking events
- Fix memory leak in audisp-remote plugin when using krb5 transport. (#1622194)
- In ausearch/auparse, event aging is off by a second
- In ausearch/auparse, correct event ordering to process oldest first
- Migrate auparse python test to python3
- auparse_reset was not clearing everything it should
- Add support for AUDIT_MAC_CALIPSO_ADD, AUDIT_MAC_CALIPSO_DEL events
- In ausearch/report, lightly parse selinux portion of USER_AVC events
- Add bpf syscall command argument interpretation to auparse
- In ausearch/report, limit record size when malformed
- Port af_unix plugin to libev
- In auditd, fix extract_type function for network originating events
- In auditd, calculate right size and location for network originating events
- Make legacy script wait for auditd to terminate (#1643567)
- Treat all network originating events as VER2 so dispatcher doesn't format it
- If an event has a node name make it VER2 so dispatcher doesnt format it
- In audisp-remote do an initial connection attempt (#1625156)
- In auditd, allow expression of space left as a percentage (#1650670)
- On PPC64LE systems, only allow 64 bit rules (#1462178)
- Make some parts of auditd state report optional based on config
- Update to libev-4.25
- Fix ausearch when checkpointing a single file (Burn Alting)
- Fix scripting in 31-privileged.rules wrt filecap (#1662516)
- In ausearch, do not checkpt if stdin is input source
- In libev, remove __cold__ attribute for functions to allow proper hardening
- Add tests to configure.ac for openldap support
- Make systemd support files use /run rather than /var/run (Christian Hesse)
- Fix minor memory leak in auditd kerberos credentials code
- Allow exclude and user filter by executable name (Ondrej Mosnacek)
- Fix auditd regression where keep_logs is limited by rotate_logs 2 file test
- In ausearch/report fix --end to use midnight time instead of now (#1671338)
- Add substitue functions for strndupa &amp; rawmemchr
- Fix memleak in auparse caused by corrected event ordering
- Fix legacy reload script to reload audit rules when daemon is reloaded
- Support for unescaping in trusted messages (Dmitry Voronin)
- In auditd, use standard template for DEAMON events (Richard Guy Briggs)
- In aureport, fix segfault for malformed USER_CMD events
- Add exe field to audit_log_user_command in libaudit
- In auditctl support filter on socket address families (Richard Guy Briggs)
- Deprecate support for Alpha &amp; IA64 processors
- If space_left_action is rotate, allow it every time (#1718444)
- In auparse, drop standalone EOE events
- Add milliseconds column for ausearch extra time csv format
- Fix aureport first event reporting when no start given
- In audisp-remote, add new config item for startup connection errors
- Remove dependency on chkconfig
- Install rules to /usr/share/audit/sample-rules/
- Split up ospp rules to make SCAP scanning easier (#1746018)
- In audisp-syslog, support interpreting records (#1497279)
- Audit USER events now sends msg as name value pair
- Add support for AUDIT_BPF event
- Auditd should not process AUDIT_REPLACE events
- Update syscall tables to the 5.5 kernel
- Improve personality interpretation by using PERS_MASK
- Speedup ausearch/report parsing RAW logging format by caching uid/name lookup
- Change auparse python bindings to shared object (Issue #121)
- Add error messages for watch permissions
- If audit rules file doesn't exist log error message instead of info message
- Revise error message for unmatched options in auditctl
- In audisp-remote, fixup remote endpoint disappearin in ascii format
- Add backlog_wait_time_actual reporting / resetting to auditctl (Max Englander)
- In auditctl, add support for sending a signal to auditd
- Removes audit-fno-common.patch: fixed in upstream
- Removes audit-python3.patch: fixed in upstream</changelog>
  <changelog author="ematsumiya@suse.com" date="1627646400">- Update to version 3.0.3:
  * Dont interpret audit netlink groups unless AUDIT_NLGRP_MAX is defined
  * Add support for AUDIT_RESP_ORIGIN_UNBLOCK_TIMED to ids
  * Change auparse_feed_has_data in auparse to include incomplete events
  * Auditd, stop linking against -lrt
  * Add ProtectHome and RestrictRealtime to auditd.service
  * In auditd, read up to 3 netlink packets in a row
  * In auditd, do not validate path to plugin unless active
  * In auparse, only emit config errors when AUPARSE_DEBUG env variable exists
- use https source urls</changelog>
  <changelog author="meissner@suse.com" date="1629115200">- harden_auditd.service.patch: automatic hardening applied to systemd
  services</changelog>
  <changelog author="ematsumiya@suse.com" date="1631793600">- Change default log_format from ENRICHED to RAW (bsc#1190500):
  * add change-default-log_format.patch (SUSE-specific patch)
- Update to version 3.0.5:
  * In auditd, flush uid/gid caches when user/group added/deleted/modified
  * Fixed various issues when dealing with corrupted logs
  * In auditd, check if log_file is valid before closing handle
- Include fixed from 3.0.4:
  * Apply performance speedups to auparse library
  * Optimize rule loading in auditctl
  * Fix an auparse memory leak caused by glibc-2.33 by replacing realpath
  * Update syscall table to the 5.14 kernel
  * Fixed various issues when dealing with corrupted logs</changelog>
  <changelog author="ematsumiya@suse.com" date="1632139200">- Fix hardened auditd.service (bsc#1181400)
  * add fix-hardened-service.patch
    Make /etc/audit read-write from the service.
    Remove PrivateDevices=true to expose /dev/* to auditd.service.
- Enable stop rules for audit.service (cf. bsc#1190227)
  * add enable-stop-rules.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1634126400">- Create separate service for augenrules (bsc#1191614, bsc#1181400)
  * add create-augenrules-service.patch
  Remove ReadWritePaths=/etc/audit from auditd.service, also removes
  augenrules call from ExecStartPost.
  Create augenrules.service with the ReadWritePaths directive above.
  This makes /etc/audit only accessible by augenrules.service and
  let auditd.service (and daemon) to be sandboxed again.
- Update audit-secondary.spec to accomodate the new service file.</changelog>
  <changelog author="gmbr3@opensuse.org" date="1634299200">- Add CONFIG parameter to %sysusers_generate_pre</changelog>
  <changelog author="gmbr3@opensuse.org" date="1636286400">- Update to version 3.0.6:
  * fixes a segfault on some SELINUX_ERR records
  * makes IPX packet interpretation dependent on the ipx header
    file existing
  * adds b32/b64 support to ausyscall
  * adds support for armv8l
  * fixes auditctl list of syscalls on PPC
  * auditd.service now restarts auditd under some conditions</changelog>
  <changelog author="fvogt@suse.com" date="1638187200">- Use %autosetup
- Don't include sample rules as %doc, they're already installed
  as normal files
- Fix create-augenrules-service.patch:
  * auditd.service needs to require augenrules.service,
    not the other way around
- Fix documentation for enable-stop-rules.patch</changelog>
  <changelog author="dmueller@suse.com" date="1648036800">- add audit-userspace-517-compat.patch</changelog>
  <changelog author="ematsumiya@suse.com" date="1648209600">- Fix unhandled ECONNREFUSED with LDAP environments (bsc#1196645)
  * add libaudit-fix-unhandled-ECONNREFUSED-from-getpwnam-25.patch
- Fix hang in audisp-remote with disk_low_action=suspend (bsc#1196517)
  * add audisp-remote-fix-hang-with-disk_low_action-suspend-.patch</changelog>
  <changelog author="coolo@suse.com" date="1648296000">- Fix buildrequire for openldap2-devel - audit doesn't require the
  (outdated) C++ binding, but the C headers that happen to be pulled
  in by buildrequiring the C++ devel package</changelog>
  <changelog author="jengelh@inai.de" date="1649678400">- Drop buildrequire on C++ compiler.
- Modernize specfile constructs.</changelog>
  <changelog author="ematsumiya@suse.de" date="1686139200">- Check for AF_UNIX unnamed sockets (bsc#1210004)
  * add check-for-AF_UNIX-unnamed-sockets.patch</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100800">- Fix rules not loaded when restarting auditd.service(bsc#1204844)</changelog>
  <changelog author="ematsumiya@suse.de" date="1692100801">- Update audit-secondary.spec: create symbolic link from
  /sbin/audisp-syslog to /usr/sbin/audisp-syslog (bsc#1201519).</changelog>
  <changelog author="ematsumiya@suse.de" date="1706788800">- Fix plugin termination when using systemd service units (bsc#1215377)
  * add auditd.service-fix-plugin-termination.patch</changelog>
</package>
<package pkgid="37465856a6b844fe2d6d6a1e0fbcc78f51ca38b93ebcbf36b37b97c59682b6c4" name="python3-azuremetadata" arch="noarch">
  <version epoch="0" ver="5.1.6" rel="150000.1.26.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Version 5.0.0
- Support new Azure metadata API (bsc#1164818, bsc#1164819)
- Automatically detect root device (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587470400">- Version 5.0.1
- Use lsblk for root device detection (bsc#1169921)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Version 5.1.0
- Produce well-formed JSON and XML output when multiple filters
  are specified (bsc#1170598, bsc#1170599)</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 5.1.2 (bsc#1173357, bsc#1174847)
  + Detect when the VM is running in ASM (Azure Classic) and handle the
    condition to generate the data we are interested in without requiring
    access to the full IMDS available only in ARM instances.
- From version 5.1.1 (bsc#1173238, bsc#1173240)
  + Add --listapis and --api latest support</changelog>
  <changelog author="rjschwei@suse.com" date="1598011200">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="rjschwei@suse.com" date="1598011201">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="jesusbv@suse.com" date="1619006400">- Version 5.1.4 (bsc#1184720, bsc#1172581)
  + Use versions endpoint to list the available versions
  + Add bypass proxy
  + Update way to check classic vms</changelog>
  <changelog author="rjschwei@suse.com" date="1642075200">- Version 5.1.5 (bsc#1194663)
  + Handle lsblk output format change. The json data now contains
    "mountpoints" instead of "mountpoint"</changelog>
  <changelog author="jesus.bv@suse.com" date="1705060800">- Version 5.1.6
  Fix empty list attributes (bsc#1218760)</changelog>
</package>
<package pkgid="30c7b88768824e3ed25070e1931bbc4c239d2f02a8af6a6dda4c4d27eb040d0d" name="python3-azuremetadata" arch="src">
  <version epoch="0" ver="5.1.6" rel="150000.1.26.1"/>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Version 5.0.0
- Support new Azure metadata API (bsc#1164818, bsc#1164819)
- Automatically detect root device (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587470400">- Version 5.0.1
- Use lsblk for root device detection (bsc#1169921)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Version 5.1.0
- Produce well-formed JSON and XML output when multiple filters
  are specified (bsc#1170598, bsc#1170599)</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 5.1.2 (bsc#1173357, bsc#1174847)
  + Detect when the VM is running in ASM (Azure Classic) and handle the
    condition to generate the data we are interested in without requiring
    access to the full IMDS available only in ARM instances.
- From version 5.1.1 (bsc#1173238, bsc#1173240)
  + Add --listapis and --api latest support</changelog>
  <changelog author="rjschwei@suse.com" date="1598011200">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="rjschwei@suse.com" date="1598011201">- Fix provides directive (bsc#1175609, bsc#1175610)
  + The provides directive must set a version or update does not work
    as expected</changelog>
  <changelog author="jesusbv@suse.com" date="1619006400">- Version 5.1.4 (bsc#1184720, bsc#1172581)
  + Use versions endpoint to list the available versions
  + Add bypass proxy
  + Update way to check classic vms</changelog>
  <changelog author="rjschwei@suse.com" date="1642075200">- Version 5.1.5 (bsc#1194663)
  + Handle lsblk output format change. The json data now contains
    "mountpoints" instead of "mountpoint"</changelog>
  <changelog author="jesus.bv@suse.com" date="1705060800">- Version 5.1.6
  Fix empty list attributes (bsc#1218760)</changelog>
</package>
<package pkgid="3ce67a0365c4883a8d18c041cbbbe88e1a72bb948ffa85050b716ffb9a7420aa" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="9751b94424c12ad2b1e550e009a5d83ea6c59454a32ee578f4fa6f16cf4e1979" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="43e29dd98605696ac217beb5fa63cba7784e954d15f142cc6533e1ab4ce3f8e7" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="ad3b1891de41a1651638196268490c0ac17c101c0e7acb4bb173d2dc35580386" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="ce51f61573ba0f7980b6eaf4c9c4cb2b5da3b7649abb4362b2ddb3d51a757511" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="b3c2043f8cb7670c70b1dcacc41ab26527123809352b89cdfc5dda10c897fa29" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="d77abe50f055b5701c4be560ffaa4435ebfd51512b1dead2ca94d27653c93c8f" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="478338586276c18b6971660fb18c82c61397cc40432412bc397277bf5bccef7c" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="fd1cb2e11e3e99460e422980179a7a3963002bca65976ba6e7c1cc60657287c1" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="a3a18afaa9586db7b466ebefd2ee59d195a3ab531dd1a56c86de4fc51697df5a" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="55fcba6d466c2c33c568e63e8508eb995ca383715d11c9e9d77c36a65785c3c3" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="72989513a8d1719213e3f54e813d81c27e9477f9ff5cefe40b5a6936de71ac4f" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="911bb81a0ce4b3791417679bab5bec3fce1e39613da998bd08f93f4515459815" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="66808074f2521133e06e1c3c461129bf7a6b44cd38d8cdb221a9e4bb372b6895" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="72d31e7e18156c013cd12bbae8141ee520d5ab44089ee5510c1ed55528ccea34" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="64bfea3381e3dbcce3f6e12064d47cf905a452b31e9f8f663f55bef8395583cb" name="python3-base" arch="aarch64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="0668d701c3451716164070f166a61b0ec9bd876f8fd45ca5271ba5d1370f85df" name="python3-base" arch="s390x">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="a5771a7b48a7dd45a9732a401fa4c2bfac8a1612aff546fc810b580fc4d971c8" name="python3-base" arch="x86_64">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="7410ea015617352f4f49a364a3a4c73e6d4b81a959bfcea7cb3b8bf41c6c6d6c" name="python3-botocore" arch="noarch">
  <version epoch="0" ver="1.29.89" rel="150200.37.14.1"/>
  <changelog author="dmueller@suse.com" date="1665576000">- drop remove-six.patch, rejected by upstream and breaks
  all dependent projects of botocore</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666008000">- Update to 1.27.91
  * api-change:``mediaconvert``: MediaConvert now supports specifying the minimum percentage of the
    HRD buffer available at the end of each encoded video segment.
- from version 1.27.90
  * api-change:``amplifyuibuilder``: We are releasing the ability for fields to be configured as
    arrays.
  * api-change:``appflow``: With this update, you can choose which Salesforce API is used by Amazon
    AppFlow to transfer data to or from your Salesforce account. You can choose the Salesforce REST API
    or Bulk API 2.0. You can also choose for Amazon AppFlow to pick the API automatically.
  * api-change:``connect``: This release adds support for a secondary email and a mobile number for
    Amazon Connect instance users.
  * api-change:``ds``: This release adds support for describing and updating AWS Managed Microsoft AD
    set up.
  * api-change:``ecs``: Documentation update to address tickets.
  * api-change:``guardduty``: Add UnprocessedDataSources to CreateDetectorResponse which specifies
    the data sources that couldn't be enabled during the CreateDetector request. In addition, update
    documentations.
  * api-change:``iam``: Documentation updates for the AWS Identity and Access Management API
    Reference.
  * api-change:``iotfleetwise``: Documentation update for AWS IoT FleetWise
  * api-change:``medialive``: AWS Elemental MediaLive now supports forwarding SCTE-35 messages
    through the Event Signaling and Management (ESAM) API, and can read those SCTE-35 messages from an
    inactive source.
  * api-change:``mediapackage-vod``: This release adds SPEKE v2 support for MediaPackage VOD. Speke
    v2 is an upgrade to the existing SPEKE API to support multiple encryption keys, based on an
    encryption contract selected by the customer.
  * api-change:``panorama``: Pause and resume camera stream processing with
    SignalApplicationInstanceNodeInstances. Reboot an appliance with CreateJobForDevices. More
    application state information in DescribeApplicationInstance response.
  * api-change:``rds-data``: Doc update to reflect no support for schema parameter on
    BatchExecuteStatement API
  * api-change:``ssm-incidents``: Update RelatedItem enum to support Tasks
  * api-change:``ssm``: Support of AmazonLinux2022 by Patch Manager
  * api-change:``transfer``: This release adds an option for customers to configure workflows that
    are triggered when files are only partially received from a client due to premature session
    disconnect.
  * api-change:``translate``: This release enables customers to specify multiple target languages in
    asynchronous batch translation requests.
  * api-change:``wisdom``: This release updates the GetRecommendations API to include a trigger event
    list for classifying and grouping recommendations.
- from version 1.27.89
  * api-change:``codeguru-reviewer``: Documentation update to replace broken link.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``greengrassv2``: This release adds error status details for deployments and
    components that failed on a device and adds features to improve visibility into component
    installation.
  * api-change:``quicksight``: Amazon QuickSight now supports SecretsManager Secret ARN in place of
    CredentialPair for DataSource creation and update. This release also has some minor documentation
    updates and removes CountryCode as a required parameter in GeoSpatialColumnGroup
- from version 1.27.88
  * api-change:``resiliencehub``: Documentation change for AWS Resilience Hub. Doc-only update to fix
    Documentation layout
- from version 1.27.87
  * api-change:``glue``: This SDK release adds support to sync glue jobs with source control
    provider. Additionally, a new parameter called SourceControlDetails will be added to Job model.
  * api-change:``network-firewall``: StreamExceptionPolicy configures how AWS Network Firewall
    processes traffic when a network connection breaks midstream
  * api-change:``outposts``: This release adds the Asset state information to the ListAssets
    response. The ListAssets request supports filtering on Asset state.
- from version 1.27.86
  * api-change:``connect``: Updated the CreateIntegrationAssociation API to support the CASES_DOMAIN
    IntegrationType.
  * api-change:``connectcases``: This release adds APIs for Amazon Connect Cases. Cases allows your
    agents to quickly track and manage customer issues that require multiple interactions, follow-up
    tasks, and teams in your contact center.  For more information, see
    https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``ec2``: Added EnableNetworkAddressUsageMetrics flag for ModifyVpcAttribute,
    DescribeVpcAttribute APIs.
  * api-change:``ecs``: Documentation updates to address various Amazon ECS tickets.
  * api-change:``s3control``: S3 Object Lambda adds support to allow customers to intercept
    HeadObject and ListObjects requests and introduce their own compute. These requests were previously
    proxied to S3.
  * api-change:``workmail``: This release adds support for impersonation roles in Amazon WorkMail.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666267200">- Remove version constraint for python-pytest in BuildRequires</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1666699200">- Update to 1.28.0
  * feature:Endpoints: Implemented new endpoint ruleset system to dynamically derive endpoints and
    settings for services
  * api-change:``acm-pca``: AWS Private Certificate Authority (AWS Private CA) now offers usage modes
    which are combination of features to address specific use cases.
  * api-change:``batch``: This release adds support for AWS Batch on Amazon EKS.
  * api-change:``datasync``: Added support for self-signed certificates when using object storage
    locations; added BytesCompressed to the TaskExecution response.
  * api-change:``sagemaker``: SageMaker Inference Recommender now supports a new API
    ListInferenceRecommendationJobSteps to return the details of all the benchmark we create for an
    inference recommendation job.
- from version 1.27.96
  * api-change:``cognito-idp``: This release adds a new "DeletionProtection" field to the UserPool in
    Cognito. Application admins can configure this value with either ACTIVE or INACTIVE value. Setting
    this field to ACTIVE will prevent a user pool from accidental deletion.
  * api-change:``sagemaker``: CreateInferenceRecommenderjob API now supports passing endpoint details
    directly, that will help customers to identify the max invocation and max latency they can achieve
    for their model and the associated endpoint along with getting recommendations on other instances.
- from version 1.27.95
  * api-change:``devops-guru``: This release adds information about the resources DevOps Guru is
    analyzing.
  * api-change:``globalaccelerator``: Global Accelerator now supports AddEndpoints and
    RemoveEndpoints operations for standard endpoint groups.
  * api-change:``resiliencehub``: In this release, we are introducing support for regional
    optimization for AWS Resilience Hub applications. It also includes a few documentation updates to
    improve clarity.
  * api-change:``rum``: CloudWatch RUM now supports Extended CloudWatch Metrics with Additional
    Dimensions
- from version 1.27.94
  * api-change:``chime-sdk-messaging``: Documentation updates for Chime Messaging SDK
  * api-change:``cloudtrail``: This release includes support for exporting CloudTrail Lake query
    results to an Amazon S3 bucket.
  * api-change:``config``: This release adds resourceType enums for AppConfig, AppSync, DataSync,
    EC2, EKS, Glue, GuardDuty, SageMaker, ServiceDiscovery, SES, Route53 types.
  * api-change:``connect``: This release adds API support for managing phone numbers that can be used
    across multiple AWS regions through telephony traffic distribution.
  * api-change:``events``: Update events client to latest version
  * api-change:``managedblockchain``: Adding new Accessor APIs for Amazon Managed Blockchain
  * api-change:``s3``: Updates internal logic for constructing API endpoints. We have added
    rule-based endpoints and internal model parameters.
  * api-change:``s3control``: Updates internal logic for constructing API endpoints. We have added
    rule-based endpoints and internal model parameters.
  * api-change:``support-app``: This release adds the RegisterSlackWorkspaceForOrganization API. You
    can use the API to register a Slack workspace for an AWS account that is part of an organization.
  * api-change:``workspaces-web``: WorkSpaces Web now supports user access logging for recording
    session start, stop, and URL navigation.
- from version 1.27.93
  * api-change:``frauddetector``: Documentation Updates for Amazon Fraud Detector
  * api-change:``sagemaker``: This change allows customers to enable data capturing while running a
    batch transform job, and configure monitoring schedule to monitoring the captured data.
  * api-change:``servicediscovery``: Updated the ListNamespaces API to support the NAME and HTTP_NAME
    filters, and the BEGINS_WITH filter condition.
  * api-change:``sesv2``: This release allows subscribers to enable Dedicated IPs (managed) to send
    email via a fully managed dedicated IP experience. It also adds identities' VerificationStatus in
    the response of GetEmailIdentity and ListEmailIdentities APIs, and ImportJobs counts in the
    response of ListImportJobs API.
- from version 1.27.92
  * api-change:``greengrass``: This change allows customers to specify FunctionRuntimeOverride in
    FunctionDefinitionVersion. This configuration can be used if the runtime on the device is different
    from the AWS Lambda runtime specified for that function.
  * api-change:``sagemaker``: This release adds support for C7g, C6g, C6gd, C6gn, M6g, M6gd, R6g, and
    R6gn Graviton instance types in Amazon SageMaker Inference.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667563200">- Update to 1.29.2
  * api-change:``memorydb``: Adding support for r6gd instances for MemoryDB Redis with data tiering.
    In a cluster with data tiering enabled, when available memory capacity is exhausted, the least
    recently used data is automatically tiered to solid state drives for cost-effective capacity
    scaling with minimal performance impact.
  * api-change:``sagemaker``: Amazon SageMaker now supports running training jobs on ml.trn1 instance
    types.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.1
  * api-change:``iotsitewise``: This release adds the ListAssetModelProperties and
    ListAssetProperties APIs. You can list all properties that belong to a single asset model or asset
    using these two new APIs.
  * api-change:``s3control``: S3 on Outposts launches support for Lifecycle configuration for
    Outposts buckets. With S3 Lifecycle configuration, you can mange objects so they are stored cost
    effectively. You can manage objects using size-based rules and specify how many noncurrent versions
    bucket will retain.
  * api-change:``sagemaker``: This release updates Framework model regex for ModelPackage to support
    new Framework version xgboost, sklearn.
  * api-change:``ssm-incidents``: Adds support for tagging replication-set on creation.
- from version 1.29.0
  * feature:Endpoints: Migrate all services to use new AWS Endpoint Resolution framework
  * Enhancement:Endpoints: Discontinued use of `sslCommonName` hosts as detailed in 1.27.0 (see
    `#2705 &lt;https://github.com/boto/botocore/issues/2705&gt;`__ for more info)
  * api-change:``rds``: Relational Database Service - This release adds support for configuring
    Storage Throughput on RDS database instances.
  * api-change:``textract``: Add ocr results in AnalyzeIDResponse as blocks
- from version 1.28.5
  * api-change:``apprunner``: This release adds support for private App Runner services. Services may
    now be configured to be made private and only accessible from a VPC. The changes include a new
    VpcIngressConnection resource and several new and modified APIs.
  * api-change:``connect``: Amazon connect now support a new API DismissUserContact to dismiss or
    remove terminated contacts in Agent CCP
  * api-change:``ec2``: Elastic IP transfer is a new Amazon VPC feature that allows you to transfer
    your Elastic IP addresses from one AWS Account to another.
  * api-change:``iot``: This release adds the Amazon Location action to IoT Rules Engine.
  * api-change:``logs``: SDK release to support tagging for destinations and log groups with
    TagResource. Also supports tag on create with PutDestination.
  * api-change:``sesv2``: This release includes support for interacting with the Virtual
    Deliverability Manager, allowing you to opt in/out of the feature and to retrieve recommendations
    and metric data.
  * api-change:``textract``: This release introduces additional support for 30+ normalized fields
    such as vendor address and currency. It also includes OCR output in the response and accuracy
    improvements for the already supported fields in previous version
- from version 1.28.4
  * api-change:``apprunner``: AWS App Runner adds .NET 6, Go 1, PHP 8.1 and Ruby 3.1 runtimes.
  * api-change:``appstream``: This release includes CertificateBasedAuthProperties in
    CreateDirectoryConfig and UpdateDirectoryConfig.
  * api-change:``cloud9``: Update to the documentation section of the Cloud9 API Reference guide.
  * api-change:``cloudformation``: This release adds more fields to improves visibility of AWS
    CloudFormation StackSets information in following APIs: ListStackInstances, DescribeStackInstance,
    ListStackSetOperationResults, ListStackSetOperations, DescribeStackSetOperation.
  * api-change:``gamesparks``: Add LATEST as a possible GameSDK Version on snapshot
  * api-change:``mediatailor``: This release introduces support for SCTE-35 segmentation descriptor
    messages which can be sent within time signal messages.
- from version 1.28.3
  * api-change:``ec2``: Feature supports the replacement of instance root volume using an updated AMI
    without requiring customers to stop their instance.
  * api-change:``fms``: Add support NetworkFirewall Managed Rule Group Override flag in
    GetViolationDetails API
  * api-change:``glue``: Added support for custom datatypes when using custom csv classifier.
  * api-change:``redshift``: This release clarifies use for the ElasticIp parameter of the
    CreateCluster and RestoreFromClusterSnapshot APIs.
  * api-change:``sagemaker``: This change allows customers to provide a custom entrypoint script for
    the docker container to be run while executing training jobs, and provide custom arguments to the
    entrypoint script.
  * api-change:``wafv2``: This release adds the following: Challenge rule action, to silently verify
    client browsers; rule group rule action override to any valid rule action, not just Count; token
    sharing between protected applications for challenge/CAPTCHA token; targeted rules option for Bot
    Control managed rule group.
- from version 1.28.2
  * api-change:``iam``: Doc only update that corrects instances of CLI not using an entity.
  * api-change:``kafka``: This release adds support for Tiered Storage. UpdateStorage allows you to
    control the Storage Mode for supported storage tiers.
  * api-change:``neptune``: Added a new cluster-level attribute to set the capacity range for Neptune
    Serverless instances.
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports specifying Grid
    Search strategy for tuning jobs, which evaluates all hyperparameter combinations exhaustively based
    on the categorical hyperparameters provided.
- from version 1.28.1
  * api-change:``accessanalyzer``: This release adds support for six new resource types in IAM Access
    Analyzer to help you easily identify public and cross-account access to your AWS resources. Updated
    service API, documentation, and paginators.
  * api-change:``location``: Added new map styles with satellite imagery for map resources using HERE
    as a data provider.
  * api-change:``mediatailor``: This release is a documentation update
  * api-change:``rds``: Relational Database Service - This release adds support for exporting DB
    cluster data to Amazon S3.
  * api-change:``workspaces``: This release adds new enums for supporting Workspaces Core features,
    including creating Manual running mode workspaces, importing regular Workspaces Core images and
    importing g4dn Workspaces Core images.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1668427200">- Update to 1.29.8
  * api-change:``glue``: Added links related to enabling job bookmarks.
  * api-change:``iot``: This release add new api listRelatedResourcesForAuditFinding and new member
    type IssuerCertificates for Iot device device defender Audit.
  * api-change:``license-manager``: AWS License Manager now supports onboarded Management Accounts or
    Delegated Admins to view granted licenses aggregated from all accounts in the organization.
  * api-change:``marketplace-catalog``: Added three new APIs to support tagging and tag-based
    authorization: TagResource, UntagResource, and ListTagsForResource. Added optional parameters to
    the StartChangeSet API to support tagging a resource while making a request to create it.
  * api-change:``rekognition``: Adding support for ImageProperties feature to detect dominant colors
    and image brightness, sharpness, and contrast, inclusion and exclusion filters for labels and label
    categories, new fields to the API response, "aliases" and "categories"
  * api-change:``securityhub``: Documentation updates for Security Hub
  * api-change:``ssm-incidents``: RelatedItems now have an ID field which can be used for referencing
    them else where. Introducing event references in TimelineEvent API and increasing maximum length of
    "eventData" to 12K characters.
- from version 1.29.7
  * api-change:``autoscaling``: This release adds a new price capacity optimized allocation strategy
    for Spot Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling,
    EC2 Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability
    and Spot Instance price.
  * api-change:``ec2``: This release adds a new price capacity optimized allocation strategy for Spot
    Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2
    Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability and
    Spot Instance price.
  * api-change:``ecs``: This release adds support for task scale-in protection with
    updateTaskProtection and getTaskProtection APIs. UpdateTaskProtection API can be used to protect a
    service managed task from being terminated by scale-in events and getTaskProtection API to get the
    scale-in protection status of a task.
  * api-change:``es``: Amazon OpenSearch Service now offers managed VPC endpoints to connect to your
    Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature allows
    you to privately access OpenSearch Service domain without using public IPs or requiring traffic to
    traverse the Internet.
  * api-change:``resource-explorer-2``: Text only updates to some Resource Explorer descriptions.
  * api-change:``scheduler``: AWS introduces the new Amazon EventBridge Scheduler. EventBridge
    Scheduler is a serverless scheduler that allows you to create, run, and manage tasks from one
    central, managed service.
- from version 1.29.6
  * api-change:``connect``: This release adds new fields SignInUrl, UserArn, and UserId to
    GetFederationToken response payload.
  * api-change:``connectcases``: This release adds the ability to disable templates through the
    UpdateTemplate API. Disabling templates prevents customers from creating cases using the template.
    For more information see https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``ec2``: Amazon EC2 Trn1 instances, powered by AWS Trainium chips, are purpose built
    for high-performance deep learning training. u-24tb1.112xlarge and u-18tb1.112xlarge High Memory
    instances are purpose-built to run large in-memory databases.
  * api-change:``groundstation``: This release adds the preview of customer-provided ephemeris
    support for AWS Ground Station, allowing space vehicle owners to provide their own position and
    trajectory information for a satellite.
  * api-change:``mediapackage-vod``: This release adds "IncludeIframeOnlyStream" for Dash endpoints.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.5
  * api-change:``acm``: Support added for requesting elliptic curve certificate key algorithm types
    P-256 (EC_prime256v1) and P-384 (EC_secp384r1).
  * api-change:``billingconductor``: This release adds the Recurring Custom Line Item feature along
    with a new API ListCustomLineItemVersions.
  * api-change:``ec2``: This release enables sharing of EC2 Placement Groups across accounts and
    within AWS Organizations using Resource Access Manager
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
  * api-change:``fms``: AWS Firewall Manager now supports importing existing AWS Network Firewall
    firewalls into Firewall Manager policies.
  * api-change:``lightsail``: This release adds support for Amazon Lightsail to automate the
    delegation of domains registered through Amazon Route 53 to Lightsail DNS management and to
    automate record creation for DNS validation of Lightsail SSL/TLS certificates.
  * api-change:``opensearch``: Amazon OpenSearch Service now offers managed VPC endpoints to connect
    to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature
    allows you to privately access OpenSearch Service domain without using public IPs or requiring
    traffic to traverse the Internet.
  * api-change:``polly``: Amazon Polly adds new voices: Elin (sv-SE), Ida (nb-NO), Laura (nl-NL) and
    Suvi (fi-FI). They are available as neural voices only.
  * api-change:``resource-explorer-2``: This is the initial SDK release for AWS Resource Explorer.
    AWS Resource Explorer lets your users search for and discover your AWS resources across the AWS
    Regions in your account.
  * api-change:``route53``: Amazon Route 53 now supports the Europe (Zurich) Region (eu-central-2)
    for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
- from version 1.29.4
  * api-change:``athena``: Adds support for using Query Result Reuse
  * api-change:``autoscaling``: This release adds support for two new attributes for attribute-based
    instance type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
  * api-change:``cloudtrail``: This release includes support for configuring a delegated
    administrator to manage an AWS Organizations organization CloudTrail trails and event data stores,
    and AWS Key Management Service encryption of CloudTrail Lake event data stores.
  * api-change:``ec2``: This release adds support for two new attributes for attribute-based instance
    type selection - NetworkBandwidthGbps and AllowedInstanceTypes.
  * api-change:``elasticache``: Added support for IPv6 and dual stack for Memcached and Redis
    clusters. Customers can now launch new Redis and Memcached clusters with IPv6 and dual stack
    networking support.
  * api-change:``lexv2-models``: Update lexv2-models client to latest version
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for setting the
    SDR reference white point for HDR conversions and conversion of HDR10 to DolbyVision without
    mastering metadata.
  * api-change:``ssm``: This release includes support for applying a CloudWatch alarm to multi
    account multi region Systems Manager Automation
  * api-change:``wafv2``: The geo match statement now adds labels for country and region. You can
    match requests at the region level by combining a geo match statement with label match statements.
  * api-change:``wellarchitected``: This release adds support for integrations with AWS Trusted
    Advisor and AWS Service Catalog AppRegistry to improve workload discovery and speed up your
    workload reviews.
  * api-change:``workspaces``: This release adds protocols attribute to workspaces properties data
    type. This enables customers to migrate workspaces from PC over IP (PCoIP) to WorkSpaces Streaming
    Protocol (WSP) using create and modify workspaces public APIs.
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- from version 1.29.3
  * api-change:``ec2``: This release adds API support for the recipient of an AMI account share to
    remove shared AMI launch permissions.
  * api-change:``emr-containers``: Adding support for Job templates. Job templates allow you to
    create and store templates to configure Spark applications parameters. This helps you ensure
    consistent settings across applications by reusing and enforcing configuration overrides in data
    pipelines.
  * api-change:``logs``: Doc-only update for bug fixes and support of export to buckets encrypted
    with SSE-KMS
  * api-change:``endpoint-rules``: Update endpoint-rules client to latest version
- Add psuffix on the name to have the multibuild flavor packages identify themselves by a different name</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669982400">- Update to 1.29.21
  * api-change:``codecatalyst``: This release adds operations that support customers using the AWS
    Toolkits and Amazon CodeCatalyst, a unified software development service that helps developers
    develop, deploy, and maintain applications in the cloud. For more information, see the
    documentation.
  * api-change:``comprehend``: Comprehend now supports semi-structured documents (such as PDF files
    or image files) as inputs for custom analysis using the synchronous APIs (ClassifyDocument and
    DetectEntities).
  * api-change:``gamelift``: GameLift introduces a new feature, GameLift Anywhere. GameLift Anywhere
    allows you to integrate your own compute resources with GameLift. You can also use GameLift
    Anywhere to iteratively test your game servers without uploading the build to GameLift for every
    iteration.
  * api-change:``pipes``: AWS introduces new Amazon EventBridge Pipes which allow you to connect
    sources (SQS, Kinesis, DDB, Kafka, MQ) to Targets (14+ EventBridge Targets) without any code, with
    filtering, batching, input transformation, and an optional Enrichment stage (Lambda, StepFunctions,
    ApiGateway, ApiDestinations)
  * api-change:``stepfunctions``: Update stepfunctions client to latest version
- from version 1.29.20
  * api-change:``accessanalyzer``: This release adds support for S3 cross account access points. IAM
    Access Analyzer will now produce public or cross account findings when it detects bucket delegation
    to external account access points.
  * api-change:``athena``: This release includes support for using Apache Spark in Amazon Athena.
  * api-change:``dataexchange``: This release enables data providers to license direct access to data
    in their Amazon S3 buckets or AWS Lake Formation data lakes through AWS Data Exchange. Subscribers
    get read-only access to the data and can use it in downstream AWS services, like Amazon Athena,
    without creating or managing copies.
  * api-change:``docdb-elastic``: Launched Amazon DocumentDB Elastic Clusters. You can now use the
    SDK to create, list, update and delete Amazon DocumentDB Elastic Cluster resources
  * api-change:``glue``: This release adds support for AWS Glue Data Quality, which helps you
    evaluate and monitor the quality of your data and includes the API for creating, deleting, or
    updating data quality rulesets, runs and evaluations.
  * api-change:``s3control``: Amazon S3 now supports cross-account access points. S3 bucket owners
    can now allow trusted AWS accounts to create access points associated with their bucket.
  * api-change:``sagemaker-geospatial``: This release provides Amazon SageMaker geospatial APIs to
    build, train, deploy and visualize geospatial models.
  * api-change:``sagemaker``: Added Models as part of the Search API. Added Model shadow deployments
    in realtime inference, and shadow testing in managed inference. Added support for shared spaces,
    geospatial APIs, Model Cards, AutoMLJobStep in pipelines, Git repositories on user profiles and
    domains, Model sharing in Jumpstart.
- from version 1.29.19
  * api-change:``ec2``: This release adds support for AWS Verified Access and the Hpc6id Amazon EC2
    compute optimized instance type, which features 3rd generation Intel Xeon Scalable processors.
  * api-change:``firehose``: Allow support for the Serverless offering for Amazon OpenSearch Service
    as a Kinesis Data Firehose delivery destination.
  * api-change:``kms``: AWS KMS introduces the External Key Store (XKS), a new feature for customers
    who want to protect their data with encryption keys stored in an external key management system
    under their control.
  * api-change:``omics``: Amazon Omics is a new, purpose-built service that can be used by healthcare
    and life science organizations to store, query, and analyze omics data. The insights from that data
    can be used to accelerate scientific discoveries and improve healthcare.
  * api-change:``opensearchserverless``: Publish SDK for Amazon OpenSearch Serverless
  * api-change:``securitylake``: Amazon Security Lake automatically centralizes security data from
    cloud, on-premises, and custom sources into a purpose-built data lake stored in your account.
    Security Lake makes it easier to analyze security data, so you can improve the protection of your
    workloads, applications, and data
  * api-change:``simspaceweaver``: AWS SimSpace Weaver is a new service that helps customers build
    spatial simulations at new levels of scale - resulting in virtual worlds with millions of dynamic
    entities. See the AWS SimSpace Weaver developer guide for more details on how to get started.
    https://docs.aws.amazon.com/simspaceweaver
- from version 1.29.18
  * api-change:``arc-zonal-shift``: Amazon Route 53 Application Recovery Controller Zonal Shift is a
    new service that makes it easy to shift traffic away from an Availability Zone in a Region. See the
    developer guide for more information:
    https://docs.aws.amazon.com/r53recovery/latest/dg/what-is-route53-recovery.html
  * api-change:``compute-optimizer``: Adds support for a new recommendation preference that makes it
    possible for customers to optimize their EC2 recommendations by utilizing an external metrics
    ingestion service to provide metrics.
  * api-change:``config``: With this release, you can use AWS Config to evaluate your resources for
    compliance with Config rules before they are created or updated. Using Config rules in proactive
    mode enables you to test and build compliant resource templates or check resource configurations at
    the time they are provisioned.
  * api-change:``ec2``: Introduces ENA Express, which uses AWS SRD and dynamic routing to increase
    throughput and minimize latency, adds support for trust relationships between Reachability Analyzer
    and AWS Organizations to enable cross-account analysis, and adds support for Infrastructure
    Performance metric subscriptions.
  * api-change:``eks``: Adds support for additional EKS add-ons metadata and filtering fields
  * api-change:``fsx``: This release adds support for 4GB/s / 160K PIOPS FSx for ONTAP file systems
    and 10GB/s / 350K PIOPS FSx for OpenZFS file systems (Single_AZ_2). For FSx for ONTAP, this also
    adds support for DP volumes, snapshot policy, copy tags to backups, and Multi-AZ route table
    updates.
  * api-change:``glue``: This release allows the creation of Custom Visual Transforms (Dynamic
    Transforms) to be created via AWS Glue CLI/SDK.
  * api-change:``inspector2``: This release adds support for Inspector to scan AWS Lambda.
  * api-change:``lambda``: Adds support for Lambda SnapStart, which helps improve the startup
    performance of functions. Customers can now manage SnapStart based functions via CreateFunction and
    UpdateFunctionConfiguration APIs
  * api-change:``license-manager-user-subscriptions``: AWS now offers fully-compliant,
    Amazon-provided licenses for Microsoft Office Professional Plus 2021 Amazon Machine Images (AMIs)
    on Amazon EC2. These AMIs are now available on the Amazon EC2 console and on AWS Marketplace to
    launch instances on-demand without any long-term licensing commitments.
  * api-change:``macie2``: Added support for configuring Macie to continually sample objects from S3
    buckets and inspect them for sensitive data. Results appear in statistics, findings, and other data
    that Macie provides.
  * api-change:``quicksight``: This release adds new Describe APIs and updates Create and Update APIs
    to support the data model for Dashboards, Analyses, and Templates.
  * api-change:``s3control``: Added two new APIs to support Amazon S3 Multi-Region Access Point
    failover controls: GetMultiRegionAccessPointRoutes and SubmitMultiRegionAccessPointRoutes. The
    failover control APIs are supported in the following Regions: us-east-1, us-west-2, eu-west-1,
    ap-southeast-2, and ap-northeast-1.
  * api-change:``securityhub``: Adding StandardsManagedBy field to DescribeStandards API response
- from version 1.29.17
  * api-change:``backup``: AWS Backup introduces support for legal hold and application stack
    backups. AWS Backup Audit Manager introduces support for cross-Region, cross-account reports.
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``drs``: Non breaking changes to existing APIs, and additional APIs added to support
    in-AWS failing back using AWS Elastic Disaster Recovery.
  * api-change:``ecs``: This release adds support for ECS Service Connect, a new capability that
    simplifies writing and operating resilient distributed applications. This release updates the
    TaskDefinition, Cluster, Service mutation APIs with Service connect constructs and also adds a new
    ListServicesByNamespace API.
  * api-change:``efs``: Update efs client to latest version
  * api-change:``iot-data``: This release adds support for MQTT5 properties to AWS IoT HTTP Publish
    API.
  * api-change:``iot``: Job scheduling enables the scheduled rollout of a Job with start and end
    times and a customizable end behavior when end time is reached. This is available for continuous
    and snapshot jobs. Added support for MQTT5 properties to AWS IoT TopicRule Republish Action.
  * api-change:``iotwireless``: This release includes a new feature for customers to calculate the
    position of their devices by adding three new APIs: UpdateResourcePosition, GetResourcePosition,
    and GetPositionEstimate.
  * api-change:``kendra``: Amazon Kendra now supports preview of table information from HTML tables
    in the search results. The most relevant cells with their corresponding rows, columns are displayed
    as a preview in the search result. The most relevant table cell or cells are also highlighted in
    table preview.
  * api-change:``logs``: Updates to support CloudWatch Logs data protection and CloudWatch
    cross-account observability
  * api-change:``mgn``: This release adds support for Application and Wave management. We also now
    support custom post-launch actions.
  * api-change:``oam``: Amazon CloudWatch Observability Access Manager is a new service that allows
    configuration of the CloudWatch cross-account observability feature.
  * api-change:``organizations``: This release introduces delegated administrator for AWS
    Organizations, a new feature to help you delegate the management of your Organizations policies,
    enabling you to govern your AWS organization in a decentralized way. You can now allow member
    accounts to manage Organizations policies.
  * api-change:``rds``: This release enables new Aurora and RDS feature called Blue/Green Deployments
    that makes updates to databases safer, simpler and faster.
  * api-change:``textract``: This release adds support for classifying and splitting lending
    documents by type, and extracting information by using the Analyze Lending APIs. This release also
    includes support for summarized information of the processed lending document package, in addition
    to per document results.
  * api-change:``transcribe``: This release adds support for 'inputType' for post-call and real-time
    (streaming) Call Analytics within Amazon Transcribe.
- from version 1.29.16
  * api-change:``grafana``: This release includes support for configuring a Grafana workspace to
    connect to a datasource within a VPC as well as new APIs for configuring Grafana settings.
  * api-change:``rbin``: This release adds support for Rule Lock for Recycle Bin, which allows you to
    lock retention rules so that they can no longer be modified or deleted.
- from version 1.29.15
  * bugfix:Endpoints: Resolve endpoint with default partition when no region is set
  * bugfix:s3: fixes missing x-amz-content-sha256 header for s3 object lambda
  * api-change:``appflow``: Adding support for Amazon AppFlow to transfer the data to Amazon Redshift
    databases through Amazon Redshift Data API service. This feature will support the Redshift
    destination connector on both public and private accessible Amazon Redshift Clusters and Amazon
    Redshift Serverless.
  * api-change:``kinesisanalyticsv2``: Support for Apache Flink 1.15 in Kinesis Data Analytics.
- from version 1.29.14
  * api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Hyderabad) Region
    (ap-south-2) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
    region.
- from version 1.29.13
  * api-change:``appflow``: AppFlow provides a new API called UpdateConnectorRegistration to update a
    custom connector that customers have previously registered. With this API, customers no longer need
    to unregister and then register a connector to make an update.
  * api-change:``auditmanager``: This release introduces a new feature for Audit Manager: Evidence
    finder. You can now use evidence finder to quickly query your evidence, and add the matching
    evidence results to an assessment report.
  * api-change:``chime-sdk-voice``: Amazon Chime Voice Connector, Voice Connector Group and PSTN
    Audio Service APIs are now available in the Amazon Chime SDK Voice namespace. See
    https://docs.aws.amazon.com/chime-sdk/latest/dg/sdk-available-regions.html for more details.
  * api-change:``cloudfront``: CloudFront API support for staging distributions and associated
    traffic management policies.
  * api-change:``connect``: Added AllowedAccessControlTags and TagRestrictedResource for Tag Based
    Access Control on Amazon Connect Webpage
  * api-change:``dynamodb``: Updated minor fixes for DynamoDB documentation.
  * api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
  * api-change:``ec2``: This release adds support for copying an Amazon Machine Image's tags when
    copying an AMI.
  * api-change:``glue``: AWSGlue Crawler - Adding support for Table and Column level Comments with
    database level datatypes for JDBC based crawler.
  * api-change:``iot-roborunner``: AWS IoT RoboRunner is a new service that makes it easy to build
    applications that help multi-vendor robots work together seamlessly. See the IoT RoboRunner
    developer guide for more details on getting started.
    https://docs.aws.amazon.com/iotroborunner/latest/dev/iotroborunner-welcome.html
  * api-change:``quicksight``: This release adds the following: 1) Asset management for centralized
    assets governance 2) QuickSight Q now supports public embedding 3) New Termination protection flag
    to mitigate accidental deletes 4) Athena data sources now accept a custom IAM role 5) QuickSight
    supports connectivity to Databricks
  * api-change:``sagemaker``: Added DisableProfiler flag as a new field in ProfilerConfig
  * api-change:``servicecatalog``: This release 1. adds support for Principal Name Sharing with
    Service Catalog portfolio sharing. 2. Introduces repo sourced products which are created and
    managed with existing SC APIs. These products are synced to external repos and auto create new
    product versions based on changes in the repo.
  * api-change:``ssm-sap``: AWS Systems Manager for SAP provides simplified operations and management
    of SAP applications such as SAP HANA. With this release, SAP customers and partners can automate
    and simplify their SAP system administration tasks such as backup/restore of SAP HANA.
  * api-change:``stepfunctions``: Update stepfunctions client to latest version
  * api-change:``transfer``: Adds a NONE encryption algorithm type to AS2 connectors, providing
    support for skipping encryption of the AS2 message body when a HTTPS URL is also specified.
- from version 1.29.12
  * api-change:``amplify``: Adds a new value (WEB_COMPUTE) to the Platform enum that allows customers
    to create Amplify Apps with Server-Side Rendering support.
  * api-change:``appflow``: AppFlow simplifies the preparation and cataloging of SaaS data into the
    AWS Glue Data Catalog where your data can be discovered and accessed by AWS analytics and ML
    services. AppFlow now also supports data field partitioning and file size optimization to improve
    query performance and reduce cost.
  * api-change:``appsync``: This release introduces the APPSYNC_JS runtime, and adds support for
    JavaScript in AppSync functions and AppSync pipeline resolvers.
  * api-change:``dms``: Adds support for Internet Protocol Version 6 (IPv6) on DMS Replication
    Instances
  * api-change:``ec2``: This release adds a new optional parameter "privateIpAddress" for the
    CreateNatGateway API. PrivateIPAddress will allow customers to select a custom Private IPv4 address
    instead of having it be auto-assigned.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``emr-serverless``: Adds support for AWS Graviton2 based applications. You can now
    select CPU architecture when creating new applications or updating existing ones.
  * api-change:``ivschat``: Adds LoggingConfiguration APIs for IVS Chat - a feature that allows
    customers to store and record sent messages in a chat room to S3 buckets, CloudWatch logs, or
    Kinesis firehose.
  * api-change:``lambda``: Add Node 18 (nodejs18.x) support to AWS Lambda.
  * api-change:``personalize``: This release provides support for creation and use of metric
    attributions in AWS Personalize
  * api-change:``polly``: Add two new neural voices - Ola (pl-PL) and Hala (ar-AE).
  * api-change:``rum``: CloudWatch RUM now supports custom events. To use custom events, create an
    app monitor or update an app monitor with CustomEvent Status as ENABLED.
  * api-change:``s3control``: Added 34 new S3 Storage Lens metrics to support additional customer use
    cases.
  * api-change:``secretsmanager``: Documentation updates for Secrets Manager.
  * api-change:``securityhub``: Added SourceLayerArn and SourceLayerHash field for security findings.
    Updated AwsLambdaFunction Resource detail
  * api-change:``servicecatalog-appregistry``: This release adds support for tagged resource
    associations, which allows you to associate a group of resources with a defined resource tag key
    and value to the application.
  * api-change:``sts``: Documentation updates for AWS Security Token Service.
  * api-change:``textract``: This release adds support for specifying and extracting information from
    documents using the Signatures feature within Analyze Document API
  * api-change:``workspaces``: The release introduces CreateStandbyWorkspaces, an API that allows you
    to create standby WorkSpaces associated with a primary WorkSpace in another Region.
    DescribeWorkspaces now includes related WorkSpaces properties. DescribeWorkspaceBundles and
    CreateWorkspaceBundle now return more bundle details.
- from version 1.29.11
  * api-change:``batch``: Documentation updates related to Batch on EKS
  * api-change:``billingconductor``: This release adds a new feature BillingEntity pricing rule.
  * api-change:``cloudformation``: Added UnsupportedTarget HandlerErrorCode for use with CFN Resource
    Hooks
  * api-change:``comprehendmedical``: This release supports new set of entities and traits. It also
    adds new category (BEHAVIORAL_ENVIRONMENTAL_SOCIAL).
  * api-change:``connect``: This release adds a new MonitorContact API for initiating monitoring of
    ongoing Voice and Chat contacts.
  * api-change:``eks``: Adds support for customer-provided placement groups for Kubernetes control
    plane instances when creating local EKS clusters on Outposts
  * api-change:``elasticache``: for Redis now supports AWS Identity and Access Management
    authentication access to Redis clusters starting with redis-engine version 7.0
  * api-change:``iottwinmaker``: This release adds the following: 1) ExecuteQuery API allows users to
    query their AWS IoT TwinMaker Knowledge Graph 2) Pricing plan APIs allow users to configure and
    manage their pricing mode 3) Support for property groups and tabular property values in existing
    AWS IoT TwinMaker APIs.
  * api-change:``personalize-events``: This release provides support for creation and use of metric
    attributions in AWS Personalize
  * api-change:``proton``: Add support for sorting and filtering in ListServiceInstances
  * api-change:``rds``: This release adds support for container databases (CDBs) to Amazon RDS Custom
    for Oracle. A CDB contains one PDB at creation. You can add more PDBs using Oracle SQL. You can
    also customize your database installation by setting the Oracle base, Oracle home, and the OS user
    name and group.
  * api-change:``ssm-incidents``: Add support for PagerDuty integrations on ResponsePlan,
    IncidentRecord, and RelatedItem APIs
  * api-change:``ssm``: This release adds support for cross account access in CreateOpsItem,
    UpdateOpsItem and GetOpsItem. It introduces new APIs to setup resource policies for SSM resources:
    PutResourcePolicy, GetResourcePolicies and DeleteResourcePolicy.
  * api-change:``transfer``: Allow additional operations to throw ThrottlingException
  * api-change:``xray``: This release adds new APIs - PutResourcePolicy, DeleteResourcePolicy,
    ListResourcePolicies for supporting resource based policies for AWS X-Ray.
- from version 1.29.10
  * bugfix:s3: fixes missing x-amz-content-sha256 header for s3 on outpost
  * enhancement:sso: Add support for loading sso-session profiles from the aws config
  * api-change:``connect``: This release updates the APIs: UpdateInstanceAttribute,
    DescribeInstanceAttribute, and ListInstanceAttributes. You can use it to programmatically
    enable/disable enhanced contact monitoring using attribute type ENHANCED_CONTACT_MONITORING on the
    specified Amazon Connect instance.
  * api-change:``greengrassv2``: Adds new parent target ARN paramater to CreateDeployment,
    GetDeployment, and ListDeployments APIs for the new subdeployments feature.
  * api-change:``route53``: Amazon Route 53 now supports the Europe (Spain) Region (eu-south-2) for
    latency records, geoproximity records, and private DNS for Amazon VPCs in that region.
  * api-change:``workspaces``: This release introduces ModifyCertificateBasedAuthProperties, a new
    API that allows control of certificate-based auth properties associated with a WorkSpaces
    directory. The DescribeWorkspaceDirectories API will now additionally return certificate-based auth
    properties in its responses.
- from version 1.29.9
  * api-change:``customer-profiles``: This release enhances the SearchProfiles API by providing
    functionality to search for profiles using multiple keys and logical operators.
  * api-change:``lakeformation``: This release adds a new parameter "Parameters" in the
    DataLakeSettings.
  * api-change:``managedblockchain``: Updating the API docs data type: NetworkEthereumAttributes, and
    the operations DeleteNode, and CreateNode to also include the supported Goerli network.
  * api-change:``proton``: Add support for CodeBuild Provisioning
  * api-change:``rds``: This release adds support for restoring an RDS Multi-AZ DB cluster snapshot
    to a Single-AZ deployment or a Multi-AZ DB instance deployment.
  * api-change:``workdocs``: Added 2 new document related operations, DeleteDocumentVersion and
    RestoreDocumentVersions.
  * api-change:``xray``: This release enhances GetServiceGraph API to support new type of edge to
    represent links between SQS and Lambda in event-driven applications.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1670587200">- Update to 1.29.26
  * enhancement:Endpoint Provider Standard Library: Correct spelling of 'library' in
    ``StandardLibrary`` class
  * api-change:``autoscaling``: Adds support for metric math for target tracking scaling policies,
    saving you the cost and effort of publishing a custom metric to CloudWatch. Also adds support for
    VPC Lattice by adding the Attach/Detach/DescribeTrafficSources APIs and a new health check type to
    the CreateAutoScalingGroup API.
  * api-change:``iottwinmaker``: This release adds the following new features: 1) New APIs for
    managing a continuous sync of assets and asset models from AWS IoT SiteWise. 2) Support user
    friendly names for component types (ComponentTypeName) and properties (DisplayName).
  * api-change:``migrationhubstrategy``: This release adds known application filtering, server
    selection for assessments, support for potential recommendations, and indications for configuration
    and assessment status. For more information, see the AWS Migration Hub documentation at
    https://docs.aws.amazon.com/migrationhub/index.html
- from version 1.29.25
  * api-change:``ce``: This release adds the LinkedAccountName field to the GetAnomalies API response
    under RootCause
  * api-change:``cloudfront``: Introducing UpdateDistributionWithStagingConfig that can be used to
    promote the staging configuration to the production.
  * api-change:``eks``: Adds support for EKS add-ons configurationValues fields and
    DescribeAddonConfiguration function
  * api-change:``kms``: Updated examples and exceptions for External Key Store (XKS).
- from version 1.29.24
  * api-change:``billingconductor``: This release adds the Tiering Pricing Rule feature.
  * api-change:``connect``: This release provides APIs that enable you to programmatically manage
    rules for Contact Lens conversational analytics and third party applications. For more information,
    see   https://docs.aws.amazon.com/connect/latest/APIReference/rules-api.html
  * api-change:``dynamodb``: Endpoint Ruleset update: Use http instead of https for the "local"
    region.
  * api-change:``dynamodbstreams``: Update dynamodbstreams client to latest version
  * api-change:``rds``: This release adds the BlueGreenDeploymentNotFoundFault to the
    AddTagsToResource, ListTagsForResource, and RemoveTagsFromResource operations.
  * api-change:``sagemaker-featurestore-runtime``: For online + offline Feature Groups, added ability
    to target PutRecord and DeleteRecord actions to only online store, or only offline store. If target
    store parameter is not specified, actions will apply to both stores.
- from version 1.29.23
  * api-change:``ce``: This release introduces two new APIs that offer a 1-click experience to
    refresh Savings Plans recommendations. The two APIs are
    StartSavingsPlansPurchaseRecommendationGeneration and
    ListSavingsPlansPurchaseRecommendationGeneration.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``ivschat``: Adds PendingVerification error type to messaging APIs to block the
    resource usage for accounts identified as being fraudulent.
  * api-change:``rds``: This release adds the InvalidDBInstanceStateFault to the
    RestoreDBClusterFromSnapshot operation.
  * api-change:``transcribe``: Amazon Transcribe now supports creating custom language models in the
    following languages: Japanese (ja-JP) and German (de-DE).
- from version 1.29.22
  * api-change:``appsync``: Fixes the URI for the evaluatecode endpoint to include the /v1 prefix
    (ie. "/v1/dataplane-evaluatecode").
  * api-change:``ecs``: Documentation updates for Amazon ECS
  * api-change:``fms``: AWS Firewall Manager now supports Fortigate Cloud Native Firewall as a
    Service as a third-party policy type.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for
    configurable ID3 eMSG box attributes and the ability to signal them with InbandEventStream tags in
    DASH and CMAF outputs.
  * api-change:``medialive``: Updates to Event Signaling and Management (ESAM) API and documentation.
  * api-change:``polly``: Add language code for Finnish (fi-FI)
  * api-change:``proton``: CreateEnvironmentAccountConnection RoleArn input is now optional
  * api-change:``redshift-serverless``: Add Table Level Restore operations for Amazon Redshift
    Serverless. Add multi-port support for Amazon Redshift Serverless endpoints. Add Tagging support to
    Snapshots and Recovery Points in Amazon Redshift Serverless.
  * api-change:``sns``: This release adds the message payload-filtering feature to the SNS Subscribe,
    SetSubscriptionAttributes, and GetSubscriptionAttributes API actions</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1672660800">- Update to 1.29.41
  * api-change:``cloudfront``: Extend response headers policy to support removing headers from viewer
    responses
  * api-change:``iotfleetwise``: Update documentation - correct the epoch constant value of default
    value for expiryTime field in CreateCampaign request.
- from version 1.29.40
  * api-change:``apigateway``: Documentation updates for Amazon API Gateway
  * api-change:``emr``: Update emr client to latest version
  * api-change:``secretsmanager``: Added owning service filter, include planned deletion flag, and
    next rotation date response parameter in ListSecrets.
  * api-change:``wisdom``: This release extends Wisdom CreateContent and StartContentUpload APIs to
    support PDF and MicrosoftWord docx document uploading.
- from version 1.29.39
  * api-change:``elasticache``: This release allows you to modify the encryption in transit setting,
    for existing Redis clusters. You can now change the TLS configuration of your Redis clusters
    without the need to re-build or re-provision the clusters or impact application availability.
  * api-change:``network-firewall``: AWS Network Firewall now provides status messages for firewalls
    to help you troubleshoot when your endpoint fails.
  * api-change:``rds``: This release adds support for Custom Engine Version (CEV) on RDS Custom SQL
    Server.
  * api-change:``route53-recovery-control-config``: Added support for Python paginators in the
    route53-recovery-control-config List* APIs.
- from version 1.29.38
  * api-change:``memorydb``: This release adds support for MemoryDB Reserved nodes which provides a
    significant discount compared to on-demand node pricing. Reserved nodes are not physical nodes, but
    rather a billing discount applied to the use of on-demand nodes in your account.
  * api-change:``transfer``: Add additional operations to throw ThrottlingExceptions
- from version 1.29.37
  * api-change:``connect``: Support for Routing Profile filter, SortCriteria, and grouping by Routing
    Profiles for GetCurrentMetricData API. Support for RoutingProfiles, UserHierarchyGroups, and Agents
    as filters, NextStatus and AgentStatusName for GetCurrentUserData. Adds ApproximateTotalCount to
    both APIs.
  * api-change:``connectparticipant``: Amazon Connect Chat introduces the Message Receipts feature.
    This feature allows agents and customers to receive message delivered and read receipts after they
    send a chat message.
  * api-change:``detective``: This release adds a missed AccessDeniedException type to several
    endpoints.
  * api-change:``fsx``: Fix a bug where a recent release might break certain existing SDKs.
  * api-change:``inspector2``: Amazon Inspector adds support for scanning NodeJS 18.x and Go 1.x AWS
    Lambda function runtimes.
- from version 1.29.36
  * api-change:``compute-optimizer``: This release enables AWS Compute Optimizer to analyze and
    generate optimization recommendations for ecs services running on Fargate.
  * api-change:``connect``: Amazon Connect Chat introduces the Idle Participant/Autodisconnect
    feature, which allows users to set timeouts relating to the activity of chat participants, using
    the new UpdateParticipantRoleConfig API.
  * api-change:``iotdeviceadvisor``: This release adds the following new features: 1) Documentation
    updates for IoT Device Advisor APIs. 2) Updated required request parameters for IoT Device Advisor
    APIs. 3) Added new service feature: ability to provide the test endpoint when customer executing
    the StartSuiteRun API.
  * api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
    stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
    processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
    as well as media ingestion to the cloud.
  * api-change:``rds``: Add support for managing master user password in AWS Secrets Manager for the
    DBInstance and DBCluster.
  * api-change:``secretsmanager``: Documentation updates for Secrets Manager
- from version 1.29.35
  * api-change:``connect``: Amazon Connect Chat now allows for JSON (application/json) message types
    to be sent as part of the initial message in the StartChatContact API.
  * api-change:``connectparticipant``: Amazon Connect Chat now allows for JSON (application/json)
    message types to be sent in the SendMessage API.
  * api-change:``license-manager-linux-subscriptions``: AWS License Manager now offers cross-region,
    cross-account tracking of commercial Linux subscriptions on AWS. This includes subscriptions
    purchased as part of EC2 subscription-included AMIs, on the AWS Marketplace, or brought to AWS via
    Red Hat Cloud Access Program.
  * api-change:``macie2``: This release adds support for analyzing Amazon S3 objects that use the S3
    Glacier Instant Retrieval (Glacier_IR) storage class.
  * api-change:``sagemaker``: This release enables adding RStudio Workbench support to an existing
    Amazon SageMaker Studio domain. It allows setting your RStudio on SageMaker environment
    configuration parameters and also updating the RStudioConnectUrl and RStudioPackageManagerUrl
    parameters for existing domains
  * api-change:``scheduler``: Updated the ListSchedules and ListScheduleGroups APIs to allow the
    NamePrefix field to start with a number. Updated the validation for executionRole field to support
    any role name.
  * api-change:``ssm``: Doc-only updates for December 2022.
  * api-change:``support``: Documentation updates for the AWS Support API
  * api-change:``transfer``: This release adds support for Decrypt as a workflow step type.
- from version 1.29.34
  * api-change:``batch``: Adds isCancelled and isTerminated to DescribeJobs response.
  * api-change:``ec2``: Adds support for pagination in the EC2 DescribeImages API.
  * api-change:``lookoutequipment``: This release adds support for listing inference schedulers by
    status.
  * api-change:``medialive``: This release adds support for two new features to AWS Elemental
    MediaLive. First, you can now burn-in timecodes to your MediaLive outputs. Second, we now now
    support the ability to decode Dolby E audio when it comes in on an input.
  * api-change:``nimble``: Amazon Nimble Studio now supports configuring session storage volumes and
    persistence, as well as backup and restore sessions through launch profiles.
  * api-change:``resource-explorer-2``: Documentation updates for AWS Resource Explorer.
  * api-change:``route53domains``: Use Route 53 domain APIs to change owner, create/delete DS record,
    modify IPS tag, resend authorization. New: AssociateDelegationSignerToDomain,
    DisassociateDelegationSignerFromDomain, PushDomain, ResendOperationAuthorization. Updated:
    UpdateDomainContact, ListOperations, CheckDomainTransferability.
  * api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for new objective metrics in
    CreateAutoMLJob API.
  * api-change:``transcribe``: Enable our batch transcription jobs for Swedish and Vietnamese.
- from version 1.29.33
  * api-change:``athena``: Add missed InvalidRequestException in
    GetCalculationExecutionCode,StopCalculationExecution APIs. Correct required parameters (Payload and
    Type) in UpdateNotebook API. Change Notebook size from 15 Mb to 10 Mb.
  * api-change:``ecs``: This release adds support for alarm-based rollbacks in ECS, a new feature
    that allows customers to add automated safeguards for Amazon ECS service rolling updates.
  * api-change:``kinesis-video-webrtc-storage``: Amazon Kinesis Video Streams offers capabilities to
    stream video and audio in real-time via WebRTC to the cloud for storage, playback, and analytical
    processing. Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming,
    as well as media ingestion to the cloud.
  * api-change:``kinesisvideo``: Amazon Kinesis Video Streams offers capabilities to stream video and
    audio in real-time via WebRTC to the cloud for storage, playback, and analytical processing.
    Customers can use our enhanced WebRTC SDK and cloud APIs to enable real-time streaming, as well as
    media ingestion to the cloud.
  * api-change:``rds``: Add support for --enable-customer-owned-ip to RDS
    create-db-instance-read-replica API for RDS on Outposts.
  * api-change:``sagemaker``: AWS Sagemaker - Sagemaker Images now supports Aliases as secondary
    identifiers for ImageVersions. SageMaker Images now supports additional metadata for ImageVersions
    for better images management.
- from version 1.29.32
  * api-change:``appflow``: This release updates the ListConnectorEntities API action so that it
    returns paginated responses that customers can retrieve with next tokens.
  * api-change:``cloudfront``: Updated documentation for CloudFront
  * api-change:``datasync``: AWS DataSync now supports the use of tags with task executions. With
    this new feature, you can apply tags each time you execute a task, giving you greater control and
    management over your task executions.
  * api-change:``efs``: Update efs client to latest version
  * api-change:``guardduty``: This release provides the valid characters for the Description and Name
    field.
  * api-change:``iotfleetwise``: Updated error handling for empty resource names in
    "UpdateSignalCatalog" and "GetModelManifest" operations.
  * api-change:``sagemaker``: AWS sagemaker - Features: This release adds support for random seed,
    it's an integer value used to initialize a pseudo-random number generator. Setting a random seed
    will allow the hyperparameter tuning search strategies to produce more consistent configurations
    for the same tuning job.
- from version 1.29.31
  * api-change:``backup-gateway``: This release adds support for VMware vSphere tags, enabling
    customer to protect VMware virtual machines using tag-based policies for AWS tags mapped from
    vSphere tags. This release also adds support for customer-accessible gateway-hypervisor interaction
    log and upload bandwidth rate limit schedule.
  * api-change:``connect``: Added support for "English - New Zealand" and "English - South African"
    to be used with Amazon Connect Custom Vocabulary APIs.
  * api-change:``ecs``: This release adds support for container port ranges in ECS, a new capability
    that allows customers to provide container port ranges to simplify use cases where multiple ports
    are in use in a container. This release updates TaskDefinition mutation APIs and the Task
    description APIs.
  * api-change:``eks``: Add support for Windows managed nodes groups.
  * api-change:``glue``: This release adds support for AWS Glue Crawler with native DeltaLake tables,
    allowing Crawlers to classify Delta Lake format tables and catalog them for query engines to query
    against.
  * api-change:``kinesis``: Added StreamARN parameter for Kinesis Data Streams APIs. Added a new
    opaque pagination token for ListStreams. SDKs will auto-generate Account Endpoint when accessing
    Kinesis Data Streams.
  * api-change:``location``: This release adds support for a new style, "VectorOpenDataStandardLight"
    which can be used with the new data source, "Open Data Maps (Preview)".
  * api-change:``m2``: Adds an optional create-only `KmsKeyId` property to Environment and
    Application resources.
  * api-change:``sagemaker``: SageMaker Inference Recommender now allows customers to load tests
    their models on various instance types using private VPC.
  * api-change:``securityhub``: Added new resource details objects to ASFF, including resources for
    AwsEc2LaunchTemplate, AwsSageMakerNotebookInstance, AwsWafv2WebAcl and AwsWafv2RuleGroup.
  * api-change:``translate``: Raised the input byte size limit of the Text field in the TranslateText
    API to 10000 bytes.
- from version 1.29.30
  * api-change:``ce``: This release supports percentage-based thresholds on Cost Anomaly Detection
    alert subscriptions.
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``networkmanager``: Appliance Mode support for AWS Cloud WAN.
  * api-change:``redshift-data``: This release adds a new --client-token field to ExecuteStatement
    and BatchExecuteStatement operations. Customers can now run queries with the additional client
    token parameter to ensures idempotency.
  * api-change:``sagemaker-metrics``: Update SageMaker Metrics documentation.
- from version 1.29.29
  * api-change:``cloudtrail``: Merging mainline branch for service model into mainline release
    branch. There are no new APIs.
  * api-change:``rds``: This deployment adds ClientPasswordAuthType field to the Auth structure of
    the DBProxy.
- from version 1.29.28
  * bugfix:Endpoint provider: Updates ARN parsing ``resourceId`` delimiters
  * api-change:``customer-profiles``: This release allows custom strings in PartyType and Gender
    through 2 new attributes in the CreateProfile and UpdateProfile APIs: PartyTypeString and
    GenderString.
  * api-change:``ec2``: This release updates DescribeFpgaImages to show supported instance types of
    AFIs in its response.
  * api-change:``kinesisvideo``: This release adds support for public preview of Kinesis Video Stream
    at Edge enabling customers to provide configuration for the Kinesis Video Stream EdgeAgent running
    on an on-premise IoT device. Customers can now locally record from cameras and stream videos to the
    cloud on configured schedule.
  * api-change:``lookoutvision``: This documentation update adds kms:GenerateDataKey as a required
    permission to StartModelPackagingJob.
  * api-change:``migration-hub-refactor-spaces``: This release adds support for Lambda alias service
    endpoints. Lambda alias ARNs can now be passed into CreateService.
  * api-change:``rds``: Update the RDS API model to support copying option groups during the
    CopyDBSnapshot operation
  * api-change:``rekognition``: Adds support for "aliases" and "categories", inclusion and exclusion
    filters for labels and label categories, and aggregating labels by video segment timestamps for
    Stored Video Label Detection APIs.
  * api-change:``sagemaker-metrics``: This release introduces support SageMaker Metrics APIs.
  * api-change:``wafv2``: Documents the naming requirement for logging destinations that you use with
    web ACLs.
- from version 1.29.27
  * api-change:``iotfleetwise``: Deprecated assignedValue property for actuators and attributes.
    Added a message to invalid nodes and invalid decoder manifest exceptions.
  * api-change:``logs``: Doc-only update for CloudWatch Logs, for Tagging Permissions clarifications
  * api-change:``medialive``: Link devices now support buffer size (latency) configuration. A higher
    latency value means a longer delay in transmitting from the device to MediaLive, but improved
    resiliency. A lower latency value means a shorter delay, but less resiliency.
  * api-change:``mediapackage-vod``: This release provides the approximate number of assets in a
    packaging group.</changelog>
  <changelog author="dmueller@suse.com" date="1673265600">- correct requires
- update to 1.29.45:
  * api-change:``acm-pca``: Added revocation parameter validation: bucket names
    must match S3 bucket naming rules and CNAMEs conform to RFC2396 restrictions
    on the use of special characters in URIs.
  * api-change:``auditmanager``: This release introduces a new data retention
    option in your Audit Manager settings. You can now use the
    DeregistrationPolicy parameter to specify if you want to delete your data
    when you deregister Audit Manager.
  * api-change:``amplifybackend``: Updated GetBackendAPIModels response to
    include ModelIntrospectionSchema json string
  * api-change:``apprunner``: This release adds support of securely referencing
    secrets and configuration data that are stored in Secrets Manager and SSM
    Parameter Store by adding them as environment secrets in your App Runner
    service.
  * api-change:``connect``: Documentation update for a new Initiation Method
    value in DescribeContact API
  * api-change:``emr-serverless``: Adds support for customized images. You can
    now provide runtime images when creating or updating EMR Serverless
    Applications.
  * api-change:``lightsail``: Documentation updates for Amazon Lightsail.
  * api-change:``mwaa``: MWAA supports Apache Airflow version 2.4.3.
  * api-change:``rds``: This release adds support for specifying which
    certificate authority (CA) to use for a DB instance's server certificate
    during DB instance creation, as well as other CA enhancements.
  * api-change:``application-autoscaling``: Customers can now use the existing
    DescribeScalingActivities API to also see the detailed and machine-readable
    reasons for Application Auto Scaling not scaling their resources and, if
    needed, take the necessary corrective actions.
  * api-change:``logs``: Update to remove sequenceToken as a required field in
    PutLogEvents calls.
  * api-change:``ssm``: Adding support for QuickSetup Document Type in Systems
    Manager
  * api-change:``securitylake``: Allow CreateSubscriber API to take string input
    that allows setting more descriptive SubscriberDescription field. Make
    souceTypes field required in model level for UpdateSubscriberRequest as it is
    required for every API call on the backend. Allow ListSubscribers take any
    String as nextToken param.</changelog>
  <changelog author="dmueller@suse.com" date="1673870400">- update to 1.29.50:
  * api-change:``connect``: This release updates the responses of
    UpdateContactFlowContent, UpdateContactFlowMetadata, UpdateContactFlowName
    and DeleteContactFlow API with empty responses.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``outposts``: This release adds POWER_30_KVA as an option for
    PowerDrawKva. PowerDrawKva is part of the RackPhysicalProperties structure
    in the CreateSite request.
  * api-change:``resource-groups``: AWS Resource Groups customers can now turn
    on Group Lifecycle Events in their AWS account. When you turn this on,
    Resource Groups monitors your groups for changes to group state or
    membership. Those changes are sent to Amazon EventBridge as events that you
    can respond to using rules you create.
  * api-change:``cleanrooms``: Initial release of AWS Clean Rooms
  * api-change:``lambda``: Add support for MaximumConcurrency parameter for SQS
    event source. Customers can now limit the maximum concurrent invocations
    for their SQS Event Source Mapping.
  * api-change:``logs``: Bug fix: logGroupName is now not a required field in
    GetLogEvents, FilterLogEvents, GetLogGroupFields, and DescribeLogStreams
    APIs as logGroupIdentifier can be provided instead
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added
    support for compact DASH manifest generation, audio normalization using
    TruePeak measurements, and the ability to clip the sample range in the
    color corrector.
  * api-change:``secretsmanager``: Update documentation for new ListSecrets and DescribeSecret parameters
  * api-change:``kendra``: This release adds support to new document types -
    RTF, XML, XSLT, MS_EXCEL, CSV, JSON, MD
  * api-change:``location``: This release adds support for two new route travel
    models, Bicycle and Motorcycle which can be used with Grab data source.
  * api-change:``rds``: This release adds support for configuring allocated
    storage on the CreateDBInstanceReadReplica,
    RestoreDBInstanceFromDBSnapshot, and RestoreDBInstanceToPointInTime APIs.
  * api-change:``ecr-public``: This release for Amazon ECR Public makes several
    change to bring the SDK into sync with the API.
  * api-change:``kendra-ranking``: Introducing Amazon Kendra Intelligent
    Ranking, a new set of Kendra APIs that leverages Kendra semantic ranking
    capabilities to improve the quality of search results from other search
    services (i.e. OpenSearch, ElasticSearch, Solr).
  * api-change:``network-firewall``: Network Firewall now supports the Suricata
    rule action reject, in addition to the actions pass, drop, and alert.
  * api-change:``ram``: Enabled FIPS aws-us-gov endpoints in SDK.
  * api-change:``workspaces-web``: This release adds support for a new portal
    authentication type: AWS IAM Identity Center (successor to AWS Single
    Sign-On).</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674129600">- Update to 1.29.52
  * api-change:``cloudwatch``: Update cloudwatch client to latest version
  * api-change:``efs``: Update efs client to latest version
  * api-change:``ivschat``: Updates the range for a Chat Room's maximumMessageRatePerSecond field.
  * api-change:``wafv2``: Improved the visibility of the guidance for updating AWS WAF resources,
    such as web ACLs and rule groups.
- from version 1.29.51
  * api-change:``billingconductor``: This release adds support for SKU Scope for pricing plans.
  * api-change:``cloud9``: Added minimum value to AutomaticStopTimeMinutes parameter.
  * api-change:``imagebuilder``: Add support for AWS Marketplace product IDs as input during
    CreateImageRecipe for the parent-image parameter. Add support for listing third-party components.
  * api-change:``network-firewall``: Network Firewall now allows creation of dual stack endpoints,
    enabling inspection of IPv6 traffic.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1674820800">- Update to 1.29.58
  * api-change:``events``: Update events client to latest version
  * api-change:``iotfleetwise``: Add model validation to BatchCreateVehicle and BatchUpdateVehicle
    operations that invalidate requests with an empty vehicles list.
  * api-change:``s3``: Allow FIPS to be used with path-style URLs.
- from version 1.29.57
  * api-change:``cloudformation``: Enabled FIPS aws-us-gov endpoints in SDK.
  * api-change:``ec2``: This release adds new functionality that allows customers to provision IPv6
    CIDR blocks through Amazon VPC IP Address Manager (IPAM) as well as allowing customers to utilize
    IPAM Resource Discovery APIs.
  * api-change:``m2``: Add returnCode, batchJobIdentifier in GetBatchJobExecution response, for user
    to view the batch job execution result &amp; unique identifier from engine. Also removed unused headers
    from REST APIs
  * api-change:``polly``: Add 5 new neural voices - Sergio (es-ES), Andres (es-MX), Remi (fr-FR),
    Adriano (it-IT) and Thiago (pt-BR).
  * api-change:``redshift-serverless``: Added query monitoring rules as possible parameters for
    create and update workgroup operations.
  * api-change:``s3control``: Add additional endpoint tests for S3 Control. Fix missing endpoint
    parameters for PutBucketVersioning and GetBucketVersioning. Prior to this fix, those operations may
    have resulted in an invalid endpoint being resolved.
  * api-change:``sagemaker``: SageMaker Inference Recommender now decouples from Model Registry and
    could accept Model Name to invoke inference recommendations job; Inference Recommender now provides
    CPU/Memory Utilization metrics data in recommendation output.
  * api-change:``sts``: Doc only change to update wording in a key topic
- from version 1.29.56
  * api-change:``databrew``: Enabled FIPS us-gov-west-1 endpoints in SDK.
  * api-change:``route53``: Amazon Route 53 now supports the Asia Pacific (Melbourne) Region
    (ap-southeast-4) for latency records, geoproximity records, and private DNS for Amazon VPCs in that
    region.
  * api-change:``ssm-sap``: This release provides updates to documentation and support for listing
    operations performed by AWS Systems Manager for SAP.
- from version 1.29.55
  * api-change:``lambda``: Release Lambda RuntimeManagementConfig, enabling customers to better
    manage runtime updates to their Lambda functions. This release adds two new APIs,
    GetRuntimeManagementConfig and PutRuntimeManagementConfig, as well as support on existing
    Create/Get/Update function APIs.
  * api-change:``sagemaker``: Amazon SageMaker Inference now supports P4de instance types.
- from version 1.29.54
  * api-change:``ec2``: C6in, M6in, M6idn, R6in and R6idn instances are powered by 3rd Generation
    Intel Xeon Scalable processors (code named Ice Lake) with an all-core turbo frequency of 3.5 GHz.
  * api-change:``ivs``: API and Doc update. Update to arns field in BatchGetStreamKey. Also updates
    to operations and structures.
  * api-change:``quicksight``: This release adds support for data bars in QuickSight table and
    increases pivot table field well limit.
- from version 1.29.53
  * api-change:``appflow``: Adding support for Salesforce Pardot connector in Amazon AppFlow.
  * api-change:``codeartifact``: Documentation updates for CodeArtifact
  * api-change:``connect``: Amazon Connect Chat introduces Persistent Chat, allowing customers to
    resume previous conversations with context and transcripts carried over from previous chats,
    eliminating the need to repeat themselves and allowing agents to provide personalized service with
    access to entire conversation history.
  * api-change:``connectparticipant``: This release updates Amazon Connect Participant's
    GetTranscript api to provide transcripts of past chats on a persistent chat session.
  * api-change:``ec2``: Adds SSM Parameter Resource Aliasing support to EC2 Launch Templates. Launch
    Templates can now store parameter aliases in place of AMI Resource IDs. CreateLaunchTemplateVersion
    and DescribeLaunchTemplateVersions now support a convenience flag, ResolveAlias, to return the
    resolved parameter value.
  * api-change:``glue``: Release Glue Studio Hudi Data Lake Format for SDK/CLI
  * api-change:``groundstation``: Add configurable prepass and postpass times for
    DataflowEndpointGroup. Add Waiter to allow customers to wait for a contact that was reserved
    through ReserveContact
  * api-change:``logs``: Bug fix - Removed the regex pattern validation from CoralModel to avoid
    potential security issue.
  * api-change:``medialive``: AWS Elemental MediaLive adds support for SCTE 35 preRollMilliSeconds.
  * api-change:``opensearch``: This release adds the enhanced dry run option, that checks for
    validation errors that might occur when deploying configuration changes and provides a summary of
    these errors, if any. The feature will also indicate whether a blue/green deployment will be
    required to apply a change.
  * api-change:``panorama``: Added AllowMajorVersionUpdate option to OTAJobConfig to make appliance
    software major version updates opt-in.
  * api-change:``sagemaker``: HyperParameterTuningJobs now allow passing environment variables into
    the corresponding TrainingJobs</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675166400">- Update to 1.29.60
  * api-change:``clouddirectory``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``cloudformation``: This feature provides a method of obtaining which regions a
    stackset has stack instances deployed in.
  * api-change:``discovery``: Update ImportName validation to 255 from the current length of 100
  * api-change:``dlm``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: We add Prefix Lists as a new route destination option for LocalGatewayRoutes.
    This will allow customers to create routes to Prefix Lists. Prefix List routes will allow customers
    to group individual CIDR routes with the same target into a single route.
  * api-change:``imagebuilder``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``kafka``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``mediaconvert``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``swf``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.59
  * api-change:``application-autoscaling``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``appstream``: Fixing the issue where Appstream waiters hang for fleet_started and
    fleet_stopped.
  * api-change:``elasticbeanstalk``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``fis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``glacier``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``greengrass``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``greengrassv2``: Enabled FIPS endpoints for GovCloud (US) in SDK.
  * api-change:``mediatailor``: This release introduces the As Run logging type, along with API and
    documentation updates.
  * api-change:``outposts``: Adding support for payment term in GetOrder, CreateOrder responses.
  * api-change:``sagemaker-runtime``: Update sagemaker-runtime client to latest version
  * api-change:``sagemaker``: This release supports running SageMaker Training jobs with container
    images that are in a private Docker registry.
  * api-change:``serverlessrepo``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1675857600">- Update to 1.29.66
  * api-change:``transfer``: Updated the documentation for the ImportCertificate API call, and added
    examples.
- from version 1.29.65
  * api-change:``compute-optimizer``: AWS Compute optimizer can now infer if Kafka is running on an
    instance.
  * api-change:``customer-profiles``: This release deprecates the PartyType and Gender enum data
    types from the Profile model and replaces them with new PartyTypeString and GenderString
    attributes, which accept any string of length up to 255.
  * api-change:``frauddetector``: My AWS Service (Amazon Fraud Detector) - This release introduces
    Cold Start Model Training which optimizes training for small datasets and adds intelligent methods
    for treating unlabeled data. You can now train Online Fraud Insights or Transaction Fraud Insights
    models with minimal historical-data.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added improved scene change
    detection capabilities and a bandwidth reduction filter, along with video quality enhancements, to
    the AVC encoder.
  * api-change:``outposts``: Adds OrderType to Order structure. Adds PreviousOrderId and
    PreviousLineItemId to LineItem structure. Adds new line item status REPLACED. Increases maximum
    length of pagination token.
- from version 1.29.64
  * enhancement:AWSCRT: Upgrade awscrt version to 0.16.9
  * api-change:``proton``: Add new GetResourcesSummary API
  * api-change:``redshift``: Corrects descriptions of the parameters for the API operations
    RestoreFromClusterSnapshot, RestoreTableFromClusterSnapshot, and CreateCluster.
- from version 1.29.63
  * api-change:``appconfig``: AWS AppConfig introduces KMS customer-managed key (CMK) encryption of
    configuration data, along with AWS Secrets Manager as a new configuration data source. S3 objects
    using SSE-KMS encryption and SSM Parameter Store SecureStrings are also now supported.
  * api-change:``connect``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: Documentation updates for EC2.
  * api-change:``elbv2``: Update elbv2 client to latest version
  * api-change:``keyspaces``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``quicksight``: QuickSight support for Radar Chart and Dashboard Publish Options
  * api-change:``redshift``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``sso-admin``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
- from version 1.29.62
  * bugfix:``s3``: boto3 no longer overwrites user supplied `Content-Encoding` with `aws-chunked`
    when user also supplies `ChecksumAlgorithm`.
  * api-change:``devops-guru``: This release adds filter support ListAnomalyForInsight API.
  * api-change:``forecast``: This release will enable customer select INCREMENTAL as ImportModel in
    Forecast's CreateDatasetImportJob API. Verified latest SDK containing required attribute, following
    https://w.amazon.com/bin/view/AWS-Seer/Launch/Trebuchet/
  * api-change:``iam``: Documentation updates for AWS Identity and Access Management (IAM).
  * api-change:``mediatailor``: The AWS Elemental MediaTailor SDK for Channel Assembly has added
    support for program updates, and the ability to clip the end of VOD sources in programs.
  * api-change:``sns``: Additional attributes added for set-topic-attributes.
- from version 1.29.61
  * api-change:``accessanalyzer``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``appsync``: This release introduces the feature to support EventBridge as AppSync
    data source.
  * api-change:``cloudtrail-data``: Add CloudTrail Data Service to enable users to ingest activity
    events from non-AWS sources into CloudTrail Lake.
  * api-change:``cloudtrail``: Add new "Channel" APIs to enable users to manage channels used for
    CloudTrail Lake integrations, and "Resource Policy" APIs to enable users to manage the
    resource-based permissions policy attached to a channel.
  * api-change:``codeartifact``: This release introduces a new DeletePackage API, which enables
    deletion of a package and all of its versions from a repository.
  * api-change:``connectparticipant``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``ec2``: This launch allows customers to associate up to 8 IP addresses to their NAT
    Gateways to increase the limit on concurrent connections to a single destination by eight times
    from 55K to 440K.
  * api-change:``groundstation``: DigIF Expansion changes to the Customer APIs.
  * api-change:``iot``: Added support for IoT Rules Engine Cloudwatch Logs action batch mode.
  * api-change:``kinesis``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``opensearch``: Amazon OpenSearch Service adds the option for a VPC endpoint
    connection between two domains when the local domain uses OpenSearch version 1.3 or 2.3. You can
    now use remote reindex to copy indices from one VPC domain to another without a reverse proxy.
  * api-change:``outposts``: Enabled FIPS endpoints for GovCloud (US) regions in SDK.
  * api-change:``polly``: Amazon Polly adds two new neural American English voices - Ruth, Stephen
  * api-change:``sagemaker``: Amazon SageMaker Automatic Model Tuning now supports more completion
    criteria for Hyperparameter Optimization.
  * api-change:``securityhub``: New fields have been added to the AWS Security Finding Format.
    Compliance.SecurityControlId is a unique identifier for a security control across standards.
    Compliance.AssociatedStandards contains all enabled standards in which a security control is
    enabled.
  * api-change:``support``: This fixes incorrect endpoint construction when a customer is explicitly
    setting a region.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1676462400">- Update to 1.29.71
  * api-change:``appconfig``: AWS AppConfig now offers the option to set a version label on hosted
    configuration versions. Version labels allow you to identify specific hosted configuration versions
    based on an alternate versioning scheme that you define.
  * api-change:``datasync``: With this launch, we are giving customers the ability to use older SMB
    protocol versions, enabling them to use DataSync to copy data to and from their legacy storage
    arrays.
  * api-change:``ec2``: With this release customers can turn host maintenance on or off when
    allocating or modifying a supported dedicated host. Host maintenance is turned on by default for
    supported hosts.
- from version 1.29.70
  * api-change:``account``: This release of the Account Management API enables customers to view and
    manage whether AWS Opt-In Regions are enabled or disabled for their Account. For more information,
    see https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html
  * api-change:``appconfigdata``: AWS AppConfig now offers the option to set a version label on
    hosted configuration versions. If a labeled hosted configuration version is deployed, its version
    label is available in the GetLatestConfiguration response.
  * api-change:``snowball``: Adds support for EKS Anywhere on Snowball. AWS Snow Family customers can
    now install EKS Anywhere service on Snowball Edge Compute Optimized devices.
- from version 1.29.69
  * api-change:``autoscaling``: You can now either terminate/replace, ignore, or wait for EC2 Auto
    Scaling instances on standby or protected from scale in. Also, you can also roll back changes from
    a failed instance refresh.
  * api-change:``connect``: This update provides the Wisdom session ARN for contacts enabled for
    Wisdom in the chat channel.
  * api-change:``ec2``: Adds support for waiters that automatically poll for an imported snapshot
    until it reaches the completed state.
  * api-change:``polly``: Amazon Polly adds two new neural Japanese voices - Kazuha, Tomoko
  * api-change:``sagemaker``: Amazon SageMaker Autopilot adds support for selecting algorithms in
    CreateAutoMLJob API.
  * api-change:``sns``: This release adds support for SNS X-Ray active tracing as well as other
    updates.
- from version 1.29.68
  * api-change:``chime-sdk-meetings``: Documentation updates for Chime Meetings SDK
  * api-change:``emr-containers``: EMR on EKS allows configuring retry policies for job runs through
    the StartJobRun API. Using retry policies, a job cause a driver pod to be restarted automatically
    if it fails or is deleted. The job's status can be seen in the DescribeJobRun and ListJobRun APIs
    and monitored using CloudWatch events.
  * api-change:``evidently``: Updated entity overrides parameter to accept up to 2500 overrides or a
    total of 40KB.
  * api-change:``lexv2-models``: Update lexv2-models client to latest version
  * api-change:``lexv2-runtime``: Update lexv2-runtime client to latest version
  * api-change:``lightsail``: Documentation updates for Lightsail
  * api-change:``migration-hub-refactor-spaces``: This release adds support for creating environments
    with a network fabric type of NONE
  * api-change:``workdocs``: Doc only update for the WorkDocs APIs.
  * api-change:``workspaces``: Removed Windows Server 2016 BYOL and made changes based on IAM
    campaign.
- from version 1.29.67
  * api-change:``backup``: This release added one attribute (resource name) in the output model of
    our 9 existing APIs in AWS backup so that customers will see the resource name at the output. No
    input required from Customers.
  * api-change:``cloudfront``: CloudFront Origin Access Control extends support to AWS Elemental
    MediaStore origins.
  * api-change:``glue``: DirectJDBCSource + Glue 4.0 streaming options
  * api-change:``lakeformation``: This release removes the LFTagpolicyResource expression limits.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1677240000">- Update to 1.29.78
  * api-change:``appflow``: This release enables the customers to choose whether to use Private Link
    for Metadata and Authorization call when using a private Salesforce connections
  * api-change:``ecs``: This release supports deleting Amazon ECS task definitions that are in the
    INACTIVE state.
  * api-change:``grafana``: Doc-only update. Updated information on attached role policies for
    customer provided roles
  * api-change:``guardduty``: Updated API and data types descriptions for CreateFilter, UpdateFilter,
    and TriggerDetails.
  * api-change:``iotwireless``: In this release, we add additional capabilities for the FUOTA which
    allows user to configure the fragment size, the sending interval and the redundancy ratio of the
    FUOTA tasks
  * api-change:``location``: This release adds support for using Maps APIs with an API Key in
    addition to AWS Cognito. This includes support for adding, listing, updating and deleting API Keys.
  * api-change:``macie2``: This release adds support for a new finding type,
    Policy:IAMUser/S3BucketSharedWithCloudFront, and S3 bucket metadata that indicates if a bucket is
    shared with an Amazon CloudFront OAI or OAC.
  * api-change:``wafv2``: You can now associate an AWS WAF v2 web ACL with an AWS App Runner service.
- from version 1.29.77
  * api-change:``chime-sdk-voice``: This release introduces support for Voice Connector media metrics
    in the Amazon Chime SDK Voice namespace
  * api-change:``cloudfront``: CloudFront now supports block lists in origin request policies so that
    you can forward all headers, cookies, or query string from viewer requests to the origin *except*
    for those specified in the block list.
  * api-change:``datasync``: AWS DataSync has relaxed the minimum length constraint of AccessKey for
    Object Storage locations to 1.
  * api-change:``opensearch``: This release lets customers configure Off-peak window and software
    update related properties for a new/existing domain. It enhances the capabilities of
    StartServiceSoftwareUpdate API; adds 2 new APIs - ListScheduledActions &amp; UpdateScheduledAction; and
    allows Auto-tune to make use of Off-peak window.
  * api-change:``rum``: CloudWatch RUM now supports CloudWatch Custom Metrics
  * api-change:``ssm``: Document only update for Feb 2023
- from version 1.29.76
  * api-change:``quicksight``: S3 data sources now accept a custom IAM role.
  * api-change:``resiliencehub``: In this release we improved resilience hub application creation and
    maintenance by introducing new resource and app component crud APIs, improving visibility and
    maintenance of application input sources and added support for additional information attributes to
    be provided by customers.
  * api-change:``securityhub``: Documentation updates for AWS Security Hub
  * api-change:``tnb``: This is the initial SDK release for AWS Telco Network Builder (TNB). AWS
    Telco Network Builder is a network automation service that helps you deploy and manage telecom
    networks.
- from version 1.29.75
  * bugfix:SSO: Fixes aws/aws-cli`#7496 &lt;https://github.com/aws/aws-cli/issues/7496&gt;`__ by using the
    correct profile name rather than the one set in the session.
  * api-change:``auditmanager``: This release introduces a ServiceQuotaExceededException to the
    UpdateAssessmentFrameworkShare API operation.
  * api-change:``connect``: Reasons for failed diff has been approved by SDK Reviewer
- from version 1.29.74
  * api-change:``apprunner``: This release supports removing MaxSize limit for
    AutoScalingConfiguration.
  * api-change:``glue``: Release of Delta Lake Data Lake Format for Glue Studio Service
- from version 1.29.73
  * api-change:``emr``: Update emr client to latest version
  * api-change:``grafana``: With this release Amazon Managed Grafana now supports inbound Network
    Access Control that helps you to restrict user access to your Grafana workspaces
  * api-change:``ivs``: Doc-only update. Updated text description in DeleteChannel, Stream, and
    StreamSummary.
  * api-change:``wafv2``: Added a notice for account takeover prevention (ATP). The interface
    incorrectly lets you to configure ATP response inspection in regional web ACLs in Region US East
    (N. Virginia), without returning an error. ATP response inspection is only available in web ACLs
    that protect CloudFront distributions.
- from version 1.29.72
  * api-change:``cloudtrail``: This release adds an InsufficientEncryptionPolicyException type to the
    StartImport endpoint
  * api-change:``efs``: Update efs client to latest version
  * api-change:``frauddetector``: This release introduces Lists feature which allows customers to
    reference a set of values in Fraud Detector's rules. With Lists, customers can dynamically manage
    these attributes in real time. Lists can be created/deleted and its contents can be modified using
    the Fraud Detector API.
  * api-change:``glue``: Fix DirectJDBCSource not showing up in CLI code gen
  * api-change:``privatenetworks``: This release introduces a new StartNetworkResourceUpdate API,
    which enables return/replacement of hardware from a NetworkSite.
  * api-change:``rds``: Database Activity Stream support for RDS for SQL Server.
  * api-change:``wafv2``: For protected CloudFront distributions, you can now use the AWS WAF Fraud
    Control account takeover prevention (ATP) managed rule group to block new login attempts from
    clients that have recently submitted too many failed login attempts.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1678708800">- Update to 1.29.89
  * api-change:``ivschat``: This release adds a new exception returned when calling AWS IVS chat
    UpdateLoggingConfiguration. Now UpdateLoggingConfiguration can return ConflictException when
    invalid updates are made in sequence to Logging Configurations.
  * api-change:``secretsmanager``: The type definitions of SecretString and SecretBinary now have a
    minimum length of 1 in the model to match the exception thrown when you pass in empty values.
- from version 1.29.88
  * api-change:``codeartifact``: This release introduces the generic package format, a mechanism for
    storing arbitrary binary assets. It also adds a new API, PublishPackageVersion, to allow for
    publishing generic packages.
  * api-change:``connect``: This release adds a new API, GetMetricDataV2, which returns metric data
    for Amazon Connect.
  * api-change:``evidently``: Updated entity override documentation
  * api-change:``networkmanager``: This update provides example usage for TransitGatewayRouteTableArn.
  * api-change:``quicksight``: This release has two changes: add state persistence feature for
    embedded dashboard and console in GenerateEmbedUrlForRegisteredUser API; add properties for hidden
    collapsed row dimensions in PivotTableOptions.
  * api-change:``redshift-data``: Added support for Redshift Serverless workgroup-arn wherever the
    WorkgroupName parameter is available.
  * api-change:``sagemaker``: Amazon SageMaker Inference now allows SSM access to customer's model
    container by setting the "EnableSSMAccess" parameter for a ProductionVariant in
    CreateEndpointConfig API.
  * api-change:``servicediscovery``: Updated all AWS Cloud Map APIs to provide consistent throttling
    exception (RequestLimitExceeded)
  * api-change:``sesv2``: This release introduces a new recommendation in Virtual Deliverability
    Manager Advisor, which detects missing or misconfigured Brand Indicator for Message Identification
    (BIMI) DNS records for customer sending identities.
- from version 1.29.87
  * api-change:``athena``: A new field SubstatementType is added to GetQueryExecution API, so
    customers have an error free way to detect the query type and interpret the result.
  * api-change:``dynamodb``: Adds deletion protection support to DynamoDB tables. Tables with
    deletion protection enabled cannot be deleted. Deletion protection is disabled by default, can be
    enabled via the CreateTable or UpdateTable APIs, and is visible in TableDescription. This setting
    is not replicated for Global Tables.
  * api-change:``ec2``: Introducing Amazon EC2 C7g, M7g and R7g instances, powered by the latest
    generation AWS Graviton3 processors and deliver up to 25% better performance over Graviton2-based
    instances.
  * api-change:``lakeformation``: This release adds two new API support "GetDataCellsFiler" and
    "UpdateDataCellsFilter", and also updates the corresponding documentation.
  * api-change:``mediapackage-vod``: This release provides the date and time VOD resources were
    created.
  * api-change:``mediapackage``: This release provides the date and time live resources were created.
  * api-change:``route53resolver``: Add dual-stack and IPv6 support for Route 53 Resolver
    Endpoint,Add IPv6 target IP in Route 53 Resolver Forwarding Rule
  * api-change:``sagemaker``: There needs to be a user identity to specify the SageMaker user who
    perform each action regarding the entity. However, these is a not a unified concept of user
    identity across SageMaker service that could be used today.
- from version 1.29.86
  * api-change:``dms``: This release adds DMS Fleet Advisor Target Recommendation APIs and exposes
    functionality for DMS Fleet Advisor. It adds functionality to start Target Recommendation
    calculation.
  * api-change:``location``: Documentation update for the release of 3 additional map styles for use
    with Open Data Maps: Open Data Standard Dark, Open Data Visualization Light &amp; Open Data
    Visualization Dark.
- from version 1.29.85
  * api-change:``account``: AWS Account alternate contact email addresses can now have a length of
    254 characters and contain the character "|".
  * api-change:``ivs``: Updated text description in DeleteChannel, Stream, and StreamSummary.
- from version 1.29.84
  * api-change:``dynamodb``: Documentation updates for DynamoDB.
  * api-change:``ec2``: This release adds support for a new boot mode for EC2 instances called 'UEFI
    Preferred'.
  * api-change:``macie2``: Documentation updates for Amazon Macie
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has improved handling for
    different input and output color space combinations.
  * api-change:``medialive``: AWS Elemental MediaLive adds support for Nielsen watermark timezones.
  * api-change:``transcribe``: Amazon Transcribe now supports role access for these API operations:
    CreateVocabulary, UpdateVocabulary, CreateVocabularyFilter, and UpdateVocabularyFilter.
- from version 1.29.83
  * api-change:``iot``: A recurring maintenance window is an optional configuration used for rolling
    out the job document to all devices in the target group observing a predetermined start time,
    duration, and frequency that the maintenance window occurs.
  * api-change:``migrationhubstrategy``: This release updates the File Import API to allow importing
    servers already discovered by customers with reduced pre-requisites.
  * api-change:``organizations``: This release introduces a new reason code,
    ACCOUNT_CREATION_NOT_COMPLETE, to ConstraintViolationException in CreateOrganization API.
  * api-change:``pi``: This release adds a new field PeriodAlignment to allow the customer specifying
    the returned timestamp of time periods to be either the start or end time.
  * api-change:``pipes``: This release fixes some input parameter range and patterns.
  * api-change:``sagemaker``: Add a new field "EndpointMetrics" in SageMaker Inference Recommender
    "ListInferenceRecommendationsJobSteps" API response.
- from version 1.29.82
  * api-change:``codecatalyst``: Published Dev Environments StopDevEnvironmentSession API
  * api-change:``pricing``: This release adds 2 new APIs - ListPriceLists which returns a list of
    applicable price lists, and GetPriceListFileUrl which outputs a URL to retrieve your price lists
    from the generated file from ListPriceLists
  * api-change:``s3outposts``: S3 on Outposts introduces a new API ListOutpostsWithS3, with this API
    you can list all your Outposts with S3 capacity.
- from version 1.29.81
  * enhancement:Documentation: Splits service documentation into multiple sub-pages for better
    organization and faster loading time.
  * api-change:``comprehend``: Amazon Comprehend now supports flywheels to help you train and manage
    new model versions for custom models.
  * api-change:``ec2``: This release allows IMDS support to be set to v2-only on an existing AMI, so
    that all future instances launched from that AMI will use IMDSv2 by default.
  * api-change:``kms``: AWS KMS is deprecating the RSAES_PKCS1_V1_5 wrapping algorithm option in the
    GetParametersForImport API that is used in the AWS KMS Import Key Material feature. AWS KMS will
    end support for this wrapping algorithm by October 1, 2023.
  * api-change:``lightsail``: This release adds Lightsail for Research feature support, such as GUI
    session access, cost estimates, stop instance on idle, and disk auto mount.
  * api-change:``managedblockchain``: This release adds support for tagging to the accessor resource
    in Amazon Managed Blockchain
  * api-change:``omics``: Minor model changes to accomodate batch imports feature
- from version 1.29.80
  * api-change:``devops-guru``: This release adds the description field on ListAnomaliesForInsight
    and DescribeAnomaly API responses for proactive anomalies.
  * api-change:``drs``: New fields were added to reflect availability zone data in source server and
    recovery instance description commands responses, as well as source server launch status.
  * api-change:``internetmonitor``: CloudWatch Internet Monitor is a a new service within CloudWatch
    that will help application developers and network engineers continuously monitor internet
    performance metrics such as availability and performance between their AWS-hosted applications and
    end-users of these applications
  * api-change:``lambda``: This release adds the ability to create ESMs with Document DB change
    streams as event source. For more information see
    https://docs.aws.amazon.com/lambda/latest/dg/with-documentdb.html.
  * api-change:``mediaconvert``: The AWS Elemental MediaConvert SDK has added support for HDR10 to
    SDR tone mapping, and animated GIF video input sources.
  * api-change:``timestream-write``: This release adds the ability to ingest batched historical data
    or migrate data in bulk from S3 into Timestream using CSV files.
- from version 1.29.79
  * api-change:``connect``: StartTaskContact API now supports linked task creation with a new
    optional RelatedContactId parameter
  * api-change:``connectcases``: This release adds the ability to delete domains through the
    DeleteDomain API. For more information see
    https://docs.aws.amazon.com/cases/latest/APIReference/Welcome.html
  * api-change:``redshift``: Documentation updates for Redshift API bringing it in line with IAM best
    practices.
  * api-change:``securityhub``: New Security Hub APIs and updates to existing APIs that help you
    consolidate control findings and enable and disable controls across all supported standards
  * api-change:``servicecatalog``: Documentation updates for Service Catalog</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires
- Remove version constraint on python-pytest in BuildRequires
- Revert changes to Requires that introduced new incompatible syntax</changelog>
</package>
<package pkgid="bd760ec2d0f05abfad9f6672e6616ce1ac28b557c2a2beb2d58efb96cc3553c6" name="python3-chardet" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="150000.5.3.1"/>
  <changelog author="aloisio@gmx.com" date="1423569600">- Update to version 2.3.0
  * Added support for CP932 detection (thanks to @hashy)
  * Fixed an issue where UTF-8 with a BOM would not be detected
    as UTF-8-SIG (#8)
  * Modified chardetect to use argparse for argument parsing
  * Moved docs to a gh-pages branch. You can now access them
    at http://chardet.github.io
- Changelog on https://github.com/chardet/chardet/commits/2.3.0
- Other minor changes</changelog>
  <changelog author="arun@gmx.de" date="1431345600">- specfile:
  * added update alternative to prevent conflicts with python3 version
  * add tests</changelog>
  <changelog author="rjschwei@suse.com" date="1485777600">- Include in SLE 12 (bsc#1002895, FATE#321630)</changelog>
  <changelog author="aloisio@gmx.com" date="1489924800">- Converted to single spec.</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- do not use %py_ver, replace with %python_version</changelog>
  <changelog author="dmueller@suse.com" date="1497096000">- update to 3.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1498737600">- fix source link</changelog>
  <changelog author="dmueller@suse.com" date="1502798400">- add update-alternative support for py2/py3 coinstallability</changelog>
  <changelog author="tbechtold@suse.com" date="1503662400">- Fix build for Leap-42.3</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add update-alternatives post-requires</changelog>
  <changelog author="daniel.garcia@suse.com" date="1705406400">- Fix update-alternative in %postun, bsc#1218765</changelog>
</package>
<package pkgid="8d3702683f87fb7a6f0e13ea53b30067e1279caa5ee35774bb3e6a136f221e5d" name="python3-configobj" arch="noarch">
  <version epoch="0" ver="5.0.6" rel="150000.3.3.1"/>
  <changelog author="saschpe@suse.de" date="1323432000">- Spec file cleanup:
  * Use upstream tarball
  * Obsoleted empty doc package
  * Fix SLE-11 build
  * Use upstream description</changelog>
  <changelog author="bwiedemann@suse.com" date="1327406400">- fix Obsoletes</changelog>
  <changelog author="dimstar@opensuse.org" date="1328443200">- Really make the obsoletes sane: The package was called
  python-configobj-docs before, so that's what we need to obsolete
  (not -doc).
- The Obsoletes tag is for &lt;= %{version}, as the package existed in
  version 4.7.2, which is also when it was merged back. Obsoleting
  only &lt; 4.7.2 would cause conflicts when installing the newly
  merged package.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947200">- Spec file cleanups</changelog>
  <changelog author="cfarrell@suse.com" date="1338292800">- license update: BSD-3-Clause
  Refers only to the license available at
  http://www.voidspace.org.uk/python/license.shtml (which is BSD-3-Clause)</changelog>
  <changelog author="fcastelli@suse.com" date="1406116800">- Update to version 5.0.5:
  * BUGFIX: error in writing out config files to disk with non-ascii
    characters
  * BUGFIX: correcting that the code path fixed in 5.0.3 didn’t cover
    reading in config files
  * BUGFIX: not handling unicode encoding well, especially with respect to
    writing out files
  * Specific error message for installing version this version on Python
    versions older than 2.5
  * Documentation corrections
  * BUGFIX: Fixed regression on python 2.x where passing an encoding parameter
    did not convert a bytestring config file (which is the most common) to
    unicode. Added unit tests for this and related cases
  * BUGFIX: A particular error message would fail to display with a type error
    on python 2.6 only
  * Python 3 single-source compatibility at the cost of a more restrictive set
    of versions: 2.6, 2.7, 3.2, 3.3 (otherwise unchanged)</changelog>
  <changelog author="fcastelli@suse.com" date="1406203200">- Added runtime depedency: python-six</changelog>
  <changelog author="toddrme2178@gmail.com" date="1410436800">- Update to version 5.0.6
  * Improves error messages in certain edge cases</changelog>
  <changelog author="toddrme2178@gmail.com" date="1495627200">- Implement single-spec version.
- Fix source URL.</changelog>
  <changelog author="mmachova@suse.com" date="1688472000">- Add CVE-2023-26112.patch (bsc#1210070)</changelog>
</package>
<package pkgid="86d79e1579af138962c5d087dcfb9a5c38e19e6e58127f212db8b8b01b32edaf" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.45.1"/>
  <changelog author="dimstar@opensuse.org" date="1634126400">- BuildRequire rpm-build-python: The provider to inject python(abi)
  has been moved there. rpm-build pulls rpm-build-python
  automatically in when building anything against python3-base, but
  this implies that the initial build of python3-base does not
  trigger the automatic installation.</changelog>
  <changelog author="mcepl@suse.com" date="1635336000">- The previous construct works only on the current Factory, not
  in SLE.</changelog>
  <changelog author="schwab@suse.de" date="1635940800">- 0001-allow-for-reproducible-builds-of-python-packages.patch: ignore
  permission error when changing the mtime of the source file in presence
  of SOURCE_DATE_EPOCH</changelog>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
</package>
<package pkgid="2c87a813380b52893f8dd3ad497ebe1ba81d493cef322f00c2f74920640615c3" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.48.1"/>
  <changelog author="dmueller@suse.com" date="1638014400">- build against openssl 1.1 as it is incompatible with openssl 3.0+  (bsc#1190566)</changelog>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
</package>
<package pkgid="dcf0de52680345e5537a143d421651f237fc4f124422bbee12fb46157d0d0c58" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.51.1"/>
  <changelog author="mcepl@suse.com" date="1638187200">- Remove shebangs from from python-base libraries in _libdir
  (bsc#1193179, bsc#1192249).
- Readjust patches:
  - bpo-31046_ensurepip_honours_prefix.patch
  - decimal.patch
  - python-3.3.0b1-fix_date_time_compiler.patch</changelog>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
</package>
<package pkgid="f906d3b42a81a5c1c3e9450a3c08a65be557e29ad23306564a4d856da8b21d46" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.54.1"/>
  <changelog author="mcepl@suse.com" date="1639051200">- Don't use OpenSSL 1.1 on platforms which don't have it.</changelog>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
</package>
<package pkgid="9ddcdb8f15bf56b2a3d9bbd6934096ca858f561b745c7527a79c3942496eca2d" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.57.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1639656001">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
</package>
<package pkgid="326da39e3a8c4b666f277e3a5fe02928c3d5637037d39648b94bd3fb3612569e" name="python3-core" arch="src">
  <version epoch="0" ver="3.6.15" rel="150300.10.60.1"/>
  <changelog author="mcepl@suse.com" date="1639656000">- Don't use appstream-glib on SLE-12.
- Use Python 2-based Sphinx on SLE-12.
- No documentation on SLE-12.
- Add skip_SSL_tests.patch skipping tests because of patched
  OpenSSL (bpo#9425).</changelog>
  <changelog author="mcepl@suse.com" date="1643976000">- Rename 22198.patch into more descriptive remove-sphinx40-warning.patch.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1645531200">- Add patch support-expat-245.patch:
  * Support Expat &gt;= 2.4.5</changelog>
  <changelog author="mcepl@suse.com" date="1645876800">- Update bundled pip wheel to the latest SLE version patched
  against bsc#1186819 (CVE-2021-3572).</changelog>
  <changelog author="mcepl@suse.com" date="1654776000">- Add CVE-2015-20107-mailcap-unsafe-filenames.patch to avoid
  CVE-2015-20107 (bsc#1198511, gh#python/cpython#68966), the
  command injection in the mailcap module.
- Rename support-expat-245.patch to
  support-expat-CVE-2022-25236-patched.patch to unify the patch
  with other packages.
- Add bpo-46623-skip-zlib-s390x.patch skipping two failing tests
  on s390x.</changelog>
  <changelog author="steven.kowalik@suse.com" date="1662033600">- Add patch CVE-2021-28861-double-slash-path.patch:
  * http.server: Fix an open redirection vulnerability in the HTTP server
    when an URI path starts with //. (bsc#1202624, CVE-2021-28861)</changelog>
  <changelog author="mcepl@suse.com" date="1663329600">- Add CVE-2020-10735-DoS-no-limit-int-size.patch to fix
  CVE-2020-10735 (bsc#1203125) to limit amount of digits
  converting text to int and vice vera (potential for DoS).
  Originally by Victor Stinner of Red Hat.</changelog>
  <changelog author="mcepl@suse.com" date="1666958400">- Add CVE-2022-37454-sha3-buffer-overflow.patch to fix
  bsc#1204577 (CVE-2022-37454, gh#python/cpython#98517) buffer
  overflow in hashlib.sha3_* implementations (originally from the
  XKCP library).</changelog>
  <changelog author="mcepl@suse.com" date="1667995200">- Add CVE-2022-45061-DoS-by-IDNA-decode.patch to avoid
  CVE-2022-45061 (bsc#1205244) allowing DoS by IDNA decoding
  extremely long domain names.</changelog>
  <changelog author="mcepl@suse.com" date="1668686400">- Add bsc1188607-pythreadstate_clear-decref.patch to fix crash in
  the garbage collection (bsc#1188607).</changelog>
  <changelog author="mcepl@suse.com" date="1677067200">- Add bpo27321-email-no-replace-header.patch to stop
  email.generator.py from replacing a non-existent header
  (bsc#1208443, gh#python/cpython#71508).</changelog>
  <changelog author="mcepl@suse.com" date="1677672000">- Add CVE-2023-24329-blank-URL-bypass.patch (CVE-2023-24329,
  bsc#1208471) blocklists bypass via the urllib.parse component
  when supplying a URL that starts with blank characters</changelog>
  <changelog author="mcepl@suse.com" date="1678881600">- Add bpo-44434-libgcc_s-for-pthread_cancel.patch
  which eliminates unnecessary and dangerous calls to
  PyThread_exit_thread() (bsc#1203355).</changelog>
  <changelog author="steven.kowalik@suse.com" date="1681819200">- Use python3 modules to build the documentation.</changelog>
  <changelog author="mcepl@suse.com" date="1683115200">- Add CVE-2007-4559-filter-tarfile_extractall.patch to fix
  CVE-2007-4559 (bsc#1203750) by adding the filter for
  tarfile.extractall (PEP 706).</changelog>
  <changelog author="mcepl@suse.com" date="1683374400">- Add 99366-patch.dict-can-decorate-async.patch fixing
  gh#python/cpython#98086 (backport from Python 3.10 patch in
  gh#python/cpython!99366), fixing bsc#1211158.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1694433600">- Add CVE-2023-40217-avoid-ssl-pre-close.patch fixing
  gh#python/cpython#108310, backport from upstream patch
  gh#python/cpython#108315
  (bsc#1214692, CVE-2023-40217)</changelog>
  <changelog author="mcepl@cepl.eu" date="1702900800">- Refresh CVE-2023-27043-email-parsing-errors.patch to
  gh#python/cpython!111116, fixing bsc#1210638 (CVE-2023-27043).</changelog>
  <changelog author="mcepl@suse.com" date="1708689600">- (bsc#1219666, CVE-2023-6597) Add
  CVE-2023-6597-TempDir-cleaning-symlink.patch (patch from
  gh#python/cpython!99930) fixing symlink bug in cleanup of
  tempfile.TemporaryDirectory.
- Merge together bpo-36576-skip_tests_for_OpenSSL-111.patch into
  skip_SSL_tests.patch, and make them include all conditionals.</changelog>
  <changelog author="mcepl@suse.com" date="1712059200">- Add bpo38361-syslog-no-slash-ident.patch (bsc#1222109,
  gh#python/cpython!16557) fixes syslog making default "ident"
  from sys.argv[0].</changelog>
</package>
<package pkgid="aa91871a5ac77428fe8ef71773e2f17a39762ffc9ef7b78668dc936d8dfa8a54" name="python3-cryptography" arch="aarch64">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="82f56ba73171512dfa7b78c6f4bbd4eb740e2baf69e0a25e1703110fc62d7cda" name="python3-cryptography" arch="ppc64le">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="958f253ca0f9a3b9604cb9922194323afdedd8c5e93bd6d2ce00aadcb3811e46" name="python3-cryptography" arch="s390x">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="1163cf320b2838ea9802aa8f08ddf00ee15013045cd79bb7ffd66784b20c7947" name="python3-cryptography" arch="src">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="8d01db80914ea5adb8bfa4e7bd3ad7f8976aab6cc76859f1da5871870d8ca797" name="python3-cryptography" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="150400.20.3"/>
  <changelog author="tchvatal@suse.com" date="1534852800">- Update to 2.3.1:
  * updated tests for upstream wycheproof changes
  * many other tiny test tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
</package>
<package pkgid="d06ef5d371590a853f397809bb32b29d80ebe610838a1f2ee3bc50b81b4aa76d" name="python3-cryptography" arch="aarch64">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="3bfc8cfae91d3de265e3b39f3076abf7b18213fd6bc502c18051ccf5c2644ddc" name="python3-cryptography" arch="ppc64le">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="306dce7600fd5f5c5a8e0975e959a21477edb06250e4a31fdd83e692d377708f" name="python3-cryptography" arch="s390x">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="a4a0f0507d32123f80bd729e395cffc893d718a8a2cbb7a43f3f1a6c49eb1eb6" name="python3-cryptography" arch="src">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="a8b84b422a2c07f88d36f016fc559a51da7e2fa80c087e33c1e1f939cb5a8e3c" name="python3-cryptography" arch="x86_64">
  <version epoch="0" ver="3.3.2" rel="150400.23.1"/>
  <changelog author="tchvatal@suse.com" date="1544097600">- Fix fdupes call</changelog>
  <changelog author="mcepl@suse.com" date="1544097601">- Update to 2.4.1:
  * Dropped support for LibreSSL 2.4.x.
  * Deprecated OpenSSL 1.0.1 support. OpenSSL 1.0.1 is no
    longer supported by the OpenSSL project. At this time there
    is no time table for dropping support, however we strongly
    encourage all users to upgrade or install cryptography from
    a wheel.
  * Added initial :doc:`OCSP &lt;/x509/ocsp&gt;` support.
  * Added support for cryptography.x509.PrecertPoison.</changelog>
  <changelog author="mpluskal@suse.com" date="1546516800">- Update to version 2.4.2:
  * Updated Windows, macOS, and manylinux1 wheels to be compiled
    with OpenSSL 1.1.0j.</changelog>
  <changelog author="michael@stroeder.com" date="1548417600">- Dependency on python-idna changed to "Recommends" aligned with
  change in upstream source (see below)
- update to 2.5:
  * BACKWARDS INCOMPATIBLE: U-label strings were deprecated in version 2.1,
    but this version removes the default idna dependency as well. If you still
    need this deprecated path please install cryptography with the idna extra:
    pip install cryptography[idna].
  * BACKWARDS INCOMPATIBLE: The minimum supported PyPy version is now 5.4.
  * Numerous classes and functions have been updated to allow bytes-like
    types for keying material and passwords, including symmetric algorithms,
    AEAD ciphers, KDFs, loading asymmetric keys, and one time password classes.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with OpenSSL 1.1.1a.
  * Added support for SHA512_224 and SHA512_256 when using OpenSSL 1.1.1.
  * Added support for SHA3_224, SHA3_256, SHA3_384, and SHA3_512 when using OpenSSL 1.1.1.
  * Added support for X448 key exchange when using OpenSSL 1.1.1.
  * Added support for SHAKE128 and SHAKE256 when using OpenSSL 1.1.1.
  * Added initial support for parsing PKCS12 files with load_key_and_certificates().
  * Added support for IssuingDistributionPoint.
  * Added rfc4514_string() method to x509.Name,
    x509.RelativeDistinguishedName, and x509.NameAttribute to format the name
    or component an RFC 4514 Distinguished Name string.
  * Added from_encoded_point(), which immediately checks if the point is on
    the curve and supports compressed points. Deprecated the previous method
    from_encoded_point().
  * Added signature_hash_algorithm to OCSPResponse.
  * Updated X25519 key exchange support to allow additional serialization
    methods. Calling public_bytes() with no arguments has been deprecated.
  * Added support for encoding compressed and uncompressed points via
    public_bytes(). Deprecated the previous method encode_point().</changelog>
  <changelog author="michael@stroeder.com" date="1551355200">- update to 2.6.1:
  * BACKWARDS INCOMPATIBLE:
    Removedcryptography.hazmat.primitives.asymmetric.utils.encode_rfc6979_signature
    andcryptography.hazmat.primitives.asymmetric.utils.decode_rfc6979_signature,
    which had been deprecated for nearly 4 years. Use encode_dss_signature()
    and decode_dss_signature()instead.
  * BACKWARDS INCOMPATIBLE: Removed cryptography.x509.Certificate.serial, which
    had been deprecated for nearly 3 years. Use serial_number instead.
  * Updated Windows, macOS, and manylinux1 wheels to be compiled with
    OpenSSL 1.1.1b.
  * Added support for Ed448 signing when using OpenSSL 1.1.1b or newer.
  * Added support for Ed25519 signing when using OpenSSL 1.1.1b or newer.
  * load_ssh_public_key() can now load ed25519 public keys.
  * Add support for easily mapping an object identifier to its elliptic curve
    class viaget_curve_for_oid().
  * Add support for OpenSSL when compiled with the no-engine
    (OPENSSL_NO_ENGINE) flag.</changelog>
  <changelog author="tchvatal@suse.com" date="1559131200">- Simplify the test execution to be more understandable</changelog>
  <changelog author="mimi.vx@gmail.com" date="1559563200">- update to 2.7
  * BACKWARDS INCOMPATIBLE: Removed the cryptography.hazmat.primitives.mac.MACContext interface.
  The CMAC and HMAC APIs have not changed, but they are no longer registered
  as MACContext instances.
  * Removed support for running our tests with setup.py test.
  * Add support for :class:`~cryptography.hazmat.primitives.poly1305.Poly1305`
  when using OpenSSL 1.1.1 or newer.
  * Support serialization with Encoding.OpenSSH and PublicFormat.OpenSSH
  in :meth:`Ed25519PublicKey.public_bytes &lt;cryptography.hazmat.primitives.asymmetric.ed25519.Ed25519PublicKey.public_bytes&gt;` .
  * Correctly allow passing a SubjectKeyIdentifier to :meth:`~cryptography.x509.AuthorityKeyIdentifier.from_issuer_subject_key_identifier`
  and deprecate passing an Extension object.</changelog>
  <changelog author="michael@stroeder.com" date="1571313600">- update to 2.8
  * Added support for Python 3.8.
  * Added class methods Poly1305.generate_tag and Poly1305.verify_tag for Poly1305 sign and verify operations.
  * Deprecated support for OpenSSL 1.0.1. Support will be removed in cryptography 2.9.
  * We now ship manylinux2010 wheels in addition to our manylinux1 wheels.
  * Added support for ed25519 and ed448 keys in the CertificateBuilder, CertificateSigningRequestBuilder, CertificateRevocationListBuilder and OCSPResponseBuilder.
  * cryptography no longer depends on asn1crypto.
  * FreshestCRL is now allowed as a CertificateRevocationList extension.</changelog>
  <changelog author="michael@stroeder.com" date="1589544000">- update to 2.9.2
  * 2.9.2 - 2020-04-22
  - Updated the macOS wheel to fix an issue where it would not run on macOS versions older than 10.15.
  * 2.9.1 - 2020-04-21
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1g.
  * 2.9 - 2020-04-02
  - BACKWARDS INCOMPATIBLE: Support for Python 3.4 has been removed due to
    low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: Support for OpenSSL 1.0.1 has been removed.
    Users on older version of OpenSSL will need to upgrade.
  - BACKWARDS INCOMPATIBLE: Support for LibreSSL 2.6.x has been removed.
  - Removed support for calling public_bytes() with no arguments, as per
    our deprecation policy. You must now pass encoding and format.
  - BACKWARDS INCOMPATIBLE: Reversed the order in which rfc4514_string()
    returns the RDNs as required by RFC 4514.
  - Updated Windows, macOS, and manylinux wheels to be compiled with OpenSSL 1.1.1f.
  - Added support for parsing single_extensions in an OCSP response.
  - NameAttribute values can now be empty strings.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1595937600">- update to 3.0
- refreshed disable-uneven-sizes-tests.patch and  skip_openssl_memleak_test.patch
  * Removed support for passing an Extension instance
    to from_issuer_subject_key_identifier(), as per our deprecation policy.
  * Support for LibreSSL 2.7.x, 2.8.x, and 2.9.0 has been removed
  * Dropped support for macOS 10.9, macOS users must upgrade to 10.10 or newer.
  * RSA generate_private_key() no longer accepts public_exponent values except
    65537 and 3 (the latter for legacy purposes).
  * X.509 certificate parsing now enforces that the version field contains
    a valid value, rather than deferring this check until version is accessed.
  * Deprecated support for Python 2
  * Added support for OpenSSH serialization format for ec, ed25519, rsa and dsa
    private keys: load_ssh_private_key() for loading and OpenSSH for writing.
  * Added support for OpenSSH certificates to load_ssh_public_key().
  * Added encrypt_at_time() and decrypt_at_time() to Fernet.
  * Added support for the SubjectInformationAccess X.509 extension.
  * Added support for parsing SignedCertificateTimestamps in OCSP responses.
  * Added support for parsing attributes in certificate signing requests via get_attribute_for_oid().
  * Added support for encoding attributes in certificate signing requests via add_attribute().
  * On OpenSSL 1.1.1d and higher cryptography now uses OpenSSL’s built-in CSPRNG
    instead of its own OS random engine because these versions of OpenSSL properly reseed on fork.
  * Added initial support for creating PKCS12 files with serialize_key_and_certificates().</changelog>
  <changelog author="dmueller@suse.com" date="1600430400">- update to 3.1:
  * **BACKWARDS INCOMPATIBLE:** Removed support for ``idna`` based
    :term:`U-label` parsing in various X.509 classes. This support was originally
    deprecated in version 2.1 and moved to an extra in 2.5.
  * Deprecated OpenSSL 1.0.2 support. OpenSSL 1.0.2 is no longer supported by
    the OpenSSL project. The next version of ``cryptography`` will drop support
    for it.
  * Deprecated support for Python 3.5. This version sees very little use and will
    be removed in the next release.
  * ``backend`` arguments to functions are no longer required and the
    default backend will automatically be selected if no ``backend`` is provided.
  * Added initial support for parsing certificates from PKCS7 files with
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_pem_pkcs7_certificates`
    and
    :func:`~cryptography.hazmat.primitives.serialization.pkcs7.load_der_pkcs7_certificates`
    .
  * Calling ``update`` or ``update_into`` on
    :class:`~cryptography.hazmat.primitives.ciphers.CipherContext` with ``data``
    longer than 2\ :sup:`31` bytes no longer raises an ``OverflowError``. This
    also resolves the same issue in :doc:`/fernet`.</changelog>
  <changelog author="dmueller@suse.com" date="1601294400">- update to 3.1.1:
  * wheels compiled with OpenSSL 1.1.1h.</changelog>
  <changelog author="michael@stroeder.com" date="1603713600">- update to 3.2 (bsc#1178168, CVE-2020-25659):
  * CVE-2020-25659: Attempted to make RSA PKCS#1v1.5 decryption more constant time,
    to protect against Bleichenbacher vulnerabilities. Due to limitations imposed
    by our API, we cannot completely mitigate this vulnerability.
  * Support for OpenSSL 1.0.2 has been removed.
  * Added basic support for PKCS7 signing (including SMIME) via PKCS7SignatureBuilder.
- drops 5507-mitigate-Bleichenbacher-attacks.patch on older dists</changelog>
  <changelog author="michael@stroeder.com" date="1603886400">- update to 3.2.1:
  Disable blinding on RSA public keys to address an error with
  some versions of OpenSSL.</changelog>
  <changelog author="mcepl@suse.com" date="1607256000">- Remove unnecessary dependency virtualenv.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- update to 3.3.0
  - BACKWARDS INCOMPATIBLE: Support for Python 3.5 has been removed
    due to low usage and maintenance burden.
  - BACKWARDS INCOMPATIBLE: The GCM and AESGCM now require 64-bit
    to 1024-bit (8 byte to 128 byte) initialization vectors. This
    change is to conform with an upcoming OpenSSL release that will
    no longer support sizes outside this window.
  - BACKWARDS INCOMPATIBLE: When deserializing asymmetric keys we
    now raise ValueError rather than UnsupportedAlgorithm when an
    unsupported cipher is used. This change is to conform with an
    upcoming OpenSSL release that will no longer distinguish
    between error types.
  - BACKWARDS INCOMPATIBLE: We no longer allow loading of finite
    field Diffie-Hellman parameters of less than 512 bits in
    length. This change is to conform with an upcoming OpenSSL
    release that no longer supports smaller sizes. These keys were
    already wildly insecure and should not have been used in any
    application outside of testing.
  - Updated Windows, macOS, and manylinux wheels to be compiled
    with OpenSSL 1.1.1i.
  - Python 2 support is deprecated in cryptography. This is the
    last release that will support Python 2.
  - Added the recover_data_from_signature() function to
    RSAPublicKey for recovering the signed data from an RSA
    signature.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 3.3.1:
  * Re-added a legacy symbol causing problems for older ``pyOpenSSL`` use</changelog>
  <changelog author="michael@stroeder.com" date="1612699200">- update to 3.3.2 (bsc#1182066, CVE-2020-36242, bsc#1198331):
  * SECURITY ISSUE: Fixed a bug where certain sequences of update()
    calls when symmetrically encrypting very large payloads (&gt;2GB) could
    result in an integer overflow, leading to buffer overflows.
    CVE-2020-36242
  - drops CVE-2020-36242-buffer-overflow.patch on older dists</changelog>
  <changelog author="daniel.garcia@suse.com" date="1676289600">- Add patch CVE-2023-23931-dont-allow-update-into.patch (bsc#1208036, CVE-2023-23931)
  * Don't allow update_into to mutate immutable objects</changelog>
  <changelog author="daniel.garcia@suse.com" date="1701259200">- Add CVE-2023-49083.patch to fix A null-pointer-dereference and
  segfault could occur when loading certificates from a PKCS#7 bundle.
  bsc#1217592</changelog>
</package>
<package pkgid="6ce38c4b81cdac05941c5e9a23ca00dcdfd5f6c769db6730521e062f848e7483" name="python3-cssselect" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="150000.3.5.1"/>
  <changelog author="iacobcatalin@gmail.com" date="1357646400">- Initial package 0.7.1</changelog>
  <changelog author="saschpe@suse.de" date="1358164800">- Minimal cleanup</changelog>
  <changelog author="arun@gmx.de" date="1364472000">- updated to 0.8
  Changelog (http://pythonhosted.org/cssselect/#changelog):
    Released on 2013-03-15.
    Improvements:
    [#22] Let extended translators override what XPathExpr class is used
    [#19] Use the built-in lang() XPath function for implementing the :lang() pseudo-class with XML documents. This is probably faster than ancestor-or-self::.
    Bug fixes:
    [#14] Fix non-ASCII pseudo-classes. (Invalid selector instead of crash.)
    [#20] As per the spec, elements containing only whitespace are not considered empty for the :empty pseudo-class.</changelog>
  <changelog author="arun@gmx.de" date="1373371200">- Packaged LICENSE file
  fixes bnc#828513
  Bug 828513 - LICENSE not packaged in python3-cssselect 0.8</changelog>
  <changelog author="p.drouand@gmail.com" date="1385208000">- Update to version 0.9.1
  + **Backward incompatible change from 0.9**:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to ignoring
    pseudo-elements, as it did in 0.8 and previous versions.
    (:meth:`~GenericTranslator.css_to_xpath` doesn’t change.)
  + Drop official support for Python 2.4 and 3.1,
    as testing was becoming difficult. Nothing will break overnight,
    but future releases may on may not work on these versions.
    Older releases will remain available on PyPI.
- Changes from 0.9
  + Add parser support for :attr:`functional pseudo-elements
    &lt;Selector.pseudo_element&gt;`.
  + This version accidentally introduced a backward incompatible change:
    :meth:`~GenericTranslator.selector_to_xpath` defaults to rejecting
    pseudo-elements instead of ignoring them.
- Remove useless CFLAGS definition
- Add README.rst, CHANGES and AUTHORS in package documentation</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- update to 1.0.1:
  * Add support for Python 3.6.
  * Documentation hosted `on Read the Docs &lt;https://cssselect.readthedocs.io/&gt;`_
  * Add code coverage reports.
  * Fix ``:nth-*(an+b)`` pseudo-classes selectors.
    (except ``*:nth-child()`` which looks untranslatable to XPath 1.0.)
  * Distribute as universal wheel.
  * Add support for Python 3.3, 3.4 and 3.5.
  * Drop support for Python 2.5 as testing is getting difficult.
  * Improve tests on pseudo-elements.
- Switch to singlespec approach</changelog>
  <changelog author="arun@gmx.de" date="1515240000">- specfile:
  * update copyright year
- update to version 1.0.3:
  * Fix artifact uploads to pypi
- changes from version 1.0.2:
  * Drop support for Python 2.6 and Python 3.3.
  * Fix deprecation warning in Python 3.6.
  * Minor cleanups.</changelog>
</package>
<package pkgid="2e495409359fa5f41abcb39533738396b6c76758ad6ca5238e7977607d234594" name="python3-docutils" arch="noarch">
  <version epoch="0" ver="0.14" rel="150000.3.4.1"/>
  <changelog author="toddrme2178@gmail.com" date="1405425600">- Update to 0.12
  * docs/ref/rst/directives.txt
  - Update "math" and "csv-table" descriptions.
  * docutils/parsers/rst/directives/images.py
  - Fix [258] figwidth="image" generates unitless width value.
  * docutils/parsers/rst/states.py
  - Improve error report when a non-ASCII character is specified as
    delimiter, quote or escape character under Python 2.
    Fixes [ 249 ] and [ 250 ].
  * docutils/writers/html4css1/__init__.py
  - Don't add newline after inline math.
    Thanks to Yury G. Kudryashov for the patch.
  * docutils/writers/latex2e/__init__.py
  - Fix [ 239 ] Latex writer glues paragraphs with figure floats.
  - Apply [ 116 ] by Kirill Smelkov. Don't hardcode \large for subtitle.
  * docutils/writers/odf_odt/__init__.py
  - Apply patch by Jakub Wilk to fix bug [ 100 ].
  * test/test_error_reporting.py
  - Fix [ 223 ] by removing redundant tests we do not have control over.
  * test/test_nodes.py
  - Apply [ 115 ] respect fixed 2to3 string literal conversion behavior.</changelog>
  <changelog author="ledest@gmail.com" date="1414584000">- fix bashisms in pre script</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="dmueller@suse.com" date="1489060800">- update to 0.13.1:
  * New HTML writer generating HTML 5.
  * languages: persian/farsi (fa) and latvian (la) mappings.
  * change default base url for :rfc: to http://tools.ietf.org/html/
  latex2e: Fix admonition width, remove deprecated options,
  better tablewidth auto, ...</changelog>
  <changelog author="aloisio@gmx.com" date="1490356800">- Converted to single-spec
- Added python-docutils-rpmlintrc</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492689600">- Fix url
- Executables are python-independent so only have the python3
  version provide them.
- Implement update-alternatives to avoid conflict with rst2html5</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493640000">- Make only the python2 package provide the "docutils" package.</changelog>
  <changelog author="jmatejek@suse.com" date="1496750400">- only emit rst2html5 alternatives for python 3
- switch the "docutils" provides to the python 3 package (all the comands live there)
  (this fixes bsc#1039394)</changelog>
  <changelog author="arun@gmx.de" date="1510315200">- specfile:
  * add binary rst2html4
- update to version 0.14:
  * Enable validation of Docutils XML documents against the DTD:
    Use attribute type NMTOKEN instead of REFID for the `refid` attribute
    and NMTOKENS for `backrefs`: REFID refers to an ID type instance,
    however, the `ids` attribute cannot use the ID type because `XML only
    allows one ID per Element Type`__ and doesn't support a multiple-ID
    "IDS" attribute type.
  * Added documentation for escaped whitespace in URI contexts.
  * Clarify use of Unicode character categories.
  * Added functionality: escaped whitespace in URI contexts.
  * Consistent handling of all whitespace characters in inline markup
    recognition. Fixes [ 307 ] and [ 3402314 ] (now [ 173 ]).
  * Added support for escaped whitespace in URI contexts.
  * Rework patch [ 120 ] (revert change to "Table.get_column_widths()"
    that led to problems in an application with a custom table
    directive).
  * Fix [ 320 ] Russian docinfo fields not recognized.
  * Don't add a second ID to problematic references.
  * Fix SmartQuotes: warn only once if language is unsupported, keep
    "rawsource" when "educating" quotes.
  * Added "split_escaped_whitespace" function, support for escaped
    whitespace in URI contexts.
  * Fix [ 321 ] Import block might cause name error.
  * Update quote definitions for languages et, fi, fr, ro, sv, tr, uk.
  * New quote definitions for hr, hsb, hu, lv, sh, sl, sr.
  * Fix [ 313 ] Differentiate apostrophe from closing single quote (if
    possible).
  * Fix [ 317 ] Extra space inserted with French smartquotes.
  * Add command line interface for stand-alone use (requires 2.7).
  * Provide default title in metadata (required by HTML5).
  * Fix [ 312 ] HTML writer generates invalid HTML if the table has
    two tags.
  * Fix [ 319 ] The MathJax CDN shut down on April 30, 2017. For
    security reasons, we don't use a third party public installation as default but
    warn if math-output_ is set to MathJax without specifying a URL.
  * Apply [ 125 ] HTML writer: respect automatic table column sizing.
  * Handle class arguments for block-level elements by wrapping them
    in a "DUclass" environment. This replaces the special handling for
    "epigraph" and "topic" elements.
  * Apply [ 141 ] Handling inline in manpage writer.
  * Command setting "language" now sets the default language of the
    generated ODF document.
  * The use of image directive options :width: (%), :scale:, etc now
    set the width/height/size of images in the generated ODF
    documents.
  * The heading/title of admonitions now reflects the language
    specified by the "language" setting.
  * Fixed [ 306 ] only first of multiple "image" directives with the
    same URL shown in output.
  * Fixed [ 282 ] python3: AttributeError.
  * tools/rst2html4.py: New front-end.
  * tools/dev/generate_punctuation_chars.py: New skript to test and
    update utils.punctuation_chars.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1707134400">- Use update-alternatives for all binary scripts and provide
  /usr/bin/docutils to avoid conflict with python311-docutils
  bsc#1219501</changelog>
</package>
<package pkgid="43248a9f77ab6d80b25da891b65429ef2cc934804a672fa3ce7c26fafb3b33cd" name="python3-ec2metadata" arch="noarch">
  <version epoch="0" ver="5.0.0" rel="150000.3.12.1"/>
  <changelog author="rschweikert@suse.com" date="1401451200">- Include in SLE 12 (FATE #315990)</changelog>
  <changelog author="rschweikert@suse.com" date="1403524800">- Switch the upstream URL to the forked project, origin project
  appears not to be maintained</changelog>
  <changelog author="rschweikert@suse.com" date="1407931200">- Bump to version 1.5.2
  + fix the no argument use case</changelog>
  <changelog author="rjschwei@suse.com" date="1427803200">- Bump to version 1.5.3 (bnc#924626)
  + Properly write metadata to file if no query argument is provided
  + Properly generate XML for 'public-keys' query option
  + Document the 'api' option in the help message
  + Alpha sort the options displayed with the help message</changelog>
  <changelog author="jgleissner@suse.com" date="1471435200">- Bump to version 1.5.4 (bsc#994138 bsc#994139)
  + ec2metadata: do not use proxy</changelog>
  <changelog author="rjschwei@suse.com" date="1505908800">- Update to version 2.0.0
  + Port to Python 3</changelog>
  <changelog author="rjschwei@suse.com" date="1575460800">- Update to version 3.0.2 (bsc#1157901, bsc#1157902)
  + Add man page
  + Support accessing IMDS with a token (API change) to support
    disabling unauthenticated acces of IMDS</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 3.0.3 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1665403200">- Update to version 4.0.0 (bsc#1204066)
  + Disambiguate cli options for duplicate endpoints. This is an
    incompatible change for some API versions of IMDS. When a duplicate
    endpoint is detected the cli option for both endpoints is expanded to a
    unique name.</changelog>
  <changelog author="rjschwei@suse.com" date="1692792000">- Update to version 5.0.0 (bsc#1214215)
  + Remove the --use-token command line option. Aws is deprecating access
    to instance metadata without authentication token. Ability to access
    metadat without token has been removed
  + Support access to the metadata server over IPv6. If the customer
    enables the IPv6 endpoint for an instance it will be preferred over the
    IPv4 endpoint</changelog>
</package>
<package pkgid="05409f20f9903715b80b2fcfbd030a0826e58b568d387e786dd4d034fd1f2600" name="python3-ec2metadata" arch="src">
  <version epoch="0" ver="5.0.0" rel="150000.3.12.1"/>
  <changelog author="rschweikert@suse.com" date="1401451200">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1401451201">- Include in SLE 12 (FATE #315990)</changelog>
  <changelog author="rschweikert@suse.com" date="1403524800">- Switch the upstream URL to the forked project, origin project
  appears not to be maintained</changelog>
  <changelog author="rschweikert@suse.com" date="1407931200">- Bump to version 1.5.2
  + fix the no argument use case</changelog>
  <changelog author="rjschwei@suse.com" date="1427803200">- Bump to version 1.5.3 (bnc#924626)
  + Properly write metadata to file if no query argument is provided
  + Properly generate XML for 'public-keys' query option
  + Document the 'api' option in the help message
  + Alpha sort the options displayed with the help message</changelog>
  <changelog author="jgleissner@suse.com" date="1471435200">- Bump to version 1.5.4 (bsc#994138 bsc#994139)
  + ec2metadata: do not use proxy</changelog>
  <changelog author="rjschwei@suse.com" date="1505908800">- Update to version 2.0.0
  + Port to Python 3</changelog>
  <changelog author="rjschwei@suse.com" date="1575460800">- Update to version 3.0.2 (bsc#1157901, bsc#1157902)
  + Add man page
  + Support accessing IMDS with a token (API change) to support
    disabling unauthenticated acces of IMDS</changelog>
  <changelog author="rjschwei@suse.com" date="1596456000">- Update to version 3.0.3 (bsc#1174743, bsc#1174837)
  + Prefer IMDSv2 and switch all IMDS access requests to support v2 token
    based access method.</changelog>
  <changelog author="rjschwei@suse.com" date="1665403200">- Update to version 4.0.0 (bsc#1204066)
  + Disambiguate cli options for duplicate endpoints. This is an
    incompatible change for some API versions of IMDS. When a duplicate
    endpoint is detected the cli option for both endpoints is expanded to a
    unique name.</changelog>
  <changelog author="rjschwei@suse.com" date="1692792000">- Update to version 5.0.0 (bsc#1214215)
  + Remove the --use-token command line option. Aws is deprecating access
    to instance metadata without authentication token. Ability to access
    metadat without token has been removed
  + Support access to the metadata server over IPv6. If the customer
    enables the IPv6 endpoint for an instance it will be preferred over the
    IPv4 endpoint</changelog>
</package>
<package pkgid="43ca3616a1addd4bee669ffbaefbfa91e81b909062104de3fdeda844fd17c95e" name="python3-evtx" arch="noarch">
  <version epoch="0" ver="0.5.3b" rel="150400.20.30"/>
  <changelog author="cbosdonnat@suse.com" date="1461672000">- Version 0.3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1493812800">- Update to 0.5.3</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="carnold@suse.com" date="1648814400">- bsc#1197837 - FTBFS: python-evtx won't compile on SP4
  python-evtx.spec</changelog>
  <changelog author="daniel.garcia@suse.com" date="1690891200">- Remove %py_requires macro call, it's too old and creates problems
  with python3 build.</changelog>
</package>
<package pkgid="4d3cc289ece627d82be653cda3aa1bd38318836905d475e27e6adba53426c5bd" name="python3-evtx" arch="src">
  <version epoch="0" ver="0.5.3b" rel="150400.20.30"/>
  <changelog author="cbosdonnat@suse.com" date="1461672000">- Version 0.3.1</changelog>
  <changelog author="cbosdonnat@suse.com" date="1493812800">- Update to 0.5.3</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="carnold@suse.com" date="1648814400">- bsc#1197837 - FTBFS: python-evtx won't compile on SP4
  python-evtx.spec</changelog>
  <changelog author="daniel.garcia@suse.com" date="1690891200">- Remove %py_requires macro call, it's too old and creates problems
  with python3 build.</changelog>
</package>
<package pkgid="3832cd92124a5206b468964430e57146d5469aafb9866aaa53989a2660dda10d" name="python3-firewall" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.12.1"/>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
  <changelog author="mohd.saquib@suse.com" date="1689076800">- Fix firewalld does not longer understand IPv4 network masks
  of type `255.255.255.0`
  Added following patch (boo#1212974)
  [+ 0004-fix_rich_source_address_with_netmask.patch]</changelog>
</package>
<package pkgid="c9666f8131a04887aac5e26f51197ac5e98fdd91813aac6c870eb6e9e516cc9b" name="python3-firewall" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150400.8.9.1"/>
  <changelog author="Mathias.Homann@opensuse.org" date="1570708800">- rebased the original patch from revision 19</changelog>
  <changelog author="ngompa13@gmail.com" date="1574596800">- Replace incorrect usage of %_libexecdir with %_prefix/lib</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1580817600">- No longer recommend -lang: supplements are in use.</changelog>
  <changelog author="hpj@urpla.net" date="1583668800">- Update to version 0.7.3:
  * release: v0.7.3
  * chore: update translations
  * doc: README: add note about integration tests
  * test: check-container: also run check-integration
  * test: integration: NM zone overrides interface on reload
  * test: build: support integration tests
  * test: functions: add macro NMCLI_CHECK
  * test: functions: new macros for starting/stopping NetworkManager
  * fix: test: leave "cleanup" for tests cases
  * test: check-container: add support for fedora rawhide
  * test: check-container: add support for debian sid
  * test: build: add support for running in containers
  * fix: test/functions: FWD_END_TEST: improve grep for errors/warnings
  * fix: test: direct passthrough: no need to check for dummy module
  * fix: test: CHECK_NAT_COEXISTENCE: only check for kernel version
  * fix: reload: let NM interface assignments override permanent config
  * chore: tests: rename IF_IPV6_SUPPORTED to IF_HOST_SUPPORTS_IPV6_RULES
  * fix: tests: convert host ipv6 checks to runtime
  * fix: tests: convert ip6tables checks to runtime
  * fix: tests: convert probe of nft numeric args to runtime
  * fix: tests: convert nftables fib checks to runtime
  * fix: build: distribute testsuite
  * fix: don't probe for available kernel modules
  * fix: failure to load modules no longer fatal
  * fix: tests/functions: canonicalize XML output
  * chore: doc: update authors
  * fix: test: use debug output based on autotest variable
  * fix: src/tests/Makefile: distclean should clean atconfig</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1585915200">- Update to 0.7.4
  This is a bug fix only release.
  However, it does reintroduce the zone drifting bug as a feature. See #258 and #441. This behavior is disabled by default.
  * improvement: build: add an option to disable building documentation
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don't print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * fix: tests: regenerate testsuite if .../{cli,python}/*.at changes
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify --set-target values "default" vs "reject"</changelog>
  <changelog author="mrostecki@suse.com" date="1597233600">- Update to version 0.7.5 (jsc#SLE-12281):
  * release: v0.7.5
  * chore(translation): merge from master
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter Fixes: rhbz1541077
  * test(rhbz1483921): better test name
  * fix(cli): add --zone is an invalid option with --direct
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * docs: replace occurrences of the term blacklist with denylist
  * docs(README): add libxslt for doc generation
  * test(rich): source mac with nftables backend
  * fix(firewall-offline-cmd): remove instances of "[P]" in help text
  * test(check-container): add support for centos8 stream
  * test(functions): use IndividualCalls if host doesn't support nft rule index
  * test(functions): add macro IF_HOST_SUPPORTS_NFT_RULE_INDEX
  * test(dbus): better way to check IPv6_rpfilter expected value
  * fix(ipset): flush the set if IndividiualCalls=yes
  * test(ipv6): skip square bracket address tests if ipv6 not available
  * test(gh509): only run test for nftables backend
  * fix(dbus): service: don't cleanup config for old set APIs
  * fix(config): bool values in dict based import/export
  * fix(doc): dbus: signatures for zone tuple based APIs
  * test(dbus): zone: fix zone runtime functional test title
  * test(dbus): zone: fix false failure due to list order
  * fix(client): addService needs to reduce tuple size
  * test(direct): rule in a zone chain
  * fix(direct): rule in a zone chain
  * test(dbus): zone: verify runtime config APIs
  * test(dbus): zone: verify permanent config APIs
  * fix(systemd): Conflict with nftables.service
  * fix: test/regression/gh599: use expr to be more portable
  * test: dbus: zone: verify runtime config API signatures
  * test: dbus: zone: verify permanent config API signatures
  * fix: test/regression/gh599: fix if not using debug output
  * test: log: verify logging still works after truncate
  * test: ipset: verify port ranges for non-default protocol</changelog>
  <changelog author="dmueller@suse.com" date="1597579200">- update to 0.8.3:
  * nftables: convert to libnftables JSON interface
  * service: new “helper” element to replace “module” More accurately represents the conntrack helper. Deprecates “module”.
  * allow custom helpers using standard helper modules (rhbz 1733066)
  * testsuite is now shipped in the dist tarball
  * Typo in firewall-config(1)
  * Fix typo in TFTP service description
  * doc: README: add note about language translations
  * fix: rich: source/dest only matching with mark action
  * feat: AllowZoneDrifting config option
  * feat: nftables: support AllowZoneDrifting=yes
  * feat: ipXtables: support AllowZoneDrifting=yes
  * fix: firewall-offline-cmd: Don’t print warning about AllowZoneDrifting
  * fix: add logrotate policy
  * doc: direct: add CAVEATS section
  * fix: checkIP6: strip leading/trailing square brackets
  * fix: nftables: remove square brackets from IPv6 addresses
  * fix: ipXtables: remove square brackets from IPv6 addresses
  * fix: nftables: ipset types using “port”
  * fix: nftables: zone dispatch with multidimensional ipsets
  * fix: ipset: destroy runtime sets on reload/stop
  * fix: port: support querying sub ranges
  * fix: source_port: support querying sub ranges
  * doc: specify accepted characters for object names
  * fix: doc: address copy/paste mistakes in short/description
  * fix: configure: atlocal: quote variable values
  * fix: nftables: allow set intervals with concatenations
  * doc: clarify –set-target values “default” vs “reject”
  * fix: update dynamic DCE RPC ports in freeipa-trust service
  * fix: nftables: ipset: port ranges for non-default protocols
  * fix(systemd): Conflict with nftables.service
  * fix(direct): rule in a zone chain
  * fix(client): addService needs to reduce tuple size
  * fix(doc): dbus: signatures for zone tuple based APIs
  * fix(config): bool values in dict based import/export
  * fix(dbus): service: don’t cleanup config for old set APIs
  * fix(ipset): flush the set if IndividiualCalls=yes
  * fix(firewall-offline-cmd): remove instances of “[P]” in help text
  * fix(rich): source mac with nftables backend
  * docs: replace occurrences of the term blacklist with denylist
  * fix: core: rich: Catch ValueError on non-numeric priority values
  * docs(README): add libxslt for doc generation
  * fix(cli): add –zone is an invalid option with –direct
  * fix(cli): add ipset type hash:mac is incompatible with the family parameter</changelog>
  <changelog author="callumjfarmer13@gmail.com" date="1599220800">- update to 0.9.0:
  * New major features
  * prevention of Zone Drifting
  * Intra Zone Forwarding
  * Policy Objects
  * For a full list of changes, see
    https://github.com/firewalld/firewalld/compare/v0.8.0...v0.9.0</changelog>
  <changelog author="mrostecki@suse.com" date="1599652800">- Add python3-nftables as a requirement.</changelog>
  <changelog author="fbui@suse.com" date="1599825600">- Make use of %service_del_postun_without_restart
  And stop using DISABLE_RESTART_ON_UPDATE as this interface is
  obsolete.</changelog>
  <changelog author="mrostecki@suse.com" date="1604923200">- Remove the patch which enforces usage of iptables instead of
  nftables (jsc#SLE-16300):
  * 0001-firewall-backend-Switch-default-backend-to-iptables.patch
- Add firewalld zone for the docker0 interface. This is the
  workaround for lack of nftables support in docker. Without that
  additional zone, containers have no Internet connectivity.
  (rhbz#1817022, jsc#SLE-16300)
- Update to 0.9.1:
  * Bugfixes:
  * docs(firewall-cmd): clarify lockdown whitelist command paths
  * fix(dbus): getActivePolicies shouldn't return a policy if a zone is not active
  * fix(policy): zone interface/source changes should affect all using zone</changelog>
  <changelog author="rfrohl@suse.com" date="1610625600">- Add dependency for firewall-offline-cmd (bsc#1180883)</changelog>
  <changelog author="mrostecki@suse.com" date="1611576000">- Update to 0.9.3 (jsc#SLE-17336):
  * docs(dbus): fix invalid method names
  * fix(forward): iptables: ipset used as zone source
  * fix(rich): non-printable characters removed from rich rules
  * docs(firewall-cmd): small description grammar fix
  * fix(rich): limit table to strip non-printables to C0 and C1
  * fix(zone): add source with mac address</changelog>
  <changelog author="mrostecki@suse.com" date="1611662400">- Disable FlushAllOnReload option to not retain interface to zone
  assignments and direct rules when using --reload option.
  * 0002-Disable-FlushAllOnReload-option.patch</changelog>
  <changelog author="mrostecki@suse.com" date="1617796800">- Remove dependency on firewalld from firewall-macros (bsc#1183404)</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- Fix modprobe.d directory for SLE15 SP3
- Always own %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mrostecki@suse.com" date="1647432000">- Add patch which fixes the zone configuration (bsc#1191837)
  * 0001-chore-fw_zone-call-permanent-config-checks-at-runtim.patch</changelog>
  <changelog author="witold.bedyk@suse.com" date="1648468800">- Provide dummy firewalld-prometheus-config package (bsc#1197042)</changelog>
  <changelog author="sflees@suse.de" date="1652097600">- Fix regression introduced in previous patch (an api change to a
  function also needed backporting) (bsc#1198814)
  * feature-upstream-new-check-config-1.patch
  * feature-upstream-new-check-config-2.patch</changelog>
  <changelog author="mohd.saquib@suse.com" date="1673611200">- Fix firewall-offline-cmd fails with ERROR: Calling pre func
  Added following patch (bsc#1206928)
  [+ 0003-firewall-offline-cmd-fail-fix.patch]</changelog>
</package>
<package pkgid="a4079c5fcfcf29adb1ef1235705b5cd045e65dd840befb2434e9f148a4c2593f" name="python3-gobject" arch="aarch64">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="306924e26dcc1bfa19a0761b77683c9a424e5a22366338ac88612db78c854de2" name="python3-gobject" arch="ppc64le">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="d3fce46aff3eae208272d453701c0bb38482c8ef174d3bdd6ccf5187f4148411" name="python3-gobject" arch="s390x">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="65b9e57d18994cd0469574091a4b72f025153d395d13d1fb87993f7e56da6f77" name="python3-gobject" arch="src">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="cf95329815e04e020c38e9175b499e189f60647d1d8ee59156ccc083acac2174" name="python3-gobject" arch="x86_64">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="8087f3635ef2657cfb914dbef146458f36a3d9fbc8884371eb17422a9746e7d0" name="python3-gobject-Gdk" arch="aarch64">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="678703a57182c38e76e1044da0fc049733477cc353234f61966c6db60cc77c65" name="python3-gobject-Gdk" arch="ppc64le">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="ae6ef072c9244a7f66ef78c0b5ab65247c7b2d7436a42cb8a943186817bb0319" name="python3-gobject-Gdk" arch="s390x">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="72178df62b6eaaebf9f9e20b98dabe6afd4763a8560254b1983a8c00b5d42f79" name="python3-gobject-Gdk" arch="x86_64">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="4f3164dedb69d093f2743deddc76e4595c17146d76d5c10b3b05f0e4a5f31813" name="python3-gobject-cairo" arch="aarch64">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="eb0631786333ad02cff21dd54b36905e31cb7ba360b63cb37b8cc7b723fec63b" name="python3-gobject-cairo" arch="ppc64le">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="015a457079a9d8f3c105a3cce658abecb91a93cc17bcace6245a562654652e33" name="python3-gobject-cairo" arch="s390x">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="a7aefd530bcac1f13454982abbe1bb60806eccc0864f64085ab719471e4c0f1e" name="python3-gobject-cairo" arch="x86_64">
  <version epoch="0" ver="3.42.2" rel="150400.10.23"/>
  <changelog author="bjorn.lie@gmail.com" date="1552219200">- Update to version 3.32.0:
  + No changes since 3.31.4.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1555761600">- Update to version 3.32.1:
  + tests/gimarshallingtestsextra.c/h: relicense to LGPLv2.1+.
  + meson: add ``tests`` option for disabling tests.
  + meson: tests: pass ``--quiet`` to g-ir-scanner.
  + Fix a crash when marshalling a GError to Python fails.
  + Fix leak of transfer-full/container C arrays.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1561377600">- Update to version 3.32.2:
  + Python 3.8b1 compatibility fixes.
  + tests: fix a test error when run under wayland.
  + setup.py: specify python_requires.</changelog>
  <changelog author="mgorse@suse.com" date="1567252800">- Update to version 3.33.1:
  + Make GLib.Variant.unpack a bit less costly.
  + pygobject: ignore GParameter deprecations.
  + pygobject-object: fix refcount of floating return values.
  + pygi-info: remove some dead code.</changelog>
  <changelog author="mgorse@suse.com" date="1568030400">- Update to version 3.34.0:
  + No changes since 3.33.1.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1578744000">- Drop gnome-common Requires from python-gobject-common-devel
  sub-package, no longer needed, nor used since 3.29.1, where the
  BuildRequires was dropped, but the explicit Requires was not
  removed by mistake.</changelog>
  <changelog author="dimstar@opensuse.org" date="1580472000">- Remove %{python_module gobject-devel = %{version}} from
  common-devel: Assuming that consumers of the .pc and include
  headers are not really using the python bindings.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1583668800">- Update to version 3.36.0:
  + This will be the last release supporting Python 2.
  + pygobject-object: Avoid checking whether NULL is floating.
  + Avoid various new glib deprecation warnings.
  + Port to g_object_new_with_properties().
  + Drop Python 2 support on Windows.
  + gtk overrides: Drop Menu, MenuItem for Gtk 4.
  + Docs:
  - Update openSUSE instructions.
  - Add Gaphor to Who is Using PyGObject.
  - Remove reference to a fixed bug.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1588766400">- Update to version 3.36.1:
  + tests: Fix failing tests with pytest 5.4.0+.
  + Gtk: Add override to make sure both
    TreeModelSort.new_with_model and TreeModel.sort_new_with_model
    exist independend of the gtk version.
  + Gtk.Template: Fix initialisation order errors with Widgets
    getting created from C (potentially through other templates).
  + Gtk.Template: Fix errors when calling init_template() multiple
    times.</changelog>
  <changelog author="dimstar@opensuse.org" date="1600084800">- Update to version 3.38.0:
  + meson: Make the `pycairo` option a feature.
  + gdk overrides: Fix wrapping of scroll events.
  + Add overrides for Gtk.Button set/get_focus_on_click.</changelog>
  <changelog author="dimstar@opensuse.org" date="1610539200">- Simplify the dependency exclusion from __init__.py to also match
  with multiple python3-flavors.
- Remove exec bit from all *.py files in examples, also
  subdirectories.</changelog>
  <changelog author="code@bnavigator.de" date="1610539201">- Recompile python cache files after removal of components, include
  cache files in correct subpackage
- Fix supplements declarations, where possible. Disable for -gdk.</changelog>
  <changelog author="mgorse@suse.com" date="1616155200">- Update to version 3.40.0:
  + GTK 4 compatibility fixes.
  + Python 3.9 and 3.10 compatibility fixes.
  + New minimal dependency requirements.
- Up glib2, gobject-introspection, and cairo required versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1618660800">- Update to version 3.40.1:
  + Fix tests with glib 2.68.
  + Fix a regression with marshalling partial() objects.</changelog>
  <changelog author="dimstar@opensuse.org" date="1628078400">- Adjust BuildRequires for python_module cairo to python-module
  pycairo: the module was renamed 2 years ago.
- Skip build for python2: not supported anymore since 3.38.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1632139200">- Update to version 3.42.0:
  + meson: Bump minimum meson_version to 0.47.0.
  + Expose GObject.Object.run_dispose().
  + docs: document Gtk.Template.
  + dev: Add poetry support.
  + meson: use main branch for glib subproject.
  + Fix some small memory leaks.</changelog>
  <changelog author="emilyyrose@gmail.com" date="1650542400">- Update to version 3.42.1:
  + Do not error out for unknown scopes.
  + gtk overrides: restore Gtk.ListStore.insert_with_valuesv with
    newer GTK4.
  + gtk overrides: Do not override Treeview.enable_model_drag_xx
    for GTK4.
  + Implement DynamicImporter.find_spec() to silence deprecation
    warning.
  + Some test/CI fixes.</changelog>
  <changelog author="dimstar@opensuse.org" date="1654776000">- Add dependency on python-cairo to python-gobject-cairo: The
  introspection wrapper needs the actual pycairo underneath
  (boo#1179584).</changelog>
  <changelog author="yfjiang@suse.com" date="1664539200">- Update to version 3.42.2:
  * Error out instead of crashing when marshaling unsupported
    fundamental types in some cases :mr:`180`
  * Add a workaround for a PyPy 3.9+ bug when threads are used
    :mr:`200`
  * Fix crashes when marshaling zero terminated arrays for certain
    item types :mr:`191`
  * Fix a crash/refcounting error in case marshaling a hash table
    fails :mr:`191`
  * Make the test suite pass again with PyPy :mr:`191`
  * tests: support running tests with (MSVC) CPython 3.8+ on
    Windows :mr:`206`
  * interface: Fix leak when overriding GInterfaceInfo :mr:`204`
  * setup.py: look up pycairo headers without importing the module
    (helps with building on Windows and MSVC CPython 3.8+)
    :mr:`205`</changelog>
  <changelog author="mcepl@suse.com" date="1682424000">- Rename changelog and the SPEC file to python3- form. (jsc#PED-68)</changelog>
</package>
<package pkgid="27c036a6f736d9f7660ba52c4f60b92dd922152cd2a50e7b1ffe4a5222df09ff" name="python3-idna" arch="noarch">
  <version epoch="0" ver="2.6" rel="150000.3.3.1"/>
  <changelog author="nemysis@gmx.ch" date="1437134400">- Initial package creation</changelog>
  <changelog author="tbechtold@suse.com" date="1489665600">- update to version v2.5
  * only store scripts that are specifically referenced in logic
  * Fix validation for U+30FB KATAKANA MIDDLE DOT code point (#47)
  * range-based integer containment code
  * Documentation Updates
  * Make test runners Python 2.6 compatible (issue #20)
  * remove DISALLOWED codepoints from datafile, since they're unread
  * Avoid using bare 'except' (#39)
  * Add Python 3.5 support
  * Mark Python Wheels as universal (supports Python 2 and 3)
  * Skip tests that won't work on Python 2.6 (fixes #20)
  * Update Travis configuration to test against Python 2.6 and 3.6
  * Use relative imports (fixes #26)
  * Documentation tidy up
  * Revert to basing IDNAError on UnicodeError (issue #43) (#45)
  * rebuild idnadata
  * Update history with Java-related change
  * ignore vim swapfiles
  * Update Travis CI coverage to 3.6 and 3.7-dev
  * Reduce memory usage even further. (#41)
  * Update trove classifier for Python 3.6
  * Properly report label length exceptions (issue #36)
  * Segment uts46data to avoid Jython limits (#28)
- Switch to singlespec approach</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- point download url to PyPI
- drop %oname</changelog>
  <changelog author="arun@gmx.de" date="1510228800">- update to version 2.6:
  * Allows generation of IDNA and UTS 46 table data for different
    versions of Unicode, by deriving properties directly from Unicode
    data.
  * Ability to generate RFC 5892/IANA-style table data
  * Diagnostic output of IDNA-related Unicode properties and derived
    calculations for a given codepoint
  * Support for idna.__version__ to report version
  * Support for idna.idnadata.__version__ and
    idna.uts46data.__version__ to report Unicode version of underlying
    IDNA and UTS 46 data respectively.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1713441600">- Add CVE-2024-3651.patch, backported from upstream commit
  gh#kjd/idna#172/commits/5beb28b9dd77912c0dd656d8b0fdba3eb80222e7
  (bsc#1222842, CVE-2024-3651)</changelog>
</package>
<package pkgid="6366b8f20047c7cf410b17fb084ce1257f33a8c97736eb3caff340cb514aaf7f" name="python3-iniconfig" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="150000.1.11.1"/>
  <changelog author="mcalabkova@suse.com" date="1598270400">- Initial packaging (v1.0.1)
- Build the tests separately because it deadlocks with pytest</changelog>
  <changelog author="dmueller@suse.com" date="1605009600">- update to 1.1.1:
  * fix version determination (thanks @florimondmanca)
  * typing stubs (thanks @bluetech)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1647259200">- Include in SLE-15 (bsc#1195916, bsc#1196696, jsc#PM-3356, jsc#SLE-23972)</changelog>
</package>
<package pkgid="62d95253ec4d393b4da6ae4ef6e9da755014d4df85e76bfafc71a86240b62831" name="python3-jmespath" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150000.3.3.4"/>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="7fd05de42c8e1af36866bc3c57ef4ed4ff341923cbca8d94d20bc3c3684aee71" name="python3-jmespath" arch="noarch">
  <version epoch="0" ver="0.9.3" rel="150000.3.5.1"/>
  <changelog author="rschweikert@suse.com" date="1414065600">- Update to version 0.4.1
  + No upstream changelog</changelog>
  <changelog author="rschweikert@suse.com" date="1421582400">- Update to version 0.5.0
  + No upstream changelog
  + Update in support for fix of bnc#905354</changelog>
  <changelog author="aboe76@gmail.com" date="1427371200">- Updated to version 0.6.1
  + No Upstream Changelog</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1430049600">- update to version 0.7.0:
  * Add support for JEP-12, raw string literals
  * Support .whl files
- additional changes from version 0.6.2:
  * Implement JEP-10, slice projections
  * Fix bug with filter projection parsing
  * Add to_array function
  * Add merge function
  * Fix error messages for function argument type errors
- point source URL to pypi</changelog>
  <changelog author="rjschwei@suse.com" date="1432728000">- Update to version 0.7.1:
  * Rename ``bin/jp`` to ``bin/jp.py``
  * Fix issue with precedence when parsing wildcard
    projections
  * Remove ordereddict and simplejson as py2.6 dependencies.
    These were never actually used in the jmespath code base,
    only in the unit tests.  Unittests requirements are handled
    via requirements26.txt.</changelog>
  <changelog author="rjschwei@suse.com" date="1453291200">- Manage the jp executable with update-alternatives now that
  python3-jmespath exists
- spec file improvements</changelog>
  <changelog author="rjschwei@suse.com" date="1453291201">- Fix build issues for SLE 11
  + More test dependencies required</changelog>
  <changelog author="toddrme2178@gmail.com" date="1454328000">- Update to version 0.9.0
  * Add support for new lines with tokens in an expression
  * Add support for JEP 9 which introduces "and" expressions, "unary"
    expressions, "not" expressions, and "paren" expressions
  * Fix issue with hardcoded path in ``jp.py`` executable
    (issue 90, issue 88, issue 82)
- Update to version 0.8.0
  * Improve lexing performance (issue 84)
  * Fix parsing error for multiselect lists (issue 86)
  * Fix issue with escaping single quotes in literal strings (issue 85)
  * Add support for providing your own dict cls to support
    ordered dictionaries (issue 94)
  * Add map() function (issue 95)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1471262400">- Fix update-alternatives implementation.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to version 0.9.2
  + Fix regression when using ordering comparators on strings (issue 124)
- From 0.9.1
  + Raise LexerError on invalid numbers (issue 98)
  + Add support for custom functions (#100) (issue 100)
  + Fix ZeroDivisionError for built-in function avg() on empty lists (#115)
    (issue 115)
  + Properly handle non numerical ordering operators (#117) (issue 117)</changelog>
  <changelog author="tbechtold@suse.com" date="1490788800">- Only BuildRequire unittest2 for python2</changelog>
  <changelog author="jmatejek@suse.com" date="1490788801">- properly Requires(postun) for %postun section</changelog>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to 0.9.3:
  + Fix issue where long types in py2 and Decimal types were not
    being evaluated as numbers (issue 125)
  + Handle numbers in scientific notation in to_number() function (issue 120)
  + Fix issue where custom functions would override the function
    table of the builtin function class (issue 133)</changelog>
</package>
<package pkgid="6ba6f85e99d9fd94c9bee768f21cb795e41c802fc0e725d157135b28100b00d7" name="python3-libvirt-python" arch="aarch64">
  <version epoch="0" ver="8.0.0" rel="150400.5.69"/>
  <changelog author="jfehlig@suse.com" date="1570708800">- Update to 5.8.0
  - Add all new APIs and constants in libvirt 5.8.0</changelog>
  <changelog author="jfehlig@suse.com" date="1573041600">- Update to 5.9.0
  - Add all new APIs and constants in libvirt 5.9.0</changelog>
  <changelog author="jfehlig@suse.com" date="1575288000">- Update to 5.10.0
  - Add all new APIs and constants in libvirt 5.10.0</changelog>
  <changelog author="jfehlig@suse.com" date="1579089600">- Update to 6.0.0
  - Add all new APIs and constants in libvirt 6.0.0
  - Revert commit b22e4f24 to retain python2 support a bit longer
    on SUSE
    revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1580990400">- Stop building for python2
  Dropped patches: revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1598356800">- Update to 6.6.0
  - Add all new APIs and constants in libvirt 6.6.0
  - jsc#SLE-14253</changelog>
  <changelog author="jfehlig@suse.com" date="1598961600">- Update to 6.7.0
  - Add all new APIs and constants in libvirt 6.7.0
  - jsc#SLE-14253, jsc#SLE-15159</changelog>
  <changelog author="jfehlig@suse.com" date="1601553600">- Update to 6.8.0
  - Add all new APIs and constants in libvirt 6.8.0
  - jsc#SLE-12684, jsc#SLE-15861</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- fix constructor param name for virDomain{Checkpoint,Snapshot}
  61341150-fix-constructor-param-name.patch
  boo#1177559</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Use %pycache_only %python_sitelib instead of %python3_sitelib in
  order to support multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66
- Enable test suite. It is mandatory for python packages and
  upstream's next major version update will have more tests.</changelog>
  <changelog author="jfehlig@suse.com" date="1604318400">- Update to 6.9.0
  - Add all new APIs and constants in libvirt 6.9.0
  - jsc#SLE-13688, jsc#SLE-16754
  - Dropped patches:
    61341150-fix-constructor-param-name.patch
- Add new file _service for tar_scm source service
- Remove signature file and python-libvirt-python.keyring</changelog>
  <changelog author="jfehlig@suse.com" date="1606910400">- Update to 6.10.0
  - Add all new APIs and constants in libvirt 6.10.0
  - jsc#SLE-13688</changelog>
  <changelog author="jfehlig@suse.com" date="1611057600">- Update to 7.0.0
  - Add all new APIs and constants in libvirt 7.0.0
  - jsc#SLE-15860</changelog>
  <changelog author="jfehlig@suse.com" date="1614686400">- Update to 7.1.0
  - Add all new APIs and constants in libvirt 7.1.0</changelog>
  <changelog author="jfehlig@suse.com" date="1627905600">- Update to 7.6.0
  - Add all new APIs and constants in libvirt 7.6.0
  - jsc#SLE-18354</changelog>
  <changelog author="jfehlig@suse.com" date="1630497600">- Update to 7.7.0
  - Add all new APIs and constants in libvirt 7.7.0
  - jsc#SLE-18446</changelog>
  <changelog author="jfehlig@suse.com" date="1633089600">- Update to 7.8.0
  - Add all new APIs and constants in libvirt 7.8.0
  - jsc#SLE-18260</changelog>
  <changelog author="jfehlig@suse.com" date="1636027200">- Update to 7.9.0
  - Add all new APIs and constants in libvirt 7.9.0
  - jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1638446400">- Update to 7.10.0
  - Add all new APIs and constants in libvirt 7.10.0
  - jsc#SLE-18260, jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1642507200">- Update to 8.0.0
  - Add all new APIs and constants in libvirt 8.0.0
  - jsc#SLE-11435, jsc#SLE-18354</changelog>
</package>
<package pkgid="68bdbf320170780a63b0516034f168f69b1dbbe6c9bd2b8ac142f40ce9989d9b" name="python3-libvirt-python" arch="ppc64le">
  <version epoch="0" ver="8.0.0" rel="150400.5.69"/>
  <changelog author="jfehlig@suse.com" date="1570708800">- Update to 5.8.0
  - Add all new APIs and constants in libvirt 5.8.0</changelog>
  <changelog author="jfehlig@suse.com" date="1573041600">- Update to 5.9.0
  - Add all new APIs and constants in libvirt 5.9.0</changelog>
  <changelog author="jfehlig@suse.com" date="1575288000">- Update to 5.10.0
  - Add all new APIs and constants in libvirt 5.10.0</changelog>
  <changelog author="jfehlig@suse.com" date="1579089600">- Update to 6.0.0
  - Add all new APIs and constants in libvirt 6.0.0
  - Revert commit b22e4f24 to retain python2 support a bit longer
    on SUSE
    revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1580990400">- Stop building for python2
  Dropped patches: revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1598356800">- Update to 6.6.0
  - Add all new APIs and constants in libvirt 6.6.0
  - jsc#SLE-14253</changelog>
  <changelog author="jfehlig@suse.com" date="1598961600">- Update to 6.7.0
  - Add all new APIs and constants in libvirt 6.7.0
  - jsc#SLE-14253, jsc#SLE-15159</changelog>
  <changelog author="jfehlig@suse.com" date="1601553600">- Update to 6.8.0
  - Add all new APIs and constants in libvirt 6.8.0
  - jsc#SLE-12684, jsc#SLE-15861</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- fix constructor param name for virDomain{Checkpoint,Snapshot}
  61341150-fix-constructor-param-name.patch
  boo#1177559</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Use %pycache_only %python_sitelib instead of %python3_sitelib in
  order to support multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66
- Enable test suite. It is mandatory for python packages and
  upstream's next major version update will have more tests.</changelog>
  <changelog author="jfehlig@suse.com" date="1604318400">- Update to 6.9.0
  - Add all new APIs and constants in libvirt 6.9.0
  - jsc#SLE-13688, jsc#SLE-16754
  - Dropped patches:
    61341150-fix-constructor-param-name.patch
- Add new file _service for tar_scm source service
- Remove signature file and python-libvirt-python.keyring</changelog>
  <changelog author="jfehlig@suse.com" date="1606910400">- Update to 6.10.0
  - Add all new APIs and constants in libvirt 6.10.0
  - jsc#SLE-13688</changelog>
  <changelog author="jfehlig@suse.com" date="1611057600">- Update to 7.0.0
  - Add all new APIs and constants in libvirt 7.0.0
  - jsc#SLE-15860</changelog>
  <changelog author="jfehlig@suse.com" date="1614686400">- Update to 7.1.0
  - Add all new APIs and constants in libvirt 7.1.0</changelog>
  <changelog author="jfehlig@suse.com" date="1627905600">- Update to 7.6.0
  - Add all new APIs and constants in libvirt 7.6.0
  - jsc#SLE-18354</changelog>
  <changelog author="jfehlig@suse.com" date="1630497600">- Update to 7.7.0
  - Add all new APIs and constants in libvirt 7.7.0
  - jsc#SLE-18446</changelog>
  <changelog author="jfehlig@suse.com" date="1633089600">- Update to 7.8.0
  - Add all new APIs and constants in libvirt 7.8.0
  - jsc#SLE-18260</changelog>
  <changelog author="jfehlig@suse.com" date="1636027200">- Update to 7.9.0
  - Add all new APIs and constants in libvirt 7.9.0
  - jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1638446400">- Update to 7.10.0
  - Add all new APIs and constants in libvirt 7.10.0
  - jsc#SLE-18260, jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1642507200">- Update to 8.0.0
  - Add all new APIs and constants in libvirt 8.0.0
  - jsc#SLE-11435, jsc#SLE-18354</changelog>
</package>
<package pkgid="beabc2a233c326cf04411cf753ce479431fc221a2b9fc552fd454d560c8dfdfa" name="python3-libvirt-python" arch="s390x">
  <version epoch="0" ver="8.0.0" rel="150400.5.69"/>
  <changelog author="jfehlig@suse.com" date="1570708800">- Update to 5.8.0
  - Add all new APIs and constants in libvirt 5.8.0</changelog>
  <changelog author="jfehlig@suse.com" date="1573041600">- Update to 5.9.0
  - Add all new APIs and constants in libvirt 5.9.0</changelog>
  <changelog author="jfehlig@suse.com" date="1575288000">- Update to 5.10.0
  - Add all new APIs and constants in libvirt 5.10.0</changelog>
  <changelog author="jfehlig@suse.com" date="1579089600">- Update to 6.0.0
  - Add all new APIs and constants in libvirt 6.0.0
  - Revert commit b22e4f24 to retain python2 support a bit longer
    on SUSE
    revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1580990400">- Stop building for python2
  Dropped patches: revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1598356800">- Update to 6.6.0
  - Add all new APIs and constants in libvirt 6.6.0
  - jsc#SLE-14253</changelog>
  <changelog author="jfehlig@suse.com" date="1598961600">- Update to 6.7.0
  - Add all new APIs and constants in libvirt 6.7.0
  - jsc#SLE-14253, jsc#SLE-15159</changelog>
  <changelog author="jfehlig@suse.com" date="1601553600">- Update to 6.8.0
  - Add all new APIs and constants in libvirt 6.8.0
  - jsc#SLE-12684, jsc#SLE-15861</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- fix constructor param name for virDomain{Checkpoint,Snapshot}
  61341150-fix-constructor-param-name.patch
  boo#1177559</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Use %pycache_only %python_sitelib instead of %python3_sitelib in
  order to support multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66
- Enable test suite. It is mandatory for python packages and
  upstream's next major version update will have more tests.</changelog>
  <changelog author="jfehlig@suse.com" date="1604318400">- Update to 6.9.0
  - Add all new APIs and constants in libvirt 6.9.0
  - jsc#SLE-13688, jsc#SLE-16754
  - Dropped patches:
    61341150-fix-constructor-param-name.patch
- Add new file _service for tar_scm source service
- Remove signature file and python-libvirt-python.keyring</changelog>
  <changelog author="jfehlig@suse.com" date="1606910400">- Update to 6.10.0
  - Add all new APIs and constants in libvirt 6.10.0
  - jsc#SLE-13688</changelog>
  <changelog author="jfehlig@suse.com" date="1611057600">- Update to 7.0.0
  - Add all new APIs and constants in libvirt 7.0.0
  - jsc#SLE-15860</changelog>
  <changelog author="jfehlig@suse.com" date="1614686400">- Update to 7.1.0
  - Add all new APIs and constants in libvirt 7.1.0</changelog>
  <changelog author="jfehlig@suse.com" date="1627905600">- Update to 7.6.0
  - Add all new APIs and constants in libvirt 7.6.0
  - jsc#SLE-18354</changelog>
  <changelog author="jfehlig@suse.com" date="1630497600">- Update to 7.7.0
  - Add all new APIs and constants in libvirt 7.7.0
  - jsc#SLE-18446</changelog>
  <changelog author="jfehlig@suse.com" date="1633089600">- Update to 7.8.0
  - Add all new APIs and constants in libvirt 7.8.0
  - jsc#SLE-18260</changelog>
  <changelog author="jfehlig@suse.com" date="1636027200">- Update to 7.9.0
  - Add all new APIs and constants in libvirt 7.9.0
  - jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1638446400">- Update to 7.10.0
  - Add all new APIs and constants in libvirt 7.10.0
  - jsc#SLE-18260, jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1642507200">- Update to 8.0.0
  - Add all new APIs and constants in libvirt 8.0.0
  - jsc#SLE-11435, jsc#SLE-18354</changelog>
</package>
<package pkgid="c1ddfa936643039cc2457c7f7c47fb04a173a5098dfd69d027d555ab91badbd0" name="python3-libvirt-python" arch="src">
  <version epoch="0" ver="8.0.0" rel="150400.5.69"/>
  <changelog author="jfehlig@suse.com" date="1570708800">- Update to 5.8.0
  - Add all new APIs and constants in libvirt 5.8.0</changelog>
  <changelog author="jfehlig@suse.com" date="1573041600">- Update to 5.9.0
  - Add all new APIs and constants in libvirt 5.9.0</changelog>
  <changelog author="jfehlig@suse.com" date="1575288000">- Update to 5.10.0
  - Add all new APIs and constants in libvirt 5.10.0</changelog>
  <changelog author="jfehlig@suse.com" date="1579089600">- Update to 6.0.0
  - Add all new APIs and constants in libvirt 6.0.0
  - Revert commit b22e4f24 to retain python2 support a bit longer
    on SUSE
    revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1580990400">- Stop building for python2
  Dropped patches: revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1598356800">- Update to 6.6.0
  - Add all new APIs and constants in libvirt 6.6.0
  - jsc#SLE-14253</changelog>
  <changelog author="jfehlig@suse.com" date="1598961600">- Update to 6.7.0
  - Add all new APIs and constants in libvirt 6.7.0
  - jsc#SLE-14253, jsc#SLE-15159</changelog>
  <changelog author="jfehlig@suse.com" date="1601553600">- Update to 6.8.0
  - Add all new APIs and constants in libvirt 6.8.0
  - jsc#SLE-12684, jsc#SLE-15861</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- fix constructor param name for virDomain{Checkpoint,Snapshot}
  61341150-fix-constructor-param-name.patch
  boo#1177559</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Use %pycache_only %python_sitelib instead of %python3_sitelib in
  order to support multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66
- Enable test suite. It is mandatory for python packages and
  upstream's next major version update will have more tests.</changelog>
  <changelog author="jfehlig@suse.com" date="1604318400">- Update to 6.9.0
  - Add all new APIs and constants in libvirt 6.9.0
  - jsc#SLE-13688, jsc#SLE-16754
  - Dropped patches:
    61341150-fix-constructor-param-name.patch
- Add new file _service for tar_scm source service
- Remove signature file and python-libvirt-python.keyring</changelog>
  <changelog author="jfehlig@suse.com" date="1606910400">- Update to 6.10.0
  - Add all new APIs and constants in libvirt 6.10.0
  - jsc#SLE-13688</changelog>
  <changelog author="jfehlig@suse.com" date="1611057600">- Update to 7.0.0
  - Add all new APIs and constants in libvirt 7.0.0
  - jsc#SLE-15860</changelog>
  <changelog author="jfehlig@suse.com" date="1614686400">- Update to 7.1.0
  - Add all new APIs and constants in libvirt 7.1.0</changelog>
  <changelog author="jfehlig@suse.com" date="1627905600">- Update to 7.6.0
  - Add all new APIs and constants in libvirt 7.6.0
  - jsc#SLE-18354</changelog>
  <changelog author="jfehlig@suse.com" date="1630497600">- Update to 7.7.0
  - Add all new APIs and constants in libvirt 7.7.0
  - jsc#SLE-18446</changelog>
  <changelog author="jfehlig@suse.com" date="1633089600">- Update to 7.8.0
  - Add all new APIs and constants in libvirt 7.8.0
  - jsc#SLE-18260</changelog>
  <changelog author="jfehlig@suse.com" date="1636027200">- Update to 7.9.0
  - Add all new APIs and constants in libvirt 7.9.0
  - jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1638446400">- Update to 7.10.0
  - Add all new APIs and constants in libvirt 7.10.0
  - jsc#SLE-18260, jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1642507200">- Update to 8.0.0
  - Add all new APIs and constants in libvirt 8.0.0
  - jsc#SLE-11435, jsc#SLE-18354</changelog>
</package>
<package pkgid="34a47755da281ff56315dcc900316b15773647d1ef47b9cf8a865d357bc4f6da" name="python3-libvirt-python" arch="x86_64">
  <version epoch="0" ver="8.0.0" rel="150400.5.69"/>
  <changelog author="jfehlig@suse.com" date="1570708800">- Update to 5.8.0
  - Add all new APIs and constants in libvirt 5.8.0</changelog>
  <changelog author="jfehlig@suse.com" date="1573041600">- Update to 5.9.0
  - Add all new APIs and constants in libvirt 5.9.0</changelog>
  <changelog author="jfehlig@suse.com" date="1575288000">- Update to 5.10.0
  - Add all new APIs and constants in libvirt 5.10.0</changelog>
  <changelog author="jfehlig@suse.com" date="1579089600">- Update to 6.0.0
  - Add all new APIs and constants in libvirt 6.0.0
  - Revert commit b22e4f24 to retain python2 support a bit longer
    on SUSE
    revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1580990400">- Stop building for python2
  Dropped patches: revert-b22e4f24.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1598356800">- Update to 6.6.0
  - Add all new APIs and constants in libvirt 6.6.0
  - jsc#SLE-14253</changelog>
  <changelog author="jfehlig@suse.com" date="1598961600">- Update to 6.7.0
  - Add all new APIs and constants in libvirt 6.7.0
  - jsc#SLE-14253, jsc#SLE-15159</changelog>
  <changelog author="jfehlig@suse.com" date="1601553600">- Update to 6.8.0
  - Add all new APIs and constants in libvirt 6.8.0
  - jsc#SLE-12684, jsc#SLE-15861</changelog>
  <changelog author="jfehlig@suse.com" date="1602504000">- fix constructor param name for virDomain{Checkpoint,Snapshot}
  61341150-fix-constructor-param-name.patch
  boo#1177559</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Use %pycache_only %python_sitelib instead of %python3_sitelib in
  order to support multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66
- Enable test suite. It is mandatory for python packages and
  upstream's next major version update will have more tests.</changelog>
  <changelog author="jfehlig@suse.com" date="1604318400">- Update to 6.9.0
  - Add all new APIs and constants in libvirt 6.9.0
  - jsc#SLE-13688, jsc#SLE-16754
  - Dropped patches:
    61341150-fix-constructor-param-name.patch
- Add new file _service for tar_scm source service
- Remove signature file and python-libvirt-python.keyring</changelog>
  <changelog author="jfehlig@suse.com" date="1606910400">- Update to 6.10.0
  - Add all new APIs and constants in libvirt 6.10.0
  - jsc#SLE-13688</changelog>
  <changelog author="jfehlig@suse.com" date="1611057600">- Update to 7.0.0
  - Add all new APIs and constants in libvirt 7.0.0
  - jsc#SLE-15860</changelog>
  <changelog author="jfehlig@suse.com" date="1614686400">- Update to 7.1.0
  - Add all new APIs and constants in libvirt 7.1.0</changelog>
  <changelog author="jfehlig@suse.com" date="1627905600">- Update to 7.6.0
  - Add all new APIs and constants in libvirt 7.6.0
  - jsc#SLE-18354</changelog>
  <changelog author="jfehlig@suse.com" date="1630497600">- Update to 7.7.0
  - Add all new APIs and constants in libvirt 7.7.0
  - jsc#SLE-18446</changelog>
  <changelog author="jfehlig@suse.com" date="1633089600">- Update to 7.8.0
  - Add all new APIs and constants in libvirt 7.8.0
  - jsc#SLE-18260</changelog>
  <changelog author="jfehlig@suse.com" date="1636027200">- Update to 7.9.0
  - Add all new APIs and constants in libvirt 7.9.0
  - jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1638446400">- Update to 7.10.0
  - Add all new APIs and constants in libvirt 7.10.0
  - jsc#SLE-18260, jsc#SLE-19264</changelog>
  <changelog author="jfehlig@suse.com" date="1642507200">- Update to 8.0.0
  - Add all new APIs and constants in libvirt 8.0.0
  - jsc#SLE-11435, jsc#SLE-18354</changelog>
</package>
<package pkgid="d00b77aa8b2a734621432bf77b48ff4e490b2e56aadf1d1e5d42b628fb3c61e8" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="ec35664a07d48638bdd86d88df540d243076cad6a61d068d71c975b7a690c98e" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="b6b60d41fe44b44cdd376f45ac673bf4cf8f932453c94e48bed0e31bab85ba15" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.16.1"/>
  <changelog author="pmonreal@suse.com" date="1599480000">- Security fix: [bsc#1176179, CVE-2020-24977]
  * xmllint: global-buffer-overflow in xmlEncodeEntitiesInternal
- Add patch libxml2-CVE-2020-24977.patch</changelog>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="6cb847ac9d0f4d14842f2baf70d00bf7e34175572ec94a31392fbaddcc4c58aa" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="e2e524fb6699249d50ba0c22901113662061e8037b72ea636c0b94e3e3e95c79" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="d0c5de106bd17e37125f45507752dc6e1cd8f21f472ce7498a18cd462216437c" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.19.1"/>
  <changelog author="code@bnavigator.de" date="1603454400">- Make python subpackage ready for multiple python3 flavors
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
</package>
<package pkgid="4384f47a9cffec9f86938b53d6fc4943dd030f747b66402bef05b26d5a92ccbe" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="828377e4afe00221285769b8cc1c2b9cbb4909105baa9cf36ed3d5584f28517f" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="f8f7a98c049307e094a66d8cc4b3607a607367652824b688a1b8310d59cd2f92" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.22.1"/>
  <changelog author="pmonreal@suse.com" date="1606305600">- Avoid quadratic checking of identity-constraints: [bsc#1178823]
  * key/unique/keyref schema attributes currently use qudratic loops
    to check their various constraints (that keys are unique and that
    keyrefs refer to existing keys).
  * This fix uses a hash table to avoid the quadratic behaviour.
- Add libxml2-Avoid-quadratic-checking-of-identity-constraints.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
</package>
<package pkgid="94aa8f9620f9810940da2b65efee3c9b84245e504c518e3cfd34542af9609da8" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="33f3394f3fa6948bc5948090e1d6743f7e11937d6946f3be4b3f5185846b9322" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="ed57204cedb51867a89e6fc18b01a013e63426accbde65633a7b24639dde1180" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.25.1"/>
  <changelog author="pmonreal@suse.com" date="1608206400">- Security fix: [bsc#1161521, CVE-2019-20388]
  * Memory leak in xmlSchemaPreRun in xmlschemas.c
- Add libxml2-CVE-2019-20388.patch</changelog>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
</package>
<package pkgid="f12d7541719354bccd43d93023f1f3f6c329e884bc5430bafb4b155fbefb3255" name="python3-libxml2" arch="aarch64">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="e408f5c8122f70eb999ec89fc9c19ee9279fa5bdbb68448908744b464b73c9a4" name="python3-libxml2" arch="s390x">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="caa6b4734c60680bd1ea0ab03556397e9c067c9e4d7f5e3fc133d57fa30d8fcc" name="python3-libxml2" arch="x86_64">
  <version epoch="0" ver="2.9.14" rel="150400.5.28.1"/>
  <changelog author="wicked@iki.fi" date="1614081600">- Fails to build against Python 3.9:
  * Add upstream commit that fixes the issue
    https://github.com/GNOME/libxml2/commit/e4fb36841800038c289997432ca547c9bfef9db1
- Add patch libxml2-python39.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611200">- Security fix: [bsc#1185409, CVE-2021-3516]
  * Fix use-after-free in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3516.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611201">- Security fix: [bsc#1185410, CVE-2021-3517]
  * Fix heap-based buffer overflow in entities.c:xmlEncodeEntitiesInternal()
  * Add libxml2-CVE-2021-3517.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1619611202">- Security fix: [bsc#1185408, CVE-2021-3518]
  * Fix use-after-free in xinclude.c:xmlXIncludeDoProcess()
  * Add libxml2-CVE-2021-3518.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1620648000">- Security fix: [bsc#1185698, CVE-2021-3537]
  * NULL pointer dereference in valid.c:xmlValidBuildAContentModel
  * Add libxml2-CVE-2021-3537.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1621425600">- Security fix: [bsc#1186015, CVE-2021-3541]
  * Exponential entity expansion attack bypasses all existing
    protection mechanisms.
- Add libxml2-CVE-2021-3541.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1622548800">- Update to version 2.9.12
  * Fix CVE-2021-3541, CVE-2021-3537 (bsc#1185698, bsc#1185879),
    CVE-2021-3518, CVE-2021-3517, CVE-2021-3516, CVE-2020-7595,
    CVE-2019-20388, CVE-2020-24977, and CVE-2019-19956 (bsc#1159928)
  * Fix null deref in legacy SAX1 parser
  * Fix handling of unexpected EOF in xmlParseContent
  * Fix user-after-free
  * Validate UTF8 in xmlEncodeEntities
  * Fix memory leak in xmlParseElementMixedContentDecl
  * Fix integer overflow in xmlSchemaGetParticleTotalRangeMin
  * Fix SEGV in xmlSAXParseFileWithData
  * Don't process siblings of root in xmlXIncludeProcess
  * Full changes: http://xmlsoft.org/news.html
- Drop upstream fixed
  * libxml2-CVE-2021-3541.patch
  * libxml2-CVE-2021-3537.patch
  * libxml2-CVE-2021-3518.patch
  * libxml2-CVE-2021-3517.patch
  * libxml2-CVE-2021-3516.patch
  * libxml2-CVE-2020-7595.patch
  * libxml2-CVE-2019-20388.patch
  * libxml2-CVE-2020-24977.patch
  * libxml2-CVE-2019-19956.patch
  * libxml2-python39.patch
  * libxml2-Avoid-quadratic-checking-of-identity-constraints.patch
- Drop since 2.9.10 merged libxml2-xmlFreeNodeList-recursive.patch
- Drop since 2.8.0 merged fix-perl.diff
- Refresh libxml2-make-XPATH_MAX_NODESET_LENGTH-configurable.patch</changelog>
  <changelog author="pmonreal@suse.com" date="1622548801">- Fix python-lxml regression with libxml2 2.9.12:
  * Work around lxml API abuse:
    gitlab.gnome.org/GNOME/libxml2/issues/255
- Add upstream patches:
  * libxml2-fix-lxml-corrupted-subtree-structures.patch
  * libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch</changelog>
  <changelog author="mcepl@suse.com" date="1634731200">- Rewrite package to the single-spec %python_subpackage_only style and
  eliminate unnecessary multibuild.</changelog>
  <changelog author="luc14n0@opensuse.org" date="1646740800">- Update to version 2.9.13:
  * Security fixes:
    + [CVE-2022-23308] Use-after-free of ID and IDREF attributes
    (boo#1196490);
    + Several memory leaks and another issues.
  * Many regressions fixes.
  * Numerous bug fixes, including, among many others:
    + xmllint's --maxmem option should work as expected now;
    + xmllint now returns an error if arguments are missing.
  * Numerous tests and code and fuzzing fixes and improvements.
  * Updated documentation.
- The full Libxml2 2.9.13 NEWS can be found here:
  https://download.gnome.org/sources/libxml2/2.9/\
  libxml2-2.9.13.news.
- Replace version-release macros in all 3 Obsoletes tag with
  plain 2.9.13 to avoid unwanted behaviors in the future.
- Remove dropped upstream AUTHORS file from list of files to be
  installed in the documentation location with 'cp' command.
- Update http://xmlsoft.org URL tag to Libxml2's new web home:
  https://gitlab.gnome.org/GNOME/libxml2.
- Update ftp://xmlsoft.org Source tag to Libxml2's new download
  host: https://download.gnome.org.
- Drop deprecated Python-2-related macro definitions/conditional
  statement from spec file.
- Drop merged upstream patches:
  libxml2-fix-lxml-corrupted-subtree-structures.patch;
  libxml2-fix-regression-in-xmlNodeDumpOutputInternal.patch.
- Drop libxml2.keyring source file as the new download host doesn't
  offer GPG signatures.
- Use ldconfig_scriptlets macro for post(un) handling.</changelog>
  <changelog author="dimstar@opensuse.org" date="1647604800">- Build python bindings in a 2nd run, using multibuild: otherwise,
  libxml2 requires pkgconfig(libxml-2.0) to build, causing issues
  to bootstrap.</changelog>
  <changelog author="david.anes@suse.com" date="1651492800">- Update to 2.9.14:
  * Security:
    + [CVE-2022-29824] Integer overflow in xmlBuf and xmlBuffer
    + Fix potential double-free in xmlXPtrStringRangeFunction
    + Fix memory leak in xmlFindCharEncodingHandler
    + Normalize XPath strings in-place
    + Prevent integer-overflow in htmlSkipBlankChars() and
    xmlSkipBlankChars()
    + Fix leak of xmlElementContent
  * Bug fixes:
    + Fix parsing of subtracted regex character classes
    + Fix recursion check in xinclude.c
    + Reset last error in xmlCleanupGlobals
    + Fix certain combinations of regex range quantifiers
    + Fix range quantifier on subregex
  * Improvements:
    + Fix recovery from invalid HTML start tags
  * Build system, portability:
    + Define LFS macros before including system headers
    + Initialize XPath floating-point globals
    + configure: check for icu DEFS
    + configure.ac: produce tar.xz only (GNOME policy)
    + CMakeLists.txt: Fix LIBXML_VERSION_NUMBER
    + Fix build with older Python versions
    + Fix --without-valid build</changelog>
  <changelog author="david.anes@suse.com" date="1666008000">- Security fixes:
  * [CVE-2022-40303, bsc#1204366] Fix integer overflows with
    XML_PARSE_HUGE
    + Added patch libxml2-CVE-2022-40303.patch
  * [CVE-2022-40304, bsc#1204367] Fix dict corruption caused by
    entity reference cycles
    + Added patch libxml2-CVE-2022-40304.patch</changelog>
  <changelog author="david.anes@suse.com" date="1667217600">- Add W3C conformance tests to the testsuite (bsc#1204585):
  * Added file xmlts20080827.tar.gz</changelog>
  <changelog author="daniel.garcia@suse.com" date="1681905600">- Build also for modern python version (jsc#PED-68)</changelog>
  <changelog author="david.anes@suse.com" date="1682078400">- Remove unneeded dependency (bsc#1209918).</changelog>
  <changelog author="david.anes@suse.com" date="1682078401">- Security update:
  * [CVE-2023-29469, bsc#1210412] Hashing of empty dict strings
    isn't deterministic
  - Added patch libxml2-CVE-2023-29469.patch
  * [CVE-CVE-2023-28484, bsc#1210411] NULL dereference in
    xmlSchemaFixupComplexType
  - Added patch libxml2-CVE-2023-28484-1.patch
  - Added patch libxml2-CVE-2023-28484-2.patch</changelog>
  <changelog author="david.anes@suse.com" date="1693828800">- Security update:
  * [CVE-2023-39615, bsc#1214768] Crafted xml can cause global
    buffer overflow
  - Added file libxml2-CVE-2023-39615.patch</changelog>
  <changelog author="david.anes@suse.com" date="1698667200">- Security update:
  * [CVE-2023-45322, bsc#1216129] use-after-free in xmlUnlinkNode()
    in tree.c
  - Added file libxml2-CVE-2023-45322.patch</changelog>
  <changelog author="david.anes@suse.com" date="1707566400">- Security fix (CVE-2024-25062, bsc#1219576) use-after-free in XMLReader
  * Added libxml2-CVE-2024-25062.patch</changelog>
</package>
<package pkgid="b3d2e06c323bda5806b9d6f26501f3a1c12f852cf7b08dd37ca416bfeda00746" name="python3-looseversion" arch="noarch">
  <version epoch="0" ver="1.0.2" rel="150100.3.3.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679313600">- Initial package: looseversion 1.0.2</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1679486400">- Fix package build with old setuptools versions
- Added:
  * add_compatible_setup_py_file.patch</changelog>
</package>
<package pkgid="049a40d970ee40cbdadb420467d1252e3aa5830adee3a42aa15a631ef6f5b6aa" name="python3-lxml" arch="aarch64">
  <version epoch="0" ver="4.7.1" rel="150200.3.12.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1505736000">- spec changes:
  - add fdupes
- update to 4.0.0:
  Features added:
  - The ElementPath implementation is now compiled using Cython,
    which speeds up the .find*() methods quite significantly.
  - The modules lxml.builder, lxml.html.diff and lxml.html.clean
    are also compiled using Cython in order to speed them up.
  - xmlfile() supports async coroutines using async with and await.
  - iterwalk() has a new method skip_subtree() that prevents
    walking into the descendants of the current element.
  - RelaxNG.from_rnc_string() accepts a base_url argument to allow
    relative resource lookups.
  - The XSLT result object has a new method .write_output(file)
    that serialises output data into a file according to the
    &lt;xsl:output&gt; configuration.
  Bugs fixed:
  - GH#251: HTML comments were handled incorrectly by the
    soupparser. Patch by mozbugbox.
  - LP#1654544: The html5parser no longer passes the useChardet
    option if the input is a Unicode string, unless explicitly
    requested. When parsing files, the default is to enable it when
    a URL or file path is passed (because the file is then opened in
    binary mode), and to disable it when reading from a file(-like) object.
    Note: This is a backwards incompatible change of the default configuration.
    If your code parses byte strings/streams and depends on character
    detection, please pass the option guess_charset=True explicitly, which
    already worked in older lxml versions.
  - LP#1703810: etree.fromstring() failed to parse UTF-32 data with BOM.
  - LP#1526522: Some RelaxNG errors were not reported in the error log.
  - LP#1567526: Empty and plain text input raised a TypeError in soupparser.
  - LP#1710429: Uninitialised variable usage in HTML diff.
  - LP#1415643: The closing tags context manager in xmlfile() could continue
    to output end tags even after writing failed with an exception.
  - LP#1465357: xmlfile.write() now accepts and ignores None as input argument.
  - Compilation under Py3.7-pre failed due to a modified function signature.
  Other changes:
  - The main module source files were renamed from lxml.*.pyx to plain *.pyx
    (e.g. etree.pyx) to simplify their handling in the build process. Care was
    taken to keep the old header files as fallbacks for code that compiles
    against the public C-API of lxml, but it might still be worth validating
    that third-party code does not notice this change.</changelog>
  <changelog author="jmatejek@suse.com" date="1509451200">- run tests only when the appropriate pythons are available</changelog>
  <changelog author="mimi.vx@gmail.com" date="1518091200">- update to 4.1.1
  - ElementPath supports text predicates for current node, like "[.='text']".
  - ElementPath allows spaces in predicates.
  - Custom Element classes and XPath functions can now be registered with
    a decorator rather than explicit dict assignments.
  - LP#1722776: Requesting non-Element objects like comments from
    a document with PythonElementClassLookup could fail with a TypeError.</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Version update to 4.2.0:
  * GH#255: ``SelectElement.value`` returns more standard-compliant and
    browser-like defaults for non-multi-selects.  If no option is selected, the
    value of the first option is returned (instead of None).  If multiple options
    are selected, the value of the last one is returned (instead of that of the
    first one).  If no options are present (not standard-compliant)
    ``SelectElement.value`` still returns ``None``.
  * GH#261: The ``HTMLParser()`` now supports the ``huge_tree`` option.
    Patch by stranac.
  * LP#1551797: Some XSLT messages were not captured by the transform error log.
  * LP#1737825: Crash at shutdown after an interrupted iterparse run with XMLSchema
    validation.
- Add patch python-lxml-assert.patch to pass test fail on threading</changelog>
  <changelog author="hpj@urpla.net" date="1522238400">- Version update to 4.2.1:
  * LP#1755825: iterwalk() failed to return the 'start' event for the initial
    element if a tag selector is used.
  * LP#1756314: Failure to import 4.2.0 into PyPy due to a missing library symbol.
  * LP#1727864, GH#258: Add "-isysroot" linker option on MacOS as needed by XCode 9.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533643200">- Update to 4.2.4 (2018-08-03)
  + Features added
  * GH#259: Allow using ``pkg-config`` for build configuration.
    Patch by Patrick Griffis.
  + Bugs fixed
  * LP#1773749, GH#268: Crash when moving an element to another document with
    ``Element.insert()``.
    Patch by Alexander Weggerle.
- Update to 4.2.3
  + Bugs fixed
  * Reverted GH#265: lxml links against zlib as a shared library again.
- Update to 4.2.2
  + Bugs fixed
  * GH#266: Fix sporadic crash during GC when parse-time schema validation is used
    and the parser participates in a reference cycle.
    Original patch by Julien Greard.
  * GH#265: lxml no longer links against zlib as a shared library, only on static builds.
    Patch by Nehal J Wani.</changelog>
  <changelog author="comurphy@suse.com" date="1535976000">- Fix threading tests patch for 42.3
  * Add 0001-Make-test-more-resilient-against-changes-in-latest-l.patch
  * Remove python-lxml-assert.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1542369600">- Update to 4.2.5
  * Javascript URLs that used URL escaping were not removed by the HTML cleaner.
    Security problem found by Omar Eissa.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550145600">- Update to v4.3.1
  * Fixed crash when appending a child subtree that contains unsubstituted
    entity references
- from v4.3.0
  * Features
    + The module ``lxml.sax`` is compiled using Cython in order to speed it up.
    + lxml.sax.ElementTreeProducer now preserves the namespace prefixes.
    If two prefixes point to the same URI, the first prefix in alphabetical
    order is used.
    + Updated ISO-Schematron implementation to 2013 version (now MIT licensed)
    and the corresponding schema to the 2016 version (with optional "properties").
  * Other
    + Support for Python 2.6 and 3.3 was removed.
    + The minimum dependency versions were raised to libxml2 2.9.2 and libxslt 1.1.27,
    which were released in 2014 and 2012 respectively.
- from v4.2.6
  * Fix a DeprecationWarning in Py3.7+.
  * Import warnings in Python 3.6+ were resolved.
- Remove no longer needed
  0001-Make-test-more-resilient-against-changes-in-latest-l.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1551787200">- Update to 4.3.2:
  * Crash in 4.3.1 when appending a child subtree with certain text nodes.</changelog>
  <changelog author="tchvatal@suse.com" date="1554465600">- Update to 4.3.3:
  * Fix leak of output buffer and unclosed files in ``_XSLTResultTree.write_output()``.</changelog>
  <changelog author="tchvatal@suse.com" date="1562068800">- Remove generated files</changelog>
  <changelog author="toddrme2178@gmail.com" date="1563796800">- Update to 4.3.4
  * Rebuilt with Cython 0.29.10 to support Python 3.8.
    Note: documentation is not updated</changelog>
  <changelog author="pgajdos@suse.com" date="1564660800">- version update to 4.4.0
  * ``Element.clear()`` accepts a new keyword argument ``keep_tail=True`` to
    clear everything but the tail text.  This is helpful in some document-style
    use cases.
  * When creating attributes or namespaces from a dict in Python 3.6+, lxml now
    preserves the original insertion order of that dict, instead of always sorting
    the items by name.  A similar change was made for ElementTree in CPython 3.8.
    See https://bugs.python.org/issue34160
  * Integer elements in ``lxml.objectify`` implement the ``__index__()`` special method.
  * GH#269: Read-only elements in XSLT were missing the ``nsmap`` property.
    Original patch by Jan Pazdziora.
  * ElementInclude can now restrict the maximum inclusion depth via a ``max_depth``
    argument to prevent content explosion.  It is limited to 6 by default.
  * The ``target`` object of the XMLParser can have ``start_ns()`` and ``end_ns()``
    callback methods to listen to namespace declarations.
  * The ``TreeBuilder`` has new arguments ``comment_factory`` and ``pi_factory`` to
    pass factories for creating comments and processing instructions, as well as
    flag arguments ``insert_comments`` and ``insert_pis`` to discard them from the
    tree when set to false.
  * A `C14N 2.0 &lt;https://www.w3.org/TR/xml-c14n2/&gt;`_ implementation was added as
    ``etree.canonicalize()``, a corresponding ``C14NWriterTarget`` class, and
    a ``c14n2`` serialisation method.
  * bugfixes, see CHANGES.txt
- deleted sources
  - lxmldoc-4.3.3.pdf (renamed)
- added sources
  + lxmldoc-4.4.0.pdf
  + world.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 4.4.1:
  * LP#1838252: The order of an OrderedDict was lost in 4.4.0 when passing it as attrib mapping during element creation.
  * LP#1838521: The package metadata now lists the supported Python versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1573992000">- Add lxml-libxml-2.9.10.patch: Fix build against libxml 2.9.10.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579694400">- Update to 4.4.2:
  * LP#1835708: ElementInclude incorrectly rejected repeated
    non-recursive includes as recursive.
  * Remove patch lxml-libxml-2.9.10.patch which is now upstream</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1643630400">- With the new update to 4.7.1, the old Bugzilla entries are also
  fixed:
  - bsc#1118088 (related to CVE-2018-19787)
  - bsc#1184177 (related to CVE-2021-28957)
- Update to 4.7.1 (officially released 2021-12-13)
  Features added
  - Chunked Unicode string parsing via parser.feed() now encodes the input
    data to the native UTF-8 encoding directly, instead of going through
    Py_UNICODE / wchar_t encoding first, which previously required duplicate
    recoding in most cases.
  Bugs fixed
  - The standard namespace prefixes were mishandled during "C14N2"
  serialisation
    on Python 3.
    See
  https://mail.python.org/archives/list/lxml@python.org/thread/
  6ZFBHFOVHOS5GFDOAMPCT6HM5HZPWQ4Q/
  - lxml.objectify previously accepted non-XML numbers with underscores
    (like "1_000") as integers or float values in Python 3.6 and later.
    It now adheres to the number format of the XML spec again.
  - LP#1939031: Static wheels of lxml now contain the header files of zlib
    and libiconv (in addition to the already provided headers of
    libxml2/libxslt/libexslt).
  Other changes
  - Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows).
- Update to 4.7.0 (2021-12-13)
  - Release retracted due to missing files in lxml/includes/.
- UPdate to 4.6.5 (2021-12-12)
  Bugs fixed
  - A vulnerability (GHSL-2021-1038) in the HTML cleaner
  - allowed sneaking script content through SVG images
  - (bnc#1193752, CVE-2021-43818).
  - A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed
  - sneaking script content through CSS imports and other crafted
  - constructs (CVE-2021-43818).
- Update 4.6.4 (2021-11-01)
  Features added
  - GH#317: A new property system_url was added to DTD entities.
  - Patch by Thirdegree.
  - GH#314: The STATIC_* variables in setup.py can now be passed
  - via env vars.
  - Patch by Isaac Jurado.
- Update 4.6.3 (2021-03-21)
  Bugs fixed
  - A vulnerability (CVE-2021-28957) was discovered in the HTML
  - Cleaner by Kevin Chung, which allowed JavaScript to pass through.
  - The cleaner now removes the HTML5 formaction attribute.
- Update 4.6.2 (2020-11-26)
  Bugs fixed
  - A vulnerability (bnc#1179534, CVE-2020-27783) was discovered in the HTML
    Cleaner
  - by Yaniv Nizry, which allowed JavaScript to pass through. The cleaner
  - now removes more sneaky "style" content.
- Update 4.6.1 (2020-10-18)
  Bugs fixed
  - A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry,
  - which allowed JavaScript to pass through. The cleaner now removes
  - more sneaky "style" content.
- Update 4.6.0 (2020-10-17)
  Features added
  - GH#310: lxml.html.InputGetter supports __len__() to count the number
  - of input fields. Patch by Aidan Woolley.
  - lxml.html.InputGetter has a new .items() method to ease processing
  - all input fields.
  - lxml.html.InputGetter.keys() now returns the field names in document
  - order.
  - GH-309: The API documentation is now generated using sphinx-apidoc.
  - Patch by Chris Mayo.
  Bugs fixed
  - LP#1869455: C14N 2.0 serialisation failed for unprefixed attributes
  - when a default namespace was defined.
  - TreeBuilder.close() raised AssertionError in some error cases where
  - it should have raised XMLSyntaxError. It now raises a combined
  - exception to keep up backwards compatibility, while switching to
  - XMLSyntaxError as an interface.
- Update 4.5.2 (2020-07-09)
  Bugs fixed
  - Cleaner() now validates that only known configuration options
  - can be set.
  - LP#1882606: Cleaner.clean_html() discarded comments and PIs
  - regardless of the corresponding configuration option, if
  - remove_unknown_tags was set.
  - LP#1880251: Instead of globally overwriting the document loader
  - in libxml2, lxml now sets it per parser run, which improves the
  - interoperability with other users of libxml2 such as libxmlsec.
  - LP#1881960: Fix build in CPython 3.10 by using Cython 0.29.21.
  - The setup options "--with-xml2-config" and "--with-xslt-config"
  - were accidentally renamed to "--xml2-config" and "--xslt-config"
  - in 4.5.1 and are now available again.
- Update 4.5.1 (2020-05-19)
  Bugs fixed
  - LP#1570388: Fix failures when serialising documents larger than
  - 2GB in some cases.
  - LP#1865141, GH#298: QName values were not accepted by the
  - el.iter() method. Patch by xmo-odoo.
  - LP#1863413, GH#297: The build failed to detect libraries on Linux
  - that are only configured via pkg-config. Patch by Hugh McMaster.
- Update 4.5.0 (2020-01-29)
  Features added
  - A new function indent() was added to insert tail whitespace for
  - pretty-printing an XML tree.
  Bugs fixed
  - LP#1857794: Tail text of nodes that get removed from a document
    using item deletion disappeared silently instead of sticking with
    the node that was removed.
  Other changes
  - MacOS builds are 64-bit-only by default. Set CFLAGS and LDFLAGS
    explicitly to override it.
  - Linux/MacOS Binary wheels now use libxml2 2.9.10 and libxslt 1.1.34.
  - LP#1840234: The package version number is now available as
    lxml.__version__.
- Update 4.4.3 (2020-01-28)
  Bugs fixed
  - LP#1844674: itertext() was missing tail text of comments and PIs
    since 4.4.0.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- add CVE-2022-2309.patch (bsc#1201253, CVE-2022-2309)</changelog>
</package>
<package pkgid="6a9bd1c5094ee54834a573cfc3fdfc4e2c23ef2c4e7e1d85ade1586622607eac" name="python3-lxml" arch="x86_64">
  <version epoch="0" ver="4.7.1" rel="150200.3.12.1"/>
  <changelog author="thomas.schraitle@suse.com" date="1505736000">- spec changes:
  - add fdupes
- update to 4.0.0:
  Features added:
  - The ElementPath implementation is now compiled using Cython,
    which speeds up the .find*() methods quite significantly.
  - The modules lxml.builder, lxml.html.diff and lxml.html.clean
    are also compiled using Cython in order to speed them up.
  - xmlfile() supports async coroutines using async with and await.
  - iterwalk() has a new method skip_subtree() that prevents
    walking into the descendants of the current element.
  - RelaxNG.from_rnc_string() accepts a base_url argument to allow
    relative resource lookups.
  - The XSLT result object has a new method .write_output(file)
    that serialises output data into a file according to the
    &lt;xsl:output&gt; configuration.
  Bugs fixed:
  - GH#251: HTML comments were handled incorrectly by the
    soupparser. Patch by mozbugbox.
  - LP#1654544: The html5parser no longer passes the useChardet
    option if the input is a Unicode string, unless explicitly
    requested. When parsing files, the default is to enable it when
    a URL or file path is passed (because the file is then opened in
    binary mode), and to disable it when reading from a file(-like) object.
    Note: This is a backwards incompatible change of the default configuration.
    If your code parses byte strings/streams and depends on character
    detection, please pass the option guess_charset=True explicitly, which
    already worked in older lxml versions.
  - LP#1703810: etree.fromstring() failed to parse UTF-32 data with BOM.
  - LP#1526522: Some RelaxNG errors were not reported in the error log.
  - LP#1567526: Empty and plain text input raised a TypeError in soupparser.
  - LP#1710429: Uninitialised variable usage in HTML diff.
  - LP#1415643: The closing tags context manager in xmlfile() could continue
    to output end tags even after writing failed with an exception.
  - LP#1465357: xmlfile.write() now accepts and ignores None as input argument.
  - Compilation under Py3.7-pre failed due to a modified function signature.
  Other changes:
  - The main module source files were renamed from lxml.*.pyx to plain *.pyx
    (e.g. etree.pyx) to simplify their handling in the build process. Care was
    taken to keep the old header files as fallbacks for code that compiles
    against the public C-API of lxml, but it might still be worth validating
    that third-party code does not notice this change.</changelog>
  <changelog author="jmatejek@suse.com" date="1509451200">- run tests only when the appropriate pythons are available</changelog>
  <changelog author="mimi.vx@gmail.com" date="1518091200">- update to 4.1.1
  - ElementPath supports text predicates for current node, like "[.='text']".
  - ElementPath allows spaces in predicates.
  - Custom Element classes and XPath functions can now be registered with
    a decorator rather than explicit dict assignments.
  - LP#1722776: Requesting non-Element objects like comments from
    a document with PythonElementClassLookup could fail with a TypeError.</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Version update to 4.2.0:
  * GH#255: ``SelectElement.value`` returns more standard-compliant and
    browser-like defaults for non-multi-selects.  If no option is selected, the
    value of the first option is returned (instead of None).  If multiple options
    are selected, the value of the last one is returned (instead of that of the
    first one).  If no options are present (not standard-compliant)
    ``SelectElement.value`` still returns ``None``.
  * GH#261: The ``HTMLParser()`` now supports the ``huge_tree`` option.
    Patch by stranac.
  * LP#1551797: Some XSLT messages were not captured by the transform error log.
  * LP#1737825: Crash at shutdown after an interrupted iterparse run with XMLSchema
    validation.
- Add patch python-lxml-assert.patch to pass test fail on threading</changelog>
  <changelog author="hpj@urpla.net" date="1522238400">- Version update to 4.2.1:
  * LP#1755825: iterwalk() failed to return the 'start' event for the initial
    element if a tag selector is used.
  * LP#1756314: Failure to import 4.2.0 into PyPy due to a missing library symbol.
  * LP#1727864, GH#258: Add "-isysroot" linker option on MacOS as needed by XCode 9.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1533643200">- Update to 4.2.4 (2018-08-03)
  + Features added
  * GH#259: Allow using ``pkg-config`` for build configuration.
    Patch by Patrick Griffis.
  + Bugs fixed
  * LP#1773749, GH#268: Crash when moving an element to another document with
    ``Element.insert()``.
    Patch by Alexander Weggerle.
- Update to 4.2.3
  + Bugs fixed
  * Reverted GH#265: lxml links against zlib as a shared library again.
- Update to 4.2.2
  + Bugs fixed
  * GH#266: Fix sporadic crash during GC when parse-time schema validation is used
    and the parser participates in a reference cycle.
    Original patch by Julien Greard.
  * GH#265: lxml no longer links against zlib as a shared library, only on static builds.
    Patch by Nehal J Wani.</changelog>
  <changelog author="comurphy@suse.com" date="1535976000">- Fix threading tests patch for 42.3
  * Add 0001-Make-test-more-resilient-against-changes-in-latest-l.patch
  * Remove python-lxml-assert.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1542369600">- Update to 4.2.5
  * Javascript URLs that used URL escaping were not removed by the HTML cleaner.
    Security problem found by Omar Eissa.</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="jayvdb@gmail.com" date="1550145600">- Update to v4.3.1
  * Fixed crash when appending a child subtree that contains unsubstituted
    entity references
- from v4.3.0
  * Features
    + The module ``lxml.sax`` is compiled using Cython in order to speed it up.
    + lxml.sax.ElementTreeProducer now preserves the namespace prefixes.
    If two prefixes point to the same URI, the first prefix in alphabetical
    order is used.
    + Updated ISO-Schematron implementation to 2013 version (now MIT licensed)
    and the corresponding schema to the 2016 version (with optional "properties").
  * Other
    + Support for Python 2.6 and 3.3 was removed.
    + The minimum dependency versions were raised to libxml2 2.9.2 and libxslt 1.1.27,
    which were released in 2014 and 2012 respectively.
- from v4.2.6
  * Fix a DeprecationWarning in Py3.7+.
  * Import warnings in Python 3.6+ were resolved.
- Remove no longer needed
  0001-Make-test-more-resilient-against-changes-in-latest-l.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1551787200">- Update to 4.3.2:
  * Crash in 4.3.1 when appending a child subtree with certain text nodes.</changelog>
  <changelog author="tchvatal@suse.com" date="1554465600">- Update to 4.3.3:
  * Fix leak of output buffer and unclosed files in ``_XSLTResultTree.write_output()``.</changelog>
  <changelog author="tchvatal@suse.com" date="1562068800">- Remove generated files</changelog>
  <changelog author="toddrme2178@gmail.com" date="1563796800">- Update to 4.3.4
  * Rebuilt with Cython 0.29.10 to support Python 3.8.
    Note: documentation is not updated</changelog>
  <changelog author="pgajdos@suse.com" date="1564660800">- version update to 4.4.0
  * ``Element.clear()`` accepts a new keyword argument ``keep_tail=True`` to
    clear everything but the tail text.  This is helpful in some document-style
    use cases.
  * When creating attributes or namespaces from a dict in Python 3.6+, lxml now
    preserves the original insertion order of that dict, instead of always sorting
    the items by name.  A similar change was made for ElementTree in CPython 3.8.
    See https://bugs.python.org/issue34160
  * Integer elements in ``lxml.objectify`` implement the ``__index__()`` special method.
  * GH#269: Read-only elements in XSLT were missing the ``nsmap`` property.
    Original patch by Jan Pazdziora.
  * ElementInclude can now restrict the maximum inclusion depth via a ``max_depth``
    argument to prevent content explosion.  It is limited to 6 by default.
  * The ``target`` object of the XMLParser can have ``start_ns()`` and ``end_ns()``
    callback methods to listen to namespace declarations.
  * The ``TreeBuilder`` has new arguments ``comment_factory`` and ``pi_factory`` to
    pass factories for creating comments and processing instructions, as well as
    flag arguments ``insert_comments`` and ``insert_pis`` to discard them from the
    tree when set to false.
  * A `C14N 2.0 &lt;https://www.w3.org/TR/xml-c14n2/&gt;`_ implementation was added as
    ``etree.canonicalize()``, a corresponding ``C14NWriterTarget`` class, and
    a ``c14n2`` serialisation method.
  * bugfixes, see CHANGES.txt
- deleted sources
  - lxmldoc-4.3.3.pdf (renamed)
- added sources
  + lxmldoc-4.4.0.pdf
  + world.txt</changelog>
  <changelog author="tchvatal@suse.com" date="1568203200">- Update to 4.4.1:
  * LP#1838252: The order of an OrderedDict was lost in 4.4.0 when passing it as attrib mapping during element creation.
  * LP#1838521: The package metadata now lists the supported Python versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1573992000">- Add lxml-libxml-2.9.10.patch: Fix build against libxml 2.9.10.</changelog>
  <changelog author="martin.sirringhaus@suse.com" date="1579694400">- Update to 4.4.2:
  * LP#1835708: ElementInclude incorrectly rejected repeated
    non-recursive includes as recursive.
  * Remove patch lxml-libxml-2.9.10.patch which is now upstream</changelog>
  <changelog author="thomas.schraitle@suse.com" date="1643630400">- With the new update to 4.7.1, the old Bugzilla entries are also
  fixed:
  - bsc#1118088 (related to CVE-2018-19787)
  - bsc#1184177 (related to CVE-2021-28957)
- Update to 4.7.1 (officially released 2021-12-13)
  Features added
  - Chunked Unicode string parsing via parser.feed() now encodes the input
    data to the native UTF-8 encoding directly, instead of going through
    Py_UNICODE / wchar_t encoding first, which previously required duplicate
    recoding in most cases.
  Bugs fixed
  - The standard namespace prefixes were mishandled during "C14N2"
  serialisation
    on Python 3.
    See
  https://mail.python.org/archives/list/lxml@python.org/thread/
  6ZFBHFOVHOS5GFDOAMPCT6HM5HZPWQ4Q/
  - lxml.objectify previously accepted non-XML numbers with underscores
    (like "1_000") as integers or float values in Python 3.6 and later.
    It now adheres to the number format of the XML spec again.
  - LP#1939031: Static wheels of lxml now contain the header files of zlib
    and libiconv (in addition to the already provided headers of
    libxml2/libxslt/libexslt).
  Other changes
  - Wheels include libxml2 2.9.12+ and libxslt 1.1.34 (also on Windows).
- Update to 4.7.0 (2021-12-13)
  - Release retracted due to missing files in lxml/includes/.
- UPdate to 4.6.5 (2021-12-12)
  Bugs fixed
  - A vulnerability (GHSL-2021-1038) in the HTML cleaner
  - allowed sneaking script content through SVG images
  - (bnc#1193752, CVE-2021-43818).
  - A vulnerability (GHSL-2021-1037) in the HTML cleaner allowed
  - sneaking script content through CSS imports and other crafted
  - constructs (CVE-2021-43818).
- Update 4.6.4 (2021-11-01)
  Features added
  - GH#317: A new property system_url was added to DTD entities.
  - Patch by Thirdegree.
  - GH#314: The STATIC_* variables in setup.py can now be passed
  - via env vars.
  - Patch by Isaac Jurado.
- Update 4.6.3 (2021-03-21)
  Bugs fixed
  - A vulnerability (CVE-2021-28957) was discovered in the HTML
  - Cleaner by Kevin Chung, which allowed JavaScript to pass through.
  - The cleaner now removes the HTML5 formaction attribute.
- Update 4.6.2 (2020-11-26)
  Bugs fixed
  - A vulnerability (bnc#1179534, CVE-2020-27783) was discovered in the HTML
    Cleaner
  - by Yaniv Nizry, which allowed JavaScript to pass through. The cleaner
  - now removes more sneaky "style" content.
- Update 4.6.1 (2020-10-18)
  Bugs fixed
  - A vulnerability was discovered in the HTML Cleaner by Yaniv Nizry,
  - which allowed JavaScript to pass through. The cleaner now removes
  - more sneaky "style" content.
- Update 4.6.0 (2020-10-17)
  Features added
  - GH#310: lxml.html.InputGetter supports __len__() to count the number
  - of input fields. Patch by Aidan Woolley.
  - lxml.html.InputGetter has a new .items() method to ease processing
  - all input fields.
  - lxml.html.InputGetter.keys() now returns the field names in document
  - order.
  - GH-309: The API documentation is now generated using sphinx-apidoc.
  - Patch by Chris Mayo.
  Bugs fixed
  - LP#1869455: C14N 2.0 serialisation failed for unprefixed attributes
  - when a default namespace was defined.
  - TreeBuilder.close() raised AssertionError in some error cases where
  - it should have raised XMLSyntaxError. It now raises a combined
  - exception to keep up backwards compatibility, while switching to
  - XMLSyntaxError as an interface.
- Update 4.5.2 (2020-07-09)
  Bugs fixed
  - Cleaner() now validates that only known configuration options
  - can be set.
  - LP#1882606: Cleaner.clean_html() discarded comments and PIs
  - regardless of the corresponding configuration option, if
  - remove_unknown_tags was set.
  - LP#1880251: Instead of globally overwriting the document loader
  - in libxml2, lxml now sets it per parser run, which improves the
  - interoperability with other users of libxml2 such as libxmlsec.
  - LP#1881960: Fix build in CPython 3.10 by using Cython 0.29.21.
  - The setup options "--with-xml2-config" and "--with-xslt-config"
  - were accidentally renamed to "--xml2-config" and "--xslt-config"
  - in 4.5.1 and are now available again.
- Update 4.5.1 (2020-05-19)
  Bugs fixed
  - LP#1570388: Fix failures when serialising documents larger than
  - 2GB in some cases.
  - LP#1865141, GH#298: QName values were not accepted by the
  - el.iter() method. Patch by xmo-odoo.
  - LP#1863413, GH#297: The build failed to detect libraries on Linux
  - that are only configured via pkg-config. Patch by Hugh McMaster.
- Update 4.5.0 (2020-01-29)
  Features added
  - A new function indent() was added to insert tail whitespace for
  - pretty-printing an XML tree.
  Bugs fixed
  - LP#1857794: Tail text of nodes that get removed from a document
    using item deletion disappeared silently instead of sticking with
    the node that was removed.
  Other changes
  - MacOS builds are 64-bit-only by default. Set CFLAGS and LDFLAGS
    explicitly to override it.
  - Linux/MacOS Binary wheels now use libxml2 2.9.10 and libxslt 1.1.34.
  - LP#1840234: The package version number is now available as
    lxml.__version__.
- Update 4.4.3 (2020-01-28)
  Bugs fixed
  - LP#1844674: itertext() was missing tail text of comments and PIs
    since 4.4.0.</changelog>
  <changelog author="dmueller@suse.com" date="1660910400">- add CVE-2022-2309.patch (bsc#1201253, CVE-2022-2309)</changelog>
</package>
<package pkgid="8b7b9a0ce90b443640472d91f7486dc2350890a87be9d1c277a7d7ee2cc6674b" name="python3-nftables" arch="aarch64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="bf3b45ac9bb5a5c84ee06e838ac6147069056081c7272efffc58e410994eaf2c" name="python3-nftables" arch="s390x">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="6e84fec064e6b6c95bf1ba7853201c581f0b9d1400f7d1a5ab069155f66cec35" name="python3-nftables" arch="x86_64">
  <version epoch="0" ver="0.9.8" rel="150300.3.6.1"/>
  <changelog author="jengelh@inai.de" date="1482235200">- Update to new upstream release 0.7
  * Add new fib expression, which can be used to obtain the
    output interface from the route table based on either source
    or destination address of a packet.
  * Support hashing of any arbitrary key combination, eg.
  * Add number generation support. Useful for round-robin packet
    mark setting.
  * Add quota support, eg.
  * Introduce routing expression, for routing related data with
    support for nexthop
  * Notrack support, to explicitly skip connection tracking for
    matching packets.
  * Support to set non-byte bound packet header fields, including
    checksum adjustment.
  * Add 'create set' and 'create element' commands.
  * Allow to use variable reference for set element definitions.
  * Allow to use variable definitions from element commands.
  * Add support to flush set. You can use this new command to
    remove all existing elements in a set.
  * Inverted set lookups.
  * Honor absolute and relative paths via include file, where:
  * Support log flags, to enable logging TCP sequence and options.
  * tc classid parser support, eg.
  * Allow numeric connlabels, so if connlabel still works with
    undefined labels.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
</package>
<package pkgid="c0be2edb30b4e88c736829fcb582e8aa5189d24063bebaae2ecc2c861b4aec51" name="python3-nftables" arch="noarch">
  <version epoch="0" ver="0.9.8" rel="150400.6.3.1"/>
  <changelog author="jengelh@inai.de" date="1507896000">- Update to new upstream release 0.8
  * This release contains new features available up to the
    (upcoming) Linux 4.14 kernel release:
  * Support for stateful objects, these objects are uniquely
    identified by a user-defined name, you can refer to them from
    rules, and there is a well established interface to operate
    with them.
  * Sort set elements when listing them, from lower to largest.
  * TCP option matching and mangling support. This includes TCP
    maximum segment size mangling.
  * Add new "-s" option for listings without stateful information.
  * Add new -c/--check option for nft, to tests if your ruleset
    loads fine, into the kernel, this is a dry run mode.
  * Connection tracking helper support.
  * Add --echo option, to print the handle that the kernel
    allocates to uniquely identify rules.
  * Conntrack zone support
  * Symmetric hash support
  * Add support to include directories from nft natives scripts,
    files are loaded in alphanumerical order.
  * Allow to check if IPv6 extension header or TCP option exists
    or is missing.
  * Extend quota support to display used bytes.
  * Add ct average matching, to match average bytes per packet a
    connection has transferred so far, to map the existing
    feature available in the iptables connbytes match.
  * Allow to flush maps and flow tables.
  * Allow to embed set definition into an existing set.
  * Conntrack event filtering support via rule.</changelog>
  <changelog author="jengelh@inai.de" date="1516104000">- Update to new upstream release 0.8.1
  * This release deprecates the "flow table" syntax in favor
    of "meter".</changelog>
  <changelog author="jengelh@inai.de" date="1517659200">- Update to new upstream release 0.8.2
  * add secpath support</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Update to new upstream release 0.8.3
  * raw payload support to match headers that do not yet have
    received a mnemonic.</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 0.8.4
  * Support to match IPv6 segment routing headers.
  * New "meta ibrname" and "meta obrname" arguments to match the
    name of the logical bridge a packet is passing through.
    These new names replace the old (misnamed) "ibriport"/"obriport".
  * `nft -a` will now show handle identifier for all objects,
    including tables and chains.
  * nft can now delete objects by their handle number.
  * Support to update maps from the ruleset (packet path).
  * the "--echo" option now prints handle id for tables and
    object too.
  * `nft -f -` will now read from standard input
  * Support for flow tables, cf. man page or
    https://lwn.net/Articles/738214/ .</changelog>
  <changelog author="jengelh@inai.de" date="1526040000">- Update to new upstream release 0.8.5
  * support to add/insert a rule at a given index position
  * meter statement now supports a configureable upper max size
  * timeouts for sets can now be specified in milliseconds
  * re-add iptables-like empty skeleton rulesets</changelog>
  <changelog author="jengelh@inai.de" date="1528545600">- Update to new upstream release 0.9.0
  * Support to check if packet matches an existing socket.
  * Support to limit number of active connections by arbitrary
    criteria, such as ip addresses, networks, conntrack zones or
    any combination thereof.
  * Added support for "audit" logging.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1547899200">- Remove unused dblatex BuildRequires, only needed for the optional
  and disabled PDF generation (same contents as shipped manpage).</changelog>
  <changelog author="jengelh@inai.de" date="1566216000">- Update to new upstream release 0.9.2
  * Transport header port matching, e.g. "th dport 53"
  * Support for matching on IPv4 options
  * Support for synproxy</changelog>
  <changelog author="jengelh@inai.de" date="1575374400">- Update to release 0.9.3
  * meta: Introduce new conditions "time", "day" and "hour".
  * src: add ability to set/get secmarks to/from connection.
  * flowtable: add support for named flowtable listing.
  * flowtable: add support for delete command by handle.
  * json: add support for element deletion.
  * Add `-T` as the short option for `--numeric-time`.
  * meta: add ibrpvid and ibrvproto support</changelog>
  <changelog author="jengelh@inai.de" date="1575892800">- Add json, python [boo#1158723]</changelog>
  <changelog author="jengelh@inai.de" date="1585742400">- Update to release 0.9.4
  * Add a helper for concat expression handling.
  * Add "typeof" build/parse/print support.</changelog>
  <changelog author="jengelh@inai.de" date="1588852800">- Add anonset-crashfix.patch [boo#1171321]</changelog>
  <changelog author="jengelh@inai.de" date="1591444800">- Update to release 0.9.5
  * Support for set counters.
  * Support for restoring set element counters via nft -f.
  * Counter support for flowtables.
  * typeof concatenations support for sets.
  * Support for concatenated ranges in anonymous sets.
  * Allow to reject packets with 802.1q from the bridge family.
  * Support for matching on the conntrack ID.
- Drop anonset-crashfix.patch (upstream solved differently)</changelog>
  <changelog author="jengelh@inai.de" date="1592308800">- Update to release 0.9.6
  * Fix two ASAN runtime errors</changelog>
  <changelog author="jengelh@inai.de" date="1603800000">- Update to release 0.9.7
  * Support for implicit chains
  * Support for ingress inet chains
  * Support for reject from prerouting chain
  * Support for --terse option in json
  * Support for the reset command with json</changelog>
  <changelog author="jengelh@inai.de" date="1610712000">- Update to release 0.9.8
  * Complete support for matching ICMP header content fields.
  * Added raw tcp option match support.
  * Added ability to check for the presence of any tcp option.
  * Support for rejecting traffic from the ingress chain.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1651492800">- add 0001-cache-check-for-NULL-chain-in-cache_init.patch: this fixes rare
  crashes that could occur e.g. in firewalld (bsc#1197606).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1682424000">- add 0001-evaluate-reject-support-ethernet-as-L2-protocol-for-.patch: this
  fixes a crash in nftables if layer2 reject rules are processed (e.g.
  Ethernet MAC address based reject rich rule in firewalld, bsc#1210773).</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1706616000">- port python-single-spec logic from Factory package to allow shipment of
  python311 modules as well (bsc#1219253).</changelog>
</package>
<package pkgid="a72d0ddaff6c9d210c17b5cfe6de49ebd3f80ed50f3eaca7c5dde1dfb0a0f381" name="python3-ordered-set" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="150400.8.34"/>
  <changelog author="ngompa13@gmail.com" date="1551528000">- Initial packaging for openSUSE</changelog>
  <changelog author="tchvatal@suse.com" date="1555329600">- Format with spec-cleaner</changelog>
  <changelog author="mcalabkova@suse.com" date="1558526400">- update to version 3.1.1
  * Implement set api. SLICE_ALL getitem returns copy
  * Add tests for new API. Replace nose with pytest.
  * OrderedSet now inherits from collections.Sequence, __eq__ now
    checks order of sequences
  * Drop Python 2.6 support; Python and pytest already don't
    support it
  * Fixed bitwise and
  * Added comprehensive binary operation consistency checks
  * Fix DeprecationWarning due to collections.abc in Python 3.7
  * Use set literal instead of function
  * Fix error when fancy indexing by a NumPy array
  * Update in-place operations to be O(N)
  * Add testing and document support for Python 3.7</changelog>
  <changelog author="tchvatal@suse.com" date="1571313600">- Switch to multibuild and make sure we build without setuptools
  in order to avoid buildcycle</changelog>
  <changelog author="tchvatal@suse.com" date="1579262400">- Use psuffix properly to not override src packages</changelog>
  <changelog author="mcepl@suse.com" date="1597233600">- Replace Source URL with the standard one</changelog>
  <changelog author="mcepl@suse.com" date="1603454400">- Use %pycache_only %python_sitelib instead of %python3_sitelib
  fixes gh#openSUSE/python-rpm-macros#64#issuecomment-715373348</changelog>
  <changelog author="code@bnavigator.de" date="1623931200">- Add Provides: for python*dist(ordered-set): work around
  boo#1186870</changelog>
  <changelog author="mardnh@gmx.de" date="1630929600">- Update to version 4.0.2
  * Restore compatibility with Python 3.5
  * fix packaging, remove vestiges of type stubs
  * Remove unused type
  * Add a mailmap
  * remove old .pyi type stub
  * Implement code review suggestions for types
  * Code formatting (isort and black)
  * Move type annotations inline
  * Directly distribute type stub file via PEP 561
  * Handle another indexing case from NumPy</changelog>
  <changelog author="dmueller@suse.com" date="1690459200">- rename to python3 prefix for jsc#PED-68</changelog>
</package>
<package pkgid="7b3ccab04582301a32629169a88dc926c7006c5332c66c72cd1007a0101271fa" name="python3-ordered-set" arch="src">
  <version epoch="0" ver="4.0.2" rel="150400.8.34"/>
  <changelog author="ngompa13@gmail.com" date="1551528000">- Initial packaging for openSUSE</changelog>
  <changelog author="tchvatal@suse.com" date="1555329600">- Format with spec-cleaner</changelog>
  <changelog author="mcalabkova@suse.com" date="1558526400">- update to version 3.1.1
  * Implement set api. SLICE_ALL getitem returns copy
  * Add tests for new API. Replace nose with pytest.
  * OrderedSet now inherits from collections.Sequence, __eq__ now
    checks order of sequences
  * Drop Python 2.6 support; Python and pytest already don't
    support it
  * Fixed bitwise and
  * Added comprehensive binary operation consistency checks
  * Fix DeprecationWarning due to collections.abc in Python 3.7
  * Use set literal instead of function
  * Fix error when fancy indexing by a NumPy array
  * Update in-place operations to be O(N)
  * Add testing and document support for Python 3.7</changelog>
  <changelog author="tchvatal@suse.com" date="1571313600">- Switch to multibuild and make sure we build without setuptools
  in order to avoid buildcycle</changelog>
  <changelog author="tchvatal@suse.com" date="1579262400">- Use psuffix properly to not override src packages</changelog>
  <changelog author="mcepl@suse.com" date="1597233600">- Replace Source URL with the standard one</changelog>
  <changelog author="mcepl@suse.com" date="1603454400">- Use %pycache_only %python_sitelib instead of %python3_sitelib
  fixes gh#openSUSE/python-rpm-macros#64#issuecomment-715373348</changelog>
  <changelog author="code@bnavigator.de" date="1623931200">- Add Provides: for python*dist(ordered-set): work around
  boo#1186870</changelog>
  <changelog author="mardnh@gmx.de" date="1630929600">- Update to version 4.0.2
  * Restore compatibility with Python 3.5
  * fix packaging, remove vestiges of type stubs
  * Remove unused type
  * Add a mailmap
  * remove old .pyi type stub
  * Implement code review suggestions for types
  * Code formatting (isort and black)
  * Move type annotations inline
  * Directly distribute type stub file via PEP 561
  * Handle another indexing case from NumPy</changelog>
  <changelog author="dmueller@suse.com" date="1690459200">- rename to python3 prefix for jsc#PED-68</changelog>
</package>
<package pkgid="d43a61a0bcd5e41f0a04005a6eabcf62b4dd973432d7fb1b40ec18121deb9c2e" name="python3-packaging" arch="noarch">
  <version epoch="0" ver="21.3" rel="150200.3.3.1"/>
  <changelog author="tbechtold@suse.com" date="1565092800">- update to 19.1:
  * Add the ``packaging.tags`` module.
  * Correctly handle two-digit versions in ``python_version``</changelog>
  <changelog author="dcermak@suse.com" date="1565265600">- Add Requires:python-attrs as this is a new dependency
  this fixes bsc#1144506</changelog>
  <changelog author="dcermak@suse.com" date="1565265601">- Enable tests via _multibuild
  Add patches from https://github.com/pypa/packaging/pull/176:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  (these fix the tests on non-x86 platforms and can be dropped on the next
  release)</changelog>
  <changelog author="tchvatal@suse.com" date="1565870400">- Fix a bit the multibuild conversion
- Remove the attrs from the deps as they are no longer needed</changelog>
  <changelog author="dcermak@suse.com" date="1566216000">- Remove dependency on attrs
  Add: 0005-Drop-dependency-on-attrs.patch
  this fixes bsc#1144506</changelog>
  <changelog author="tchvatal@suse.com" date="1570536000">- Update to 19.2:
  * Many buildsystem tweaks to accomodate for distribution shipping
- Remove all the merged patches:
  * 0001-Fix-test-failures-test_linux_platforms_manylinux-for.patch
  * 0002-Fix-check-for-64-bit-OS.patch
  * 0003-Add-additional-test-to-get-100-branch-coverage.patch
  * 0004-Fix-test_macos_version_detection-failure-on-32-bit-L.patch
  * 0005-Drop-dependency-on-attrs.patch</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580904000">- Update to 20.1
  * Fix a bug caused by reuse of an exhausted iterator.
  * Add type hints
  * Add proper trove classifiers for PyPy support
  * Scale back depending on ctypes for manylinux support detection
  * Use sys.implementation.name where appropriate for packaging.tags
  * Expand upon the API provded by packaging.tags
  * Officially support Python 3.8
  * Add major, minor, and micro aliases to packaging.version.Version
  * Properly mark packaging has being fully typed by adding a py.typed file</changelog>
  <changelog author="mimi.vx@gmail.com" date="1581336000">- add issue_254.patch to fix tests under non-x86_64 pplatforms</changelog>
  <changelog author="mcalabkova@suse.com" date="1583928000">- Update to 20.3
  * Fix a bug that caused a 32-bit OS that runs on a 64-bit ARM CPU
    (e.g. ARM-v8, aarch64), to report the wrong bitness.
- Drop already upstreamed patch issue_254.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1588680000">- Ignore clamav scan as it bogusly calls one file to be infected
  while it is just a testcase of malformed binary:
  [#]!BuildIgnore: post-build-checks-malwarescan</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 20.4:
  * Canonicalize version before comparing specifiers. (:issue:`282`)
  * Change type hint for ``canonicalize_name`` to return
  ``packaging.utils.NormalizedName``.
  This enables the use of static typing tools (like mypy) to detect mixing of
  normalized and un-normalized names.</changelog>
  <changelog author="dmueller@suse.com" date="1608465600">- update to 20.8:
  * Revert back to setuptools for compatibility purposes for some Linux distros (:issue:`363`)
  * Do not insert an underscore in wheel tags when the interpreter version number
    is more than 2 digits (:issue:`372`)
  * Fix flit configuration, to include LICENSE files (:issue:`357`)
  * Make `intel` a recognized CPU architecture for the `universal` macOS platform tag (:issue:`361`)
  * Add some missing type hints to `packaging.requirements` (issue:`350`)
  * Officially support Python 3.9 (:issue:`343`)
  * Deprecate the ``LegacyVersion`` and ``LegacySpecifier`` classes (:issue:`321`)
  * Handle ``OSError`` on non-dynamic executables when attempting to resolve
    the glibc version string.</changelog>
  <changelog author="dmueller@suse.com" date="1612267200">- update to 20.9:
  * Run [isort](https://pypi.org/project/isort/) over the code base (:issue:`377`)
  * Add support for the ``macosx_10_*_universal2`` platform tags (:issue:`379`)
  * Introduce ``packaging.utils.parse_wheel_filename()`` and ``parse_sdist_filename()``</changelog>
  <changelog author="dmueller@suse.com" date="1619870400">- add no-legacyversion-warning.patch to restore compatibility with 20.4</changelog>
  <changelog author="code@bnavigator.de" date="1623931200">- Add Provides: for python*dist(packaging): work around boo#1186870
- skip tests failing because of no-legacyversion-warning.patch</changelog>
  <changelog author="dmueller@suse.com" date="1636200000">- update to 21.2:
  * Update documentation entry for 21.1.
  * Update pin to pyparsing to exclude 3.0.0.
  * PEP 656: musllinux support
  * Drop support for Python 2.7, Python 3.4 and Python 3.5.
  * Replace distutils usage with sysconfig
  * Add support for zip files in ``parse_sdist_filename``
  * Use cached ``_hash`` attribute to short-circuit tag equality comparisons
  * Specify the default value for the ``specifier`` argument to ``SpecifierSet``
  * Proper keyword-only "warn" argument in packaging.tags
  * Correctly remove prerelease suffixes from ~= check
  * Fix type hints for ``Version.post`` and ``Version.dev``
  * Use typing alias ``UnparsedVersion``
  * Improve type inference for ``packaging.specifiers.filter()``
  * Tighten the return type of ``canonicalize_version()``</changelog>
  <changelog author="buschmann23@opensuse.org" date="1637755200">- update to 21.3:
  * Add a pp3-none-any tag (gh#pypa/packaging#311)
  * Replace the blank pyparsing 3 exclusion with a 3.0.5 exclusion
    (gh#pypa/packaging#481), (gh#pypa/packaging#486)
  * Fix a spelling mistake (gh#pypa/packaging#479)</changelog>
  <changelog author="hui.zhi.zhao@suse.com" date="1650888000">- Ignore python3.6.2 since the test doesn't support it.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1653825600">- Add patch to fix testsuite on big-endian targets
  + fix-big-endian-build.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="79e6e9e37601367b2c03b2d77d7912a91b47978ff54873bf10ce851bf7e5497a" name="python3-ply" arch="noarch">
  <version epoch="0" ver="3.10" rel="150000.3.3.4"/>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="5bb903a404fadb4739becce664930c214f1e11ac2df67777feec922f213fe929" name="python3-ply" arch="noarch">
  <version epoch="0" ver="3.10" rel="150000.3.5.1"/>
  <changelog author="saschpe@suse.de" date="1301400000">- Update to 3.4:
  + Minor patch to make cpp.py compatible with Python 3.
  + Fixed setup.py trove classifiers to properly list PLY as Python
    3 compatible.
- License changed to BSD3c
- Packaged more doc files
- Moved important docs (README, ..) to base package
- Fixed build for non-SUSE distros</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="highwaystar.ru@gmail.com" date="1337947200">- python3 package added</changelog>
  <changelog author="toddrme2178@gmail.com" date="1337947201">- spec file cleanups</changelog>
  <changelog author="toddrme2178@gmail.com" date="1357128000">- Fix building on SLES</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431345600">- update to version 3.6:
  * If PLY is unable to create the 'parser.out' or 'parsetab.py'
    files due to permission issues, it now just issues a warning
    message and continues to operate
  * Fixed some issues related to use of packages and table file
    modules
- additional changes from version 3.5:
  * Added support for defaulted_states in the parser
  * Fixed debug logging in the parser
  * Added actions to be defined to character literals (Issue #32)
  * Import of the 'parsetab.py' file is now constrained to only
    consider the directory specified by the outputdir argument to
    yacc()
  * Changed default output directory to be the same as that in
    which the yacc grammar is defined
  * Changed the parsetab.py file signature slightly so that the
    parsetab won't regenerate if created on a different major
    version of Python
  * Fixed Issue #44 call_errorfunc() should return the result of
    errorfunc()
  * Support for versions of Python &lt;2.7 is officially dropped
  * Fixed bug related to calling yacc(start=...)
  * Added skipped tests for PyPy and Java
  * Added filter to make unit tests pass under 'python -3'
  * Fixed CPP_INTEGER regex in ply/cpp.py (Issue 21)
  * Fixed yacc validation bugs when from __future__ import
    unicode_literals is being used
  * Added support for Travis-CI
  * Added a .gitignore file
  * Fixed validation problems for source files that include a
    different source code encoding specifier
  * Fixed unit tests for yacc to eliminate random failures due to
    dict hash value randomization in Python 3.3
  * Fixed comment whitespace processing bugs in ply/cpp.py
  * Fixed token names in ply/ctokens.py to match rule names
  * Changes to functions available in panic mode error recover
  * Fixed some problems with line and position tracking and the use
    of error symbols
  * Change to doc string handling in lex module
  * Fixed issue #1: Fixed _tabversion. It should use __tabversion__
    instead of __version__
  * Fixed issue #8: Literals empty list causes IndexError
  * Fixed issue #12: Typo in code snippet in documentation
  * Fixed issue #10: Correctly escape t_XOREQUAL pattern.
- clean the test and example directories
- remove stray backup files in doc
- remove unneeded executable bit of testlex.py
- remove CFLAGS export: unneeded
- do not drop executable bit of everything in test since
  it contains subdirectories
- remove useless clean section
- remove README from package: not provided anymore</changelog>
  <changelog author="hpj@urpla.net" date="1444219200">- update to version 3.8:
  * Fixed issues related to Python 3.5. Patch contributed by Barry Warsaw.
- update to version 3.7
  * Fixed problems when reading table files from pickled data.
  * Fixed regression in handling of table modules if specified as module
    objects.   See https://github.com/dabeaz/ply/issues/63
- clean up spec
- add testing rig</changelog>
  <changelog author="tbechtold@suse.com" date="1472817600">- update to 3.9:
  * Exposed the parser state number as the parser.state attribute
    in productions and error functions.
  * Fixed Issue #88. Python3 compatibility with ply/cpp.
  * Fixed Issue #93. Ply can crash if SyntaxError is raised inside
    a production.   Not actually sure if the original implementation
    worked as documented at all.  Yacc has been modified to follow
    the spec as outlined in the CHANGES noted for 11/27/07 below.
  * Fixed Issue #97. Failure with code validation when the original
    source files aren't present.   Validation step now ignores
    the missing file.
  * Minor fixes to version numbers.</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10
  * Changed grammar signature computation to not involve hashing
    functions. Parts are just combined into a big string.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
</package>
<package pkgid="54aa5a5b41bdeb853d8a0e7dfb2c23960da8518a5b58e8df93cfc2354feda702" name="python3-psutil" arch="aarch64">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="6ff304d04fa47707b86f909ee822ba66d52b426b547e6463faf40b90242d9991" name="python3-psutil" arch="s390x">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="2d5e07eb0ca53a8775b10e20f79c4ff5743c300095248f8bf27259fa87738ecb" name="python3-psutil" arch="x86_64">
  <version epoch="0" ver="5.9.1" rel="150300.3.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1580299200">- Add pr_1665.patch: Future-proof disk_io_counters on Linux. Fixes
  tests with Linux 5.5.</changelog>
  <changelog author="tchvatal@suse.com" date="1584187200">- Update to 5.7.0:
  * Various fixes to build with updated kernel/etc.
- Remove merged patch pr_1665.patch and pr_1364.patch
- Update patch skip-obs.patch
- Remove skip-test-missing-warnings.patch as it can be fixed by
  properly calling the tests</changelog>
  <changelog author="mcepl@suse.com" date="1598011200">- Add skip_failing_tests.patch to skip tests failing because of
  incomplete emulation of the environment in osc build
  environment (gh#giampaolo/psutil#1635).</changelog>
  <changelog author="dmueller@suse.com" date="1600257600">- update to 5.7.2:
  * parallel tests on UNIX (make test-parallel). They're twice as fast!
  * 1741: "make build/install" is now run in parallel and it's about 15% faster on UNIX.
  * 1747: Process.wait() on POSIX returns an enum, showing the negative signal which was used to terminate the process
  * 1747: Process.wait() return value is cached so that the exit code can be retrieved on then next call.
  * 1747: Process provides more info about the process on str() and repr() (status and exit code):
  * 1757: memory leak tests are now stable.
  * 1768: [Windows] added support for Windows Nano Server. (contributed by Julien Lebot)
  * 1726: [Linux] cpu_freq() parsing should use spaces instead of tabs on ia64. (patch by Michał Górny)
  * 1760: [Linux] Process.rlimit() does not handle long long type properly.
  * 1766: [macOS] NoSuchProcess may be raised instead of ZombieProcess.
  * 1781: fix signature of callback function for getloadavg(). (patch by Ammar Askar)
  - remove skip-flaky-i586.patch (obsolete)</changelog>
  <changelog author="code@bnavigator.de" date="1604404800">- Fix shebang replacement for multiple python flavors</changelog>
  <changelog author="dmueller@suse.com" date="1606824000">- update to 5.7.3:
  - 809_: [FreeBSD] add support for `Process.rlimit()`.
  - 893_: [BSD] add support for `Process.environ()` (patch by Armin Gruner)
  - 1830_: [UNIX] `net_if_stats()`'s `isup` also checks whether the NIC is
    running (meaning Wi-Fi or ethernet cable is connected).
  - 1837_: [Linux] improved battery detection and charge "secsleft" calculation
  - 1620_: [Linux] physical cpu_count() result is incorrect on systems with more
    than one CPU socket.
  - 1738_: [macOS] Process.exe() may raise FileNotFoundError if process is still
    alive but the exe file which launched it got deleted.
  - 1791_: [macOS] fix missing include for getpagesize().
  - 1823_: [Windows] Process.open_files() may cause a segfault due to a NULL
    pointer.
  - 1838_: [Linux] sensors_battery(): if `percent` can be determined but not
    the remaining values, still return a result instead of None.
- skip-obs.patch, skip_failing_tests.patch: rediff</changelog>
  <changelog author="asn@cryptomilk.org" date="1607688000">- Add missing BR for unittest2</changelog>
  <changelog author="code@bnavigator.de" date="1607688001">- Only require unittest2 for Leap.</changelog>
  <changelog author="alarrosa@suse.com" date="1611576000">- update to 5.8.0:
  * Enhancements:
  - 1863: disk_partitions() exposes 2 extra fields: maxfile and
    maxpath, which are the maximum file name and path name
    length.
  - 1872: [Windows] added support for PyPy 2.7.
  - 1879: provide pre-compiled wheels for Linux and macOS.
  - 1880: get rid of Travis and Cirrus CI services (they are no
    longer free). CI testing is now done by GitHub Actions on
    Linux, macOS and FreeBSD (yes). AppVeyor is still being used
    for Windows CI.
  * Bug fixes:
  - 1708: [Linux] get rid of sensors_temperatures() duplicates.
    (patch by Tim Schlueter).
  - 1839: [Windows] always raise AccessDenied when failing to
    query 64 processes from 32 bit ones (NtWoW64 APIs).
  - 1866: [Windows] process exe(), cmdline(), environ() may raise
    "invalid access to memory location" on Python 3.9.
  - 1874: [Solaris] wrong swap output given when encrypted column
    is present.
  - 1875: [Windows] process username() may raise
    ERROR_NONE_MAPPED if the SID has no corresponding account
    name. In this case AccessDenied is now raised.
  - 1877: [Windows] OpenProcess may fail with ERROR_SUCCESS.
    Turn it into AccessDenied or NoSuchProcess depending on
    whether the PID is alive.
  - 1886: [macOS] EIO error may be raised on cmdline() and
    environment(). Now it gets translated into AccessDenied.
  - 1891: [macOS] get rid of deprecated getpagesize().
- Rebase patch and skip three other tests that fail on obs
  * skip-obs.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611835200">- Add patch to skip tests related to rlimit and zombie processes
  that fail when building for python2 on i586:
  * skip_rlimit_tests_on_python2.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1611921600">- Do not install tests (and change the way they're run since they
  were run from %{buildroot})</changelog>
  <changelog author="idesmi@protonmail.com" date="1620820800">- remove the dependency on net-tools, since it conflicts with
  busybox-hostnmame which is default on MicroOS. boo#1184753</changelog>
  <changelog author="steven.kowalik@suse.com" date="1637841600">- Update skip-obs.patch to also skip TestProcess.test_ionice_linux</changelog>
  <changelog author="dmueller@suse.com" date="1641816000">- update to 5.9.0:
  * [Linux]: `cpu_freq()`_ is slow on systems with many CPUs. Read current
    frequency values for all CPUs from ``/proc/cpuinfo`` instead of opening many
    files in ``/sys`` fs.  (patch by marxin)
  * `NoSuchProcess`_ message now specifies if the PID has been reused.
  * error classes (`NoSuchProcess`_, `AccessDenied`_, etc.) now have a better
    formatted and separated ``__repr__`` and ``__str__`` implementations.
  * [Linux]: `disk_partitions()`_: convert ``/dev/root`` device (an alias
    used on some Linux distros) to real root device path.
  * ``PSUTIL_DEBUG`` mode now prints file name and line number of the debug
    messages coming from C extension modules.
  * rewrite HISTORY.rst to use hyperlinks pointing to psutil API doc.
  * [Linux]: `wait_procs()`_ should catch ``subprocess.TimeoutExpired``
  exception.
  * [Linux]: `sensors_battery()`_ can raise ``TypeError`` on PureOS.
  * [Linux]: psutil does not handle ``ENAMETOOLONG`` when accessing process
  file descriptors in procfs.  (patch by Nikita Radchenko)
  * **[critical]**: ``memoize_when_activated`` decorator is not thread-safe.
  * **[critical]**: `process_iter()`_ is not thread safe and can raise
  ``TypeError`` if invoked from multiple threads.
  * [Linux]: `cpu_freq()`_ return order is wrong on systems with more than
  9 CPUs.</changelog>
  <changelog author="mcepl@suse.com" date="1643544000">- Add skip-partitions-erros.patch skipping tests failing on Linux
  (gh#giampaolo/psutil#2043).</changelog>
  <changelog author="mcepl@suse.com" date="1643803200">- Fix name of Patch4, it is skip-partitions-erros.patch</changelog>
  <changelog author="michael@stroeder.com" date="1653393600">- removed obsolete skip-partitions-erros.patch
- update to 5.9.1
  * Enhancements
  - 1053: drop Python 2.6 support. (patches by Matthieu Darbois and Hugo van Kemenade)
  - 2050, [Linux]: increase read(2) buffer size from 1k to 32k when reading /proc
    pseudo files line by line. This should help having more consistent results.
  - 2057, [OpenBSD]: add support for cpu_freq().
  - 2107, [Linux]: Process.memory_full_info() (reporting process USS/PSS/Swap memory)
    now reads /proc/pid/smaps_rollup instead of /proc/pids/smaps, which makes it 5 times faster.
  * Bug fixes
  - 2048: AttributeError is raised if psutil.Error class is raised manually and passed through str.
  - 2049, [Linux]: cpu_freq() erroneously returns curr value in GHz while min and max are in MHz.
  - 2050, [Linux]: virtual_memory() may raise ValueError if running in a LCX container.</changelog>
  <changelog author="werner@suse.de" date="1655985600">- Add patch mem-used-bsc1181475.patch (bsc#1181475)
  * Adopt change of used memory calculation from upstream of procps</changelog>
  <changelog author="code@bnavigator.de" date="1657886400">- Fix tests: setuptools changed the builddir library path and does
  not find the module from it. Use the installed platlib instead
  and exclude psutil.tests only later.
- Refresh skip-obs.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1669032000">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
</package>
<package pkgid="6f518143761240f12ddc3ab25ada24a7581cd48a1c3ececa2a956a2978097432" name="python3-pyOpenSSL" arch="noarch">
  <version epoch="0" ver="21.0.0" rel="150400.7.62"/>
  <changelog author="hpj@urpla.net" date="1528977600">- add missing python-cffi dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Update to 18.0.0:
  * Update for new openssl 1.1.1
- Remove not needed patches:
  * bug-lp-1265482.diff
  * rsa128-i586.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Add patch to work with openssl 1.1.0i+:
  * openssl-1.1.0i.patch</changelog>
  <changelog author="vcizek@suse.com" date="1538740800">- OpenSSL changed X509_STORE_add_cert in 1.1.0i such that it no longer
  raises an error if a duplicate cert is added (bsc#1110435)
  * https://github.com/pyca/pyopenssl/pull/787
  * add X509_STORE_add_cert.patch</changelog>
  <changelog author="mcepl@suse.com" date="1540900800">- Add patch fix_test_suite.patch to allow test suite to pass with
  OpenSSL 1.1.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1540900801">- Add patch to fix issues with openssl 1.1.1:
  * openssl-1.1.1.patch
- Drop the downstream fix_test_suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1540900802">- handle that renegotiation is forbidden in TLS 1.3
  * add tls13-renegotiation.patch</changelog>
  <changelog author="hpj@urpla.net" date="1549108800">- add local-intersphinx-inventories.patch for generating the docs
  correctly
- add fetch-intersphinx-inventories.sh to fetch the inventories</changelog>
  <changelog author="toddrme2178@gmail.com" date="1551096000">- Add fetch-intersphinx-inventories.sh to sources</changelog>
  <changelog author="hpj@urpla.net" date="1551441600">- remove everything to build docs:
  - local-intersphinx-inventories.patch
  - fetch-intersphinx-inventories.sh
  - python3.inv
  - crypto.inv</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551528000">- update to 19.0
- fixed build deps.
- drop patches: openssl-1.1.0i.patch
    openssl-1.1.1.patch
    opensuse_ca.patch
    tls13-renegotiation.patch
  * X509Store.add_cert no longer raises an error if you add a duplicate cert.
  * pyOpenSSL now works with OpenSSL 1.1.1.
  * pyOpenSSL now handles NUL bytes in X509Name.get_components()</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k "not test_export_text"</changelog>
  <changelog author="bwiedemann@suse.com" date="1566475200">- Add fix-compilation-2020.patch to fix tests after 2020</changelog>
  <changelog author="jayvdb@gmail.com" date="1582027200">- Update to v19.1
  * Removed deprecated aliases ContextType, ConnectionType, PKeyType, X509NameType,
    X509ReqType, X509Type, X509StoreType, CRLType, PKCS7Type, PKCS12Type, and NetscapeSPKIType.
    Use the classes without the ``Type`` suffix instead.
  * The minimum ``cryptography`` version is now 2.8
  * Deprecated ``OpenSSL.SSL.Context.set_npn_advertise_callback,
    OpenSSL.SSL.Context.set_npn_select_callback, and
    OpenSSL.SSL.Connection.get_next_proto_negotiated
    ALPN should be used instead.
  * Support bytearray in SSL.Connection.send() by using cffi's from_buffer
  * The OpenSSL.SSL.Context.set_alpn_select_callback can return a new
    NO_OVERLAPPING_PROTOCOLS sentinel value to allow a TLS handshake
    to complete without an application protocol.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- Update to v20.0.0
  - Backward-incompatible changes:
  - The minimum cryptography version is now 3.2.
  - Remove deprecated OpenSSL.tsafe module.
  - Removed deprecated
    OpenSSL.SSL.Context.set_npn_advertise_callback,
    OpenSSL.SSL.Context.set_npn_select_callback, and
    OpenSSL.SSL.Connection.get_next_proto_negotiated.
  - Drop support for Python 3.4
  - Drop support for OpenSSL 1.0.1 and 1.0.2
  - Deprecations:
  - Deprecated OpenSSL.crypto.loads_pkcs7 and
    OpenSSL.crypto.loads_pkcs12.
  - Changes:
  - Added a new optional chain parameter to
    OpenSSL.crypto.X509StoreContext() where additional untrusted
    certificates can be specified to help chain building. #948
  - Added OpenSSL.crypto.X509Store.load_locations to set trusted
    certificate file bundles and/or directories for verification.
    [#943]
  - Added Context.set_keylog_callback to log key material. #910
  - Added OpenSSL.SSL.Connection.get_verified_chain to retrieve
    the verified certificate chain of the peer. #894.
  - Make verification callback optional in Context.set_verify. If
    omitted, OpenSSL’s default verification is used. #933
  - Fixed a bug that could truncate or cause a zero-length key
    error due to a null byte in private key passphrase in
    OpenSSL.crypto.load_privatekey and
    OpenSSL.crypto.dump_privatekey. #947
- drop patch fix-compilation-2020.patch: no longer needed
- refreshed patch skip-networked-test.patch</changelog>
  <changelog author="mcepl@suse.com" date="1607688000">- According to gh#pyca/pyopenssl#684 tests must run with TZ=UTC, also
  skip test_verify_with_time on %ix86.</changelog>
  <changelog author="mcepl@suse.com" date="1608638400">- Adjust metadata for skip-networked-test.patch and refer to the proper
  upstream ticket gh#pyca/pyopenssl#68.</changelog>
  <changelog author="dmueller@suse.com" date="1612180800">- update to 20.0.1:
  - Fixed compatibility with OpenSSL 1.1.0.</changelog>
  <changelog author="dmueller@suse.com" date="1635249600">- update to 21.0.0 (bsc#1200771, jsc#SLE-24519):
  - The minimum ``cryptography`` version is now 3.3.
  - Drop support for Python 3.5
  - Raise an error when an invalid ALPN value is set.
  - Added ``OpenSSL.SSL.Context.set_min_proto_version`` and ``OpenSSL.SSL.Context.set_max_proto_version``
  - Updated ``to_cryptography`` and ``from_cryptography`` methods to support an
    upcoming release of ``cryptography`` without raising deprecation warnings.</changelog>
  <changelog author="mcepl@suse.com" date="1635595200">- Add check_inv_ALPN_lists.patch checks for invalid ALPN lists
  before calling OpenSSL (gh#pyca/pyopenssl#1056).</changelog>
</package>
<package pkgid="8cf1ee49c15e8ed3ef2abe6312ebaeb020e6a4146d21afb148b0d798f7abbf2f" name="python3-pyOpenSSL" arch="src">
  <version epoch="0" ver="21.0.0" rel="150400.7.62"/>
  <changelog author="hpj@urpla.net" date="1528977600">- add missing python-cffi dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1534420800">- Update to 18.0.0:
  * Update for new openssl 1.1.1
- Remove not needed patches:
  * bug-lp-1265482.diff
  * rsa128-i586.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1535112000">- Add patch to work with openssl 1.1.0i+:
  * openssl-1.1.0i.patch</changelog>
  <changelog author="vcizek@suse.com" date="1538740800">- OpenSSL changed X509_STORE_add_cert in 1.1.0i such that it no longer
  raises an error if a duplicate cert is added (bsc#1110435)
  * https://github.com/pyca/pyopenssl/pull/787
  * add X509_STORE_add_cert.patch</changelog>
  <changelog author="mcepl@suse.com" date="1540900800">- Add patch fix_test_suite.patch to allow test suite to pass with
  OpenSSL 1.1.1.</changelog>
  <changelog author="tchvatal@suse.com" date="1540900801">- Add patch to fix issues with openssl 1.1.1:
  * openssl-1.1.1.patch
- Drop the downstream fix_test_suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1540900802">- handle that renegotiation is forbidden in TLS 1.3
  * add tls13-renegotiation.patch</changelog>
  <changelog author="hpj@urpla.net" date="1549108800">- add local-intersphinx-inventories.patch for generating the docs
  correctly
- add fetch-intersphinx-inventories.sh to fetch the inventories</changelog>
  <changelog author="toddrme2178@gmail.com" date="1551096000">- Add fetch-intersphinx-inventories.sh to sources</changelog>
  <changelog author="hpj@urpla.net" date="1551441600">- remove everything to build docs:
  - local-intersphinx-inventories.patch
  - fetch-intersphinx-inventories.sh
  - python3.inv
  - crypto.inv</changelog>
  <changelog author="mimi.vx@gmail.com" date="1551528000">- update to 19.0
- fixed build deps.
- drop patches: openssl-1.1.0i.patch
    openssl-1.1.1.patch
    opensuse_ca.patch
    tls13-renegotiation.patch
  * X509Store.add_cert no longer raises an error if you add a duplicate cert.
  * pyOpenSSL now works with OpenSSL 1.1.1.
  * pyOpenSSL now handles NUL bytes in X509Name.get_components()</changelog>
  <changelog author="jayvdb@gmail.com" date="1551960000">- Remove no longer necessary pytest argument -k "not test_export_text"</changelog>
  <changelog author="bwiedemann@suse.com" date="1566475200">- Add fix-compilation-2020.patch to fix tests after 2020</changelog>
  <changelog author="jayvdb@gmail.com" date="1582027200">- Update to v19.1
  * Removed deprecated aliases ContextType, ConnectionType, PKeyType, X509NameType,
    X509ReqType, X509Type, X509StoreType, CRLType, PKCS7Type, PKCS12Type, and NetscapeSPKIType.
    Use the classes without the ``Type`` suffix instead.
  * The minimum ``cryptography`` version is now 2.8
  * Deprecated ``OpenSSL.SSL.Context.set_npn_advertise_callback,
    OpenSSL.SSL.Context.set_npn_select_callback, and
    OpenSSL.SSL.Connection.get_next_proto_negotiated
    ALPN should be used instead.
  * Support bytearray in SSL.Connection.send() by using cffi's from_buffer
  * The OpenSSL.SSL.Context.set_alpn_select_callback can return a new
    NO_OVERLAPPING_PROTOCOLS sentinel value to allow a TLS handshake
    to complete without an application protocol.</changelog>
  <changelog author="mrueckert@suse.de" date="1607515200">- Update to v20.0.0
  - Backward-incompatible changes:
  - The minimum cryptography version is now 3.2.
  - Remove deprecated OpenSSL.tsafe module.
  - Removed deprecated
    OpenSSL.SSL.Context.set_npn_advertise_callback,
    OpenSSL.SSL.Context.set_npn_select_callback, and
    OpenSSL.SSL.Connection.get_next_proto_negotiated.
  - Drop support for Python 3.4
  - Drop support for OpenSSL 1.0.1 and 1.0.2
  - Deprecations:
  - Deprecated OpenSSL.crypto.loads_pkcs7 and
    OpenSSL.crypto.loads_pkcs12.
  - Changes:
  - Added a new optional chain parameter to
    OpenSSL.crypto.X509StoreContext() where additional untrusted
    certificates can be specified to help chain building. #948
  - Added OpenSSL.crypto.X509Store.load_locations to set trusted
    certificate file bundles and/or directories for verification.
    [#943]
  - Added Context.set_keylog_callback to log key material. #910
  - Added OpenSSL.SSL.Connection.get_verified_chain to retrieve
    the verified certificate chain of the peer. #894.
  - Make verification callback optional in Context.set_verify. If
    omitted, OpenSSL’s default verification is used. #933
  - Fixed a bug that could truncate or cause a zero-length key
    error due to a null byte in private key passphrase in
    OpenSSL.crypto.load_privatekey and
    OpenSSL.crypto.dump_privatekey. #947
- drop patch fix-compilation-2020.patch: no longer needed
- refreshed patch skip-networked-test.patch</changelog>
  <changelog author="mcepl@suse.com" date="1607688000">- According to gh#pyca/pyopenssl#684 tests must run with TZ=UTC, also
  skip test_verify_with_time on %ix86.</changelog>
  <changelog author="mcepl@suse.com" date="1608638400">- Adjust metadata for skip-networked-test.patch and refer to the proper
  upstream ticket gh#pyca/pyopenssl#68.</changelog>
  <changelog author="dmueller@suse.com" date="1612180800">- update to 20.0.1:
  - Fixed compatibility with OpenSSL 1.1.0.</changelog>
  <changelog author="dmueller@suse.com" date="1635249600">- update to 21.0.0 (bsc#1200771, jsc#SLE-24519):
  - The minimum ``cryptography`` version is now 3.3.
  - Drop support for Python 3.5
  - Raise an error when an invalid ALPN value is set.
  - Added ``OpenSSL.SSL.Context.set_min_proto_version`` and ``OpenSSL.SSL.Context.set_max_proto_version``
  - Updated ``to_cryptography`` and ``from_cryptography`` methods to support an
    upcoming release of ``cryptography`` without raising deprecation warnings.</changelog>
  <changelog author="mcepl@suse.com" date="1635595200">- Add check_inv_ALPN_lists.patch checks for invalid ALPN lists
  before calling OpenSSL (gh#pyca/pyopenssl#1056).</changelog>
</package>
<package pkgid="528e07149d0b85fc2cffe59ef17b02dbe58ad76e40fdc0325ba1664c22108da1" name="python3-pyasn1" arch="noarch">
  <version epoch="0" ver="0.4.2" rel="150000.3.5.1"/>
  <changelog author="lchiquitto@suse.com" date="1425384000">- Reflect license change (from BSD-3-Clause to BSD-2-Clause) which
  happened in version 0.1.7 in the spec file</changelog>
  <changelog author="mcihar@suse.cz" date="1429704000">- Run testsuite in %check</changelog>
  <changelog author="michael@stroeder.com" date="1436011200">- updated to upstrean release 0.1.8 (fate#318838)
  - ObjectIdentifier codec fixed to work properly with arc 0 and arc 2 values.
  - Explicit limit on ObjectIdentifier arc value size removed.
  - Unicode initializer support added to OctetString type and derivatives.
  - New prettyPrintType() abstract method implemented to base pyasn1 types
    to facilitate encoding errors analisys.
  - The __str__() method implemented to Tag, TagSet and TagMap classes to
    ease encoding errors troubleshooting.
    easing encoding errors
  - Fix to SEQUENCE and SET types to give them their private componentTypes
    collection (which is a NamedTypes object) so that they won't collide in
    a MT execution environment.
  - Missing T61String,ISO646String character types and ObjectDescriptor useful
    type added.
  - Distribute is gone, switched to setuptools completely.
  - Missing NamedValues.__repr__() added.
  - The base.NoValue() class, that indicates uninitialized ASN.1 object,
    made public.
  - The base.NoValue() class instances now support __repr__() what makes
    possible to perform repr() on uninitialized pyasn1 types objects.
  - When comparing ASN.1 types, by-tag and/or by-constraints matching
    can now be performed with the isSuperTypeOf()/isSameTypeWith() optional
    flags.
  - Constructed types now verify their consistency by invoking
    isSameTypeWith(matchTags=True, matchConstraints=False) and
    isSuperTypeOf(matchTags=False, matchConstraints=True) for each of their
    components rather than isSuperTypeOf() as it used to be. Constriants check
    could be enforced to isSameTypeWith() with the strictConstraints=True
    constructed classes attribute.
  - Constructed types can now be initialized with new .setComponents() method
    which accepts both var-args and keyword-args. Default repr() modified to
    reflect this change.
  - NamedTypes() and NamedValues() made comparable.
  - Test coverage extended to cover pyasn1 types __repr__() function.
  - The abs(Integer()) &amp; abs(Real()) operation now returns respective pyasn1
    type, not a Python type.
  - More Python magic methods implementations added to Integer &amp; Real classes
    (e.g.  __pos__, __neg__, __round__, __floor__, __ceil__, __trunc__)
  - The Integer.__invert__ Python magic method implemented.
  - The OctetString.__int__() and .__float__() magic methods implemented.
  - Handle the case of null writer at Debug printer.
  - BitString encoder/decoder performance improved.
  - Built-in debugging is now based on Python logging module.
  - Fix to NamedType.__repr__() to work properly.
  - Fixes to __repr__() implementation of many built-in ASN.1 types to take into
    account all of their initializers such as tagSet, subtypeSpec etc.
  - String typed float initializer to REAL type now supported.
  - Float typed mantissa initializer to REAL type for base 2 added.
  - Encoding bases 8 and 16 support for REAL type binary encoder added.
  - More strict CER/DER encoders added for GeneralizedTime and UTCTime types.
  - Asn1Item.hasValue() added to easily distinguish initalized ASN.1 objects
    from uninitialized ones (e.g. pure types).
  - Fix to REAL type binary decoder to handle different bases and scale factor.
  - Fix to TagSet.repr() to include [obsolete] baseTag information.
  - Fix to broken REAL type decoding handling.
  - Fix to BitString and OctetString decoders dealing with constructed
    encoding -- it used to be possible to embed other types in substrate.
  - Fix to end-of-octest sentinel handling:
  * require strict two-zeros sentinel encoding
  * recognize EOO sentinel only when explicitly requested by caller
    of the decoder via allowEoo=True parameter (warning: API change)
  - DER codec hardened not to tolerate indefinite length encoding/decoding.</changelog>
  <changelog author="hpj@urpla.net" date="1444132800">- updated to upstream release 0.1.9
  - Wheel distribution format now supported.
  - Extensions added to text files, CVS attic flushed.
  - Fix to make uninitilaized pyasn1 objects failing properly on hash().
  - Fix to ObjectIdentifier initialization from unicode string.
  - Fix to CER/DER Boolean decoder - fail on non single-octet payload.</changelog>
  <changelog author="michael@stroeder.com" date="1486468800">- updated to upstream release 0.2.2 with security fixes
- updated project and source URLs and list of doc files
  Revision 0.2.2, released 07-02-2017
- FIX TO A SECURITY WEAKNESS: define length only decoders could have successfully
  processed indefinite length serialization.
- FIX TO A SECURITY WEAKNESS: canonical decoders (CER/DER) may have successfully
  consumed non-canonical variations of (otherwise valid) serialization.
- Broken Enumerated subtyping fixed.
  Revision 0.2.1, released 05-02-2017
- FIX TO A SECURITY WEAKNESS: BER decoder improperly cached long tags.
- New "native" codec implemented to transform pyasn1 types to Python built-in types and back.
- Switched to new-style classes.
- Sphinx documentation added.
- BitString improvements:
  * simple string of binary digits is now supported as initializer
  * default str() yields string of binary digits (used to yield str(tuple())
  * binValue and hexValue initializers added
  * .asNumbers(), .asOctets() and asInteger() representation added
- Components of constructed ASN.1 types can now be populated with
  uninitialized ASN.1 objects by assigning either noValue sentinel or
  setupComponent() function return in addition to now-legacy None sentinel.
  This should improve code readability.
- NoValue class improved to become a singleton and catch more kinds
  of access to it.
- Compatibility wrappers str2octs() and oct2strs() fixed to run over
  iso-8859-1 encoding.
- Integer changed to emit Real instance if division produces a float.
- True division operation now supported by Integer type.
- The __contains__(), __reverse__() methods implemented for container types
- Iterator protocol support implemented for all container types.
  Warning, warning, warning: this change may potentially affect backward
  compatibility when:
  * user class overrides __getitem__() without overriding __iter__()
  * when user code iterates over SEQUENCE object to get its components (now keys will be yielded)
- Almost complete Python list and dict protocols added to SequenceOf/SetOf and
  Sequence/Set respectively
- Fix to divmod operation implementation in Integer type.
- Fix to IntegerDecoder's precomputed value map on Python 3.
- Fix to base ASN.1 types to run in "unicode_literals" mode.
- Fix to composite constraints "+" operands ordering (AbstractConstraintSet.__radd__)
- Fix to constraints merge in .subtype() -- on merge existing constraints are
  expanded to accommodate new constraints, not the other way round. When existing
  constraints are wrapped in ConstraintsIntersection composite, additional
  constraints being added on subtyping effectively further narrow the set of
  allowed values, which aligns well with the notion of subtyping.
- Fix to NamedTypes methods to handle .getTagMap() returning None
- Fix to Set/Sequence.setDefaultComponents() to return self
- Copyright notice added to non-trivial source code files.
- Author's email changed, copyright extended to 2017</changelog>
  <changelog author="michael@stroeder.com" date="1488801600">- updated to upstream release 0.2.3
  Revision 0.2.3, released 25-02-2017
- Improved SEQUENCE/SET/CHOICE decoding performance by maintaining a single shared
  NamedType object for all instances of SEQUENCE/SET object.
- Improved INTEGER encoding/decoding by switching to Python's built-in
  integer serialization functions.
- Improved BitString performance by rebasing it onto Python int type and leveraging
  fast Integer serialization functions.
- BitString type usability improved in many ways: for example bitshifting and
  numeric operation on BitString is now possible.
- Minor ObjectIdentifier type performance optimization.
- ASN.1 character types refactored to keep unicode contents internally
  (rather than serialized octet stream) and duck-type it directly.
- ASN.1 OctetString initialized from a Python object performs bytes()
  on it when running on Python 3 (used to do str() which is probably
  less logical).
- Missing support for NoValue.__sizeof__ added.
- Added checks to make sure SEQUENCE/SET components being assigned
  match the prototypes.
- Setter methods for constructed types consistently accept matchTags
  and matchConstraints flags to control the strictness of inner
  components compatibility verification. Previously, these checks
  were tied to verifyConstraints flag, now they are all independent.
- General documentation improvements here and there.
- Fix to __reversed__() magic to make it returning an iterator.
- Test suite simplified and unified.
- The __all__ variable added to most of the Python modules.
- The "test" directory renamed into "tests" not to collide with
  the "test" module.</changelog>
  <changelog author="tbechtold@suse.com" date="1489665600">- Switch to singlespec approach</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Fix Provides/Obsoletes.</changelog>
  <changelog author="okurz@suse.com" date="1497873600">- Cleanup duplicates with fdupes</changelog>
  <changelog author="michael@stroeder.com" date="1501329600">- updated to upstream release 0.3.1
- do not ship doc/source/
  Revision 0.3.1, released 26-07-2017
- ASN.1 types __init__(), .clone() and .subtype() signatures
  refactored into keyword arguments to simplify their signatures.
- ASN.1 types initialization refactored to minimize the use of
  relatively expensive isNoValue() call
- Lazily pre-populate list of values of Sequence/Set/Choice types
- NamedTypes comparison made more efficient
- More efficient constraints computation and code clean up
- The __getitem__() implementation of some ASN.1 types &amp; tag object
  refactored for better performance
- BER/CER/DER value encoders refactored to produce either tuple of
  bytes or octet-stream depending on what is more optimal
- Reduced the frequency of expensive isinstance() calls
- Tag-related classes optimized, refactored into properties and
  documented.
- The NamedValues implementation refactored to mimic Python dict, its use
  in ASN.1 types refactored into properties and better documented.
  WARNING: this change introduces a deviation from original API.
- NamedType family of classes overhauled, optimized and documented.
- The `componentType` attribute of constructed ASN.1 types turned
  read-only on instances.
- Sequence/Set DER/CER/DER decoder optimized to skip the case of
  reordered components handling when not necessary.
- Tags and constraints-related getter methods refactored into read-only
  instance attributes.
- The .hasValue() method refactored into .isValue property. All ASN.1
  objects now support them, not just scalars.
- The Real.{isInfinity, isPlusInfinity, isMinusInfinity} methods
  refactored into properties and renamed into IsInf, IsPlusInf and isMinusInf
- The end-of-octets type refactored to ensure it is a singleton. Codecs
  changed to rely on that for better performance.
- Codecs lookup made more efficient at BER/CER/DER decoder main loop by
  assigning `typeId` to every ASN.1 type, not just ambiguous ones.
- The .getComponent*() methods of constructed ASN.1 types changed
  to lazily instantiate underlying type rather than return `None`.
  This should simplify its API as initialization like `X[0][1] = 2` becomes
  possible.
  WARNING: this change introduces a deviation from the original API.
- The .setComponent*() methods of SetOf/SequenceOf types changed not
  to allow uninitialized "holes" inside the sequences of their components.
  They now behave similarly to Python lists.
  WARNING: this change introduces a deviation from the original API.
- Default and optional components en/decoding of Constructed type
  refactored towards better efficiency and more control.
- OctetsString and Any decoder optimized to avoid creating ASN.1
  objects for chunks of substrate. Instead they now join substrate
  chunks together and create ASN.1 object from it just once.
- The GeneralizedTime and UTCTime types now support to/from Python
  datetime object conversion.
- Unit tests added for the `compat` sub-package.
- Fixed BitString named bits initialization bug.
- Fixed non-functional tag cache (when running Python 2) at DER decoder.
- Fixed chunked encoding restriction on DER encoder.
- Fixed SET components ordering at DER encoder.
- Fixed BIT STRING &amp; OCTET STRING encoding to be always non-chunked (e.g.
  primitive) at DER encoder
- Fixed `compat.integer.from_bytes()` behaviour on empty input.</changelog>
  <changelog author="michael@stroeder.com" date="1502798400">- updated to upstream release 0.3.2
  Revision 0.3.2, released 04-08-2017
- Fixed SequenceOf/SetOf types initialization syntax to remain
  backward compatible with pyasn1 0.2.*
- Rectified thread safety issues by moving lazy, run-time computation
  into object initializer.
- Fixed .isValue property to return True for empty SetOf/SequenceOf
  objects
- Fixed GeneralizedTime/UTCTime CER/DER codecs to actually get invoked
- Fixed DER/CER encoders handling optional SEQUENCE/SET fields containing
  nested SEQUENCE/SET with optional fields.
- Fixed crash in SequenceOf/SetOf pretty printing and decoding (in some
  cases)
- Fixed documentation markup issues.</changelog>
  <changelog author="michael@stroeder.com" date="1504785600">- updated to upstream release 0.3.4
  Revision 0.3.4, released 07-09-2017
- Fixed Native encoder to handle SEQUENCE/SET objects without
  the componentType property
- Added missing component-less SEQUENCE/SET objects dict duck-typing support
- Fixed unnecessary duplicate tags detection at NamesType.tagMap
- Fixed crash at SEQUENCE and SEQUENCE OF CER encoder when running
  in schemaless mode
- Fixed Character types instantiation from OctetString type -- double
  unicode decoding may have scrambled the data
  Revision 0.3.3, released 27-08-2017
- Improved ASN.1 types instantiation performance
- Improved BER/CER/DER decoder performance by not unconditionally casting
  substrate into str/bytes.
- Fixed exponential index size growth bug when building ambiguous
  NamedTypes tree
- Fixed constructed types decoding failure at BER codec if running
  in schema-less mode
- Fixed crash on prettyPrint'ing a SEQUENCE with no defined components
- Fixed SetOf ordering at CER/DER encoder
- Fixed crash on conditional binascii module import
- Fix to TagSet hash value build</changelog>
  <changelog author="michael@stroeder.com" date="1505822400">- updated to upstream release 0.3.5
  - Codecs signatures unified and pass the options kwargs through the
    call chain
  - Explicit tag encoding optimized to avoid unnecessary copying
  - End-of-octets sentinel encoding optimized
  - Refactored ASN.1 codecs properties to silently enforce proper
    length and chunk size encoding modes
  - Fixed DER encoder to always produce primitive encoding
  - Fixed crash at SequenceOf native decoder
  - Fixed Real.prettyPrint() to fail gracefully on overflow
  - Fixed a couple of crashes when debug mode is enabled</changelog>
  <changelog author="michael@stroeder.com" date="1505995200">- updated to upstream release 0.3.6
  * End-of-octets encoding optimized at ASN.1 encoders
  * The __getitem__/__setitem__ behavior of Set/Sequence and
    SetOf/SequenceOf objects aligned with the canonical Mapping
    and Sequence protocols in part
  * Fixed crash in ASN.1 encoder when encoding an explicitly tagged
    component of a Sequence</changelog>
  <changelog author="michael@stroeder.com" date="1507809600">- updated to upstream release 0.3.7
  * Fixed ASN.1 time types pickling/deepcopy'ing</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 0.4.2:
  * Fixed explicit tag splitting in chunked encoding mode at
    OctetString and BitString encoders
- changes from version 0.4.1:
  * ANY DEFINED BY clause support implemented
  * Encoders refactored to take either a value (as ASN.1 object) or a
    Python value plus ASN.1 schema
  * BitString decoder optimised for better performance when running on
    constructed encoding
  * Constructed types' .getComponentBy*() methods accept the `default`
    parameter to return instead if schema object is to be returned
  * Constructed types' .getComponentBy*() methods accept the
    `instantiate` parameter to disable automatic inner component
    instantiation
  * The ASN.1 types' `__repr__` implementation reworked for better
    readability at the cost of not being `eval`-compliant
  * Most ASN.1 types' `__str__` magic methods (except for OctetString
    and character types) reworked to call `.prettyPrint()` rather than
    `.prettyPrint` calling `__str__` as it was before. The intention
    is to eventually deprecate `.prettyPrint()` in favor of `str()`.
    The other related change is that `str()` of enumerations and
    boolean types will return string label instead of number.
  * Fixed Choice.clear() to fully reset internal state of the object
  * Sphinx documentation rearranged, simplified and reworded
  * The `isValue` singleton is now the only way to indicate ASN.1
    schema as opposed to ASN.1 schema instance. The legacy `None`
    initializer support has been removed.
  * Changed `Null` object initialization behaviour: previous default
    value (`''`) is not set anymore. Thus `Null()` call produces a
    ASN.1 schema object, while `Null('')` - value object.
  * Migrated all docs and references from SourceForge
  * Imports PEP8'ed
  * Fixed ASN.1 encoder not to omit empty substrate produced for inner
    component if the inner component belongs to the simple class (as
    opposed to constructed class)
  * Fixed CER/DER encoders to respect tagged CHOICE when ordering SET
    components
  * Fixed ASN.1 types not to interfere with the Pickle protocol
  * Fixed Sequence/SequenceOf types decoding heuristics in schema-less
    decoding mode</changelog>
  <changelog author="steven.kowalik@suse.com" date="1688126400">- To avoid users of this package having to recompile bytecode
  files, change the mtime of any __init__.py. (bsc#1207805)</changelog>
</package>
<package pkgid="21a5730dfa801023561ae364d70545de27c298dc359afdd81b6d93d4dd81f1e8" name="python3-pycairo" arch="aarch64">
  <version epoch="0" ver="1.20.1" rel="150400.5.69"/>
  <changelog author="toddrme2178@gmail.com" date="1488024000">- Add python2-cairo and python2-cairo-devel provides for
  compatibility with the new multipython spec file macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1497787200">- Update to version 1.13.3:
  + Fix ImageSurface leaking in case
    :meth:`get_data() &lt;ImageSurface.get_data&gt;` is used under
    Python 3 (gh#pygobject/pycairo#43).
- Changes from version 1.13.2:
  + Fix pip failing to install pycairo in some cases
    (gh#pygobject/pycairo#39).
- Changes from version 1.13.1:
  + setup.py install: Fix generated pkg-config file if ``--home``
    or ``--user`` is specified (gh#pygobject/pycairo#34).
  + Fix a build error on macOS Sierra (gh#pygobject/pycairo#36)
  + examples: Fix snippet examples when .pyc files are present
    (gh#pygobject/pycairo#35).
- For more changes since the last package update, see NEWS inside.
- Implement python single-spec packaging: since pycairo 1.11.0, the
  sources for python2 and python3 based bindings have been merged
  again.</changelog>
  <changelog author="jmatejek@suse.com" date="1498219200">- fix requires for devel subpackage</changelog>
  <changelog author="zaitor@opensuse.org" date="1503576000">- Update to version 1.15.1:
  + Fixes:
  - Improved support for Python filesystem paths including
    os.PathLike. See pathlike for details.
  - Various minor fixes.
  + Changes: Expose cairo.Path.
  + Tests: Improved test coverage from ~70% to ~90%.
- Changes from version 1.15.0:
  + New Features:
  - Add Surface.map_to_image() and Surface.unmap_image().
  - Add RasterSourcePattern.
  - Add Glyph.
  - Add Rectangle.
  - Add TextCluster.
  - Add ScaledFont.text_to_glyphs() and
    ScaledFont.glyph_extents().
  - Add Context.show_text_glyphs().
  - Add TextExtents.
  + Changes:
  - Pycairo instances wrapping the same underlying cairo object
    now hash and compare equally e.g. context.get_target() ==
    context.get_target().
  - Functions which returned a cairo error with Status.NO_MEMORY
    no longer raise MemoryError, but a subclass of Error and
    MemoryError. Similarly errors with Status.READ_ERROR and
    Status.WRITE_ERROR no longer raise IOError, but a subclass of
    Error and IOError.
  - Some functions which previously returned a tuple now return a
    tuple subclass like Rectangle, Glyph, TextCluster and
    TextExtents.
- Changes from version 1.14.1:
  + Fixes: Fix a crash with Surface.get_device().
- Changes from version 1.14.0:
  + General: Requires at least cairo 1.13.1.
  + Tests: Optional Hypothesis tests.
  + New Features:
  - Add Surface.set_device_scale() and
    Surface.get_device_scale().
  - Add Device.
  - Add Surface.get_device().
  - Add ScriptDevice and ScriptMode.
  - Add ScriptSurface.
  - Add Status.JBIG2_GLOBAL_MISSING.
  - Add Format.stride_for_width().
  - Add TextClusterFlags and SurfaceObserverMode.
  - Add Gradient.get_color_stops_rgba().
  - Add TeeSurface.
  - Add MeshPattern.
- Changes from version 1.13.4:
  + Fixes: Fix a rare crash with get_data() under Python 3 (1.13.3
    regression).</changelog>
  <changelog author="jayvdb@gmail.com" date="1549713600">- Update to version 1.18.0:
  + typing: Add missing annotations for __enter__/__exit__
  + New API:
  - CAIRO_VERSION, CAIRO_VERSION_STRING, CAIRO_VERSION_MAJOR,
    CAIRO_VERSION_MINOR, CAIRO_VERSION_MICRO
  - Status.TAG_ERROR, Status.FREETYPE_ERROR, Status.PNG_ERROR,
    Status.WIN32_GDI_ERROR
  - SVGUnit, PDFMetadata, PDFOutlineFlags
  - FontOptions.set_variations(), FontOptions.get_variations()
  - Context.tag_begin(), Context.tag_end(), TAG_DEST, TAG_LINK
  - PDFSurface.set_page_label(), PDFSurface.set_metadata(),
    PDFSurface.set_thumbnail_size(), PDFSurface.add_outline(),
    PDF_OUTLINE_ROOT
  - SVGSurface.set_document_unit(),
    SVGSurface.get_document_unit()
  - MIME_TYPE_CCITT_FAX, MIME_TYPE_CCITT_FAX_PARAMS,
    MIME_TYPE_EPS, MIME_TYPE_EPS_PARAMS, MIME_TYPE_JBIG2,
    MIME_TYPE_JBIG2_GLOBAL, MIME_TYPE_JBIG2_GLOBAL_ID
  + docs: Remove a broken link
  + Various meson build fixes
  + setup.py: Support specifying custom --pkgconfigdir
  + Dropped Python 3.3 support
- Changes from version 1.17.1:
  + Meson build support
- Changes from version 1.17.0:
  + cairo.Surface and cairo.Device can now be used as context
    managers
  + Fix a leak when a cairo error was raised
  + Fix a leak when a mapped surface was GCed instead of unmapped
  + Make it possible to use the C API with Python 3 outside of the
    compilation unit doing the import by defining PYCAIRO_NO_IMPORT
  + Implement PEP 561
- Changes from version 1.16.3:
  + Ship Python type annotation stubs.
- Changes from version 1.16.2:
  + setup.py: Some fixes for Debian pybuild quirks
- Changes from version 1.16.1:
  + setup.py: correctly install pkgconfig into /usr/lib* again
- Changes from version 1.16.0:
  + Add a get_include() function which returns the compiler include
    path needed for interfacing with the Pycairo C API
- Changes from version 1.15.6:
  + Experimental PyPy and PyPy3 support
- Changes from version 1.15.5:
  + Support Unicode paths under Windows with cairo 1.15.10+
  + Don’t include the pkg-config file when building a wheel
- Changes from version 1.15.4:
  + Fix some enum conversation errors with (unused) large and
    negative values
  + tests: Fix a rare test error
- Changes from version 1.15.3:
  + setup.py: Install pkgconfig file into /usr/share/pkgconfig to
    work around JHBuild on Fedora not picking it up.
  + tests: Fix tests on big endian machines.
  + Support building with MSVC
- Changes from version 1.15.2:
  + setup.py: Install pkgconfig file to the same library prefix
    that Python uses (replaces logic in spec file)
- Activate test suite.
- Use license macro.
- Requires cairo &gt;= 1.13.1.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558267200">- Update to version 1.18.1
  * meson: install .egg-info to platlib
  * meson: fix configure error with meson 0.50 re absolute paths
  * PyPy: don’t use PyOS_FSPath() with PyPy3.6
- Rename to python-pycario to conform to python package naming
  guidelines
- Expand summaries and descriptions.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440000">- Fix typos</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440001">- Fixed conflicts with old python-cario-common-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Add patch to fix build on python 3.8:
  * python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360000">- Update to 1.19.1:
  * support for new python
  * remove support for python 2.x
- Remove patch python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360001">- Add missing dep on setuptools</changelog>
  <changelog author="code@bnavigator.de" date="1606910400">- Move the pkgconfig file to the common package
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606996800">- Update to 1.20.0
  * Require Python 3.6+ #pr-201
  * Require cairo 1.15.10+ #pr-204
  * docs: support Sphinx 3.0 #pr-207
  * meson: add ‘tests’ option to skip tests #pr-188
  * Windows: build wheels #pr-197
  * Add support for Python 3.9 and 3.10 #pr-198 #pr-202
  * examples: add a Jupyter Notebook example #pr-181
  * Raise an error early when being passed a file object not opened
    in binary mode #pr-205
  * Add a pyproject.toml file #pr-206
- move header file in sitearch to devel package (rpmlint error)
  header is packaged twice: gh#pygobject/pycairo#98</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.20.1
  * setup.py: Respect the PKG_CONFIG environment variable
  * Make import_cairo inline in addition to static
  * docs: Fix example in Pattern.set_filter() docs _pr_`221`
  * docs: Fix build with newer sphinx
  * docs: Fix NumPy width, height-conventions in examples
  * docs: Last parameter of rel_curve_to should be dy3, not dy4
  * mypy: Fixes for mypy 0.800+
  * mypy: Don't run mypy via pytest</changelog>
  <changelog author="fcrozat@suse.com" date="1628769600">- Add Obsoletes/Provides for python3-cairo-devel.</changelog>
  <changelog author="mcepl@suse.com" date="1682337600">- Rename changelog and the SPEC file to python3- form.</changelog>
  <changelog author="mcepl@suse.com" date="1682337601">- Rename package to avoid conflicts with the new Python Stack Proposal</changelog>
</package>
<package pkgid="323c452151dd876cb3590c1a23721c79b5e21b6170c6f222030859a20d522008" name="python3-pycairo" arch="ppc64le">
  <version epoch="0" ver="1.20.1" rel="150400.5.69"/>
  <changelog author="toddrme2178@gmail.com" date="1488024000">- Add python2-cairo and python2-cairo-devel provides for
  compatibility with the new multipython spec file macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1497787200">- Update to version 1.13.3:
  + Fix ImageSurface leaking in case
    :meth:`get_data() &lt;ImageSurface.get_data&gt;` is used under
    Python 3 (gh#pygobject/pycairo#43).
- Changes from version 1.13.2:
  + Fix pip failing to install pycairo in some cases
    (gh#pygobject/pycairo#39).
- Changes from version 1.13.1:
  + setup.py install: Fix generated pkg-config file if ``--home``
    or ``--user`` is specified (gh#pygobject/pycairo#34).
  + Fix a build error on macOS Sierra (gh#pygobject/pycairo#36)
  + examples: Fix snippet examples when .pyc files are present
    (gh#pygobject/pycairo#35).
- For more changes since the last package update, see NEWS inside.
- Implement python single-spec packaging: since pycairo 1.11.0, the
  sources for python2 and python3 based bindings have been merged
  again.</changelog>
  <changelog author="jmatejek@suse.com" date="1498219200">- fix requires for devel subpackage</changelog>
  <changelog author="zaitor@opensuse.org" date="1503576000">- Update to version 1.15.1:
  + Fixes:
  - Improved support for Python filesystem paths including
    os.PathLike. See pathlike for details.
  - Various minor fixes.
  + Changes: Expose cairo.Path.
  + Tests: Improved test coverage from ~70% to ~90%.
- Changes from version 1.15.0:
  + New Features:
  - Add Surface.map_to_image() and Surface.unmap_image().
  - Add RasterSourcePattern.
  - Add Glyph.
  - Add Rectangle.
  - Add TextCluster.
  - Add ScaledFont.text_to_glyphs() and
    ScaledFont.glyph_extents().
  - Add Context.show_text_glyphs().
  - Add TextExtents.
  + Changes:
  - Pycairo instances wrapping the same underlying cairo object
    now hash and compare equally e.g. context.get_target() ==
    context.get_target().
  - Functions which returned a cairo error with Status.NO_MEMORY
    no longer raise MemoryError, but a subclass of Error and
    MemoryError. Similarly errors with Status.READ_ERROR and
    Status.WRITE_ERROR no longer raise IOError, but a subclass of
    Error and IOError.
  - Some functions which previously returned a tuple now return a
    tuple subclass like Rectangle, Glyph, TextCluster and
    TextExtents.
- Changes from version 1.14.1:
  + Fixes: Fix a crash with Surface.get_device().
- Changes from version 1.14.0:
  + General: Requires at least cairo 1.13.1.
  + Tests: Optional Hypothesis tests.
  + New Features:
  - Add Surface.set_device_scale() and
    Surface.get_device_scale().
  - Add Device.
  - Add Surface.get_device().
  - Add ScriptDevice and ScriptMode.
  - Add ScriptSurface.
  - Add Status.JBIG2_GLOBAL_MISSING.
  - Add Format.stride_for_width().
  - Add TextClusterFlags and SurfaceObserverMode.
  - Add Gradient.get_color_stops_rgba().
  - Add TeeSurface.
  - Add MeshPattern.
- Changes from version 1.13.4:
  + Fixes: Fix a rare crash with get_data() under Python 3 (1.13.3
    regression).</changelog>
  <changelog author="jayvdb@gmail.com" date="1549713600">- Update to version 1.18.0:
  + typing: Add missing annotations for __enter__/__exit__
  + New API:
  - CAIRO_VERSION, CAIRO_VERSION_STRING, CAIRO_VERSION_MAJOR,
    CAIRO_VERSION_MINOR, CAIRO_VERSION_MICRO
  - Status.TAG_ERROR, Status.FREETYPE_ERROR, Status.PNG_ERROR,
    Status.WIN32_GDI_ERROR
  - SVGUnit, PDFMetadata, PDFOutlineFlags
  - FontOptions.set_variations(), FontOptions.get_variations()
  - Context.tag_begin(), Context.tag_end(), TAG_DEST, TAG_LINK
  - PDFSurface.set_page_label(), PDFSurface.set_metadata(),
    PDFSurface.set_thumbnail_size(), PDFSurface.add_outline(),
    PDF_OUTLINE_ROOT
  - SVGSurface.set_document_unit(),
    SVGSurface.get_document_unit()
  - MIME_TYPE_CCITT_FAX, MIME_TYPE_CCITT_FAX_PARAMS,
    MIME_TYPE_EPS, MIME_TYPE_EPS_PARAMS, MIME_TYPE_JBIG2,
    MIME_TYPE_JBIG2_GLOBAL, MIME_TYPE_JBIG2_GLOBAL_ID
  + docs: Remove a broken link
  + Various meson build fixes
  + setup.py: Support specifying custom --pkgconfigdir
  + Dropped Python 3.3 support
- Changes from version 1.17.1:
  + Meson build support
- Changes from version 1.17.0:
  + cairo.Surface and cairo.Device can now be used as context
    managers
  + Fix a leak when a cairo error was raised
  + Fix a leak when a mapped surface was GCed instead of unmapped
  + Make it possible to use the C API with Python 3 outside of the
    compilation unit doing the import by defining PYCAIRO_NO_IMPORT
  + Implement PEP 561
- Changes from version 1.16.3:
  + Ship Python type annotation stubs.
- Changes from version 1.16.2:
  + setup.py: Some fixes for Debian pybuild quirks
- Changes from version 1.16.1:
  + setup.py: correctly install pkgconfig into /usr/lib* again
- Changes from version 1.16.0:
  + Add a get_include() function which returns the compiler include
    path needed for interfacing with the Pycairo C API
- Changes from version 1.15.6:
  + Experimental PyPy and PyPy3 support
- Changes from version 1.15.5:
  + Support Unicode paths under Windows with cairo 1.15.10+
  + Don’t include the pkg-config file when building a wheel
- Changes from version 1.15.4:
  + Fix some enum conversation errors with (unused) large and
    negative values
  + tests: Fix a rare test error
- Changes from version 1.15.3:
  + setup.py: Install pkgconfig file into /usr/share/pkgconfig to
    work around JHBuild on Fedora not picking it up.
  + tests: Fix tests on big endian machines.
  + Support building with MSVC
- Changes from version 1.15.2:
  + setup.py: Install pkgconfig file to the same library prefix
    that Python uses (replaces logic in spec file)
- Activate test suite.
- Use license macro.
- Requires cairo &gt;= 1.13.1.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558267200">- Update to version 1.18.1
  * meson: install .egg-info to platlib
  * meson: fix configure error with meson 0.50 re absolute paths
  * PyPy: don’t use PyOS_FSPath() with PyPy3.6
- Rename to python-pycario to conform to python package naming
  guidelines
- Expand summaries and descriptions.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440000">- Fix typos</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440001">- Fixed conflicts with old python-cario-common-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Add patch to fix build on python 3.8:
  * python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360000">- Update to 1.19.1:
  * support for new python
  * remove support for python 2.x
- Remove patch python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360001">- Add missing dep on setuptools</changelog>
  <changelog author="code@bnavigator.de" date="1606910400">- Move the pkgconfig file to the common package
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606996800">- Update to 1.20.0
  * Require Python 3.6+ #pr-201
  * Require cairo 1.15.10+ #pr-204
  * docs: support Sphinx 3.0 #pr-207
  * meson: add ‘tests’ option to skip tests #pr-188
  * Windows: build wheels #pr-197
  * Add support for Python 3.9 and 3.10 #pr-198 #pr-202
  * examples: add a Jupyter Notebook example #pr-181
  * Raise an error early when being passed a file object not opened
    in binary mode #pr-205
  * Add a pyproject.toml file #pr-206
- move header file in sitearch to devel package (rpmlint error)
  header is packaged twice: gh#pygobject/pycairo#98</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.20.1
  * setup.py: Respect the PKG_CONFIG environment variable
  * Make import_cairo inline in addition to static
  * docs: Fix example in Pattern.set_filter() docs _pr_`221`
  * docs: Fix build with newer sphinx
  * docs: Fix NumPy width, height-conventions in examples
  * docs: Last parameter of rel_curve_to should be dy3, not dy4
  * mypy: Fixes for mypy 0.800+
  * mypy: Don't run mypy via pytest</changelog>
  <changelog author="fcrozat@suse.com" date="1628769600">- Add Obsoletes/Provides for python3-cairo-devel.</changelog>
  <changelog author="mcepl@suse.com" date="1682337600">- Rename changelog and the SPEC file to python3- form.</changelog>
  <changelog author="mcepl@suse.com" date="1682337601">- Rename package to avoid conflicts with the new Python Stack Proposal</changelog>
</package>
<package pkgid="1a1fe226d033650b3ae201e1f8756191dfc1879054618443b70e364d8336da23" name="python3-pycairo" arch="s390x">
  <version epoch="0" ver="1.20.1" rel="150400.5.69"/>
  <changelog author="toddrme2178@gmail.com" date="1488024000">- Add python2-cairo and python2-cairo-devel provides for
  compatibility with the new multipython spec file macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1497787200">- Update to version 1.13.3:
  + Fix ImageSurface leaking in case
    :meth:`get_data() &lt;ImageSurface.get_data&gt;` is used under
    Python 3 (gh#pygobject/pycairo#43).
- Changes from version 1.13.2:
  + Fix pip failing to install pycairo in some cases
    (gh#pygobject/pycairo#39).
- Changes from version 1.13.1:
  + setup.py install: Fix generated pkg-config file if ``--home``
    or ``--user`` is specified (gh#pygobject/pycairo#34).
  + Fix a build error on macOS Sierra (gh#pygobject/pycairo#36)
  + examples: Fix snippet examples when .pyc files are present
    (gh#pygobject/pycairo#35).
- For more changes since the last package update, see NEWS inside.
- Implement python single-spec packaging: since pycairo 1.11.0, the
  sources for python2 and python3 based bindings have been merged
  again.</changelog>
  <changelog author="jmatejek@suse.com" date="1498219200">- fix requires for devel subpackage</changelog>
  <changelog author="zaitor@opensuse.org" date="1503576000">- Update to version 1.15.1:
  + Fixes:
  - Improved support for Python filesystem paths including
    os.PathLike. See pathlike for details.
  - Various minor fixes.
  + Changes: Expose cairo.Path.
  + Tests: Improved test coverage from ~70% to ~90%.
- Changes from version 1.15.0:
  + New Features:
  - Add Surface.map_to_image() and Surface.unmap_image().
  - Add RasterSourcePattern.
  - Add Glyph.
  - Add Rectangle.
  - Add TextCluster.
  - Add ScaledFont.text_to_glyphs() and
    ScaledFont.glyph_extents().
  - Add Context.show_text_glyphs().
  - Add TextExtents.
  + Changes:
  - Pycairo instances wrapping the same underlying cairo object
    now hash and compare equally e.g. context.get_target() ==
    context.get_target().
  - Functions which returned a cairo error with Status.NO_MEMORY
    no longer raise MemoryError, but a subclass of Error and
    MemoryError. Similarly errors with Status.READ_ERROR and
    Status.WRITE_ERROR no longer raise IOError, but a subclass of
    Error and IOError.
  - Some functions which previously returned a tuple now return a
    tuple subclass like Rectangle, Glyph, TextCluster and
    TextExtents.
- Changes from version 1.14.1:
  + Fixes: Fix a crash with Surface.get_device().
- Changes from version 1.14.0:
  + General: Requires at least cairo 1.13.1.
  + Tests: Optional Hypothesis tests.
  + New Features:
  - Add Surface.set_device_scale() and
    Surface.get_device_scale().
  - Add Device.
  - Add Surface.get_device().
  - Add ScriptDevice and ScriptMode.
  - Add ScriptSurface.
  - Add Status.JBIG2_GLOBAL_MISSING.
  - Add Format.stride_for_width().
  - Add TextClusterFlags and SurfaceObserverMode.
  - Add Gradient.get_color_stops_rgba().
  - Add TeeSurface.
  - Add MeshPattern.
- Changes from version 1.13.4:
  + Fixes: Fix a rare crash with get_data() under Python 3 (1.13.3
    regression).</changelog>
  <changelog author="jayvdb@gmail.com" date="1549713600">- Update to version 1.18.0:
  + typing: Add missing annotations for __enter__/__exit__
  + New API:
  - CAIRO_VERSION, CAIRO_VERSION_STRING, CAIRO_VERSION_MAJOR,
    CAIRO_VERSION_MINOR, CAIRO_VERSION_MICRO
  - Status.TAG_ERROR, Status.FREETYPE_ERROR, Status.PNG_ERROR,
    Status.WIN32_GDI_ERROR
  - SVGUnit, PDFMetadata, PDFOutlineFlags
  - FontOptions.set_variations(), FontOptions.get_variations()
  - Context.tag_begin(), Context.tag_end(), TAG_DEST, TAG_LINK
  - PDFSurface.set_page_label(), PDFSurface.set_metadata(),
    PDFSurface.set_thumbnail_size(), PDFSurface.add_outline(),
    PDF_OUTLINE_ROOT
  - SVGSurface.set_document_unit(),
    SVGSurface.get_document_unit()
  - MIME_TYPE_CCITT_FAX, MIME_TYPE_CCITT_FAX_PARAMS,
    MIME_TYPE_EPS, MIME_TYPE_EPS_PARAMS, MIME_TYPE_JBIG2,
    MIME_TYPE_JBIG2_GLOBAL, MIME_TYPE_JBIG2_GLOBAL_ID
  + docs: Remove a broken link
  + Various meson build fixes
  + setup.py: Support specifying custom --pkgconfigdir
  + Dropped Python 3.3 support
- Changes from version 1.17.1:
  + Meson build support
- Changes from version 1.17.0:
  + cairo.Surface and cairo.Device can now be used as context
    managers
  + Fix a leak when a cairo error was raised
  + Fix a leak when a mapped surface was GCed instead of unmapped
  + Make it possible to use the C API with Python 3 outside of the
    compilation unit doing the import by defining PYCAIRO_NO_IMPORT
  + Implement PEP 561
- Changes from version 1.16.3:
  + Ship Python type annotation stubs.
- Changes from version 1.16.2:
  + setup.py: Some fixes for Debian pybuild quirks
- Changes from version 1.16.1:
  + setup.py: correctly install pkgconfig into /usr/lib* again
- Changes from version 1.16.0:
  + Add a get_include() function which returns the compiler include
    path needed for interfacing with the Pycairo C API
- Changes from version 1.15.6:
  + Experimental PyPy and PyPy3 support
- Changes from version 1.15.5:
  + Support Unicode paths under Windows with cairo 1.15.10+
  + Don’t include the pkg-config file when building a wheel
- Changes from version 1.15.4:
  + Fix some enum conversation errors with (unused) large and
    negative values
  + tests: Fix a rare test error
- Changes from version 1.15.3:
  + setup.py: Install pkgconfig file into /usr/share/pkgconfig to
    work around JHBuild on Fedora not picking it up.
  + tests: Fix tests on big endian machines.
  + Support building with MSVC
- Changes from version 1.15.2:
  + setup.py: Install pkgconfig file to the same library prefix
    that Python uses (replaces logic in spec file)
- Activate test suite.
- Use license macro.
- Requires cairo &gt;= 1.13.1.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558267200">- Update to version 1.18.1
  * meson: install .egg-info to platlib
  * meson: fix configure error with meson 0.50 re absolute paths
  * PyPy: don’t use PyOS_FSPath() with PyPy3.6
- Rename to python-pycario to conform to python package naming
  guidelines
- Expand summaries and descriptions.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440000">- Fix typos</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440001">- Fixed conflicts with old python-cario-common-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Add patch to fix build on python 3.8:
  * python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360000">- Update to 1.19.1:
  * support for new python
  * remove support for python 2.x
- Remove patch python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360001">- Add missing dep on setuptools</changelog>
  <changelog author="code@bnavigator.de" date="1606910400">- Move the pkgconfig file to the common package
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606996800">- Update to 1.20.0
  * Require Python 3.6+ #pr-201
  * Require cairo 1.15.10+ #pr-204
  * docs: support Sphinx 3.0 #pr-207
  * meson: add ‘tests’ option to skip tests #pr-188
  * Windows: build wheels #pr-197
  * Add support for Python 3.9 and 3.10 #pr-198 #pr-202
  * examples: add a Jupyter Notebook example #pr-181
  * Raise an error early when being passed a file object not opened
    in binary mode #pr-205
  * Add a pyproject.toml file #pr-206
- move header file in sitearch to devel package (rpmlint error)
  header is packaged twice: gh#pygobject/pycairo#98</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.20.1
  * setup.py: Respect the PKG_CONFIG environment variable
  * Make import_cairo inline in addition to static
  * docs: Fix example in Pattern.set_filter() docs _pr_`221`
  * docs: Fix build with newer sphinx
  * docs: Fix NumPy width, height-conventions in examples
  * docs: Last parameter of rel_curve_to should be dy3, not dy4
  * mypy: Fixes for mypy 0.800+
  * mypy: Don't run mypy via pytest</changelog>
  <changelog author="fcrozat@suse.com" date="1628769600">- Add Obsoletes/Provides for python3-cairo-devel.</changelog>
  <changelog author="mcepl@suse.com" date="1682337600">- Rename changelog and the SPEC file to python3- form.</changelog>
  <changelog author="mcepl@suse.com" date="1682337601">- Rename package to avoid conflicts with the new Python Stack Proposal</changelog>
</package>
<package pkgid="54ced4eb4728e0caa44ca8ac880ea0c5e97a6e0b81bfe7e0350313152fdc37e6" name="python3-pycairo" arch="src">
  <version epoch="0" ver="1.20.1" rel="150400.5.69"/>
  <changelog author="saschpe@suse.de" date="1328097600">- Add group to devel package</changelog>
  <changelog author="schwab@linux-m68k.org" date="1349697600">- Build with %{optflags}</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="toddrme2178@gmail.com" date="1488024000">- Add python2-cairo and python2-cairo-devel provides for
  compatibility with the new multipython spec file macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1497787200">- Update to version 1.13.3:
  + Fix ImageSurface leaking in case
    :meth:`get_data() &lt;ImageSurface.get_data&gt;` is used under
    Python 3 (gh#pygobject/pycairo#43).
- Changes from version 1.13.2:
  + Fix pip failing to install pycairo in some cases
    (gh#pygobject/pycairo#39).
- Changes from version 1.13.1:
  + setup.py install: Fix generated pkg-config file if ``--home``
    or ``--user`` is specified (gh#pygobject/pycairo#34).
  + Fix a build error on macOS Sierra (gh#pygobject/pycairo#36)
  + examples: Fix snippet examples when .pyc files are present
    (gh#pygobject/pycairo#35).
- For more changes since the last package update, see NEWS inside.
- Implement python single-spec packaging: since pycairo 1.11.0, the
  sources for python2 and python3 based bindings have been merged
  again.</changelog>
  <changelog author="jmatejek@suse.com" date="1498219200">- fix requires for devel subpackage</changelog>
  <changelog author="zaitor@opensuse.org" date="1503576000">- Update to version 1.15.1:
  + Fixes:
  - Improved support for Python filesystem paths including
    os.PathLike. See pathlike for details.
  - Various minor fixes.
  + Changes: Expose cairo.Path.
  + Tests: Improved test coverage from ~70% to ~90%.
- Changes from version 1.15.0:
  + New Features:
  - Add Surface.map_to_image() and Surface.unmap_image().
  - Add RasterSourcePattern.
  - Add Glyph.
  - Add Rectangle.
  - Add TextCluster.
  - Add ScaledFont.text_to_glyphs() and
    ScaledFont.glyph_extents().
  - Add Context.show_text_glyphs().
  - Add TextExtents.
  + Changes:
  - Pycairo instances wrapping the same underlying cairo object
    now hash and compare equally e.g. context.get_target() ==
    context.get_target().
  - Functions which returned a cairo error with Status.NO_MEMORY
    no longer raise MemoryError, but a subclass of Error and
    MemoryError. Similarly errors with Status.READ_ERROR and
    Status.WRITE_ERROR no longer raise IOError, but a subclass of
    Error and IOError.
  - Some functions which previously returned a tuple now return a
    tuple subclass like Rectangle, Glyph, TextCluster and
    TextExtents.
- Changes from version 1.14.1:
  + Fixes: Fix a crash with Surface.get_device().
- Changes from version 1.14.0:
  + General: Requires at least cairo 1.13.1.
  + Tests: Optional Hypothesis tests.
  + New Features:
  - Add Surface.set_device_scale() and
    Surface.get_device_scale().
  - Add Device.
  - Add Surface.get_device().
  - Add ScriptDevice and ScriptMode.
  - Add ScriptSurface.
  - Add Status.JBIG2_GLOBAL_MISSING.
  - Add Format.stride_for_width().
  - Add TextClusterFlags and SurfaceObserverMode.
  - Add Gradient.get_color_stops_rgba().
  - Add TeeSurface.
  - Add MeshPattern.
- Changes from version 1.13.4:
  + Fixes: Fix a rare crash with get_data() under Python 3 (1.13.3
    regression).</changelog>
  <changelog author="jayvdb@gmail.com" date="1549713600">- Update to version 1.18.0:
  + typing: Add missing annotations for __enter__/__exit__
  + New API:
  - CAIRO_VERSION, CAIRO_VERSION_STRING, CAIRO_VERSION_MAJOR,
    CAIRO_VERSION_MINOR, CAIRO_VERSION_MICRO
  - Status.TAG_ERROR, Status.FREETYPE_ERROR, Status.PNG_ERROR,
    Status.WIN32_GDI_ERROR
  - SVGUnit, PDFMetadata, PDFOutlineFlags
  - FontOptions.set_variations(), FontOptions.get_variations()
  - Context.tag_begin(), Context.tag_end(), TAG_DEST, TAG_LINK
  - PDFSurface.set_page_label(), PDFSurface.set_metadata(),
    PDFSurface.set_thumbnail_size(), PDFSurface.add_outline(),
    PDF_OUTLINE_ROOT
  - SVGSurface.set_document_unit(),
    SVGSurface.get_document_unit()
  - MIME_TYPE_CCITT_FAX, MIME_TYPE_CCITT_FAX_PARAMS,
    MIME_TYPE_EPS, MIME_TYPE_EPS_PARAMS, MIME_TYPE_JBIG2,
    MIME_TYPE_JBIG2_GLOBAL, MIME_TYPE_JBIG2_GLOBAL_ID
  + docs: Remove a broken link
  + Various meson build fixes
  + setup.py: Support specifying custom --pkgconfigdir
  + Dropped Python 3.3 support
- Changes from version 1.17.1:
  + Meson build support
- Changes from version 1.17.0:
  + cairo.Surface and cairo.Device can now be used as context
    managers
  + Fix a leak when a cairo error was raised
  + Fix a leak when a mapped surface was GCed instead of unmapped
  + Make it possible to use the C API with Python 3 outside of the
    compilation unit doing the import by defining PYCAIRO_NO_IMPORT
  + Implement PEP 561
- Changes from version 1.16.3:
  + Ship Python type annotation stubs.
- Changes from version 1.16.2:
  + setup.py: Some fixes for Debian pybuild quirks
- Changes from version 1.16.1:
  + setup.py: correctly install pkgconfig into /usr/lib* again
- Changes from version 1.16.0:
  + Add a get_include() function which returns the compiler include
    path needed for interfacing with the Pycairo C API
- Changes from version 1.15.6:
  + Experimental PyPy and PyPy3 support
- Changes from version 1.15.5:
  + Support Unicode paths under Windows with cairo 1.15.10+
  + Don’t include the pkg-config file when building a wheel
- Changes from version 1.15.4:
  + Fix some enum conversation errors with (unused) large and
    negative values
  + tests: Fix a rare test error
- Changes from version 1.15.3:
  + setup.py: Install pkgconfig file into /usr/share/pkgconfig to
    work around JHBuild on Fedora not picking it up.
  + tests: Fix tests on big endian machines.
  + Support building with MSVC
- Changes from version 1.15.2:
  + setup.py: Install pkgconfig file to the same library prefix
    that Python uses (replaces logic in spec file)
- Activate test suite.
- Use license macro.
- Requires cairo &gt;= 1.13.1.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558267200">- Update to version 1.18.1
  * meson: install .egg-info to platlib
  * meson: fix configure error with meson 0.50 re absolute paths
  * PyPy: don’t use PyOS_FSPath() with PyPy3.6
- Rename to python-pycario to conform to python package naming
  guidelines
- Expand summaries and descriptions.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440000">- Fix typos</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440001">- Fixed conflicts with old python-cario-common-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Add patch to fix build on python 3.8:
  * python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360000">- Update to 1.19.1:
  * support for new python
  * remove support for python 2.x
- Remove patch python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360001">- Add missing dep on setuptools</changelog>
  <changelog author="code@bnavigator.de" date="1606910400">- Move the pkgconfig file to the common package
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606996800">- Update to 1.20.0
  * Require Python 3.6+ #pr-201
  * Require cairo 1.15.10+ #pr-204
  * docs: support Sphinx 3.0 #pr-207
  * meson: add ‘tests’ option to skip tests #pr-188
  * Windows: build wheels #pr-197
  * Add support for Python 3.9 and 3.10 #pr-198 #pr-202
  * examples: add a Jupyter Notebook example #pr-181
  * Raise an error early when being passed a file object not opened
    in binary mode #pr-205
  * Add a pyproject.toml file #pr-206
- move header file in sitearch to devel package (rpmlint error)
  header is packaged twice: gh#pygobject/pycairo#98</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.20.1
  * setup.py: Respect the PKG_CONFIG environment variable
  * Make import_cairo inline in addition to static
  * docs: Fix example in Pattern.set_filter() docs _pr_`221`
  * docs: Fix build with newer sphinx
  * docs: Fix NumPy width, height-conventions in examples
  * docs: Last parameter of rel_curve_to should be dy3, not dy4
  * mypy: Fixes for mypy 0.800+
  * mypy: Don't run mypy via pytest</changelog>
  <changelog author="fcrozat@suse.com" date="1628769600">- Add Obsoletes/Provides for python3-cairo-devel.</changelog>
  <changelog author="mcepl@suse.com" date="1682337600">- Rename changelog and the SPEC file to python3- form.</changelog>
  <changelog author="mcepl@suse.com" date="1682337601">- Rename package to avoid conflicts with the new Python Stack Proposal</changelog>
</package>
<package pkgid="254f5546bd282e034018248e86e1573489a47d90c20c5757cc4b30630d69eae7" name="python3-pycairo" arch="x86_64">
  <version epoch="0" ver="1.20.1" rel="150400.5.69"/>
  <changelog author="toddrme2178@gmail.com" date="1488024000">- Add python2-cairo and python2-cairo-devel provides for
  compatibility with the new multipython spec file macros.</changelog>
  <changelog author="dimstar@opensuse.org" date="1497787200">- Update to version 1.13.3:
  + Fix ImageSurface leaking in case
    :meth:`get_data() &lt;ImageSurface.get_data&gt;` is used under
    Python 3 (gh#pygobject/pycairo#43).
- Changes from version 1.13.2:
  + Fix pip failing to install pycairo in some cases
    (gh#pygobject/pycairo#39).
- Changes from version 1.13.1:
  + setup.py install: Fix generated pkg-config file if ``--home``
    or ``--user`` is specified (gh#pygobject/pycairo#34).
  + Fix a build error on macOS Sierra (gh#pygobject/pycairo#36)
  + examples: Fix snippet examples when .pyc files are present
    (gh#pygobject/pycairo#35).
- For more changes since the last package update, see NEWS inside.
- Implement python single-spec packaging: since pycairo 1.11.0, the
  sources for python2 and python3 based bindings have been merged
  again.</changelog>
  <changelog author="jmatejek@suse.com" date="1498219200">- fix requires for devel subpackage</changelog>
  <changelog author="zaitor@opensuse.org" date="1503576000">- Update to version 1.15.1:
  + Fixes:
  - Improved support for Python filesystem paths including
    os.PathLike. See pathlike for details.
  - Various minor fixes.
  + Changes: Expose cairo.Path.
  + Tests: Improved test coverage from ~70% to ~90%.
- Changes from version 1.15.0:
  + New Features:
  - Add Surface.map_to_image() and Surface.unmap_image().
  - Add RasterSourcePattern.
  - Add Glyph.
  - Add Rectangle.
  - Add TextCluster.
  - Add ScaledFont.text_to_glyphs() and
    ScaledFont.glyph_extents().
  - Add Context.show_text_glyphs().
  - Add TextExtents.
  + Changes:
  - Pycairo instances wrapping the same underlying cairo object
    now hash and compare equally e.g. context.get_target() ==
    context.get_target().
  - Functions which returned a cairo error with Status.NO_MEMORY
    no longer raise MemoryError, but a subclass of Error and
    MemoryError. Similarly errors with Status.READ_ERROR and
    Status.WRITE_ERROR no longer raise IOError, but a subclass of
    Error and IOError.
  - Some functions which previously returned a tuple now return a
    tuple subclass like Rectangle, Glyph, TextCluster and
    TextExtents.
- Changes from version 1.14.1:
  + Fixes: Fix a crash with Surface.get_device().
- Changes from version 1.14.0:
  + General: Requires at least cairo 1.13.1.
  + Tests: Optional Hypothesis tests.
  + New Features:
  - Add Surface.set_device_scale() and
    Surface.get_device_scale().
  - Add Device.
  - Add Surface.get_device().
  - Add ScriptDevice and ScriptMode.
  - Add ScriptSurface.
  - Add Status.JBIG2_GLOBAL_MISSING.
  - Add Format.stride_for_width().
  - Add TextClusterFlags and SurfaceObserverMode.
  - Add Gradient.get_color_stops_rgba().
  - Add TeeSurface.
  - Add MeshPattern.
- Changes from version 1.13.4:
  + Fixes: Fix a rare crash with get_data() under Python 3 (1.13.3
    regression).</changelog>
  <changelog author="jayvdb@gmail.com" date="1549713600">- Update to version 1.18.0:
  + typing: Add missing annotations for __enter__/__exit__
  + New API:
  - CAIRO_VERSION, CAIRO_VERSION_STRING, CAIRO_VERSION_MAJOR,
    CAIRO_VERSION_MINOR, CAIRO_VERSION_MICRO
  - Status.TAG_ERROR, Status.FREETYPE_ERROR, Status.PNG_ERROR,
    Status.WIN32_GDI_ERROR
  - SVGUnit, PDFMetadata, PDFOutlineFlags
  - FontOptions.set_variations(), FontOptions.get_variations()
  - Context.tag_begin(), Context.tag_end(), TAG_DEST, TAG_LINK
  - PDFSurface.set_page_label(), PDFSurface.set_metadata(),
    PDFSurface.set_thumbnail_size(), PDFSurface.add_outline(),
    PDF_OUTLINE_ROOT
  - SVGSurface.set_document_unit(),
    SVGSurface.get_document_unit()
  - MIME_TYPE_CCITT_FAX, MIME_TYPE_CCITT_FAX_PARAMS,
    MIME_TYPE_EPS, MIME_TYPE_EPS_PARAMS, MIME_TYPE_JBIG2,
    MIME_TYPE_JBIG2_GLOBAL, MIME_TYPE_JBIG2_GLOBAL_ID
  + docs: Remove a broken link
  + Various meson build fixes
  + setup.py: Support specifying custom --pkgconfigdir
  + Dropped Python 3.3 support
- Changes from version 1.17.1:
  + Meson build support
- Changes from version 1.17.0:
  + cairo.Surface and cairo.Device can now be used as context
    managers
  + Fix a leak when a cairo error was raised
  + Fix a leak when a mapped surface was GCed instead of unmapped
  + Make it possible to use the C API with Python 3 outside of the
    compilation unit doing the import by defining PYCAIRO_NO_IMPORT
  + Implement PEP 561
- Changes from version 1.16.3:
  + Ship Python type annotation stubs.
- Changes from version 1.16.2:
  + setup.py: Some fixes for Debian pybuild quirks
- Changes from version 1.16.1:
  + setup.py: correctly install pkgconfig into /usr/lib* again
- Changes from version 1.16.0:
  + Add a get_include() function which returns the compiler include
    path needed for interfacing with the Pycairo C API
- Changes from version 1.15.6:
  + Experimental PyPy and PyPy3 support
- Changes from version 1.15.5:
  + Support Unicode paths under Windows with cairo 1.15.10+
  + Don’t include the pkg-config file when building a wheel
- Changes from version 1.15.4:
  + Fix some enum conversation errors with (unused) large and
    negative values
  + tests: Fix a rare test error
- Changes from version 1.15.3:
  + setup.py: Install pkgconfig file into /usr/share/pkgconfig to
    work around JHBuild on Fedora not picking it up.
  + tests: Fix tests on big endian machines.
  + Support building with MSVC
- Changes from version 1.15.2:
  + setup.py: Install pkgconfig file to the same library prefix
    that Python uses (replaces logic in spec file)
- Activate test suite.
- Use license macro.
- Requires cairo &gt;= 1.13.1.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558267200">- Update to version 1.18.1
  * meson: install .egg-info to platlib
  * meson: fix configure error with meson 0.50 re absolute paths
  * PyPy: don’t use PyOS_FSPath() with PyPy3.6
- Rename to python-pycario to conform to python package naming
  guidelines
- Expand summaries and descriptions.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440000">- Fix typos</changelog>
  <changelog author="toddrme2178@gmail.com" date="1558440001">- Fixed conflicts with old python-cario-common-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1570449600">- Add patch to fix build on python 3.8:
  * python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360000">- Update to 1.19.1:
  * support for new python
  * remove support for python 2.x
- Remove patch python38.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1584360001">- Add missing dep on setuptools</changelog>
  <changelog author="code@bnavigator.de" date="1606910400">- Move the pkgconfig file to the common package
  gh#openSUSE/python-rpm-macros#66</changelog>
  <changelog author="code@bnavigator.de" date="1606996800">- Update to 1.20.0
  * Require Python 3.6+ #pr-201
  * Require cairo 1.15.10+ #pr-204
  * docs: support Sphinx 3.0 #pr-207
  * meson: add ‘tests’ option to skip tests #pr-188
  * Windows: build wheels #pr-197
  * Add support for Python 3.9 and 3.10 #pr-198 #pr-202
  * examples: add a Jupyter Notebook example #pr-181
  * Raise an error early when being passed a file object not opened
    in binary mode #pr-205
  * Add a pyproject.toml file #pr-206
- move header file in sitearch to devel package (rpmlint error)
  header is packaged twice: gh#pygobject/pycairo#98</changelog>
  <changelog author="dmueller@suse.com" date="1626523200">- update to 1.20.1
  * setup.py: Respect the PKG_CONFIG environment variable
  * Make import_cairo inline in addition to static
  * docs: Fix example in Pattern.set_filter() docs _pr_`221`
  * docs: Fix build with newer sphinx
  * docs: Fix NumPy width, height-conventions in examples
  * docs: Last parameter of rel_curve_to should be dy3, not dy4
  * mypy: Fixes for mypy 0.800+
  * mypy: Don't run mypy via pytest</changelog>
  <changelog author="fcrozat@suse.com" date="1628769600">- Add Obsoletes/Provides for python3-cairo-devel.</changelog>
  <changelog author="mcepl@suse.com" date="1682337600">- Rename changelog and the SPEC file to python3- form.</changelog>
  <changelog author="mcepl@suse.com" date="1682337601">- Rename package to avoid conflicts with the new Python Stack Proposal</changelog>
</package>
<package pkgid="ec4b98c3bea78c9956c64204a992dbbbf4e2d6af72193b6669a2c4f4f7bcc1ad" name="python3-pyudev" arch="noarch">
  <version epoch="0" ver="0.22.0+git.1642212208.d5630bf" rel="150400.5.50"/>
  <changelog author="hpj@urpla.net" date="1442318400">- Update to version 0.17:
  * #52: Remove global libudev object
  * #57: Really start the monitor on :meth:`pyudev.Monitor.poll()`
  * #60: Do not use :meth:`select.select` to avoid hitting its file descriptor
    limit
  * #58: Force non-blocking IO in :class:`pyudev.Monitor` to avoid blocking on
    receiving the device
  * #63: Set proper flags on pipe fds.
  * #65: Handle irregular polling events properly.
  * #50: Add :class:`pyudev.wx.MonitorObserver` and deprecate
    :class:`pyudev.wx.WxUDevMonitorObserver`
  * #50: Add :class:`pyudev.glib.MonitorObserver` and deprecate
    :class:`pyudev.glib.GUDevMonitorObserver`
  * #50: Add :class:`pyudev.pyqt4.MonitorObserver` and deprecate
    :class:`pyudev.pyqt4.QUDevMonitorObserver`
  * #50: Add :class:`pyudev.pyside.MonitorObserver` and deprecate
    :class:`pyudev.pyside.QUDevMonitorObserver`
  * Add a wrapper function to retry interruptible system calls.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1443009600">- Added a patch (do_not_install_tests.patch) to not install the
  tests as a module (not needed). Fixes also file conflicts in
  Factory.</changelog>
  <changelog author="tbechtold@suse.com" date="1464004800">- update to 0.20.0:
  * Remove parsing code added in previous release.
  * No longer do CI for Python 2.6.
  * Eliminate all wildcard imports and __all__ statements.
  * No longer use deprecated Device.from_sys_path() method.
  * Minor pylint induced changes.
  * Documentation fixes.
  * Restore raising KeyError by Attributes.as* methods when attribute not found.
  * Explicitly require six module.
  * Never raise a DeviceNotFoundError when iterating over a device enumeration.
  * Device.subsystem() now returns None if device has no subsystem.
  * Add DeprecationWarnings to deprecated Device methods.
  * Replace "/" with "!" in Device.from_name() sys_name parameter.
  * Add some unstable classes for parsing some kinds of values.
  * Make version info more like Python's including micro numbers and levels.
  * Refactor some internal modules into subdirectories.
  * Work on tests and reproducers.
  * DeviceNotFoundError is no longer a subtype of LookupError
  * Added support for pyqt5 monitor observer
  * Added discover module, which looks up a device on limited information
  * Attributes class no longer extends Mapping, extends object instead
  * Attributes class no longer inherits [] operator, Mapping methods
  * Attributes class objects are no longer iterable
  * Attributes.available_attributes property added
  * Attributes.get() method, with usual semantics, defined
  * Device.from_* methods are deprecated, uses Devices.from_* methods instead
  * Device.from_device_file() now raises DeviceNotFoundByFileError
  * Device.from_device_number() now raises DeviceNotFoundByNumberError
  * Devices.from_interface_index() method added
  * Devices.from_kernel_device() method added
  * Numerous testing infrastructure changes
- Remove do_not_install_tests.patch . No longer needed.
- Require libudev1 . Needed to use python-pyudev</changelog>
  <changelog author="tbechtold@suse.com" date="1464004801">- Remove do_not_install_tests.patch
- Require python-six</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="tbechtold@suse.com" date="1516708800">- Require libudev (bsc#1077282)
  Otherwise, an pyudev import fails with:
  ImportError: No library named udev</changelog>
  <changelog author="mimi.vx@gmail.com" date="1517313600">- fix Requires and BuiildRequires</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="dmueller@suse.com" date="1582891200">- update to 0.22.0:
  - Add a six-enabled move for collections move imports:
    https://github.com/pyudev/pyudev/pull/386
  - Fix any newly introduced pylint errors
  - Numerous improvements or updates to the test infrastructure
  - A number of test updates
  - Require yapf 0.21.0 for Python formatting
  - Various documentation fixes and updates</changelog>
  <changelog author="mcepl@suse.com" date="1602158400">- Add pytest_register_mark.patch to make the test suite at least
  syntactically correct and skip over tests we cannot run because
  of missing /dev gh#pyudev/pyudev#404.</changelog>
  <changelog author="code@bnavigator.de" date="1607774400">- Add remove_mock.patch gh#pyudev/pyudev#409
- Static linting with pylint is not needed for unit tests or build</changelog>
  <changelog author="mcepl@suse.com" date="1628596800">- Add hypothesis_settings.patch to allow longer timeouts in OBS.</changelog>
  <changelog author="mcepl@cepl.eu" date="1642334400">- Update to version 0.22.0+git.1642212208.d5630bf (bsc#1194613):
  * Remove another flakey test
  * Remove all traces of tox
  * Update next Fedora to 35
  * Delete a test which is probably flakey for real
  * Bump recommended development environment to fedora 34
  * Use yamllint on all the configuration files
  * Add annotations to GitHub workflows
  * No longer use --recursive for isort
  * Update formatting for new black
  * Establish a weekly task for future fedora
- Remove upstreamed patches:
  - remove_mock.patch</changelog>
</package>
<package pkgid="3b8faa262de8046686216c85bf4615db37a0e26ef58e5238db2b05a544e2f680" name="python3-pyudev" arch="src">
  <version epoch="0" ver="0.22.0+git.1642212208.d5630bf" rel="150400.5.50"/>
  <changelog author="asterios.dramis@gmail.com" date="1314792000">- Update to version 0.12:
  * #32: Fixed memory leak
  * #33: Fixed Python 3 support for :mod:`pyudev.glib`
  * Fixed license header in :mod:`pyudev._compat`
- Spec file updates.
  * Changed License: to LGPL-2.1+.
  * Minor other updates.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1320580800">- Update to version 0.13:
  * #36: Added :meth:`pyudev.Monitor.set_receive_buffer_size` (thanks to Rémi
    Rérolle)
  * #34: :class:`pyudev.Device.tags` returns a :class:`pyudev.Tags` object now
  * Added :meth:`pyudev.Enumerator.match_parent`
  * Added ``parent`` keyword argument to :meth:`pyudev.Enumerator.match()`
  * Removed :meth:`pyudev.Enumerator.match_children` in favour of
    :meth:`pyudev.Enumerator.match_parent`
  * :attr:`pyudev.Device.children` requires udev version 172 now
  * #31: Added :meth:`pyudev.Enumerator.match_attribute`
  * Added ``nomatch`` argument to :meth:`pyudev.Enumerator.match_subsystem` and
    :meth:`pyudev.Enumerator.match_attribute`</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1329566400">- Update to version 0.14:
  * Documentation now hosted at http://pyudev.readthedocs.org
  * #37: Added :class:`pyudev.wx.WxUDevMonitorObserver` for wxPython
  * Added :class:`pyudev.MonitorObserver`
  * Added :attr:`pyudev.glib.GUDevMonitorObserver.enabled`,
    :attr:`pyudev.pyqt4.QUDevMonitorObserver.enabled` and
    :attr:`pyudev.pyside.QUDevMonitorObserver.enabled`</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1331380800">- Update to version 0.15:
  * #20: :meth:`pyudev.Monitor.filter_by()` and
    :meth:`pyudev.Monitor.filter_by_tag()` can be called after
    :meth:`pyudev.Monitor.enable_receiving()` now
  * #20: Added :meth:`~pyudev.Monitor.remove_filter()`
  * :class:`pyudev.MonitorObserver` calls
    :meth:`pyudev.Monitor.enable_receiving()` now when started.
  * #40: Added user guide to the documentation
  * #39: Added :meth:`pyudev.Device.from_device_file()`
  * :data:`errno.EINVAL` from underlying libudev functions causes
    :exc:`~exceptions.ValueError` instead of
    :exc:`~exceptions.EnvironmentError` now.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1353240000">- Update to version 0.16.1:
  * #53: Fix source distribution
  * #54: Fix typo in test
  From version 0.16:
  * Remove :meth:`pyudev.Monitor.from_socket`.
  * Deprecate :meth:`pyudev.Device.traverse()` in favor of
    :attr:`pyudev.Device.ancestors`.
  * #47: Deprecate :meth:`pyudev.Monitor.receive_device` in favor of
    :attr:`pyudev.Monitor.poll`.
  * #47: Deprecate :attr:`pyudev.Monitor.enable_receiving` in favor of
    :attr:`pyudev.Monitor.start`.
  * #47: Deprecate :attr:`pyudev.Monitor.__iter__` in favor of explicit looping
    or :class:`pyudev.MonitorObserver`.
  * #49: Deprecate ``event_handler`` to :class:`pyudev.MonitorObserver` in
    favour of ``callback`` argument.
  * #46: Continuously test pyudev on Travis-CI.
  * Add :attr:`pyudev.Device.ancestors`.
  * Add :attr:`pyudev.Device.action`.
  * #10: Add :attr:`pyudev.Device.sequence_number`.
  * #47: Add :meth:`pyudev.Monitor.poll`.
  * #47: Add :attr:`pyudev.Monitor.started`.
  * #49: Add ``callback`` argument to :class:`pyudev.Monitor`.
  * :meth:`pyudev.Monitor.start` can be called repeatedly.
  * #45: Get rid of 2to3
  * #43: Fix test failures on Python 2.6
  * Fix signature in declaration of ``udev_monitor_set_receive_buffer_size``.
  * #44: Test wrapped signatures with help of ``gccxml``.
  * Fix compatibility with udev 183 and newer in :class:`pyudev.Context`.
  * :meth:`pyudev.MonitorObserver.stop` can be called from the observer thread.
- Removed python-setuptools and added python-distribute as build requirement.</changelog>
  <changelog author="saschpe@suse.de" date="1353412800">- Build HTML documentation
- Fix SLE_11_SP2 build (not noarch)</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="hpj@urpla.net" date="1442318400">- Update to version 0.17:
  * #52: Remove global libudev object
  * #57: Really start the monitor on :meth:`pyudev.Monitor.poll()`
  * #60: Do not use :meth:`select.select` to avoid hitting its file descriptor
    limit
  * #58: Force non-blocking IO in :class:`pyudev.Monitor` to avoid blocking on
    receiving the device
  * #63: Set proper flags on pipe fds.
  * #65: Handle irregular polling events properly.
  * #50: Add :class:`pyudev.wx.MonitorObserver` and deprecate
    :class:`pyudev.wx.WxUDevMonitorObserver`
  * #50: Add :class:`pyudev.glib.MonitorObserver` and deprecate
    :class:`pyudev.glib.GUDevMonitorObserver`
  * #50: Add :class:`pyudev.pyqt4.MonitorObserver` and deprecate
    :class:`pyudev.pyqt4.QUDevMonitorObserver`
  * #50: Add :class:`pyudev.pyside.MonitorObserver` and deprecate
    :class:`pyudev.pyside.QUDevMonitorObserver`
  * Add a wrapper function to retry interruptible system calls.</changelog>
  <changelog author="asterios.dramis@gmail.com" date="1443009600">- Added a patch (do_not_install_tests.patch) to not install the
  tests as a module (not needed). Fixes also file conflicts in
  Factory.</changelog>
  <changelog author="tbechtold@suse.com" date="1464004800">- update to 0.20.0:
  * Remove parsing code added in previous release.
  * No longer do CI for Python 2.6.
  * Eliminate all wildcard imports and __all__ statements.
  * No longer use deprecated Device.from_sys_path() method.
  * Minor pylint induced changes.
  * Documentation fixes.
  * Restore raising KeyError by Attributes.as* methods when attribute not found.
  * Explicitly require six module.
  * Never raise a DeviceNotFoundError when iterating over a device enumeration.
  * Device.subsystem() now returns None if device has no subsystem.
  * Add DeprecationWarnings to deprecated Device methods.
  * Replace "/" with "!" in Device.from_name() sys_name parameter.
  * Add some unstable classes for parsing some kinds of values.
  * Make version info more like Python's including micro numbers and levels.
  * Refactor some internal modules into subdirectories.
  * Work on tests and reproducers.
  * DeviceNotFoundError is no longer a subtype of LookupError
  * Added support for pyqt5 monitor observer
  * Added discover module, which looks up a device on limited information
  * Attributes class no longer extends Mapping, extends object instead
  * Attributes class no longer inherits [] operator, Mapping methods
  * Attributes class objects are no longer iterable
  * Attributes.available_attributes property added
  * Attributes.get() method, with usual semantics, defined
  * Device.from_* methods are deprecated, uses Devices.from_* methods instead
  * Device.from_device_file() now raises DeviceNotFoundByFileError
  * Device.from_device_number() now raises DeviceNotFoundByNumberError
  * Devices.from_interface_index() method added
  * Devices.from_kernel_device() method added
  * Numerous testing infrastructure changes
- Remove do_not_install_tests.patch . No longer needed.
- Require libudev1 . Needed to use python-pyudev</changelog>
  <changelog author="tbechtold@suse.com" date="1464004801">- Remove do_not_install_tests.patch
- Require python-six</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="tbechtold@suse.com" date="1516708800">- Require libudev (bsc#1077282)
  Otherwise, an pyudev import fails with:
  ImportError: No library named udev</changelog>
  <changelog author="mimi.vx@gmail.com" date="1517313600">- fix Requires and BuiildRequires</changelog>
  <changelog author="mcepl@suse.com" date="1543924800">- Remove superfluous devel dependency for noarch package</changelog>
  <changelog author="dmueller@suse.com" date="1582891200">- update to 0.22.0:
  - Add a six-enabled move for collections move imports:
    https://github.com/pyudev/pyudev/pull/386
  - Fix any newly introduced pylint errors
  - Numerous improvements or updates to the test infrastructure
  - A number of test updates
  - Require yapf 0.21.0 for Python formatting
  - Various documentation fixes and updates</changelog>
  <changelog author="mcepl@suse.com" date="1602158400">- Add pytest_register_mark.patch to make the test suite at least
  syntactically correct and skip over tests we cannot run because
  of missing /dev gh#pyudev/pyudev#404.</changelog>
  <changelog author="code@bnavigator.de" date="1607774400">- Add remove_mock.patch gh#pyudev/pyudev#409
- Static linting with pylint is not needed for unit tests or build</changelog>
  <changelog author="mcepl@suse.com" date="1628596800">- Add hypothesis_settings.patch to allow longer timeouts in OBS.</changelog>
  <changelog author="mcepl@cepl.eu" date="1642334400">- Update to version 0.22.0+git.1642212208.d5630bf (bsc#1194613):
  * Remove another flakey test
  * Remove all traces of tox
  * Update next Fedora to 35
  * Delete a test which is probably flakey for real
  * Bump recommended development environment to fedora 34
  * Use yamllint on all the configuration files
  * Add annotations to GitHub workflows
  * No longer use --recursive for isort
  * Update formatting for new black
  * Establish a weekly task for future fedora
- Remove upstreamed patches:
  - remove_mock.patch</changelog>
</package>
<package pkgid="1d239f91c8ffd7fbdad24a58db41567111bf8ba34588b29d164d8549d3deed33" name="python3-pyzmq" arch="aarch64">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="cd24ce77e880a71170518d168203d1d629f43d4fa0e17fab71f6fd6195511dc6" name="python3-pyzmq" arch="s390x">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="e2d9d07654cffc31e5199f40aa1ba9fee1e114c4ca5abd78f7fdc78b2e6cc21a" name="python3-pyzmq" arch="x86_64">
  <version epoch="0" ver="17.1.2" rel="150000.3.5.2"/>
  <changelog author="hpj@urpla.net" date="1426507200">- Update to 14.5.0
  + Changes:
  * use pickle.DEFAULT_PROTOCOL by default in send_pickle
  * with the release of pip-6, OS X wheels are only marked as 10.6-intel,
    indicating that they should be installable on any newer or single-arch Python.
  * raise SSHException on failed check of host key
  + Bugfixes:
  * fix method name in utils.wi32.allow_interrupt
  * fork-related fixes in garbage collection thread
  * add missing import in zmq.__init__, causing failure to import in some circumstances
- Update to 14.4.1
  + Bugfixes
  * SyntaxError on Python 2.6 in zmq.ssh
  * Handle possible bug in garbage collection after fork
- Update to 14.4.0
  + New features
  * Experimental support for libzmq-4.1.0 rc (new constants, plus zmq.has()).
  * Update bundled libzmq to 4.0.5
  * Update bundled libsodium to 1.0.0
  * Fixes for SSH dialogs when using zmq.ssh to create tunnels
  * More build/link/load fixes on OS X and Solaris
  * Get Frame metadata via dict access (libzmq 4)
  * Contexts and Sockets are context managers (term/close on __exit__)
  * Add zmq.utils.win32.allow_interrupt context manager for catching SIGINT on Windows
  + Bugfixes:
  * Bundled libzmq should not trigger recompilation after install on PyPy</changelog>
  <changelog author="p.drouand@gmail.com" date="1426507201">- Update download Url</changelog>
  <changelog author="aboe76@gmail.com" date="1436788800">- Update to 14.7.0
  + Changes:
  * Update bundled libzmq to 4.1.2.
  * Following the lead of Python 3.5, interrupted system calls will be retried.
  + Bugfixes:
  * Fixes for CFFI backend on Python 3 + support for PyPy 3.
  * Verify types of all frames in :meth:`~zmq.Socket.send_multipart`
    before sending, to avoid partial messages.
  * Fix build on Windows when both debug and release versions of libzmq are found.
- Update to 14.6.0
  + Changes:
  * improvements in :meth:`zmq.Socket.bind_to_random_port`:
  - Use system to allocate ports by default
  * pyzmq no longer bundles external libzmq when making a bdist.
    You can use delocate to do this.
  + Bugfixes:
  * add missing :attr:`ndim` on memoryviews of Frames
  * allow :func:`copy.copy` and :func:`copy.deepcopy` on Sockets, Contexts</changelog>
  <changelog author="toddrme2178@gmail.com" date="1436961600">- Include authors and BSD license in source</changelog>
  <changelog author="toddrme2178@gmail.com" date="1438171200">- Add additional optional dependencies that support additional
  features and/or additional backends.</changelog>
  <changelog author="aplanas@suse.com" date="1441713600">- Add patch skip_test_tracker.patch to skip test_tracker test.
  This test block the VM in OBS for a long period of time, causing
  the kill of the VM and the fail in the RPM creation.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1453809600">- update to version 15.2.0:
  * FIX: handle multiple events in a single register call in
    :mod:`zmq.asyncio`
  * FIX: unicode/bytes bug in password prompt in :mod:`zmq.ssh` on
    Python 3
  * FIX: workaround gevent monkeypatches in garbage collection thread
  * update bundled minitornado from tornado-4.3.
  * improved inspection by setting binding=True in cython compile
    options
  * add asyncio Authenticator implementation in
    :mod:`zmq.auth.asyncio`
  * workaround overflow bug in libzmq preventing receiving messages
    larger than MAX_INT
- update to version 15.1.0:
  * FIX: Remove inadvertant tornado dependency when using
    :mod:`zmq.asyncio`
  * FIX: 15.0 Python 3.5 wheels didn't work on Windows
  * Add GSSAPI support to Authenticators
  * Support new constants defined in upcoming libzmq-4.2.dev
- update to version 15.0.0:
  * add :mod:`asyncio` support via :mod:`zmq.asyncio`
  * add :mod:`tornado` future support via :mod:`zmq.eventloop.future`
  * trigger bundled libzmq if system libzmq is found to be &lt; 3. System
    libzmq 2 can be forced by explicitly requesting --zmq=/prefix/.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1492171200">- Update to 16.0.2
- Rebase skip_test_tracker.patch.
- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502020800">- Remove docs. They aren't being built so they are not useful,
  and they break the build.</changelog>
  <changelog author="arun@gmx.de" date="1509624000">- update to version 16.0.3:
  * Regenerate Cython sources in sdists with Cython 0.27.2, fixing
    builds on CPython 3.7.</changelog>
  <changelog author="arun@gmx.de" date="1517140800">- specfile:
  * update copyright year
- update to version 16.0.4:
  * Regenerate Cython sources in sdists with Cython 0.27.3, fixing
    builds on CPython 3.7.
  * Add warning when using bundled tornado, which was deprecated too
    quietly in 14.x.</changelog>
  <changelog author="arun@gmx.de" date="1518264000">- update to version 17.0.0:
  * Add :meth:`zmq.Socket.send_serialized` and
    :meth:`zmq.Socket.recv_serialized` for sending/receiving messages
    with custom serialization.
  * Add :attr:`zmq.Socket.copy_threshold` and
    :const:`zmq.COPY_THRESHOLD`. Messages smaller than this are always
    copied, regardless of copy=False, to avoid overhead of zero-copy
    bookkeeping on small messages.
  * Added visible deprecation warnings to bundled tornado
    IOLoop. Tornado eventloop integration shouldn't be used without a
    proper tornado install since pyzmq 14.
  * Allow pyzmq asyncio/tornado integration to run without installing
    :func:`zmq_poll` implementation. The following methods and classes
    are deprecated and no longer required:
    :func:`zmq.eventloop.ioloop.install`
    :class:`zmq.eventloop.ioloop.IOLoop`
    :func:`zmq.asyncio.install`
    :class:`zmq.asyncio.ZMQEventLoop`
  * Set RPATH correctly when building on macOS.
  * Compatibility fixes with tornado 5.0.dev (may not be quite enough
    for 5.0 final, which is not yet released as of pyzmq 17).
  * Draft support for CLIENT-SERVER routing_id and group.</changelog>
  <changelog author="aloisio@gmx.com" date="1623153600">- update to version 17.1.2 (fixes boo#1186945)
  * Fix possible hang when working with asyncio
  * Remove some outdated workarounds for old Cython versions
  * Fix some compilation with custom compilers
  * Remove unneeded link of libstdc++ on PyPy</changelog>
</package>
<package pkgid="c0b8b5cc0c77a33062971472acdb4fc87ec5cdec6edec5fe04cee55a3d6b1dfc" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.24.0" rel="150300.3.3.1"/>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1530532800">- update to version 2.19.1:
  * Fixed issue where status_codes.py’s init function failed trying
    to append to a __doc__ value of None.
- update to version 2.19.0:
  * Improvements
    + Warn about possible slowdown with cryptography version &lt; 1.3.4
    + Check host in proxy URL, before forwarding request to adapter.
    + Maintain fragments properly across redirects. (RFC7231 7.1.2)
    + Removed use of cgi module to expedite library load time.
    + Added support for SHA-256 and SHA-512 digest auth algorithms.
    + Minor performance improvement to Request.content.
    + Migrate to using collections.abc for 3.7 compatibility.
  * Bugfixes
    + Parsing empty Link headers with parse_header_links() no longer
    return one bogus entry.
    + Fixed issue where loading the default certificate bundle from
    a zip archive would raise an IOError.
    + Fixed issue with unexpected ImportError on windows system
    which do not support winreg module.
    + DNS resolution in proxy bypass no longer includes the username
    and password in the request. This also fixes the issue of DNS
    queries failing on macOS.
    + Properly normalize adapter prefixes for url comparison.
    + Passing None as a file pointer to the files param no longer
    raises an exception.
    + Calling copy on a RequestsCookieJar will now preserve the
    cookie policy correctly.
  * We now support idna v2.7 and urllib3 v1.23.
- Properly set idna/urllib3 dependency versions, runtime and buildtime
- Spec cleanup, remove conditionals for ancient distro versions
- Remove duplicates with fdupes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1531742400">- make multibuild package to resolve circular deps on tests</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532001600">- -test subpackage must be empty</changelog>
  <changelog author="arun@gmx.de" date="1540036800">- specfile:
  * remove devel for noarch
  * remove restriction for urllib3 &lt; 1.24
  * HISTORY and README changed from .rst to .md
- update to version 2.20.0 bsc#1111622:
  * Bugfixes
    + Content-Type header parsing is now case-insensitive
    (e.g. charset=utf8 v Charset=utf8).
    + Fixed exception leak where certain redirect urls would raise
    uncaught urllib3 exceptions.
    + Requests removes Authorization header from requests redirected
    from https to http on the same hostname. (CVE-2018-18074)
    + should_bypass_proxies now handles URIs without hostnames
    (e.g. files).
  * Dependencies
    + Requests now supports urllib3 v1.24.
  * Deprecations
    + Requests has officially stopped support for Python 2.6.</changelog>
  <changelog author="jengelh@inai.de" date="1540900800">- Ensure neutrality of descriptions.</changelog>
  <changelog author="arun@gmx.de" date="1542974400">- update to version 2.20.1:
  * Bugfixes
    + Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)
- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="da6a9ce1fd8b6d9af3a458b88537b49404af60078fd10e5be3ca33cdcbf5e87b" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.25.1" rel="150300.3.6.1"/>
  <changelog author="mcepl@suse.com" date="1546257600">- Move name ahead of version in spec file to resolve build issues
  on older distributions
- fdupe more thoroughly.</changelog>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
</package>
<package pkgid="4e25b9752ca934d7e2c265b89ba020bfc8efb6fa881a6ede7224fb8e79422ad3" name="python3-requests" arch="noarch">
  <version epoch="0" ver="2.25.1" rel="150300.3.9.1"/>
  <changelog author="jbrownell@suse.com" date="1547035200">- Support older Red Hat platforms that don't offer "Recommends:"</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1549368000">- update to version 2.21.0:
  * Requests now supports idna v2.8.</changelog>
  <changelog author="tchvatal@suse.com" date="1550232000">- Do not depend on python-py
- Update few of the requirements</changelog>
  <changelog author="tchvatal@suse.com" date="1551096000">- Skip one more test that is flaky</changelog>
  <changelog author="tchvatal@suse.com" date="1556020800">- Do not hardcode version requirements in setup.py allowing us to
  update and verify functionality on our own:
  * requests-no-hardcoded-version.patch</changelog>
  <changelog author="bstephenson@suse.com" date="1558008000">- Update to version 2.20.1 (bsc#1111622)
  * Fixed bug with unintended Authorization header stripping for
    redirects using default ports (http/80, https/443).</changelog>
  <changelog author="tchvatal@suse.com" date="1558785600">- Update to 2.22.0:
  * Requests now supports urllib3 v1.25.2. (note: 1.25.0 and 1.25.1 are incompatible)
- Rebase requests-no-hardcoded-version.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Hardcode pytest 3.x series as upstream even in git does not work
  with newer versions (they pinned the release)</changelog>
  <changelog author="jayvdb@gmail.com" date="1572609600">- Add two patches only updating test logic to remove pytest 3 pin
  - merged_pr_5049.patch
  - pr_5251-pytest5.patch</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1576324800">- Remove python-urllib3, python-certifi and ca-certificates from
  main package BuildRequires, not required for building.
- Do not require full python, (implicit) python-base is sufficient.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1582545600">- update to 2.23.0
- dropped merged_pr_5049.patch
- refreshed requests-no-hardcoded-version.patch
  * Remove defunct reference to prefetch in Session __attrs__
  * Requests no longer outputs password in basic auth usage warning</changelog>
  <changelog author="mcepl@suse.com" date="1587988800">- Switch off test_https_warnings test (bsc#1170175)</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1595505600">- remove patch pr_5251-pytest5.patch, not needed anymore.
- update to version 2.24.0:
  - pyOpenSSL TLS implementation is now only used if Python
  either doesn't have an `ssl` module or doesn't support
  SNI. Previously pyOpenSSL was unconditionally used if available.
  This applies even if pyOpenSSL is installed via the
  `requests[security]` extra (#5443)
  - Redirect resolution should now only occur when
  `allow_redirects` is True. (#5492)
  - No longer perform unnecessary Content-Length calculation for
  requests that won't use it. (#5496)</changelog>
  <changelog author="dmueller@suse.com" date="1606392000">- update to 2.25.0:
  * Added support for NETRC environment variable. (#5643)
  * Requests now supports urllib3 v1.26.
  * Requests v2.25.x will be the last release series with support for Python 3.5.
- refreshed requests-no-hardcoded-version.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1607947200">- Update in SLE-15 (bsc#1176785, jsc#ECO-3105, jsc#PM-2352)</changelog>
  <changelog author="dmueller@suse.com" date="1608379200">- update to 2.25.1:
  - Requests now treats `application/json` as `utf8` by default. Resolving
  inconsistencies between `r.text` and `r.json` output. (#5673)</changelog>
  <changelog author="code@bnavigator.de" date="1612353600">- Don't pin idna&lt;3 in the egg-info so that depending packages
  can install the new idna dropping python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1658404800">- Update in SLE-15 (bsc#1199282, jsc#PM-3243, jsc#SLE-24629)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1686657600">- Add CVE-2023-32681.patch to fix unintended leak of
  Proxy-Authorization header (CVE-2023-32681, bsc#1211674)
  Upstream commit: gh#psf/requests@74ea7cf7a6a2</changelog>
  <changelog author="mmachova@suse.com" date="1716292800">- Add CVE-2024-35195.patch (CVE-2024-35195, bsc#1224788)
- Add httpbin.patch to fix a test failure caused by the previous patch.</changelog>
</package>
<package pkgid="34fe2bcd2dcb868afd91b7f725f323dc2f020cb62c28441c0ea29d2a5d29be7d" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="0cbe8561d5cc398eeac53f7bcdb05a630919a36bebda56e3486c3a3d827c9cde" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="80253b50bb4a25c8e2ce019f722d61fac14c7cff409b8cf9e9ef16ab3a5d0899" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="020a9aa0415c3540734276f06ab00e72ccb638e93d64823e27254aad17f76edd" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="e8d205b263844e3bec648fe8435e504aee600298e7fe82e66d8fb2fd51d80852" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="410e0913308b5825019058da9d6993eb42bed3b665fc2be01cdb3156af198779" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="bdfbe9f3ee220eca83bdb73af850bad98df778542153098eec022171e53c9c62" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="3899bf568cd114da6ba941297cd3d83e2cfc66fad4da28e6193c40434086a74c" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="ef97c21db11ca79639b32b00e577a383bb20b7b5421427f666fcc8f3caa7163b" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="bbe10865c030919d8adf570b7b1384488c231ce9cffa693cc129e32562e920fc" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="812ec6105d2a7a97147c197b5ff816b5ab35509b7f8ed8192fbf454026eb75a8" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="909fb9f987f3cedc24996f0acfbe77ab681cc3565022edaa34010c6cab79bbe5" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="853643af028d106f34cc1ee0c6e0a46a7ae97c308f48b1808b928b9952b22b36" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="0dded760b62f7334d6986a0c5fa94ccd4da148d7d1b236c2233a6a136a46cc82" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="0fe1db75a4758ac72dd9587b1ee38b885e8f6e3b21b68a8423c7ffccf0b4919b" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="6205d05b175650cd2ecdb8bf5cfaae17e598ad38b039ca74d2d2f307af445b7c" name="python3-rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="138ae441ce8d0ed95c31c4990c17d2ef9df9a6d790eb0e62cc5f0c0b9087fa2a" name="python3-rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="cda960bbb7f0b833bf5149bb393bbb76a18e2674d7226259415916d75c8fcb37" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
  <changelog author="dmueller@suse.com" date="1691755200">- build for all python modules (jsc#PED-68, jsc#PED-1988)</changelog>
</package>
<package pkgid="01a7a3e676187acd3892b53433d0fd9a0541ad474c530ee9f34fcae1f8616395" name="python3-s3transfer" arch="noarch">
  <version epoch="0" ver="0.6.0" rel="150200.9.7.1"/>
  <changelog author="rjschwei@suse.com" date="1510228800">- Update to version 0.1.11:
  + Properly handle unicode exceptions in the context manager</changelog>
  <changelog author="mimi.vx@gmail.com" date="1524139200">- update to 0.1.13 (bsc#1075263)
- add system-requests.patch - use system python-requests
  * Plumb ``RequestPayer` argument to the ``CompleteMultipartUpload` operation
  * enhancement:max_bandwidth: Add ability to set maximum bandwidth consumption
  for streaming of S3 uploads and downloads</changelog>
  <changelog author="tchvatal@suse.com" date="1525780800">- Make sure to really not use any damn bundles:
  * no-bundled-packages.patch
  * Never rely on some bundled package version just use system libs
- Enable testsuite and make it pass thanks to above patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Avoid running tests on 32bit as they fail there on oom</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1550059200">- Update to version 0.2.0
  * feature:``ProcessPoolDownloader``: Add ``ProcessPoolDownloader`` class
    to speed up download throughput by using processes instead of threads.
- Drop obsolete patch
  + system-requests.patch
- Refresh patches for new version
  + hide_py_pckgmgmt.patch
  + no-bundled-packages.patch
- Update Requires in spec file from setup.py</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1560340800">- Update to version 0.2.1 (bsc#1146853)
  * enhancment:ProcessPool: Adds user agent suffix.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1566475200">- Update in SLE-15 (bsc#1146854)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1580126400">- Update to version 0.3.2
  * bugfix:s3: Fixes boto/botocore`#1916 &lt;https://github.com/boto/botocore/issues/1916&gt;`__
- from version 0.3.1
  * enhancement:TransferManager: Expose client and config properties
  * enhancement:Tags: Add support for Tagging and TaggingDirective
- from version 0.3.0
  * feature:Python: Dropped support for Python 2.6 and 3.3.
- Refresh patches for new version
  + hide_py_pckgmgmt.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1582804800">- Update to 0.3.3:
  * bugfix:dependency: Updated botocore version range
- Drop patch hide_py_pckgmgmt.patch it should not be needed
  * we updated setuptools on SLE 12 to handle complex dependencies
- Use pytest for test execution:
  * the nose is used by upstream but really not needed and it
    will get borked with python 3.10</changelog>
  <changelog author="tchvatal@suse.com" date="1583841600">- Skip test failing on python 3.8, it is race condition that needs
  to be fixed in tests</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1586260800">- Fix build on SLE-12
  + Add python to BuildRequires for suse_version &lt; 1500
  + Add python-scandir to BuildRequires for suse_version &lt; 1500</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1586520000">- Update in SLE-15 (bsc#1168943)</changelog>
  <changelog author="rjschwei@suse.com" date="1606392000">- Only build Python3 flavors for distributions 15 and greater</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1610452800">- Update to 0.3.4:
  * enhancement:s3: Add server side encryption context into allowed list</changelog>
  <changelog author="alarrosa@suse.com" date="1621425600">- Update to 0.4.2:
  * enhancement:s3: Add support for ExpectedBucketOwner. Fixes #181.
- Update to 0.4.1:
  * enhancement:crt: Add set_exception to CRTTransferFuture to allow setting exceptions in subscribers.
- Update to 0.4.0:
  * feature:crt: Add optional AWS Common Runtime (CRT) support. The AWS CRT provides a C-based S3 transfer client that can improve transfer throughput.
- Update to 0.3.7:
  * bugfix:ReadFileChunk: Fix seek behavior in ReadFileChunk class
- Update to 0.3.6:
  * bugfix:packaging: Fix setup.py metadata for futures on Python 2.7
- Update to 0.3.5:
  * enhancement:s3: Block TransferManager methods for S3 Object Lambda resources</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1627387200">- Update 0.5.0: (bsc#1189649)
  * feature:Python: Dropped support for Python 2.7
- Disable Python2 builds for all SUSE distributions
- Remove Python2 build dependencies from spec file</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1654257600">- Update to 0.6.0
  * feature:Python: Dropped support for Python 3.6
- from version 0.5.2
  * enhancement:``s3``: Added support for flexible checksums
    when uploading or downloading objects.
- from version 0.5.1
  * enhancement:Python: Officially add Python 3.10 support
- Drop unused python-mock dependency from BuildRequires
- Refresh patches for new version
  + no-bundled-packages.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1667476800">- Update in SLE-15 (bsc#1204537, jsc#PED-2333)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1680696000">- Update in SLE-15 (bsc#1209255, jsc#PED-3780)
- Add python-python-dateutil and python-jmespath to BuildRequires</changelog>
</package>
<package pkgid="b02f1bb5186a1d50b506b3b84fc6a5282c229026dc35459b868c8831a6fea0ce" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="7b8ccdb35ef4541fcc1d13a484dd3a87338d698b80fcfc0a6d95b0f058f747fd" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="dc1427ef2cdfc8e1ebd26d68318522a201ab98f435ed01cac4fd6466860e4775" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="ec6eee0675746d18ae759ef544981531f8746ba8bf20fd5c2f687fe4ce29c483" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="9a90b2d7038bd359a0cb94d54e162c9fb5068a2cebe1534a14aecb757241d991" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="d8337b0796a54cb7f75fb6c9e21273016e497885c5852ff6f399b37d8112051a" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="eb51ab3c40e550c89cbd3aa7a741630b63cf716a20ded001fed69810e41e022b" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.37.2"/>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
</package>
<package pkgid="ce183e73e8f5b32b165f047ffe7c0cd1027ca7390408847456268bf35905e29f" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.37.2"/>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
</package>
<package pkgid="2848a5ed0d2cd9fdb94df6f695efe74369447ce9dbd19147eccc10b8097aa15c" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.37.2"/>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
</package>
<package pkgid="281285678785793309c9e3120d9c6fbabcaa8c09876c17216829356040c524b3" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.44.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
</package>
<package pkgid="d89d8b32e1a54012eae0bf48016e68c67251a2761ea985f1944bb39f70a2ba34" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.44.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
</package>
<package pkgid="2a1927db795a2ba5750f9ba9950ff134d37ef48680e2dba5ccb91d04e703de02" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.44.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
</package>
<package pkgid="20ebd2c258339d0b27cf5829daf91c76d63499d3573224233959c086f3a968be" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.49.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
</package>
<package pkgid="a567edc0f5765c4dd50d44ce33f6ce23e79a8676fe3dd571cacd423e44b60a82" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.49.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
</package>
<package pkgid="de034f87d27a961822d836356d8abecfeecd076c8d97ce022a81218b21115b1a" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.49.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
</package>
<package pkgid="1235b7a4687c923c9687915e1bb9b90c6c76bbce1951e139c9c18f1e16004fdf" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.54.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * fix-the-aptpkg.py-unit-test-failure.patch
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * update-__pillar__-during-pillar_refresh.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="b5d008054caf16434850a141cf02bf292ea1da8079431116ba714ae6a00b47ef" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.54.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * fix-the-aptpkg.py-unit-test-failure.patch
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * update-__pillar__-during-pillar_refresh.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="02ea0a4179bb834a86947d31dc3466dc431b20859ad462c296f1c94eb7fdd3d8" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.54.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * fix-the-aptpkg.py-unit-test-failure.patch
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * update-__pillar__-during-pillar_refresh.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
</package>
<package pkgid="47a6832099e75e9eadd7cbc03da649436004d06b637382169899167fcfb8d4e7" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.57.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * fix-the-aptpkg.py-unit-test-failure.patch
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * update-__pillar__-during-pillar_refresh.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * switch-oscap-encoding-to-utf-8-639.patch</changelog>
</package>
<package pkgid="0a185d93954f4f1ec5c348e22f3350342eaa585999d6883d471570e800ffaeea" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.57.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * fix-the-aptpkg.py-unit-test-failure.patch
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * update-__pillar__-during-pillar_refresh.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * switch-oscap-encoding-to-utf-8-639.patch</changelog>
</package>
<package pkgid="7b6f811e65de2fb169a6cf552934a83869a8ec08f7066889eedfeec009d06675" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.57.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * fix-the-aptpkg.py-unit-test-failure.patch
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * update-__pillar__-during-pillar_refresh.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * switch-oscap-encoding-to-utf-8-639.patch</changelog>
</package>
<package pkgid="cfb38185532c0ed22b638a6ed2ad9ba9fbc4b38bf1815a4c5c5989ec72fc9b11" name="python3-salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.60.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * fix-the-aptpkg.py-unit-test-failure.patch
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * update-__pillar__-during-pillar_refresh.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * switch-oscap-encoding-to-utf-8-639.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="d371407a6a2d7541e045f56fbf8ab0b3c986f4e0cf719fbe6fcdbd6586cac6d1" name="python3-salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.60.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * fix-the-aptpkg.py-unit-test-failure.patch
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * update-__pillar__-during-pillar_refresh.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * switch-oscap-encoding-to-utf-8-639.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="3e3ddbe26169bfa17231ae1e901e9cfa6e2e7ee2dcf2a2da5dfb67098afc185c" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.60.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1693396800">- Make sure configured user is properly set by Salt (bsc#1210994)
- Do not fail on bad message pack message (bsc#1213441, CVE-2023-20897)
- Fix broken tests to make them running in the testsuite
- Prevent possible exceptions on salt.utils.user.get_group_dict (bsc#1212794)
- Create minion_id with reproducible mtime
- Fix detection of Salt codename by "salt_version" execution module
- Fix regression: multiple values for keyword argument 'saltenv' (bsc#1212844)
- Fix the regression of user.present state when group is unset (bsc#1212855)
- Fix zypper repositories always being reconfigured
- Fix utf8 handling in 'pass' renderer and make it more robust
- Added:
  * fix-tests-to-make-them-running-with-salt-testsuite.patch
  * zypper-pkgrepo-alreadyconfigured-585.patch
  * fix-regression-multiple-values-for-keyword-argument-.patch
  * mark-salt-3006-as-released-586.patch
  * fix-utf8-handling-in-pass-renderer-and-make-it-more-.patch
  * do-not-fail-on-bad-message-pack-message-bsc-1213441-.patch
  * prevent-possible-exceptions-on-salt.utils.user.get_g.patch
  * make-sure-configured-user-is-properly-set-by-salt-bs.patch
  * fix-the-regression-of-user.present-state-when-group-.patch</changelog>
  <changelog author="vzhestkov@suse.com" date="1693569600">- Revert usage of long running REQ channel to prevent possible
  missing responses on requests and dublicated responses
  (bsc#1213960, bsc#1213630, bsc#1213257)
- Fix gitfs cachedir basename to avoid hash collisions
  (bsc#1193948, bsc#1214797, CVE-2023-20898)
- Added:
  * fixed-gitfs-cachedir_basename-to-avoid-hash-collisio.patch
  * revert-usage-of-long-running-req-channel-bsc-1213960.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1695211200">- Fix inconsistency in reported version by egg-info metadata (bsc#1215489)
- Added:
  * write-salt-version-before-building-when-using-with-s.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1696939200">- Fix optimization_order opt to prevent testsuite fails
- Improve salt.utils.json.find_json to avoid fails (bsc#1213293)
- Use salt-call from salt bundle with transactional_update
- Only call native_str on curl_debug message in tornado when needed
- Implement the calling for batch async from the salt CLI
- Fix calculation of SLS context vars when trailing dots
  on targetted sls/state (bsc#1213518)
- Rename salt-tests to python3-salt-testsuite
- Added:
  * improve-salt.utils.json.find_json-bsc-1213293.patch
  * only-call-native_str-on-curl_debug-message-in-tornad.patch
  * fix-optimization_order-opt-to-prevent-test-fails.patch
  * use-salt-call-from-salt-bundle-with-transactional_up.patch
  * implement-the-calling-for-batch-async-from-the-salt-.patch
  * fix-calculation-of-sls-context-vars-when-trailing-do.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1698753600">- Randomize pre_flight_script path (CVE-2023-34049 bsc#1215157)
- Allow all primitive grain types for autosign_grains (bsc#1214477)
- Added:
  * allow-all-primitive-grain-types-for-autosign_grains-.patch
  * fix-cve-2023-34049-bsc-1215157.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1706097600">- Ensure that pillar refresh loads beacons from pillar without restart
- Fix the aptpkg.py unit test failure
- Prefer unittest.mock to python-mock in test suite
- Enable "KeepAlive" probes for Salt SSH executions (bsc#1211649)
- Revert changes to set Salt configured user early in the stack (bsc#1216284)
- Align behavior of some modules when using salt-call via symlink (bsc#1215963)
- Fix gitfs "__env__" and improve cache cleaning (bsc#1193948)
- Remove python-boto dependency for the python3-salt-testsuite package for Tumbleweed
- Added:
  * fix-the-aptpkg.py-unit-test-failure.patch
  * enable-keepalive-probes-for-salt-ssh-executions-bsc-.patch
  * prefer-unittest.mock-for-python-versions-that-are-su.patch
  * update-__pillar__-during-pillar_refresh.patch
  * revert-make-sure-configured-user-is-properly-set-by-.patch
  * fix-gitfs-__env__-and-improve-cache-cleaning-bsc-119.patch
  * dereference-symlinks-to-set-proper-__cli-opt-bsc-121.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1706788800">- Prevent directory traversal when creating syndic cache directory
  on the master (CVE-2024-22231, bsc#1219430)
- Prevent directory traversal attacks in the master's serve_file
  method (CVE-2024-22232, bsc#1219431)
- Added:
  * fix-cve-2024-22231-and-cve-2024-22232-bsc-1219430-bs.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1713355200">- Convert oscap output to UTF-8
- Make Salt compatible with Python 3.11
- Ignore non-ascii chars in oscap output (bsc#1219001)
- Fix detected issues in Salt tests when running on VMs
- Make importing seco.range thread safe (bsc#1211649)
- Fix problematic tests and allow smooth tests executions
  on containers
- Discover Ansible playbook files as "*.yml" or "*.yaml"
  files (bsc#1211888)
- Provide user(salt)/group(salt) capabilities for RPM 4.19
- Extend dependencies for python3-salt-testsuite
  and python3-salt packages
- Improve Salt and testsuite packages multibuild
- Enable multibuilld and create test flavor
- Prevent exceptions with fileserver.update when called
  via state (bsc#1218482)
- Improve pip target override condition with VENV_PIP_TARGET
  environment variable (bsc#1216850)
- Fixed KeyError in logs when running a state that fails
- Added:
  * fixed-keyerror-in-logs-when-running-a-state-that-fai.patch
  * decode-oscap-byte-stream-to-string-bsc-1219001.patch
  * fix-salt-warnings-and-testuite-for-python-3.11-635.patch
  * make-importing-seco.range-thread-safe-bsc-1211649.patch
  * improve-pip-target-override-condition-with-venv_pip_.patch
  * allow-kwargs-for-fileserver-roots-update-bsc-1218482.patch
  * fix-problematic-tests-and-allow-smooth-tests-executi.patch
  * discover-both-.yml-and-.yaml-playbooks-bsc-1211888.patch
  * fix-tests-failures-and-errors-when-detected-on-vm-ex.patch
  * switch-oscap-encoding-to-utf-8-639.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1715083200">- Make "man" a recommended package instead of required</changelog>
</package>
<package pkgid="f1d8043f6cfad0913ad3d92ab8157e1ef92c0a2a98f60d759f60ce0940c43610" name="python3-setuptools" arch="noarch">
  <version epoch="0" ver="44.1.1" rel="150400.9.3.3"/>
  <changelog author="arun@gmx.de" date="1556971200">- update to version 41.0.1:
  * #1671: Fixed issue with the PEP 517 backend that prevented
    building a wheel when the dist/ directory contained existing .whl
    files.
  * #1709: In test.paths_on_python_path, avoid adding unnecessary
    duplicates to the PYTHONPATH.
  * #1741: In package_index, now honor "current directory" during a
    checkout of git and hg repositories under Windows</changelog>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="24e4dc957c22433f04b0b3edcd4a97a34c55059d90a002b30959c85cb85dfe90" name="python3-setuptools" arch="src">
  <version epoch="0" ver="44.1.1" rel="150400.9.3.3"/>
  <changelog author="arun@gmx.de" date="1556971200">- update to version 41.0.1:
  * #1671: Fixed issue with the PEP 517 backend that prevented
    building a wheel when the dist/ directory contained existing .whl
    files.
  * #1709: In test.paths_on_python_path, avoid adding unnecessary
    duplicates to the PYTHONPATH.
  * #1741: In package_index, now honor "current directory" during a
    checkout of git and hg repositories under Windows</changelog>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="199b78380dfec5c94897397baa63132afc7dc86c7f8ab49704dc89cb7df000d4" name="python3-setuptools" arch="noarch">
  <version epoch="0" ver="44.1.1" rel="150400.9.6.1"/>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673265600">- Add CVE-2022-40897-ReDos.patch to fix Regular Expression Denial of Service
  (ReDoS) in package_index.py.
  bsc#1206667</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="da174c68801c720a8856e4c913a55ca2316746d1ffe3b63c7ce19d2ff8733e71" name="python3-setuptools" arch="src">
  <version epoch="0" ver="44.1.1" rel="150400.9.6.1"/>
  <changelog author="tchvatal@suse.com" date="1566388800">- Update to 41.2.0:
  * #479: Remove some usage of the deprecated imp module.
  * #1565: Changed html_sidebars from string to list of string as per https://www.sphinx-doc.org/en/master/changes.html#id58
  * #1697: Moved most of the constants from setup.py to setup.cfg
  * #1756: Forse metadata-version &gt;= 1.2. when project urls are present.</changelog>
  <changelog author="tchvatal@suse.com" date="1566388801">- Switch to multibuild to enable testsuite</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Define LANG in %check to fix openSUSE/SLE 15 testsuite</changelog>
  <changelog author="mcalabkova@suse.com" date="1570795200">- Update to 41.4.0
  * In declarative config, now traps errors when invalid python_requires
    values are supplied.
  * When storing extras, rely on OrderedSet to retain order of extras
    as indicated by the packager, which will also be deterministic
    on Python 2.7 (with PYTHONHASHSEED unset) and Python 3.6+.
  * Fixed failing integration test triggered by 'long_description_content_type' in packaging.</changelog>
  <changelog author="tchvatal@suse.com" date="1571227200">- Add patch to sort outputs for better reproducability:
  * sort-for-reproducibility.patch
- Add missing dep on ordered-set as it is now in the vendored
  dir too</changelog>
  <changelog author="tchvatal@suse.com" date="1571227201">- Try to use system packages rather than the vendored variants</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1571313600">- Remove runtime dependency for the full python3 package, as the
  actually required SSL module is in python3-base. For python(2),
  SSL is in the "full" python package. Avoids build loops and
  shortens the dependency chain for e.g. rust.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1573473600">- update to 41.6.0
- add importlib.patch
  * Replace usage of deprecated imp module with local
    re-implementation in setuptools._imp
  * Fix pkg_resources.Requirement hash/equality implementation
  * Fix tests when running under python3.10.
  * drop 'deprecated' documentation (test command, ez_setup, EasyInstall)</changelog>
  <changelog author="mimi.vx@gmail.com" date="1580817600">- update to 44.0.0
- last version with python2 support
- add testdata.tar.gz -&gt; missing data for testsuite
  * Drop support for Python 3.4.
  * include pyproject.toml in source distribution by default.
    Projects relying on the previous behavior where pyproject.toml
  * Setuptools once again declares 'setuptools' in the build-system.requires
    and adds PEP 517 build support by declaring itself as the build-backend
  * Fix support for easy_install's find-links option in setup.cfg
  * Build dependencies (setup_requires and tests_require) now install transitive
    dependencies indicated by extras.
  * Mark the easy_install script and setuptools command as deprecated, and use
    pip when available to fetch/build wheels for missing setup_requires/tests_require
    requirements, with the following differences in behavior:
    + support for python_requires
    + better support for wheels (proper handling of priority with respect to PEP 425 tags)
    + PEP 517/518 support
    + eggs are not supported
    + no support for the allow_hosts easy_install option (index_url/find_links are still honored)
    + pip environment variables are honored (and take precedence over easy_install options)
  * Removed the "upload" and "register" commands in favor of twine.
  * Add support for the license_files option in setup.cfg to automatically
    include multiple license files in a source distribution.
  * Update handling of wheels compatibility tags: * add support for manylinux2010
  * fix use of removed 'm' ABI flag in Python 3.8 on Windows
  * Fix empty namespace package installation from wheel.
  * Setuptools now exposes a new entry point hook "setuptools.finalize_distribution_options",
    enabling plugins like setuptools_scm to configure options on the distribution
    at finalization time.</changelog>
  <changelog author="tchvatal@suse.com" date="1584100800">- Fix build without python2</changelog>
  <changelog author="mcepl@suse.com" date="1586174400">- Fix License to the correct MIT</changelog>
  <changelog author="code@bnavigator.de" date="1592913600">- use local source dir for pytest imports
  gh#openSUSE/python-rpm-macros#48</changelog>
  <changelog author="mimi.vx@gmail.com" date="1597320000">- update to 44.1.0
  * Set sys.argv[0] in setup script run by build_meta.__legacy__
  * Fix for Python 4: replace unsafe six.PY3 with six.PY2
  * Fixed a bug in the “setuptools.finalize_distribution_options” hook
    that lead to ignoring the order attribute of entry points managed
    by this hook.
  * Avoid loading working set during Distribution.finalize_options prior
    to invoking _install_setup_requires, broken since v42.0.0.</changelog>
  <changelog author="mcepl@suse.com" date="1605009600">- Add wheel subpackage with the generated wheel for this package
  (bsc#1176262, CVE-2019-20916).</changelog>
  <changelog author="mcepl@suse.com" date="1605182400">- Make wheel a separate build run to avoid the setuptools/wheel build
  cycle.</changelog>
  <changelog author="mcepl@suse.com" date="1605528000">- Avoid duplicite wheel name in the generated package, and we actually
  don't need a subpackage at all.</changelog>
  <changelog author="mcepl@suse.com" date="1607428800">- Add remove_mock.patch to remove dependency on the external mock
  package.</changelog>
  <changelog author="mcepl@suse.com" date="1611316800">- We cannot remove vendored packages when generating setuptools
  wheel (bsc#1177127).</changelog>
  <changelog author="daniel.garcia@suse.com" date="1673265600">- Add CVE-2022-40897-ReDos.patch to fix Regular Expression Denial of Service
  (ReDoS) in package_index.py.
  bsc#1206667</changelog>
  <changelog author="dmueller@suse.com" date="1683201600">- Rename package sources from python- to python3 for PSP (jsc#PED-68, jsc#PED-2217)</changelog>
</package>
<package pkgid="64bffebb6b6de6547cba2e4e6e6888d55bba5d8f7641cfd1754a9c6ca2b6d17f" name="python3-simplejson" arch="aarch64">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="d77cefa037cc0c36880bee663c95b8635ebd878e8e61d417f4bdb6e8255abd0a" name="python3-simplejson" arch="s390x">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="57a20c3ba52c22a2d6eba23c8ab56aa421ff80c9e2adba7ebe35c087dad8b241" name="python3-simplejson" arch="x86_64">
  <version epoch="0" ver="3.17.2" rel="150300.3.2.3"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="97c2fb28f3a62d70d5d5e4e1019a566a8ddf39122a38328abf07b6eaa3f81d80" name="python3-simplejson" arch="aarch64">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="e1a19715b0ce4b6b32bdffac3462c72752573fb02653e3595fa1849fbc03426d" name="python3-simplejson" arch="s390x">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="5df5e3e4068c3d314794ae168bba86395b982a06c7c6ba6049de9b5beb0f4ad6" name="python3-simplejson" arch="x86_64">
  <version epoch="0" ver="3.17.2" rel="150300.3.4.1"/>
  <changelog author="benoit.monin@gmx.fr" date="1431432000">- update to version 3.6.5:
  * Importing bug fix for reference leak when an error occurs
    during dict encoding
    https://github.com/simplejson/simplejson/issues/109
- additional changes from version 3.6.4:
  * Important bug fix for dump when only sort_keys is set
    https://github.com/simplejson/simplejson/issues/106
- additional changes from version 3.6.3:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/103
- additional changes from version 3.6.2:
  * Documentation updates
    http://bugs.python.org/issue21514
- additional changes from version 3.6.1:
  * Documentation updates
    https://github.com/simplejson/simplejson/issues/102
- additional changes from version 3.6.0:
  * Automatically strip any UTF-8 BOM from input to more closely
    follow the latest specs
    https://github.com/simplejson/simplejson/pull/101
- additional changes from version 3.5.3:
  * Fix lower bound checking in scan_once / raw_decode API
    https://github.com/simplejson/simplejson/issues/98</changelog>
  <changelog author="dmueller@suse.com" date="1479470400">- update to 3.8.2:
  * Fix implicit cast compiler warning in _speedups.c
  * simplejson is now available as wheels for OS X and Windows thanks to Travis-CI
  and AppVeyor respectively! Many thanks to @aebrahim for getting this party
  started.
  * Fix issue with iterable_as_array and indent option
  * Fix typo in keyword argument name introduced in 3.8.0
  * New iterable_as_array encoder option to perform lazy serialization of
  any iterable objects, without having to convert to tuple or list.
  * Fix typo introduced in 3.7.0 (behavior should be indistinguishable)
  https://github.com/simplejson/simplejson/commit/e18cc09b688ea1f3305c27616fd3cadd2adc6d31#commitcomment-11443842
  * Do not cache Decimal class in encoder, only reference the decimal module.
  This may make reload work in more common scenarios.
  * Fix compilation with MSVC
  https://github.com/simplejson/simplejson/pull/119
  * simplejson no longer trusts custom str/repr methods for int, long, float
  subclasses. These instances are now formatted as if they were exact
  instances of those types.
  https://github.com/simplejson/simplejson/issues/118</changelog>
  <changelog author="rjschwei@suse.com" date="1489665600">- Switch to single-spec build
- Update to 3.10.0
  * Add RawJSON class to allow a faster path for already encoded JSON.
- From 3.9.0
  * Workaround for bad behavior in string subclasses
  * Fix warnings flagged by -3
  * Update readthedocs documentation links
  * Add build status badge to README</changelog>
  <changelog author="jmatejek@suse.com" date="1490097600">- fix pypi url</changelog>
  <changelog author="tbechtold@suse.com" date="1502193600">- update to 3.11.1:
  * Fix issue with item_sort_key when speedups are available, and add
    auto-discovery to test suites to prevent similar regressions
  * docstring fix in JSONEncoder
  * Call PyObject_IsTrue() only once for the strict argument of scann  er
  * Fix a crash with unencodable encoding in the encoder
  * Remove unused imports
  * Remove remnants of Python 2.4 support
  * Fix argument checking errors in _speedups.c
  * Remove the `__init__` methods in extension classes
  * Fix typo in the doc for loads
  * Add Python 3.6 to testing matrix and PyPI metadata</changelog>
  <changelog author="arun@gmx.de" date="1509969600">- update to version 3.12.0:
  * Fix threaded import race condition
    https://github.com/simplejson/simplejson/issues/184
  * Move RawJSON implementation to simplejson.raw_json module
  * Move JSONDecodeError implementation to simplejson.errors module</changelog>
  <changelog author="arun@gmx.de" date="1511697600">- update to version 3.13.2:
  * Fix additional Python 2.x compilation issue on Windows
- changes from version 3.13.1 :
  * Improve CI to catch speedups build regressions
  * Fix speedups build regression in Python 2.x
    https://github.com/simplejson/simplejson/issues/193
- changes from version 3.13.0:
  * Workarounds for NamedTemporaryFile issues with Windows for tool
    tests
  * Make TypeError messages contain type name instead of a repr.
    https://github.com/simplejson/simplejson/pull/191
  * Ensure that encoding of text subtypes is consistent with or
    without speedups
    https://github.com/simplejson/simplejson/issues/185
- changes from version 3.12.1:
  * Misc updates to build infrastructure
  * Fix an assertion failure when make_encoder receives a bad encoder
    argument https://github.com/simplejson/simplejson/pull/188
  * Fix potential crash during GC
    https://github.com/simplejson/simplejson/pull/187
  * Fix a reference leak when sorting keys
    https://github.com/simplejson/simplejson/pull/186</changelog>
  <changelog author="jengelh@inai.de" date="1511784000">- Remove bias from description.</changelog>
  <changelog author="arun@gmx.de" date="1525608000">- specfile:
  * update copyright year
- update to version 3.14.0:
  * Defer is_raw_json test (performance improvement)
    https://github.com/simplejson/simplejson/pull/212
  * Avoid escaping U+2028 and U+2029 without ensure_ascii
    https://github.com/simplejson/simplejson/pull/211
  * Fix an incorrect type test in Python 2, avoiding an unnecessary
    unicode copy.  https://github.com/simplejson/simplejson/pull/210</changelog>
  <changelog author="arun@gmx.de" date="1526904000">- update to version 3.15.0:
  * Clean up the C code
  * Bypass the decode() method in bytes subclasses
  * Support builds without cStringIO
  * Allow to disable serializing bytes by default in Python 3
  * Simplify the compatibility code
  * Fix tests in Python 2.5</changelog>
  <changelog author="arun@gmx.de" date="1530532800">- specfile:
  * be more specific in %files:
    %{python_sitearch}/* -&gt; %{python_sitearch}/simplejson*
- update to version 3.16.0:
  * Restore old behavior with regard to the type of decoded empty
    strings with speedups enabled on Python 2.x
    https://github.com/simplejson/simplejson/pull/225
  * Add python_requires to setup.py to help pip
    https://github.com/simplejson/simplejson/pull/224
  * Fix CSS in docs when built locally
    https://github.com/simplejson/simplejson/pull/222</changelog>
  <changelog author="tchvatal@suse.com" date="1530532801">- Do not package tests</changelog>
  <changelog author="arun@gmx.de" date="1536408000">- update to version 3.16.1:
  * Added examples for JSON lines use cases
  * Add wheels for more Python versions and platforms</changelog>
  <changelog author="arun@gmx.de" date="1574596800">- specfile:
  * update copyright year
- update to version 3.17.0:
  * Updated documentation to be Python 3 first, and
    have removed documentation notes about version changes
    that occurred more than five years ago.
    https://github.com/simplejson/simplejson/pull/257
    https://github.com/simplejson/simplejson/pull/254
  * Update build matrix for Python 3.8
    https://github.com/simplejson/simplejson/pull/255
    https://github.com/simplejson/simplejson/pull/256</changelog>
  <changelog author="mimi.vx@gmail.com" date="1596024000">- update to 3.17.2
- use pytest as testrunner</changelog>
</package>
<package pkgid="e0734a26091d22452b4c1da19cb371acc3b6672cf508b8bfca80d98d7431cc75" name="python3-tornado" arch="aarch64">
  <version epoch="0" ver="4.5.3" rel="150000.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1449662400">- Switch to pypi tarball.  It uses "4.3" instead of "4.3.0"</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1450872000">- add singledispatch and backports_abc dependencies
  as stated in docs/releases/v4.3.0.rst
  * Tornado has several new dependencies: (...)
  ``singledispatch`` on all Python versions prior to 3.4 (This was an
  optional dependency in prior versions of Tornado, and is now
  mandatory), and ``backports_abc&gt;=0.4`` on all versions prior to
  3.5
  Since this python module works with python version &gt;= 2.7.9 (otherwise it would be called python3-tornado, afaiu)</changelog>
  <changelog author="dmueller@suse.com" date="1479124800">- update to 4.4.2:
  * Tornado now requires Python 2.7 or 3.3+; versions 2.6 and 3.2 are no
  longer supported. Pypy3 is still supported even though its latest
  release is mainly based on Python 3.2.
  * The `monotonic &lt;https://pypi.python.org/pypi/monotonic&gt;`_ package is
  now supported as an alternative to `Monotime
  &lt;https://pypi.python.org/pypi/Monotime&gt;`_ for monotonic clock support
  on Python 2.</changelog>
  <changelog author="jmatejek@suse.com" date="1491480000">- tornado-configtest.patch: fix test failure when __file__ is not absolute
- tornado-async-deprecations.patch: filter test failures due to async
  deprecation warnings, to fix build on python 3.6
- update for multipython build
- enable test suite</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491566400">- update to 4.4.3
  * The `tornado.auth` module has been updated for compatibility with `a
    change to Facebook's access_token endpoint.</changelog>
  <changelog author="dmueller@suse.com" date="1496232000">- require python-backports.ssl_hostname only on python 2.x</changelog>
  <changelog author="jmatejek@suse.com" date="1497355200">- replace the complicated condition for requiring backports.ssl_match_hostname
  with unconditional requirement for Python &gt;= 2.7.9</changelog>
  <changelog author="jmatejek@suse.com" date="1498219200">- in %pre, remove egg-info file if installed, because it's being
  replaced by a directory (bsc#1035604)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502280000">- Fix tests</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1508241600">- added certifi to BuildRequires, to fix 'ImportError: No module named certifi'</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1508241601">- added %{python_module backports.ssl_match_hostname}
  on SLES12 GA aka SP0, to avoid build errors
- explicit BuildRequires for certifi on SLES12 GA aka SP0 only</changelog>
  <changelog author="arun@gmx.de" date="1511352000">- specfile:
  * removed tornado-configtest.patch: fixed upstream
  * update tornado-async-deprecation.patch (partly integrated)
- update to version 4.5.2:
  * Tornado now sets the FD_CLOEXEC flag on all file descriptors it
    creates. This prevents hanging client connections and resource
    leaks when the tornado.autoreload module (or
    Application(debug=True)) is used.
- changes from version 4.5.1:
  * tornado.log
    + Improved detection of libraries for colorized logging.
  * tornado.httputil
    + url_concat once again treats None as equivalent to an empty
    sequence.
- changes from version 4.5.0:
  * long changelog, see http://www.tornadoweb.org/en/stable/releases/v4.5.0.html
    for details</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Distribute license file</changelog>
  <changelog author="jmatejek@suse.com" date="1515067200">- only buildrequire futures / singledispatch if python2 is present
  (fixes build in environments that don't have python2 at all)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1518523200">- Update to version 4.5.3
  + tornado.curl_httpclient
  * Improved debug logging on Python 3.
  + tornado.httpserver
  * ``Content-Length`` and ``Transfer-Encoding`` headers are no longer
    sent with 1xx or 204 responses (this was already true of 304
    responses).
  * Reading chunked requests no longer leaves the connection in a broken
    state.
  + tornado.iostream
  * Writing a `memoryview` can no longer result in "BufferError:
    Existing exports of data: object cannot be re-sized".
  + tornado.options
  * Duplicate option names are now detected properly whether they use
    hyphens or underscores.
  + tornado.testing
  * `.AsyncHTTPTestCase.fetch` now uses ``127.0.0.1`` instead of
    ``localhost``, improving compatibility with systems that have
    partially-working ipv6 stacks.
  + tornado.web
  * It is no longer allowed to send a body with 1xx or 204 responses.
  + tornado.websocket
  * Requests with invalid websocket headers now get a response with
    status code 400 instead of a closed connection.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="ro@suse.de" date="1521201600">- add tornado-testsuite_timeout.patch (bsc#1085661)
  extend timeouts in testsuite to allow successful build on ppc64le</changelog>
  <changelog author="vcizek@suse.com" date="1568721600">- Add patch to skip tests failing with OpenSSL 1.1.1 (bsc#1149792)
  * it happens only when using TLS 1.3, so if user wants to use
    tornado, they can hand disable the TLS 1.3 and continue
  * add tornado-skip-failing-tests.patch</changelog>
  <changelog author="qzhao@suse.com" date="1685361600">- Add tornado-Fix-an-open-redirect-in-StaticFileHandler.patch:
  Backport from upstream, Fix an open redirect in StaticFileHandler.
  Under some configurations the default_filename redirect could be
  exploited to redirect to an attacker-controlled site. This change
  refuses to redirect to URLs that could be misinterpreted
  (CVE-2023-28370 bsc#1211741).</changelog>
</package>
<package pkgid="6819bd5a454086463d690241fb81cf68d75230c980e7c2907a069dda98271ba2" name="python3-tornado" arch="s390x">
  <version epoch="0" ver="4.5.3" rel="150000.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1449662400">- Switch to pypi tarball.  It uses "4.3" instead of "4.3.0"</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1450872000">- add singledispatch and backports_abc dependencies
  as stated in docs/releases/v4.3.0.rst
  * Tornado has several new dependencies: (...)
  ``singledispatch`` on all Python versions prior to 3.4 (This was an
  optional dependency in prior versions of Tornado, and is now
  mandatory), and ``backports_abc&gt;=0.4`` on all versions prior to
  3.5
  Since this python module works with python version &gt;= 2.7.9 (otherwise it would be called python3-tornado, afaiu)</changelog>
  <changelog author="dmueller@suse.com" date="1479124800">- update to 4.4.2:
  * Tornado now requires Python 2.7 or 3.3+; versions 2.6 and 3.2 are no
  longer supported. Pypy3 is still supported even though its latest
  release is mainly based on Python 3.2.
  * The `monotonic &lt;https://pypi.python.org/pypi/monotonic&gt;`_ package is
  now supported as an alternative to `Monotime
  &lt;https://pypi.python.org/pypi/Monotime&gt;`_ for monotonic clock support
  on Python 2.</changelog>
  <changelog author="jmatejek@suse.com" date="1491480000">- tornado-configtest.patch: fix test failure when __file__ is not absolute
- tornado-async-deprecations.patch: filter test failures due to async
  deprecation warnings, to fix build on python 3.6
- update for multipython build
- enable test suite</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491566400">- update to 4.4.3
  * The `tornado.auth` module has been updated for compatibility with `a
    change to Facebook's access_token endpoint.</changelog>
  <changelog author="dmueller@suse.com" date="1496232000">- require python-backports.ssl_hostname only on python 2.x</changelog>
  <changelog author="jmatejek@suse.com" date="1497355200">- replace the complicated condition for requiring backports.ssl_match_hostname
  with unconditional requirement for Python &gt;= 2.7.9</changelog>
  <changelog author="jmatejek@suse.com" date="1498219200">- in %pre, remove egg-info file if installed, because it's being
  replaced by a directory (bsc#1035604)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502280000">- Fix tests</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1508241600">- added certifi to BuildRequires, to fix 'ImportError: No module named certifi'</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1508241601">- added %{python_module backports.ssl_match_hostname}
  on SLES12 GA aka SP0, to avoid build errors
- explicit BuildRequires for certifi on SLES12 GA aka SP0 only</changelog>
  <changelog author="arun@gmx.de" date="1511352000">- specfile:
  * removed tornado-configtest.patch: fixed upstream
  * update tornado-async-deprecation.patch (partly integrated)
- update to version 4.5.2:
  * Tornado now sets the FD_CLOEXEC flag on all file descriptors it
    creates. This prevents hanging client connections and resource
    leaks when the tornado.autoreload module (or
    Application(debug=True)) is used.
- changes from version 4.5.1:
  * tornado.log
    + Improved detection of libraries for colorized logging.
  * tornado.httputil
    + url_concat once again treats None as equivalent to an empty
    sequence.
- changes from version 4.5.0:
  * long changelog, see http://www.tornadoweb.org/en/stable/releases/v4.5.0.html
    for details</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Distribute license file</changelog>
  <changelog author="jmatejek@suse.com" date="1515067200">- only buildrequire futures / singledispatch if python2 is present
  (fixes build in environments that don't have python2 at all)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1518523200">- Update to version 4.5.3
  + tornado.curl_httpclient
  * Improved debug logging on Python 3.
  + tornado.httpserver
  * ``Content-Length`` and ``Transfer-Encoding`` headers are no longer
    sent with 1xx or 204 responses (this was already true of 304
    responses).
  * Reading chunked requests no longer leaves the connection in a broken
    state.
  + tornado.iostream
  * Writing a `memoryview` can no longer result in "BufferError:
    Existing exports of data: object cannot be re-sized".
  + tornado.options
  * Duplicate option names are now detected properly whether they use
    hyphens or underscores.
  + tornado.testing
  * `.AsyncHTTPTestCase.fetch` now uses ``127.0.0.1`` instead of
    ``localhost``, improving compatibility with systems that have
    partially-working ipv6 stacks.
  + tornado.web
  * It is no longer allowed to send a body with 1xx or 204 responses.
  + tornado.websocket
  * Requests with invalid websocket headers now get a response with
    status code 400 instead of a closed connection.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="ro@suse.de" date="1521201600">- add tornado-testsuite_timeout.patch (bsc#1085661)
  extend timeouts in testsuite to allow successful build on ppc64le</changelog>
  <changelog author="vcizek@suse.com" date="1568721600">- Add patch to skip tests failing with OpenSSL 1.1.1 (bsc#1149792)
  * it happens only when using TLS 1.3, so if user wants to use
    tornado, they can hand disable the TLS 1.3 and continue
  * add tornado-skip-failing-tests.patch</changelog>
  <changelog author="qzhao@suse.com" date="1685361600">- Add tornado-Fix-an-open-redirect-in-StaticFileHandler.patch:
  Backport from upstream, Fix an open redirect in StaticFileHandler.
  Under some configurations the default_filename redirect could be
  exploited to redirect to an attacker-controlled site. This change
  refuses to redirect to URLs that could be misinterpreted
  (CVE-2023-28370 bsc#1211741).</changelog>
</package>
<package pkgid="42719765f5f55c522892aaf096b77e24b477d956a350bc6303b78dde3f3e8f96" name="python3-tornado" arch="x86_64">
  <version epoch="0" ver="4.5.3" rel="150000.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1449662400">- Switch to pypi tarball.  It uses "4.3" instead of "4.3.0"</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1450872000">- add singledispatch and backports_abc dependencies
  as stated in docs/releases/v4.3.0.rst
  * Tornado has several new dependencies: (...)
  ``singledispatch`` on all Python versions prior to 3.4 (This was an
  optional dependency in prior versions of Tornado, and is now
  mandatory), and ``backports_abc&gt;=0.4`` on all versions prior to
  3.5
  Since this python module works with python version &gt;= 2.7.9 (otherwise it would be called python3-tornado, afaiu)</changelog>
  <changelog author="dmueller@suse.com" date="1479124800">- update to 4.4.2:
  * Tornado now requires Python 2.7 or 3.3+; versions 2.6 and 3.2 are no
  longer supported. Pypy3 is still supported even though its latest
  release is mainly based on Python 3.2.
  * The `monotonic &lt;https://pypi.python.org/pypi/monotonic&gt;`_ package is
  now supported as an alternative to `Monotime
  &lt;https://pypi.python.org/pypi/Monotime&gt;`_ for monotonic clock support
  on Python 2.</changelog>
  <changelog author="jmatejek@suse.com" date="1491480000">- tornado-configtest.patch: fix test failure when __file__ is not absolute
- tornado-async-deprecations.patch: filter test failures due to async
  deprecation warnings, to fix build on python 3.6
- update for multipython build
- enable test suite</changelog>
  <changelog author="toddrme2178@gmail.com" date="1491566400">- update to 4.4.3
  * The `tornado.auth` module has been updated for compatibility with `a
    change to Facebook's access_token endpoint.</changelog>
  <changelog author="dmueller@suse.com" date="1496232000">- require python-backports.ssl_hostname only on python 2.x</changelog>
  <changelog author="jmatejek@suse.com" date="1497355200">- replace the complicated condition for requiring backports.ssl_match_hostname
  with unconditional requirement for Python &gt;= 2.7.9</changelog>
  <changelog author="jmatejek@suse.com" date="1498219200">- in %pre, remove egg-info file if installed, because it's being
  replaced by a directory (bsc#1035604)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502280000">- Fix tests</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1508241600">- added certifi to BuildRequires, to fix 'ImportError: No module named certifi'</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1508241601">- added %{python_module backports.ssl_match_hostname}
  on SLES12 GA aka SP0, to avoid build errors
- explicit BuildRequires for certifi on SLES12 GA aka SP0 only</changelog>
  <changelog author="arun@gmx.de" date="1511352000">- specfile:
  * removed tornado-configtest.patch: fixed upstream
  * update tornado-async-deprecation.patch (partly integrated)
- update to version 4.5.2:
  * Tornado now sets the FD_CLOEXEC flag on all file descriptors it
    creates. This prevents hanging client connections and resource
    leaks when the tornado.autoreload module (or
    Application(debug=True)) is used.
- changes from version 4.5.1:
  * tornado.log
    + Improved detection of libraries for colorized logging.
  * tornado.httputil
    + url_concat once again treats None as equivalent to an empty
    sequence.
- changes from version 4.5.0:
  * long changelog, see http://www.tornadoweb.org/en/stable/releases/v4.5.0.html
    for details</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Distribute license file</changelog>
  <changelog author="jmatejek@suse.com" date="1515067200">- only buildrequire futures / singledispatch if python2 is present
  (fixes build in environments that don't have python2 at all)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1518523200">- Update to version 4.5.3
  + tornado.curl_httpclient
  * Improved debug logging on Python 3.
  + tornado.httpserver
  * ``Content-Length`` and ``Transfer-Encoding`` headers are no longer
    sent with 1xx or 204 responses (this was already true of 304
    responses).
  * Reading chunked requests no longer leaves the connection in a broken
    state.
  + tornado.iostream
  * Writing a `memoryview` can no longer result in "BufferError:
    Existing exports of data: object cannot be re-sized".
  + tornado.options
  * Duplicate option names are now detected properly whether they use
    hyphens or underscores.
  + tornado.testing
  * `.AsyncHTTPTestCase.fetch` now uses ``127.0.0.1`` instead of
    ``localhost``, improving compatibility with systems that have
    partially-working ipv6 stacks.
  + tornado.web
  * It is no longer allowed to send a body with 1xx or 204 responses.
  + tornado.websocket
  * Requests with invalid websocket headers now get a response with
    status code 400 instead of a closed connection.</changelog>
  <changelog author="aplanas@suse.com" date="1519732800">- Recommends only for SUSE</changelog>
  <changelog author="aplanas@suse.com" date="1520424000">- Allows Recommends and Suggest in Fedora</changelog>
  <changelog author="ro@suse.de" date="1521201600">- add tornado-testsuite_timeout.patch (bsc#1085661)
  extend timeouts in testsuite to allow successful build on ppc64le</changelog>
  <changelog author="vcizek@suse.com" date="1568721600">- Add patch to skip tests failing with OpenSSL 1.1.1 (bsc#1149792)
  * it happens only when using TLS 1.3, so if user wants to use
    tornado, they can hand disable the TLS 1.3 and continue
  * add tornado-skip-failing-tests.patch</changelog>
  <changelog author="qzhao@suse.com" date="1685361600">- Add tornado-Fix-an-open-redirect-in-StaticFileHandler.patch:
  Backport from upstream, Fix an open redirect in StaticFileHandler.
  Under some configurations the default_filename redirect could be
  exploited to redirect to an attacker-controlled site. This change
  refuses to redirect to URLs that could be misinterpreted
  (CVE-2023-28370 bsc#1211741).</changelog>
</package>
<package pkgid="098ac33ff219f06a9fb739bdca84cb488a058cd3aef04697156fcd36856d8560" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.25.10" rel="150300.4.6.1"/>
  <changelog author="tchvatal@suse.com" date="1559131200">- Add more test to skip as with new openssl some behaviour changed
  and we can't rely on them anymore</changelog>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
</package>
<package pkgid="a9f1c027a66e6d078c11044aa427269aad7a612e5848d79d3161778c82a68ba5" name="python3-urllib3" arch="noarch">
  <version epoch="0" ver="1.25.10" rel="150300.4.9.1"/>
  <changelog author="tchvatal@suse.com" date="1559908800">- Skip test_source_address_error as we raise different error with
  fixes that we provide in new python2/3</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1560945600">- Fix Upgrade from Leap 42.1/42.2 by adding Obsoletes/Provides:
  python-urllib3, fixes boo#1138746</changelog>
  <changelog author="dimstar@opensuse.org" date="1561032000">- Provides/Obsoletes does not fix the issue: we have a
  directory-to-symlink switch, which cannot be handled by RPM
  internally. Assist using pre script (boo#1138715).</changelog>
  <changelog author="dimstar@opensuse.org" date="1561118400">- Fixup pre script: the migration issue happens when changing from
  python-urllib3 to python2-urllib3: the number of installed
  instances of python2-urlliib3 is at this moment 1, unlike in
  regular updates. This is due to a name change, which consists not
  of a pure package update.</changelog>
  <changelog author="tchvatal@suse.com" date="1563796800">- Use old pytest 3.x as newer do not work with this release
  * this will be fixed with next release, just spread among
    numerous fixes in the git for quick backporting</changelog>
  <changelog author="jayvdb@gmail.com" date="1568462400">- Use have/skip_python2/3 macros to allow building only one flavour</changelog>
  <changelog author="tchvatal@suse.com" date="1568980800">- Update to 1.25.5:
  * Add mitigation for BPO-37428 affecting Python &lt;3.7.4 and OpenSSL 1.1.1+ which caused certificate verification to be enabled when using cert_reqs=CERT_NONE. (Issue #1682)
  * Propagate Retry-After header settings to subsequent retries. (Pull #1607)
  * Fix edge case where Retry-After header was still respected even when explicitly opted out of. (Pull #1607)
  * Remove dependency on rfc3986 for URL parsing.
  * Fix issue where URLs containing invalid characters within Url.auth would raise an exception instead of percent-encoding those characters.
  * Add support for HTTPResponse.auto_close = False which makes HTTP responses work well with BufferedReaders and other io module features. (Pull #1652)
  * Percent-encode invalid characters in URL for HTTPConnectionPool.request() (Pull #1673)
- Drop patch urllib3-ssl-default-context.patch
- Drop patch python-urllib3-recent-date.patch the date is recent
  enough on its own</changelog>
  <changelog author="tchvatal@suse.com" date="1569585600">- Restrict the tornado dep from tom to 5 or older release as the
  6.x changed the API</changelog>
  <changelog author="tchvatal@suse.com" date="1570017600">- Updae to 1.25.6:
  * Fix issue where tilde (~) characters were incorrectly percent-encoded in the path. (Pull #1692)</changelog>
  <changelog author="rhafer@suse.de" date="1571140800">- Require a new enough release of python-six. 1.25.6 needs at least
  1.12.0 for ensure_text() and friends.</changelog>
  <changelog author="mcalabkova@suse.com" date="1581076800">- update to 1.25.8
  * Drop support for EOL Python 3.4
  * Optimize _encode_invalid_chars
  * Preserve chunked parameter on retries
  * Allow unset SERVER_SOFTWARE in App Engine
  * Fix issue where URL fragment was sent within the request target.
  * Fix issue where an empty query section in a URL would fail to parse.
  * Remove TLS 1.3 support in SecureTransport due to Apple removing support.</changelog>
  <changelog author="mcepl@suse.com" date="1587470400">- Explicitly switch off building python 2 version.</changelog>
  <changelog author="dmueller@suse.com" date="1591099200">- update to 1.25.9 (bsc#1177120, CVE-2020-26137):
  * Added ``InvalidProxyConfigurationWarning`` which is raised when
    erroneously specifying an HTTPS proxy URL. urllib3 doesn't currently
    support connecting to HTTPS proxies but will soon be able to
    and we would like users to migrate properly without much breakage.
  * Drain connection after ``PoolManager`` redirect (Pull #1817)
  * Ensure ``load_verify_locations`` raises ``SSLError`` for all backends (Pull #1812)
  * Rename ``VerifiedHTTPSConnection`` to ``HTTPSConnection`` (Pull #1805)
  * Allow the CA certificate data to be passed as a string (Pull #1804)
  * Raise ``ValueError`` if method contains control characters (Pull #1800)
  * Add ``__repr__`` to ``Timeout`` (Pull #1795)</changelog>
  <changelog author="dmueller@suse.com" date="1596542400">- update to 1.25.10:
  * Added support for ``SSLKEYLOGFILE`` environment variable for
    logging TLS session keys with use with programs like
    Wireshark for decrypting captured web traffic (Pull #1867)
  * Fixed loading of SecureTransport libraries on macOS Big Sur
    due to the new dynamic linker cache (Pull #1905)
  * Collapse chunked request bodies data and framing into one
  call to ``send()`` to reduce the number of TCP packets by 2-4x (Pull #1906)
  * Don't insert ``None`` into ``ConnectionPool`` if the pool
    was empty when requesting a connection (Pull #1866)
  * Avoid ``hasattr`` call in ``BrotliDecoder.decompress()`` (Pull #1858)</changelog>
  <changelog author="aplanas@suse.com" date="1599652800">- Generate pyc for ssl_match_hostname too</changelog>
  <changelog author="mcepl@suse.com" date="1608206400">- Add CI variable, which makes timeouts in the test suite longer
  (gh#urllib3/urllib3#2109, bsc#1176389) and
  test_timeout_errors_cause_retries should not fail.</changelog>
  <changelog author="code@bnavigator.de" date="1609502400">- Skip test for RECENT_DATE. It is a test purely for developers.
  To maintain reproducibility, keep upstreams possibly outdated
  RECENT_DATE in the source code.</changelog>
  <changelog author="johannes.grassler@suse.com" date="1623412800">- Add CVE-2021-33503.patch (bsc#1187045, CVE-2021-33503)
  * Improve performance of sub-authority splitting in URL</changelog>
  <changelog author="daniel.garcia@suse.com" date="1696852800">- Add CVE-2023-43804.patch (bsc#1215968, CVE-2023-43804)
  gh#urllib3/urllib3#3139
  * Added the Cookie header to the list of headers to strip from
    requests when redirecting to a different host. As before,
    different headers can be set via Retry.remove_headers_on_redirect.</changelog>
  <changelog author="daniel.garcia@suse.com" date="1698235200">- Add CVE-2023-45803.patch (bsc#1216377, CVE-2023-45803)
  gh#urllib3/urllib3@4e98d57809da</changelog>
</package>
<package pkgid="6a604b842e13211b3e3e80dbb32b47ef632af883320383ba567d589f620a14f5" name="qemu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="cc24458135b95395f6affdaa782df20f9386481cc888f0e48d9ab3aaf3bc7025" name="qemu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="f15ecedcfb93a670ab019d626cd18168cc673ef5ae05bf1b1f052525695e4d5d" name="qemu" arch="src">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="7de4a2a6156172663ad9ccad75954d759ea1060eecb640d8b9e1074c019477d7" name="qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="1efe924b0393b6cb75416d05d568709485e6f576f8509bdc20bbae7773ae1695" name="qemu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="c24781da84cf05d80558addaeb12d5a8b35915065f422b947413ee58079a4ee1" name="qemu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="700e1c130501546bf06460756594fcd37feb370263325842a4d5f57067109929" name="qemu" arch="src">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="59cd5433d830ed654d7dcb57f5c930c5affc5002f6d93434a790f9dbd4a09e58" name="qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="ab4c37eb36744c9aad1df0e24c16df1ded5f1fc8406b193c59900c1d88bdd148" name="qemu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="81e7ad8539865361985d343f18ba8f19449329241797124c76a6419b1aaa8ac3" name="qemu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="c6367a365b80698c3aee3224f8a0bf3dc3acf1eeedd13fb2d912437312616fd3" name="qemu" arch="src">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="ed93970ea034b29a203f9e0e789c184f0bc8433ab5d2dc3babba82799cbc3a80" name="qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="d67997ec19934b557f2ff96b09d957dc92d73e14798e71bd521ca0d53de49105" name="qemu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="6c35717610958565cec953168215dc3c4c1aa4ae3a1d696c23c9f4c83a89c381" name="qemu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="56bd1f600d11aee6cec5b1fc90e8429863c7420e3b446545fe733c10192dabf4" name="qemu" arch="src">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="44f385f97548fd5dff0ba298af42c727dddaf8685c794583381ba62e47f48d40" name="qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="cf3551e8123ade7095fbd223777aef745bb971a732818d195e802aed88063cb8" name="qemu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="6a8ee7aa4adbdc94c0cb9b57311629a2fcf4b46e0e33888f6779cde74582b2c5" name="qemu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="520cc50d8499fb24abb386bb1a20aa92de8cdaf2f8c90ec3c2da2d911d77cb0e" name="qemu" arch="src">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="cbddd6e5c16e778b0beded9cbe9204fca7ee497c5c55575e8faa3b38fed11bee" name="qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="a7c45681cdcd1b840caaf968bca404d0d49139d05b668b533156f5271d39e02f" name="qemu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="f4474b70db7babf356bb6505a5c0a78eff65befe86b14bdfed8bae0d3f5034db" name="qemu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="b857ea455426e38f60ea61a812a135049356ce4db611f2401b426c6389a1e30f" name="qemu" arch="src">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="e0f7e5938a0f29051de26815d5d3b5633d99c4a0353ab66f0145b843d1169969" name="qemu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="5362c8369e1fff0f9aec754c9799587239c6c0b9bbbd3731d3b3aa80d50b6359" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="35cd2256974c320f4b145b462bb8536f356edc0a9770779d777ae4c984f9930f" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="38212f82b9100277a5a300d5ecd1fdc1fb0810b8f54fbf9be13016dccdd0a41e" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="91033d6b8b40607f3ac86adf2ec7f8b47787a113cfd697b9843605a6656491a1" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="d47fb530d34b851e7fd15f5565799ffd95f65941d3b95048fc38d654535198a6" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="9d2f27ae573d84f46708a200a9638803d7d92cd4fa60a106439b91e6536e4f05" name="qemu-accel-tcg-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="d8050f8b794e469c64776d33c799f8aea444d0a7d7491a90fbef9a928f4889e2" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="cef139d2e7df19efd223729289a1323e591c7c235dddcfb0c84f140e41b05f0f" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="00ef404bf283c0e5339f661118e74608d3c66e8530f8a3fb1d210fe622a9fd77" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="8ed50444b4d21a853e5c1795ff48c5dbe29301246793f3ef734b26b02cb19a88" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="5297eea726fdef59359eb4d97a7cae7dd337a773e05363c56454b3ad91e9d689" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="bf61219fb9a75959b9459eed473f0e8e1c5776588cbead2f31b0ebcddbc35f6b" name="qemu-arm" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="102d2d636d553075d5b39c5adaf6a6a529203596ff4c27ae1d4b7c6cab3c7977" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="f47f636f6e5b2eeb5307c9312eada2c9b51ffe78f6c6f158a0d53c2885b56e43" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="b91c55e69ae421532b27ff431fee32b6b0230f837d985cb9ca325c1def1ab03e" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="82523a42ea9b9e57037fe1c207867143007269eac47c7ace33e103331090dbb2" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="1ae1c32fb8b31cc5ae5ae6cabf32846ae51680cc7ea9b2871563a61d0a8a8612" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="21a9a6b34b8715f577f8d6a935b115fe501e8032ff8c83e4d076c858a8a5f32a" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="a4c651ba3086d20bb0ac1af20ce14c6b70fffedfb1723ad6ac8dec3d3b833bdf" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="e74fe2324fccdb4aabba62d74625225a5577294c402d9ff65782ffa32a73ed36" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="31bafa34423fa2c4a73de3923bbcbfeaabff537983e8db74bf974c9f4c627d2c" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="10e0e64eb986738c47a26d39a70f5e037a34c51ab281a5d6d973042572a1795a" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="bab47e5a0c0b755b4a46a85050089bbe8a472c606ea5c776163df266ea716043" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="36d4da184be76d33901a4220c29b3ad1f9260cedaf8757fd07db572cc9baafc1" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="1013b9dac23c84115d61a9e34fa359912c861d6fee923f55524bc0f2cfee64b1" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="e22a2c0dbd3c284b1990680e031f254f3c58d12dbf4f30b4c0d12c11ae61338b" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="c9844f5ef2cb6472bfd3305deb2b0d250d13dc141a0df3e95f9bb7bd8f1ad5a9" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="15f16713d7f927ea72aa3feaedf2c3f7aea3f5dba751276c87b7aec0a3ac09ea" name="qemu-audio-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="d5a547d0ca9a66ae3c4992e311379e6f049cff67b4249dbd2f24784d56919eee" name="qemu-audio-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="9426d42d67122fac1c1fa5e83be01916a740b2e3aaef7b72f89ebc85ff0ead36" name="qemu-audio-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="793d9486916f0021e950873c930c03c0b5051714ad02689bf47b58a5bf42bcba" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="a1ed0f54c17197508a48b51c007a6a5e4a61f265b8b4e59cf7d4b1d34c3f23be" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="140ea36b260f1b088d0756d13c76d96a83566d3cf6b32c903bee76002f5d1520" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="29476c4f21fff20a34ec9fc30c2439771a172c0a8f05f27e3b08932a60c55778" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="4676352caeaef515f198872a600c28dd0e8f6bc5930cec230f9ece49fa22b448" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="0b7a2fdc3b1f527be8ad1e97f7bc27c7c4e4ef91f3aef89f5ba907ea8586326f" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="db43ea3fd0144ca9555388448f03bebf8b725e4d6dd9aefedaae6003c8924663" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="fc45ae495537250c28bff32b7e7847b29e2dbaee149b4d801841b99388e794f6" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="fd665ed3fe777e83bd82e6d61c4d4e2ab3c5773339d961d3b15dde85848fd042" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="d8cedf1e98a236b1d43566ba656aa41ff0c4a4a3664278a0caeb68d1b5db41d8" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="8cf06dbc71e376e524ff3cd13b37d96f6448dbddb93bf6c215ce3b667afd18c2" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="ad41bfe0b298b11c83755eafcd0692d4280bd457663f5a0781c3d9e316fb6b59" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="e09b9396de72f4bd5cdeb74ab9b68b61d9370a61dbe2682c697c0bcf646374a3" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="51959aed67319bbba1107a1d815f6df6e68149c0b530fafdbd7e2232a589538d" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="41872b18cef273f39855116970967ad9aeeee50f53b16af27d760732d0ea707c" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="fcdf877847723f847c0ff7856f7b0ed682869a073e2fc64d7ebdadd0cc75bd06" name="qemu-chardev-spice" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="5706e76cc17edf4e127222ede8203199bab1f8ce3d518d1fcd0e1191bdef3878" name="qemu-chardev-spice" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="c1fb394fb132ce09096a54117bd75c53c75abe1696320f9ee664c039708ab3bc" name="qemu-chardev-spice" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="2bd6128b945f9158ef6bed6b1e49d2a120fb13d869596518f4ddcace17c5f162" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="37a70f166838090085654f7e83b4ead1d692c5114892b07eabf1717cb3162706" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="f2a78c2e3183d8424997a03a500b863b1175d1c76dfe99b6440a365b4f9d7692" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="b03c549d14a417f4f2e89c22fbfc801901831679dd1c104b1e001ce8868cc644" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="100f9f0c666c77da03da7e76be792b613e4bc4b70fa498ff993fdf860b1091d5" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="10357050b1d5bb8253cf59698ed37851564a3eb5a769e8d3728fa8c6b9c6b0ba" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="e8d15632cdc611d96b37bd67bb576729621f927af496e9450bc3661b8a0f850c" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="7a2285da389d623b9ce0022650c0c48c5ec45972f47b6b0d745dcaae11839d31" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="dec33763190694d6e2e70d8977dff6749a36b416f7682c4dcbe318dc3647a5be" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="d6ff7e28e53d120c9aa6fd6718aebff0afa1bb186b6727b1a3797daf52c7683a" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="03b001ed88645ee4a3af991db43407d163f6d862aed57b94b5a409f54469e24f" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="3c76338eab621ec48ff179a6328e0028e336424022390b6e3bda1682229ae58f" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="735fef47c787b6ff5309535e2242bafe76cfe1bd32951930e6d7fdf7090162ef" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="cb1104cf9f28f5ce7d50449698181b8a9262366e72e76af09be3cc9586011813" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="5442edb079b0c30fc3ed20ee5082a127c6caea6e9b239f9df584b698defae2ba" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="72c395e655ac5fe104616819ac9d996c4498394403ee817ed7a51e7e8ab48904" name="qemu-guest-agent" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="d3ffd682d90f25397e0119c391b08eea127884bbd34c559df3c8b9043fe1e139" name="qemu-guest-agent" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="0c0decdb3c42f696a02c30a719a85bf567874620027974c75d6b776f8b44804f" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="7fa9e4333ac5f1380734d4754e1951e40925bbffee5fd48d8f77dc09fab16a23" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="e70fcfb47a044faee008779ad18780f466dfb5874d58c4f55e19e681729436f8" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="7cb61dba36cc769b6f3f58ae29fc66e6889c71a63ca0c8e29a24d7423fb97377" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="2a0125f560e9f54a53c75c8a837ec62dd9d9ae023d64ba5bfcf7097087223821" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="82c5c8560c380c6e8a814ba36c161a427256254382f7f862b06ad9eef310b176" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="0ef5d26431b84c61b1dd4ff493f388c50389f2589b8fe02cf37ea764f40712f0" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="63de03bfee9afd55c00eccab01bfb9131c3389feec3b7bc35faa45f1b10cda02" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="c810b5adeb27c74fa94cd8acb961d427f2d78fa14d495d1f789f778e9e33b7b7" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="c4f63eaa301baa53b067ad0c8ee6fc01d75e20481fe3c7124df7900b029cbc4a" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="b4fc3f05b6562857060fb59b378b4f7eef5ab843db940d6502fb54092c08ad5d" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="ca366bc95db43d935e5f11fbb7c8ed0e9397459bfad070030d2b8ea6035ac641" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="0f1f954679c76df035de9121083862637680f729a59ad2cdf87c8054a12b7a42" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="59b797277c3404d08702b3dd704bd14003b39534f22e072504d414f20529f862" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="299d66c578573b05cbe08f0e6614bbf6fcf05153a7a0220f9cc5c15c7e5384cc" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="2b42daa67131047a4e0114016c0d62e658b5462c6ef67041fb7d91f888ad16d4" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="3c909f2fbed589c0613dccc0d48f8ccb68195ef98595dc31f5b73fb0cac78c86" name="qemu-hw-display-qxl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="2c8f48a4a8fd12ec43aeed94034fafc34d170ffe4b36d1bbf7a6afd835349ff5" name="qemu-hw-display-qxl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="a2d60482e68e239d4040c103ae58d7ec81154ca9ad5fdbd0ce2399e2236f67ad" name="qemu-hw-display-qxl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="eb27639aa73da2db9973d3c2c246d91dbbee0b1049a7c70ad1a6ecdab16bfb3c" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="4a9ba08a187f4fb7daf5b21b5c519274faa4544d5d68cea3d2e28fb6d66e4e97" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="3e7492687fdbaa4c2ffaf5341c8e2d1808b7b2fd588f85048ad956f4a370741e" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="ab3b1cbbaa83ed7ac3982bf05ed96bf6d106d3ca1827a8c80686fd9bc3302206" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="0e6885f7f0199bb43184ef0d0b851245deec2f711f4ae67953d1848f28449345" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="cc98c6b1276255326af8d33f610943116295f777849a6e6f6742cc4993aa1186" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="a3fea122ed8017f1d065e62c7336b175a106f26b0ebabac8ea7ce97fc758e5cc" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="bd9922220b58e6c2185d9ff17982e811283369e10294a69b7869af6eb5621619" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="1dcde7fab31e229ec2bde5f8ff2a987590ce07916f9d71db8fb99d433c4379c5" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="00d92a6aee73a42d87f8c0e2266c8167321f3b03481efcc8d744657d8267ca00" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="f10711738bbf45e2afe9d8d81d8d5c073452e3afd44e8017f5b8ebcc4c76f81f" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="61913a08c354cec468e5769b6f57023b1b675f0c88050395427b38fa98cc016d" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="ead8a8591ee5a39d99e794d8b5bf8bbb7d8867286896a27c7c531b487d8608c7" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="3c207e19415b48e22012d1a00b8309090cff5c638a8004f92290c7f90cab606c" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="17f5ade23345326f6e19256559abfcd7adcf518deef6689b838ca6ac54523797" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="0f44bc56143407bf3cc86da1656b4b02291aed0b6b342930348854de3402c5d2" name="qemu-hw-display-virtio-gpu" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="3a1caacf5ddfdf4dd4e27c6be229ca97350e75311701b32d8a7de4502a85919e" name="qemu-hw-display-virtio-gpu" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="67aa015add24e9dabce023e52ab7db766899349ff2480d1371b109d8cafab61e" name="qemu-hw-display-virtio-gpu" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="89afa5772fe79c15baee04795c81f0ad8362444b0e159040048a5f1a0a67164b" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="e318c483355658f6391cbdf4d353c34fd48d66b5d19053b162be1748b03fa4a8" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="7ec885929dcedd34b2e5d08d308687586e442dc1d61c5532fe8cbda25a55ae39" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="75e9f0e47ad2bcc107eacda507cb42a7f47683a8ad4a9ba657d49de9f5b9b6b9" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="324c6a20d8b3ffeca4802fdb0080d3c3cab0bc33c8460a2e44ec914fb60404d5" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="20d2cfb8cda9762ecc6ab2233dce61aebb34b2195f0d8c8bdea8351e29cb7e8e" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="46c40d5f361e584de63305b38d211b98dc23a4d3e703809f31316545b140e2a7" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="3b17a1a5e352891f16cadf626f64d9ffc297122ba5374d3f5eb6f1796a6e3018" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="4187ff9453b660afffd78c60b5ce5422f1bbd4cee6d12443b94b3c84101bfbb9" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="49f50fa185eec267466e4882af5530eb70a8a169ea99c7aad0dc7b2590dd2e4e" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="1a552e32306d6f2c5100acd1c9d14c7063d594642824660515cb72908203433f" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="8f31ff342d1b335437df0b20ada7efeea22b61563e324e66a3aaa0dc40296465" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="42d99ad0ce1a724986038cfd1c7309849e545d89407e9a348fffc30d6677f3b6" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="d6bb5cf45805b14af114c28093d56807ac3ead97c4b6bec94e2f0b1e09bd9a11" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="d3d07d2b5ad1893b304756438995bbd11483fdf574c4a614162833e28026d30f" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="a4c7bb96d555544e912e3ecb91638c36ad95068e3371b7fb6c579f583f2d2246" name="qemu-hw-display-virtio-vga" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="e5c178ed9543612c2ca10ee98e5d12d984dfa318b177bc361e619a9d4e168891" name="qemu-hw-display-virtio-vga" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="5ae77c8d890d8687df1367fb80e0d5f42266bb63ed0f5790997cb670111c4bd8" name="qemu-hw-display-virtio-vga" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="a16b2c7bb9fc2d2443131a6834195eca1ba1dfbf824a5acc2a4125e276d52a00" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="a2ca85efa8723838994f801dc216842d1539850707a49f1e043f6e32981768fc" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="794616e4b5164892707526998c8905bb32a5ad4bc6cb79ef42ee533aef1fc377" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="117eaa1c89e7d0e36abc19509991e544f7aae34fd3cc4a104cd5e16fb462a581" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="211a5174c81257e358d027b03608727fc88b6e710c9a2daef4ea005f251a664e" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="d836b89d8012c3c7a08cbec887823ccbee12904f8e741e595c840737f77203c3" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="9316fd6ac80427ce7581206ec2e521f10e4db7cb6a3e83de32cfa63a56393cf2" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="38d1ad2b80b94a49df70ea8a4a5f70dbc1971fb6d926e3caa485b2e76da10b06" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="e7688cba75f6ca248bd5623e28ea38f622eb6954250835f4df81285c1d0e1a55" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="52ca3f443b1b07741b6cddcfe7ee6a1684f5c0dc415106ec6fbecc9b643fafb6" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="1dea5743360b597d288d9d0cfff471b2af74758151be101b768e8c8736a59387" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="9cfd8b40a1ed27c31b2293aacecfc9d4fdf2035ed3758d75dbafd684cfaca31c" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="c09229c1cfeb0a53054f5bf4f1aa54a22321e9baa7dd1f637a9392cf939ef34a" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="1b23f711ab472e2aa05415ab1a329731d0b79616772ba5823589b45ca255cc37" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="0694c1a58dfbfc9d67062a404d9b06f897e43c9bb220da151fff119046c138a8" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="004464efc47ac177d276ee518316f2f7399d1175f61897d5fc54bc67d8788e77" name="qemu-hw-usb-redirect" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="28748fa5da5f94aa721cbc1f053ca8fa5fa7d046b343aea1e5aac1e8fcefc651" name="qemu-hw-usb-redirect" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="c569867b60e567f4f4cc44fa235981a0ae402d2388a55a5427909b0a0303db7a" name="qemu-hw-usb-redirect" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="6d07f593f194669e40cedb6e5d5456cbec90bbdcc6c228cedb4a502c22944254" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="2e174833a62b258ee0fa5eb0e74a24f062578301dd591db6f231a9860160f6c8" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="facf4193fadd84fd8af104202b2b15672073632062220c9087e4102557b17f2f" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="89d8df55adaa6739d4844d58367ea8ebcf763c8070bc5c26f8fda93e60606f7f" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="1559a8dea729c62c1e095ab84c175da35073f234fd3fb1be785a60e7490edf03" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="820709947b1c701846851778b335324984f2ae8442e2c29f89d76e5fb7043d2d" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0+" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="2af5dd1c93fe762891cca502fdc3e852e5306cb840da7d8653227a66c4d39ae2" name="qemu-ovmf-x86_64" arch="noarch">
  <version epoch="0" ver="202202" rel="150400.5.10.1"/>
  <changelog author="glin@suse.com" date="1625832000">- Add ovmf-fix-xen-s3-detection.patch to fix the S3 detection in
  ovmf-xen
- Add ovmf-xen-add-qemu-kernel-loader-fs.patch to add
  QemuKernelLoaderFsDxe to ovmf-xen to load kernel from qemu fw_cfg</changelog>
  <changelog author="jlee@suse.com" date="1634212800">- Update to edk2-stable202108
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc
  Add CLANGDWARF toolchain for generating ELF+DWARF
  NetworkPkg/IScsiDxe: remotely exploitable buffer overflows
  NetworkPkg/IScsiDxe: add sha256 support to CHAP
  Create header files and multiple Hobs for Universal Payload
  Add search feature in config editor
  Add additional build option to treat Dynamic Pcd as DynamicEx Pcd
  Add a new MicrocodeLib for microcode loading
  Implement key enrolment from default key variables
  StandaloneMm support for 32bit Arm machines
  Add firmware support for Cloud Hypervisor on arm64
  Support architecture-specific openssl acceleration
  Support measured AMD SEV boot with kernel/initrd/cmdline
  Add ACPI 6.4 header
  Add new BootDiscoveryPolicyUiLib
  - Patches (git log --oneline --reverse edk2-stable202105~..edk2-stable202108):
  e1999b264f ArmPkg/ArmGic: Fix maximum number of interrupts in GICv3
  b8ed8c0fb2 Maintainers.txt: add Sami Mujawar as top-level ArmVirtPkg reviewer
  dbc22a1785 UefiCpuPkg/MpInitLib: Allocate a separate SEV-ES AP reset stack area
  0095070e70 MdePkg/Register/Amd: expand the SEV MSR to include the SNP definition
  f828fc9876 MdePkg/Register/Amd: realign macros with more space for future expansion
  34e16ff883 MdePkg/Register/Amd: define GHCB macros for hypervisor feature detection
  f0983b2074 MdePkg/Register/Amd: define GHCB macro for Register GPA structure
  4665fa6503 MdePkg/Register/Amd: define GHCB macro for the Page State Change
  dfd41aef78 MdePkg/Register/Amd: define GHCB macros for SNP AP creation
  5a7cbd54a1 MdePkg/BaseLib: add support for PVALIDATE instruction
  2b5b2ff04d MdePkg/BaseLib: add support for RMPADJUST instruction
  901a9bfc3a OvmfPkg/BaseMemEncryptSevLib: introduce MemEncryptSevClearMmioPageEncMask()
  c394fa4c9e OvmfPkg/AmdSevDxe: use MemEncryptSevClearMmioPageEncMask() to clear EncMask
  8ee4e52ba8 OvmfPkg/QemuFlashFvbServicesRuntimeDxe: use Mmio helper to clear enc mask
  b4a8de5d27 OvmfPkg/TpmMmioSevDecryptPei: use MemEncryptSevClearMmioPageEncMask()
  adfa3327d4 OvmfPkg/BaseMemEncryptSevLib: remove Flush parameter
  fe5da0927a IntelFsp2WrapperPkg: Remove microcode related PCDs
  d3ff5dbe1d MdePkg: MmControl: Fix function and structure definition mismatches
  197e27c90a MdePkg: Add new 16550-compatible Serial Port Subtypes to DBG2
  fdf3666f01 MdePkg: Update DBG2 and SPCR header with NVIDIA 16550 Subtype
  b233eb1849 EmbeddedPkg/RealTimeClockRuntimeDxe: Improve GetWakeupTime
  b5379899b3 MdeModulePkg/Xhci: Fix TRT when data length is 0
  039e07f626 MdePkg/MdeModulePkg: Move AML_NAME_SEG_SIZE definition
  1f515342d8 DynamicTablesPkg: Use AML_NAME_SEG_SIZE define
  75e9154f81 OvmfPkg/VirtioMmioDeviceLib: Add EFIAPI to VirtioMmioSetQueueAddress
  c410ad4da4 MdePkg/BaseLib: Fix AsmReadSs() with GCC toolchain
  c1aa3bab12 BaseTools: Add ClangBase.lds for CLANG8 tool chain with max-page-size
  c6b872c6ab BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image
  cf9959adff BaseTools: Update build_rule to skip CLANG resource section generation
  4b56ad2049 BaseTools: Add new CLANG8ELF tool chain for new LLVM/CLANG8
  e1636fe18f BaseTools: Update ClangBase.lds to keep dynamic section
  924c2b847f BaseTools: Change CLANG8ELF to CLANGDWARF
  e25566cd2b OvmfPkg: remove the Xen drivers from the IA32, IA32X64, and X64 platforms
  aa7f19f480 OvmfPkg: remove the Xen drivers from the AmdSev platform
  7bc04a75a7 OvmfPkg: switch IA32, IA32X64, X64 to the fw_cfg-only ACPI platform driver
  d697037446 OvmfPkg: switch the AmdSev platform to the fw_cfg-only ACPI platform driver
  ae4aa4a346 OvmfPkg/README: bump minimum QEMU version to 1.7.1, machine types to 1.7
  2a85d9b07e OvmfPkg/AcpiPlatformDxe: fix header file warts
  180f1908b3 OvmfPkg/AcpiPlatformDxe: sort #includes and [LibraryClasses]
  6d1e56e715 OvmfPkg/AcpiPlatformDxe/QemuLoader.h: remove QemuFwCfgLib class dependency
  747b1ef725 OvmfPkg/AcpiPlatformDxe: move "QemuLoader.h" to IndustryStandard
  cc302b799e OvmfPkg/AcpiPlatformDxe: consolidate #includes and [LibraryClasses]
  c9bba52fc7 OvmfPkg/XenAcpiPlatformDxe: create from AcpiPlatformDxe
  a31fcb5096 OvmfPkg/AcpiPlatformDxe: remove the "AcpiPlatformDxe.inf" driver
  4115840c28 OvmfPkg/XenAcpiPlatformDxe: remove the QEMU ACPI linker/loader client
  d6ba8aa6ef OvmfPkg/XenAcpiPlatformDxe: remove QEMU fw_cfg dependency
  3f975ee570 OvmfPkg/XenAcpiPlatformDxe: remove the InstallAcpiTable() helper function
  8f8d3d90c5 OvmfPkg/XenAcpiPlatformDxe: remove OVMF's built-in ACPI tables
  4174c5c787 OvmfPkg/Bhyve/AcpiPlatformDxe: fix file path typo in comment
  d491c88a0c OvmfPkg/AcpiTables: remove unused module
  e7641171b6 OvmfPkg/OvmfXen: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  3357ac7380 OvmfPkg/XenAcpiPlatformDxe: remove delayed ACPI table installation
  d06eb2d1d9 OvmfPkg/PlatformPei: remove Xen support
  8899e3fe6a OvmfPkg: drop PcdPciDisableBusEnumeration from the IA32, IA32X64, X64 DSCs
  2833589ad0 OvmfPkg: drop PcdPciDisableBusEnumeration from the AmdSev platform
  e43cca74ad OvmfPkg/Bhyve: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  b005f9f1f5 OvmfPkg/OvmfXen: remove IncompatiblePciDeviceSupport DXE driver
  8c8f886f27 OvmfPkg/Bhyve: remove IncompatiblePciDeviceSupport DXE driver
  984c93ece3 OvmfPkg/IncompatiblePciDeviceSupportDxe: remove PcdPciDisableBusEnumeration
  32fef03563 OvmfPkg/PciHostBridgeLib: consolidate #includes and INF file sections
  e120c962f5 OvmfPkg/PciHostBridgeLibScan: create from PciHostBridgeLib
  c2f24ba321 OvmfPkg/Bhyve: consume PciHostBridgeLibScan
  307763c3da OvmfPkg/OvmfXen: consume PciHostBridgeLibScan
  242678da2a OvmfPkg/PciHostBridgeLib: remove Bhyve and Xen support
  33d4f3e39e OvmfPkg/PciHostBridgeLibScan: remove QEMU (fw_cfg) support
  4c81178cf0 OvmfPkg/PciHostBridgeLibScan: remove PcdOvmfHostBridgePciDevId
  8af38170b5 OvmfPkg/PciHostBridgeLibScan: clean up file names and file-top comments
  7e25086a00 OvmfPkg/SmbiosPlatformDxe: clean up #includes and INF
  5072593738 OvmfPkg/SmbiosPlatformDxe: return EFI_NOT_FOUND if there is no SMBIOS data
  4db374562f OvmfPkg/SmbiosPlatformDxe: locate SMBIOS protocol in InstallAllStructures()
  a8ab14424e OvmfPkg/SmbiosPlatformDxe: split GetXenSmbiosTables() decl. to new header
  9d84e74ca0 OvmfPkg/SmbiosPlatformDxe: declare InstallAllStructures() in header file
  d4a8aaee73 OvmfPkg/SmbiosPlatformDxe: create Xen-specific module INF file
  ce270905bf OvmfPkg/SmbiosPlatformDxe: split Xen entry point from QEMU entry point
  51adb689e1 OvmfPkg: restrict XenPlatformLib to BdsDxe in the IA32, IA32X64, X64 DSCs
  ddb3fdbef3 BaseTools GenFw: Fix regression issue to convert the image to ACPI data
  558d83ab1a OvmfPkg/README: Fix typo in README
  beb443fde0 ShellPkg: Fix typo
  702ba436ed OvmfPkg/PlatformCI: bump QEMU choco package version to 2021.5.5
  83761337ec NetworkPkg/IScsiDxe: wrap IScsiCHAP source files to 80 characters
  29cab43bb7 NetworkPkg/IScsiDxe: simplify "ISCSI_CHAP_AUTH_DATA.InChallenge" size
  95616b8661 NetworkPkg/IScsiDxe: clean up "ISCSI_CHAP_AUTH_DATA.OutChallengeLength"
  e8f28b09e6 NetworkPkg/IScsiDxe: clean up library class dependencies
  cf01b2dc8f NetworkPkg/IScsiDxe: fix potential integer overflow in IScsiBinToHex()
  d90fff40cb NetworkPkg/IScsiDxe: assert that IScsiBinToHex() always succeeds
  dc469f1371 NetworkPkg/IScsiDxe: reformat IScsiHexToBin() leading comment block
  47b76780b4 NetworkPkg/IScsiDxe: fix IScsiHexToBin() hex parsing
  54e90edaed NetworkPkg/IScsiDxe: fix IScsiHexToBin() buffer overflow
  b8649cf2a3 NetworkPkg/IScsiDxe: check IScsiHexToBin() return values
  288bd74a22 Pytool: SpellCheck: Fix incorrect file mask across package matrices
  1ad794b627 MdeModulePkg: Fix device path when boot manager menu is from different FV
  11b1c1d4b9 SecurityPkg: TcgStorageOpalLib: Initialize SupportedAttributes parameter.
  d58016b768 UefiPayloadPkg: Get platform specific logic via protocol for BDS
  d8c18ba3f4 MdeModulePkg: Add Universal Payload general definition header file
  b597b6e24c MdeModulePkg: Add new structure for the PCI Root Bridge Info Hob
  99de2e7e03 UefiPayloadPkg: UefiPayload retrieve PCI root bridge from Guid Hob
  9d53e01efe MdeModulePkg: Add new structure for the Universal Payload SMBios Table Hob
  70e8c9c3bc MdeModulePkg/Universal/SmbiosDxe: Scan for existing tables
  302a8f353c UefiPayloadPkg: Create gUniversalPayloadSmbiosTableGuid Hob
  75293330ea MdeModulePkg: Add new structure for the Universal Payload ACPI Table Hob
  761329ee27 MdeModulePkg/ACPI: Install ACPI table from HOB.
  8c0d678063 UefiPayloadPkg: Create gUniversalPayloadAcpiTableGuid Hob
  fa24b6ed26 UefiPayloadPkg: Use DynamicEx instead of Dynamic to pass PCD across binary
  c511426abe MdeModulePkg/UniversalPayload: Add definition for extra info in payload
  fe471d4a57 UefiPayloadPkg: Add PayloadLoaderPeim which can load ELF payload
  ab2b389e7a PeiCore: Remove assertion when failing to load PE image
  1b380aa603 BaseTools GenFw: Keep read only alloc section as text when convert ELF
  9cf9de668f StandaloneMmPkg: Core: Spelling error in comment
  610385fa3b ArmPlatformPkg: SpellCheck: Switch spellcheck CI to AuditOnly
  04ddd1271e ArmPkg: SpellCheck: Update valid acronyms in ExtendedWords
  cdf7544703 MdeModulePkg PciBusDxe: Increase the width of data read during oprom shadow
  2847c72fda Maintainers.txt: Add Reviewers for Universal Payload definitions
  1162ae8297 Maintainers.txt: Add reviewers for ACPI and SMBIOS modules
  a63914d3f6 ArmPkg: Move cache defs used in Universal/Smbios into ArmCache.h
  6cfeeb71c4 UefiCpuPkg/CpuCommonFeaturesLib: Correct the CPU location check
  d9a7612f8d MdeModulePkg/BdsDxe: Update BdsEntry to use Variable Policy
  5959879e92 ArmVirtPkg: Add PCIe host bridge utility lib for ArmVirtPkg
  4dda0f7ab4 ArmVirtPkg: Enable PCIe support for Kvmtool
  1e5e58d39b UefiPayloadPkg/UefiPayloadEntry: Improve bootloader memrange parsing
  7471751a4d UefiPayloadPkg/UefiPayloadEntry: Remove 4GB memory WA
  20ca528828 CryptoPkg: BaseCryptLib: Update Salt length requirement for RSA-PSS scheme.
  18b2272e4d Azurepipeline: SpellCheck: Enforce Node dependency to use version 14.x
  eba32695ee CryptoPkg/BaseCryptLib: Enabled CryptSha512 for Smm/Runtime drivers
  12e34cd2f7 OvmfPkg/Bhyve: clean up TPM_ENABLE remnants
  82f727c4af UefiPayloadPkg: Add HobLib for UniversalPayload
  ea0bd5f6a7 MdeModulePkg: Add new structure for the Universal Payload Serial Port Info
  a75c029f60 UefiPayloadPkg: Add a separate PlatformHookLib for Universal Payload
  d63595c3c9 UefiPayloadPkg: Update the function definition of HobConstructor
  0ff6de9358 UefiPayloadPkg: Create separate Payload Entry for UniversalPayload
  b208d37c73 UefiPayloadPkg: Get and enter DxeCore for Universal Payload
  27cb64fffc UefiPayloadPkg: Fix up UPL Pcd database
  6b69f73b59 UefiPayloadPkg: Include UniversalPayLoad modules in UefiPayloadPkg.dsc
  86e6948cfb UefiPayloadPkg: Remove assert when reserve MMIO/IO resource for devices
  2db0ed93ff UefiPayloadPkg: Add macro to enable and disable some drivers
  3eb72b308a UefiPayloadPkg: Add PcdInstallAcpiSdtProtocol feature in UefiPayloadPkg
  caa139fe17 UefiPayloadPkg: Add PcdResetOnMemoryTypeInformationChange in UefiPayloadPkg
  8efd912baf UefiPayloadPkg: Add new structure for BootManagerMenuFile HOB
  19a541d70e UefiPayloadPkg: consume the BootManagerMenuFile HOB
  333a866106 BaseTools: Remove check for Split.exe in toolset.bat
  f0a3f6d9c3 BaseTools: Fix spelling of "overwrite" and "overwriting" in toolset.bat
  17143c4837 BaseTools: Reset ERRORLEVEL in toolsetup.bat after edk2basetools check
  abfff7c45d BaseTools GenFw: Add support for RISCV GOT/PLT relocations
  27b8a52957 MdePkg: MmConfiguration: Move definition of EFI_MM_RESERVED_MMRAM_REGION
  d1fc3d7ef3 MdePkg: MmConfiguration: Added definition of MM Configuration PPI
  5a2e030f73 OvmfPkg/GenericQemuLoadImageLib: plug cmdline blob leak on success
  932449710c OvmfPkg/X86QemuLoadImageLib: plug cmdline blob leak on success
  24b0e9d128 Revert "OvmfPkg/QemuKernelLoaderFsDxe: don't expose kernel command line"
  cf20302474 OvmfPkg/GenericQemuLoadImageLib: Read cmdline from QemuKernelLoaderFs
  9421f5ab8d OvmfPkg/X86QemuLoadImageLib: State fw_cfg dependency in file header
  b37cfdd280 OvmfPkg/XenPlatformPei: Relocate shared_info page mapping
  55dee4947b MdePkg : Add IPMI Macro and Structure Defintions to resolve build errors
  580b11201e IntelFsp2Pkg: Add Config Editor tool support
  939ed3a592 UefiPayloadPkg/PayloadLoader: Fix bug in locating relocation section
  3cde0d553d UefiPayloadPkg/PayloadLoader: Remove assertion
  49eeda113a NetworkPkg/IScsiDxe: re-set session-level authentication state before login
  7eba9f698e NetworkPkg/IScsiDxe: add horizontal whitespace to IScsiCHAP files
  7b6c2b2a26 NetworkPkg/IScsiDxe: distinguish "maximum" and "selected" CHAP digest sizes
  903ce1d8f8 NetworkPkg/IScsiDxe: support multiple hash algorithms for CHAP
  47fea2abcb NetworkPkg/IScsiDxe: support SHA256 in CHAP
  bb33c27fbe NetworkPkg: introduce the NETWORK_ISCSI_MD5_ENABLE feature test macro
  8697dc60cc Maintainers.txt: Update Maintainers and reviewers for UefiPayloadPkg
  fea7901dba UefiPayloadPkg: Fix the build failure
  1e0c441c92 OvmfPkg/Bhyve: add USB support
  44ced03798 OvmfPkg/Bhyve: use static PCI32Base address
  b3db0cb1f8 MdeModulePkg/PartitionDxe: Ignore PMBR BootIndicator per UEFI spec
  0a6b303dce UefiCpuPkg/ExceptionLib: Conditionally clear shadow stack token busy bit
  d10e058016 MdeModulePkg/RegularExpressionDxe: Fix memory assert in FreePool()
  4c051c2c65 MdeModulePkg: Update YAML file to fix CI error
  31fcee6d99 ArmVirtPkg: Add PlatformHasAcpiDtDxe for Cloud Hypervisor
  c28fc8ab3b ArmVirtPkg: Install Acpi tables for Cloud Hypervisor
  0e3b6bd0ee ArmVirtPkg: support Cloud Hypervisor in edk2
  b560e9d9b6 IntelFsp2Pkg: PatchFv parseInfFile function modification
  f47c4676dd Pytool: SpellCheck: Defer path expansion in cspell parameters
  cc89d245f9 Maintainers.txt: remove Laszlo Ersek's entries
  84af6ea320 BaseTools/Scripts: Ignore Mergify merge commits in PatchCheck.py
  b491eace37 .mergify: Simplify Mergify rules using GitHub status checks
  5ef08a49e3 .azurepipelines: Remove FINISHED and FAILED states
  ad1009ec62 MdePkg/Include: Add STATIC_ASSERT for L'' and L"" strings
  3de3c24755 BaseTools: Remove non-ascii character of StructurePcd comment
  40a9066439 BaseTools: Enable the flag to treat dynamic pcd as dynamicEx
  22fe311bd2 .pytool/EccCheck: Locate BaseTools dir with EDK_TOOLS_PATH
  a050c599df .pytool/EccCheck: Rename edk2_path as workspace_path
  50672d2692 .pytool/EccCheck: Check ecc_csv exists
  fb5b6220a9 .pytool/EccCheck: Set PACKAGES_PATH env var in Ecc
  fda5226aa3 UefiPayloadPkg: Dump hob information from boot loader
  7d748705b1 MdeModulePkg: Change the PldHeader to Header in ExtraData.h
  9bf4aee734 UefiPayloadPkg: Assign the length of UniversalPayload ExtraData
  d0b6596b8e MdeModulePkg/RamDiskDxe: Init list head before registering RamDisk protocol
  91f5d3b410 IntelFsp2Pkg: BaseCacheLib EfiProgramMtrr MtrrNumber Should be UINT32
  be282b1493 UefiPayloadPkg: Add PCD_DYNAMIC_AS_DYNAMICEX and set to True
  cac83b6f3b IntelFsp2Pkg: Add search function for Config Editor
  4bac086e8e UefiPayloadPkg: Add FV Guid for DXEFV and PLDFV
  fddb8d24ec ArmPlatformPkg/Scripts: Infer dll load address from console output
  885efcd3f9 MdePkg/Include: Smbios Specification 3.4.0 changes
  83b43c4cb1 MdeModulePkg PCD: Print which PCD was unable to be found
  c32c5911c4 BaseTools GenFw: Add support for R_RISCV_PCREL_LO12_S relocation
  097aeeb119 MdePkg/BaseLib: Add MemoryFence implementation for RiscV64
  391cffcb61 MdeModulePkg PiSmmCore: Change MemoryAttributes message to DEBUG_VERBOSE
  8781b143de BaseTools/Scripts: Fix GetMaintainer.py line endings
  28ef05ce10 BaseTools/Scripts: Allow GitHub ID at end Maintainers.txt lines
  2f5ad3f451 Maintainers.txt: Add GitHub IDs
  332632abf3 Maintainers.txt: Add Jiewen Yao as OvmfPkg Maintainer
  4d28a1c2fd BaseTools: Remove COMMON section from the GCC discard list
  878a92a887 CryptoPkg/OpensslLib: Add native instruction support for X64
  147f34b56c CryptoPkg/OpensslLib: Commit the auto-generated assembly files for X64
  ac70e71b1f NetworkPkg: Making the HTTP IO timeout value programmable with PCD
  ab796d3e2a NetworkPkg: Add HTTP Additional Event Notifications
  b461d67639 OvmfPkg/ResetVector: move SEV specific code in a separate file
  7f05102f65 OvmfPkg/ResetVector: add the macro to invoke MSR protocol based VMGEXIT
  dc485c556d OvmfPkg/ResetVector: add the macro to request guest termination
  f05eb2dfe5 OvmfPkg/AmdSev/SecretDxe: fix header comment to generic naming
  35e267cb34 OvmfPkg/AmdSev: use GenericQemuLoadImageLib in AmdSev builds
  a26a08dc1f OvmfPkg: PlatformBootManagerLibGrub: Allow executing kernel via fw_cfg
  0cb48007f7 OvmfPkg: add library class BlobVerifierLib with null implementation
  c73e31f54d OvmfPkg: add BlobVerifierLibNull to DSC
  6bf5580a3d ArmVirtPkg: add BlobVerifierLibNull to DSC
  d10ad8444f OvmfPkg/QemuKernelLoaderFsDxe: call VerifyBlob after fetch from fw_cfg
  5ace477f34 OvmfPkg/AmdSev/SecretPei: build hob for full page
  0deeab36d1 OvmfPkg/AmdSev: reserve MEMFD space for for firmware config hashes
  385b9d80a0 OvmfPkg/AmdSev: add BlobVerifierLibSevHashes
  514b3aa08e OvmfPkg/AmdSev: Enforce hash verification of kernel blobs
  8e6bb64fe4 EmbeddedPkg/VirtualRealTimeClockLib: Fix SetTime issues
  610bcc69ed ArmVirtPkg: Remove meaningless comment
  3445058aea MdeModulePkg/CapsuleApp: Fix typo in error message
  2e1fb41339 build: Fix python3.10 threading DeprecationWarnings
  0b1b0a9674 python: Replace distutils.utils.split_quotes with shlex.split
  fc50df0d8e BaseTools: Drop check for distutils.utils
  03e77558d4 BaseTools: use shutil.copyfile instead shutil.copy2
  2b47aaecef MdeModulePkg: Add BootDiscoveryPolicyUiLib.
  bb806a6e88 SecurityPkg: Create SecureBootVariableLib.
  9732659698 SecurityPkg: Create library for enrolling Secure Boot variables.
  12a4d0cb9d ArmVirtPkg: add SecureBootVariableLib class resolution
  3d427c5f83 OvmfPkg: add SecureBootVariableLib class resolution
  b926956418 EmulatorPkg: add SecureBootVariableLib class resolution
  db959018b6 SecurityPkg: Remove duplicated functions from SecureBootConfigDxe.
  a97e9e327e ArmPlatformPkg: Create include file for default key content.
  94e065582b SecurityPkg: Add SecureBootDefaultKeysDxe driver
  19107590b6 SecurityPkg: Add EnrollFromDefaultKeys application.
  45f3dd2ce9 SecurityPkg: Add new modules to Security package.
  55266a9b8a SecurityPkg: Add option to reset secure boot keys.
  6355287206 Maintainers.txt: Add new maintainer and reviewer to EmbeddedPkg/
  9abc60f9f7 EmbeddedPkg/libfdt: Add strcmp and strncpy to libfdt_env.h
  0856cdc89e MdePkg: add definition of LINUX_EFI_INITRD_MEDIA_GUID
  97fdcbda4e OvmfPkg: Remove Initrd LINUX_EFI_INITRD_MEDIA_GUID
  4de77ae989 UefiCpuPkg/CpuCacheInfoLib: Sort CpuCacheInfo array
  3c6107758b SecurityPkg: Fix GetSupportedAndActivePcrs counter calculation
  b40bdd6ecd UefiPayloadPkg: Add Fixed PCDs and use Macro to define the default value.
  d497eace3b UefiPayloadPkg: define some PCD as DynamicEX PCD
  ac6e5d6b41 UefiPayloadPkg: change the default value of some PCDs.
  672bd1c711 UefiPayloadPkg: Add a macro to enable or diable the serial driver.
  d02dbb53cd UefiPayloadPkg: Fix the non-ascii character in UniversalPayloadEntry.c
  a7ddc7847c RedfishPkg/JsonLib: Add more JsonLib functions
  5963ce5d28 MdePkg: Add ACPI 6.4 header file
  4d7137f261 MdePkg: Increment FADT version
  d910e83299 MdePkg: Rename SBSA Generic Watchdog to Arm Generic Watchdog
  ad3dea9861 MdePkg: Update PMTT to ACPI 6.4
  ced4cb7609 MdePkg: Add SPA Location Cookie field to SPA Range structure
  c82d6dd4a3 MdePkg: Remove DPPT table
  357383bc4f MdePkg: Add flags and MinTransferSize to Generic Initiator
  7b17bcd9a0 MdePkg: Add 'Type 5' PCC structure
  0938f9235c MdePkg: Add Multiprocessor Wakeup structure
  75c4a8e10d MdePkg: Add the Platform Health Assessment Table (PHAT)
  1803757a9b MdePkg: Add Secure Access Components in the SDEV table
  605c4a1ff2 MdePkg: Add Cache ID to PPTT
  3d359ff905 MdePkg: Fix broken coding style in Acpi64.h
  7311e96417 RedfishPkg/RefishCrtLib: Public RefishCrtLib
  03e19e6bc8 ArmPkg/IndustryStandard: 32b/64b agnostic FF-A, Mm SVC and Std SMC IDs
  aee0098faf ArmPkg: prepare 32bit ARM build of StandaloneMmPkg
  ca1773878d GenFv: Arm: support images entered in Thumb mode
  b7f0226a46 StandaloneMmPkg: fix pointer/int casts against 32bit architectures
  a776bbabd9 StandaloneMmPkg: build for 32bit arm machines
  ac826886c9 MdeModulePkg/UefiSortLib:Add UefiSortLib unit test
  6fdd1c13a7 MdeModulePkg PCD: Reinstall PCD service PPIS when memory available
  ef56f55d19 EmbeddedPkg/NonCoherentDmaLib: Avoid dereferencing unset Map field
  8dd4fc5be6 UefiCpuPkg/CpuCacheInfoLib: Correct logical for identifying cache type
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  - Removed patches which are merged to mainline:
  ovmf-bsc1186151-fix-iscsi-overflows.patch
  ovmf-xen-relocate-shared_info_page-map.patch
  - Updated patches
  ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
  ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - Added patches
  ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="jlee@suse.com" date="1634904000">- Removed edk2-stable202105.tar.gz because we updated to edk2-stable202108</changelog>
  <changelog author="jlee@suse.com" date="1635249600">- Removed patches which are merged to mainline:
    ovmf-bsc1186151-fix-iscsi-overflows.patch
    ovmf-xen-relocate-shared_info_page-map.patch
- Removed patches because replaced:
    ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
    ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1636372800">- Update rpmlintrc (fixes aarch64 build)</changelog>
  <changelog author="jlee@suse.com" date="1638532800">- Merge the difference from SLE for pushing back to SLE15-SP4
  - Add/Update 50-xen-hvm-x86_64.json in descriptors.tar.xz
  - Add the json descriptor for xen-hvm (bsc#1180050)
  - Add "nvram-template" and change the firmware file to
  ovmf-x86_64-ms-4m.bin (bsc#1180050, bsc#1181264)
  - The following patches in SLE are already in edk2-edk2-stable202108
    in factory, so they will be removed from 15-SP4
  - ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
    the potential NULL dereference in AuthenticodeVerify()
    (bsc#1177789, CVE-2019-14584)
  - 26442d11e620a9	edk2-stable202011~124
  - ovmf-bsc1180079-amd-sev-es-mitigation.patch to mitigate the
  potential AMD SEV-ES security issues
  (bsc#1180079)
  - a91b700e385e74	edk2-stable202102~181
  - ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch as the
  follow-up patch for SEV-ES to fix the flash writing
  (jsc#SLE-16075)
  - 3a3501862f7309	edk2-stable202102~105
  - ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption
  (bsc#1183578, CVE-2021-28211)
  - e7bd0dd26db7e5	edk2-stable202011~7
  - ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion
  (bsc#1183579, CVE-2021-28210)
  - b9bdfc72853fe9	edk2-stable202011~9
  - Add ovmf-bsc1186151-fix-iscsi-overflows.patch to fix the possible
  overflows in IScsiDxe
  (bsc#1186151)
  - 83761337ec91fb	edk2-stable202108-rc0~171</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638792000">- cross-i386-binutils and cross-i386-gcc have been dropped from
  Factory, so use only cross-x86_64-* - boo#1193424</changelog>
  <changelog author="jlee@suse.com" date="1638964800">- For preparing push to SLE15-SP4, add more notes:
  - Drop upstreamed ovmf-jscSLE-16075-SEV-ES-fixes.patch from 15-SP4
  - All patches in the above big patch are in edk2-stable202011
  - Some changes in ovmf.spec file of 15-SP4:
  - brotli-v1.0.7-17-g666c328-c.tar.xz and "add brotli" section
  be removed because ovmf-disable-brotli.patch.
  - Using %{_prefix} instead of /usr hard code.
  - Redundant %defattr(-,root,root) are removed.
  - BuildRoot be removed because factory doesn't have it.
  - Sync some differences in the change log between 15-SP3 with openSUSE
    TW since "Wed Jan 24 06:31:21 UTC 2018":
  - Add TLS and IPv6 supports for ArmVirtQemu.
  - ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  - already in edk2-stable202008
  - Drop the build requirement of python2</changelog>
  <changelog author="jlee@suse.com" date="1640088000">- Update to edk2-stable202111
  - Features (https://github.com/tianocore/edk2/releases):
  Add SSDT CPU topology generator
  Support ACPI 6.4 in GTDT parser and generator
  Support ACPI 6.4 in DynamicTables FADT parser
  Support ACPI 6.4 in Acpiview PCCT parser
  Support ACPI 6.4 in Acpiview HMAT parser
  Add support for the microvm machine type (qemu)
  OVMF/ArmVirt: add support for virtio-mmio 1.0
  IntelFsp2Pkg: adopt FSP 2.3 specification
  UefiCpuPkg VTF0 X64: Build page tables using Linear-Address Translation to a 1-GByte Page
  Enable wildcard host name matching in HTTPS/TLS implementation
  Add QuickSort function into BaseLib
  Add SMM NV variable support in universal UEFI payload
  Add TDVF to OvmfPkg
  Make package and platform builds reproducible across source format changes
  - Patches (git log --oneline --reverse edk2-stable202108~..edk2-stable202111):
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  82f7e315d6 MdeModulePkg/PeiCore: Remove MigrateSecModulesInFv()
  8b15024dc7 Maintainers: Add kraxel as Reviewer to ArmVirtPkg and OvmfPkg
  80e67af9af OvmfPkg: introduce a common work area
  ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
  b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm
  a82bad9730 ArmPkg/GicV3Dxe: Don't signal EOI on arbitrary interrupts
  94e465e5cb OvmfPkg/Virtio10: Add virtio-mmio 1.0 defines
  08293e43da OvmfPkg/VirtioMmioDeviceLib: Add virtio 1.0 detection.
  212a2b9bb8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetPageSize.
  537a724421 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetQueueAddress
  6a3e9576b8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Add default QueueNum
  ae12188cf8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Adapt feature bit handling
  77d5fa8024 OvmfPkg/VirtioMmioDeviceLib: enable virtio 1.0
  b04453d36b MdeModulePkg/EbcDxe: Mitigate memcpy intrinsics
  dc995ce906 MdeModulePkg: Add BootDiscoveryPolicyOld variable.
  443300be46 MdePkg:Update IndustryStandard/Nvme.h with Nvme amdin controller data
  0f11537548 MdeModulePkg:Increase Nvme capacity display
  cae735f613 ArmPkg: Enable boot discovery policy for ARM package.
  cb0d24637d OvmfPkg/OvmfXen: set PcdAcpiS3Enable at initialization
  28152333bc OvmfPkg/LockBoxLib: use PcdAcpiS3Enable to detect S3 support
  52e2dabc0f OvmfPkg/PlatformBootManagerLib: use PcdAcpiS3Enable to detect S3 support
  5b5f10d746 OvmfPkg/SmmControl2Dxe: use PcdAcpiS3Enable to detect S3 support
  9f3eda177a OvmfPkg/OvmfXen: add QemuKernelLoaderFsDxe
  f0fe55bca4 UefiPayloadPkg: Fix the build error when enable Core ci for UefiPayloadPkg
  5d34cc49d5 UefiCpuPkg/PiSmmCpuDxeSmm: Update mPatchCetSupported set condition
  cdda3f74a1 UefiPayloadPkg/UefiPayloadEntry: Fix memory corruption
  3b3f882288 MdeModulePkg/PiSmmCore: Drop deprecated image profiling commands
  b170806518 UefiCpuPkg: Clean up save state boundary checks and comments.
  12e33dca4c IntelFsp2Pkg: Support Config File and Binary delta comparison
  63fddc98e0 UefiPayloadPkg: Create .yaml file in UefiPayloadPkg
  e3ee8c8dbd .azurepipelines: Add UefiPayloadPkg in gate-build-job.yml and CISetting.py
  b6bc203375 MdeModulePkg/HiiDatabaseDxe:remove dead code block
  c5e805ffe1 MdeModulePkg: Fix typo of "memory" in RamDiskDxe debug message
  81d71fb86e Maintainers.txt: Update maintainer/reviewer roles in MdeModulePkg
  edf8bc6d24 SecurityPkg/MemoryOverwriteControl: Add missing argument to DEBUG print
  4473834e7d OvmfPkg/OvmfXen: Fix build with QemuKernelLoaderFsDxe
  a7cf2c5664 RedfishPkg: Fix various typos
  851785ea67 UefiPayloadPkg: Include more modules in UefiPayloadPkg.
  d248516b3a UefiPayloadPkg: Include Network modules in UefiPayloadPkg.
  6c7d6d4a5e UefiCpuPkg: ResetVector Tool Support for Python 3
  cf7c650592 UefiCpuPkg: ResetVector Tool additional debug prints
  d96df7e993 UefiPayloadPkg: Fix the bug in dump guid HOB info functions
  dcd3d63f4f UefiPayloadPkg: Dump hob info from gEdkiiBootManagerMenuFileGuid
  610d8073f2 SecurityPkg/TPM: Import PeiDxeTpmPlatformHierarchyLib.c from edk2-platforms
  4d5f39cd22 SecurityPkg/TPM: Fix bugs in imported PeiDxeTpmPlatformHierarchyLib
  ebbc8ab2cd SecrutiyPkg/Tcg: Import Tcg2PlatformDxe from edk2-platforms
  2906e572c6 SecurityPkg/Tcg: Make Tcg2PlatformDxe buildable and fix style issues
  f108178c56 SecurityPkg: Introduce new PCD PcdRandomizePlatformHierarchy
  a4867dea2a SecurityPkg/Tcg: Import Tcg2PlatformPei from edk2-platforms
  2fa89c8e11 SecurityPkg/Tcg: Make Tcg2PlatformPei buildable and fix style issues
  3b69fcf5f8 SecurityPkg: Add references to header and inf files to SecurityPkg
  6c80564b89 MdeModulePkg/Core/Pei: Fix typo in function descriptions
  6f501a7c9b MdeModulePkg/Core/Pei: Make migrated PEIM message verbose
  c19d18136e MdeModulePkg/Core/Pei: Fix pointer size mismatch in EvacuateTempRam()
  f4e72cf9d6 UefiPayloadPkg: Add script to build UniversalPayload in UefiPayloadPkg
  bda3546c55 UefiPayloadPkg: Fix the warning when building UefiPayloadPkg with IA32+X64
  010753b7e7 UefiCpuPkg: Refactor initialization of CPU features during S3 resume
  89f7ed8b29 UefiCpuPkg: Prevent from re-initializing CPU features during S3 resume
  60d8bb9f28 UefiCpuPkg: VTF0 Linear-Address Translation to a 1-GByte Page till 512GB
  ac6388add4 ArmPkg/ProcessorSubClassDxe: Fix the format of ProcessorId
  e3e47d7963 UefiCpuPkg: SecCoreNative without ResetVector
  542cba73d2 SecurityPkg: Add debug log for indicating IBB verified OBB successfully
  f334c5a41d IntelFsp2WrapperPkg: Make PcdFspModeSelection dynamic
  79019c7a42 OvmfPkg: set a default value for the WorkAreaHeader PCD
  fdeff3fdae EmbeddedPkg: Remove duplicate libfdt.h include
  f2a7e24e38 EmbeddedPkg: AndroidBootImgBoot error handling updates
  c0cd26f43c EmbeddedPkg: Install FDT if UpdateDtb is not present
  7ea7f9c077 EmbeddedPkg: Add LoadFile2 for linux initrd
  d60915b751 UefiPayloadPkg: Add Macro to enable or disable some drivers.
  46b4606ba2 MdeModulePkg/PciBusDxe: Improve the flow of testing support attributes
  f57040b038 MdeModulePkg/BootManagerMenuApp: Limit string drawing within one line
  b0f1b1c5fd MdePkg: Fix DEVICE_SECURITY_EVENT_DATA_HEADER version definition
  cc5a67269e UefiPayloadPkg: Build a HOB from bootloader ACPI table
  dc430ccf3f UefiPayloadPkg: Use dummy constructor for PlatformHookLib
  4a1899dd79 UefiPayloadPkg: Add ".upld_info" in universal payload
  2ea0a0a414 BaseTools: Switch to downloading the ARM compiler from Arm's site
  1ce6ceb75b BaseTools: Switch to downloading the AARCH64 compiler from Arm's site
  c214128a38 BaseTools/GenMake: Use ToolDefinition as fallback option
  259c184c8f BaseTools/build: Set MakefileName
  445c39f757 BaseTools: Remove Makefile/MakefileName fields
  c7d5b046d9 BaseTools: Remove hard-coded strings for target and tools_def
  442e46d3b6 UefiPayloadPkg: Update maximum logic processor to 256
  499c4608b1 OvmfPkg/TPM PPI: Connect default consoles for user interaction
  b8675deaa8 OvmfPkg: Handle TPM 2 physical presence opcodes much earlier
  8ab8fbc016 OvmfPkg: Reference new Tcg2PlatformDxe in the build system for compilation
  bd298d7593 OvmfPkg: Reference new Tcg2PlatformPei in the build system
  f86de75862 MdePkg: MmCommunication: Added definition of MM Communication PPI
  8b4bb94f64 MdePkg: CI YAML: Added new GUID to ignore duplicate list
  9e950cda6a MdeModulePkg: CI YAML: Added new GUID to ignore duplicate list
  2273799677 SecurityPkg: Fix SecureBootDefaultKeysDxe failed to start
  422e5d2f7f UefiPayloadPkg: Remove asm code and sharing libraries
  0875443f7e DynamicTablesPkg: Extract AcpiHelperLib from TableHelperLib
  20775950c6 DynamicTablesPkg: Update TableHelperLib.inf
  1ad5182500 DynamicTablesPkg: Rename single char input parameter
  653113412f DynamicTablesPkg: Add HexFromAscii() to AcpiHelperLib
  72ab552554 DynamicTablesPkg: Add AmlGetEisaIdFromString() to AcpiHelperLib
  96e006b37e DynamicTablesPkg: Add Configuration Manager Object parser
  235ff9fcd1 DynamicTablesPkg: Use %a formatter in AmlDbgPrint
  7a8c037e9e DynamicTablesPkg: Update DynamicTablesPkg.ci.yaml
  691c5f7762 DynamicTablesPkg: Deprecate Crs specific methods in AmlLib
  22873f58c4 DynamicTablesPkg: Rework AmlResourceDataCodegen.c/h
  4cc1458dbe IntelFsp2Pkg: Adopt FSP 2.3 specification.
  c49cb8f30e ArmPkg: SmbiosMiscDxe: Don't populate ExtendedBiosSize when size &lt; 16MB
  282122ec5f ArmVirtPkg/TPM: Add a NULL implementation of TpmPlatformHierarchyLib
  b3685956d2 ArmVirtPkg: Reference new TPM classes in the build system for compilation
  c806b76865 ArmVirtPkg: Disable the TPM2 platform hierarchy
  606340fba3 OvmfPkg/Microvm: copy OvmfPkgX64 files as-is
  4932f05a00 OvmfPkg/Microvm: rename output files, fix includes
  2a49c19b9e OvmfPkg/Microvm: no smm
  60d55c4156 OvmfPkg/Microvm: no secure boot
  0569c52b15 OvmfPkg/Microvm: no tpm
  06fa1f1931 OvmfPkg/Microvm: no sev
  6073bf6cd8 OvmfPkg/Microvm: no csm
  b9dd64b80e OvmfPkg/Microvm: no emulated scsi
  27de86ae41 OvmfPkg/Microvm: use MdePkg/Library/SecPeiDxeTimerLibCpu
  76602f45dc OvmfPkg/Microvm: use XenTimerDxe (lapic timer)
  6a8e9ad24b OvmfPkg/Microvm: PlatformPei/MemDetect tweaks
  8583b57c5c OvmfPkg/Microvm: PlatformPei/Platform memory map tweaks
  bf02d73e74 OvmfPkg/Microvm: PlatformPei/Platform: add id.
  1d3e89f349 OvmfPkg/ResetSystemLib: add driver for microvm
  2c467c9be2 OvmfPkg/Microvm: BdsPlatform: PciAcpiInitialization tweak.
  8456785986 OvmfPkg/Microvm: use PciHostBridgeLibNull
  55f47d2299 OvmfPkg/Microvm: wire up serial console, drop super-io
  862e814de4 OvmfPkg/Microvm: add Maintainers.txt entry
  06a326caf1 DynamicTablesPkg: Update FADT generator to ACPI 6.4
  f09dbf20b9 DynamicTablesPkg: Rename SBSA generic watchdog
  942c9bd357 ShellPkg: Update Acpiview GTDT parser to ACPI 6.4
  80e67bcb23 ShellPkg: Update Acpiview PCCT parser to ACPI 6.4
  b4da6c29f1 ShellPkg: Add Type 5 PCC Subspace Structure parser
  5ece2ad36c MdeModulePkg/Core/Dxe: Add lock protection in CoreLocateHandleBuffer()
  30400318a2 ShellPkg: Update Acpiview HMAT parser to ACPI spec version 6.4
  71c3c9c0c4 DynamicTablesPkg: Remove unnecessary includes
  25cf58a163 DynamicTablesPkg: Add missing parameter check
  bfaf7c8b9e DynamicTablesPkg: Add AddSsdtAcpiHeader()
  28b2df475f DynamicTablesPkg: Add AmlRdSetEndTagChecksum()
  74addfeab6 DynamicTablesPkg: Add AmlSetRdListCheckSum()
  7b2022d39e DynamicTablesPkg: Set EndTag's Checksum if RdList is modified
  2dd7dd3952 DynamicTablesPkg: Clear pointer in node creation fcts
  37bd08176c DynamicTablesPkg: Update error handling for node creation
  6d2777d85f DynamicTablesPkg: Make AmlNodeGetIntegerValue public
  f995f8672b DynamicTablesPkg: AML Code generation for Register()
  9454d1ebcb DynamicTablesPkg: AML Code generation for Resource data EndTag
  1e33479b39 DynamicTablesPkg: AML code generation for a Package
  12e65fd258 DynamicTablesPkg: Helper function to compute package length
  ce15936f2f DynamicTablesPkg: AML code generation for a ResourceTemplate
  de62ccbf4f DynamicTablesPkg: AML code generation for a Method
  e2d7b4950b DynamicTablesPkg: AML code generation to Return a NameString
  3e958e93ce DynamicTablesPkg: AML code generation for a Method returning a NS
  018a962d92 DynamicTablesPkg: AML code generation for a _LPI object
  a5e36ad9bc DynamicTablesPkg: AML code generation to add an _LPI state
  f17ef10e63 DynamicTablesPkg: Add CM_ARM_LPI_INFO object
  769e63999f DynamicTablesPkg: SSDT CPU topology and LPI state generator
  19ee56c4b3 UefiPayloadPkg: Add a macro to select the SecurityStubDxe driver.
  782d018703 MdePkg: Add ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  ba4ae92234 ShellPkg: Support ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  f22feb0e3b CryptoPkg/BaseCryptLib: Eliminate extra buffer copy in Pkcs7Verify()
  4225a464c6 MdePkg/BaseLib: Add QuickSort function on BaseLib
  6ed6abd6c1 BaseTools: Change RealPath to AbsPath
  978d428ec3 UefiPayloadPkg: Add PCI root bridge info hob support for SBL
  43b3840873 MdeModulePkg/Sd: Corrections for Extra.uni files
  a7fcab7aa3 MdeModulePkg/Core/Dxe: Acquire a lock when iterating gHandleList
  e40fefafa9 ArmVirtPkg/FdtClintDxe: Move FdtClientDxe to EmbeddedPkg
  fb759b8b73 MdePkg: Add PcdPciIoTranslation PCD
  7d78a86ecf ArmPkg: Use PcdPciIoTranslation PCD from MdePkg
  77e9b3a7c6 ArmVirtPkg/FdtPciPcdProducerLib: Relocate PciPcdProducerLib to OvmfPkg
  d881c6ddf5 ArmVirtPkg/HighMemDxe: Relocate HighMemDxe to OvmfPkg
  47bd85e9f9 OvmfPkg/HighMemDxe: Add RISC-V in the supported arch.
  f8d0501ded ArmVirtPkg/QemuFwCfgLib: Relocate QemuFwCfgLib to OvmfPkg
  26aa241d2f OvmfPkg/QemuFwCfgLibMmio: Add RISC-V arch support
  c6770f4b88 MdePkg: Add PcdPciMmio32(64)Translation PCDs
  9a7509e465 ArmVirtPkg/FdtPciHostBridgeLib: Relocate FdtPciHostBridgeLib to OvmfPkg/Fdt
  b21c6794de OvmfPkg/FdtPciHostBridgeLib: Add RISC-V in the supported arch.
  e0c23cba5e ArmVirtPkg/VirtioFdtDxe: Relocate VirtioFdtDxe to OvmfPkg/Fdt
  f2400e06db BaseTools: add edk2-test repo to SetupGit.py
  785cfd3305 UefiPayloadPkg: Use SECURITY_STUB_ENABLE to control the SecurityStubDxe
  7e43d3e086 ArmPkg/Smbios: Fix max cache size 2 wrong issue
  f10a112f08 UefiPayloadPkg: Fix the build issue for coreboot
  2108698346 StandaloneMmPkg: Support CLANGPDB builds
  11a4af85a4 Ovmfpkg: update Ia32 build to use new work area
  36b561623a OvmfPkg/AmdSev: update the fdf to use new workarea PCD
  91a978ce7e UefiPayloadPkg: Replace MEMROY_ENTRY by MEMORY_ENTRY
  6ef5797447 UefiPayloadPkg: Fix ECC reported issues
  90246a6d9f UefiPayloadPkg: Fix the build failure for non-universal payload
  37a33f02aa UefiCpuPkg: Cpu feature data stored in memory may be migrated
  4fdf843c75 DynamicTablesPkg: Fix unitialized variable use
  6893865b30 DynamicTablesPkg: Fix void pointer arithmetic
  99325a8b65 MdeModulePkg/SortLib: Add QuickSort function on BaseLib
  305fd6bee0 UefiCpuPkg/CpuCacheInfoLib: Add QuickSort function on BaseLib
  2f286930a8 ShellPkg: Parse I/O APIC and x2APIC structure
  bd5ec03d87 NetworkPkg/HttpBootDxe: make file extension check case-insensitive
  6254037223 ArmPkg: Implement PlatformBootManagerLib for LinuxBoot
  f079e9b450 OvmfPkg: Copy Main.asm from UefiCpuPkg to OvmfPkg's ResetVector
  5a2411784b OvmfPkg: Clear WORK_AREA_GUEST_TYPE in Main.asm
  c9ec74a198 OvmfPkg: Add IntelTdxMetadata.asm
  8b76f23534 OvmfPkg: Enable TDX in ResetVector
  87a34ca0cf UefiPayloadPkg: Add a common SmmAccessDxe module
  e7e8ea27d4 UefiPayloadPkg: Add a common SMM control Runtime DXE module
  bed990aae6 UefiPayloadPkg: Add bootloader SMM support module
  1d66480aa4 UefiPayloadPkg: Add SpiFlashLib
  04714cef46 UefiPayloadPkg: Add FlashDeviceLib
  ae8acce8ae UefiPayloadPkg: Add a common FVB SMM module
  242dcfe30f UefiPayloadPkg: Add a SMM dispatch module
  b80c17b62d UefiPayloadPkg: Add SMM support and SMM variable support
  2f6f3329ad FmpDevicePkg/FmpDxe: Use new Variable Lock interface
  9a95d11023 IntelFsp2Pkg/SplitFspBin.py: adopt FSP 2.3 specification.
  bb146ce32d MdePkg Cpuid.h: Define CPUID.(EAX=7,ECX=0):EDX[30]
  1bc232aae3 RedfishPkg: Update link to staging/RedfishClientPkg in Readme.md
  e7663fdd82 UefiPayloadPkg: Remove SystemTableInfo GUID.
  91b772ab62 RedfishPkg: Add more information to Readme.md
  c8594a5311 SecurityPkg/FvReportPei: Remove the ASSERT to allow neither M nor V
  939c2355da IntelFsp2Pkg SplitFspBin.py: Correct file name in file header
  6f9e83f757 NetworkPkg/HttpDxe: Enable wildcard host name matching for HTTP+TLS.
  b258f12889 BaseTools/VrfCompile: Fix uninitialized field from unnamed field
  0f4cdad25b DynamicTablesPkg: Add missing BaseStackCheckLib instance
  e13e53cb2f NetworkPkg/NetworkPkg.dsc: Add RngLib mapping for ARM and RISCV64
  c1f2287635 SecurityPkg/SecurityPkg.dsc: Add missing RngLib for ARM and RISCV64
  b0a03ca4a9 SignedCapsulePkg/SignedCapsulePkg.dsc: Add RngLib mapping
  15e635d1b5 UefiCpuPkg/MtrrLib/UnitTest: Fix 32-bit GCC build issues
  4050c873b5 MdeModulePkg/Variable/RuntimeDxeUnitTest: Fix 32-bit GCC builds
  d79df34beb BaseTools: Fix StructurePcd offset error.
  b5d4a35d90 MdeModulePkg/XhciSched: Fix missing DEBUG arguments
  48452993ad MdePkg/Include: Enhance DebugLib to support reproduce builds
  5948ec3647 MdePkg: Reproduce builds across source format changes
  f331310a10 ArmPkg: Reproduce builds across source format changes
  77dcd03ecf MdeModulePkg: Reproduce builds across source format changes
  45137bca2f NetworkPkg: Reproduce builds across source format changes
  d939a25d41 SecurityPkg: Reproduce builds across source format changes
  fd42dcb1fc OvmfPkg: Reproduce builds across source format changes
  8c1b1fe634 ShellPkg: Add comment that ItemPtr is set after validation
  d6e6337cd6 MdePkg: Fix ACPI memory aggregator/device type mismatch
  c974257821 MdeModulePkg AtaAtapiPassThru: Always do S.M.A.R.T. check if device support
  aab6bb3d32 MdeModulePkg/DxeCapsuleLibFmp: Capsule on Disk file name capsule
  a7b35aae13 MdeModulePkg\UfsBlockIoPei: UFS MMIO address size support both 32/64 bits
  f826b20811 UefiCpuPkg/UefiCpuLib: Add GetCpuFamilyModel and GetCpuSteppingId
  8c8867c5da MdeModulePkg/DxeCapsuleLibFmp: Use new Variable Lock interface
  22c3b5a865 BaseTools: Add authenticated variable store support
  a92559671a OvmfPkg/Xen: Fix VS2019 build issues
  4c495e5e3d OvmfPkg/Bhyve/PlatformPei: Fix VS2019 X64 NOOPT build issue
  466ebdd2e0 MdeModulePkg/FPDT: Lock boot performance table address variable at EndOfDxe
  455b0347a7 UefiCpuPkg/PiSmmCpuDxeSmm: Use SMM Interrupt Shadow Stack
  e1e7306b54 OvmfPkg/Library/ResetSystemLib: Fix Microvm VS2019 NOOPT build issue
  4c7ce0d285 MdeModulePkg AtaAtapiPassThru: Skip the potential NULL pointer access
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  - Removed patches which are merged to mainline:
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch to fix the
    S3 detection in ovmf-xen
  - cb0d24637d    edk2-stable202111-rc1~220
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch to add QemuKernelLoaderFsDxe
    to ovmf-xen to load kernel from qemu fw_cfg
  - 9f3eda177a    edk2-stable202111-rc1~216
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - 4473834e7d    edk2-stable202111-rc1~203
  - The edk2-stable202111 includes the following patches for bsc#1192126
    to fix unlimited reset. (bsc#1192126)
    80e67af9af OvmfPkg: introduce a common work area
    ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
    b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm</changelog>
  <changelog author="jlee@suse.com" date="1640260800">- Removed useless patch files because they are merged to edk2-stable202111
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
- Updated URL to the edk2 repo on github
- Use downloaded edk2-edk2-stable%{version}.tar.gz instead of the URL
  for Source0 because the edk2-edk2-stable202111 tarball is broken
  in tianocore repo which can not pass the "osc service runall download_files"
  testing.
  - We ill change it back to the following setting when upstream fixed tarball:
  Source0:        https://github.com/tianocore/edk2/releases/download/edk2-stable%{version}/edk2-edk2-stable%{version}.tar.gz</changelog>
  <changelog author="jlee@suse.com" date="1641211200">- Modified gdb_uefi.py.in for python3 (bsc#1192126)
  - change 'long' to 'int'
  - using
    print ('
    instead of
    print "</changelog>
  <changelog author="bwiedemann@suse.com" date="1645099200">- Sort file lists for reproducible build results</changelog>
  <changelog author="jlee@suse.com" date="1646913600">- Update to edk2-stable202202
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg Add new target for Cloud Hypervisor
  Add TDVF to OvmfPkg
  Add new APIs to UefiCpuPkg/UefiCpuLib
  Add AMD Secure Nested Paging Support
  Add SSDT PCI generator in DynamicTablesPkg
  Support ACPI 6.4 PPTT changes
  Add FdtHwInfoParser library
  Add DynamicPlatRepo library
  Make package and platform builds reproducible across source format changes
  Add Uncrustify CI Plugin
  Apply uncrustify changes to all package C and H files
  - Patches (git log --oneline --reverse edk2-stable202111~..edk2-stable202202):
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  ef9a059cdb EmulatorPkg/Win/Host: Update CC_FLAGS
  69877614fd .pytool/Plugin/EccCheck: Remove RevertCode()
  854462bd34 .pytool/Plugin/EccCheck: Remove temp directory on exception
  3019f1bbab .pytool/Plugin/EccCheck: Add performance optimizations
  99f84ff473 .pytools/Plugin/LicenseCheck: Use temp directory for git diff output
  76a1ce4d5f .azurepipelines/templates: Update max pipeline job time to 2 hours
  365dced2c3 ArmPkg: Update YAML to ignore specific ECC files/errors
  1939fc9569 ArmPlatformPkg: Update YAML to ignore specific ECC files/errors
  c97fee87f0 ArmVirtPkg: Update YAML to ignore specific ECC files/errors
  d5744ecba8 CryptoPkg: Update YAML to ignore specific ECC files/errors
  d7d30e8f21 EmulatorPkg: Update YAML to ignore specific ECC files/errors
  9deb937076 MdeModulePkg: Update YAML to ignore specific ECC files/errors
  df790cd6b3 MdePkg: Update YAML to ignore specific ECC files/errors
  60fa40be45 SecurityPkg: Update YAML to ignore specific ECC files/errors
  9944508e85 ShellPkg: Update YAML to ignore specific ECC files/errors
  c30c40d6c6 StandaloneMmPkg: Update YAML to ignore specific ECC files/errors
  c057347977 UefiPayloadPkg: Update YAML to ignore specific ECC files/errors
  f0f3f5aae7 UnitTestFrameworkPkg: Update YAML to ignore specific ECC files/errors
  dfafa8e453 MdeModulePkg/DxeCorePerformanceLib:Variable Initial
  a4a582e180 ArmPkg: Change use of EFI_D_* to DEBUG_*
  1d2482e1e3 ArmPlatformPkg: Change use of EFI_D_* to DEBUG_*
  c5b3a56e4f ArmVirtPkg: Change use of EFI_D_* to DEBUG_*
  a1878955b2 EmbeddedPkg: Change use of EFI_D_* to DEBUG_*
  9c7da8d804 EmulatorPkg: Change use of EFI_D_* to DEBUG_*
  917e98f3e5 FatPkg: Change use of EFI_D_* to DEBUG_*
  87000d7708 MdeModulePkg: Change use of EFI_D_* to DEBUG_*
  5f289f3ae3 MdePkg: Change use of EFI_D_* to DEBUG_*
  c49ca4a29e NetworkPkg: Change use of EFI_D_* to DEBUG_*
  47719926e8 OvmfPkg: Change use of EFI_D_* to DEBUG_*
  ca56749b0e PcAtChipsetPkg: Change use of EFI_D_* to DEBUG_*
  e905fbb05a SecurityPkg: Change use of EFI_D_* to DEBUG_*
  4a1aee13d8 ShellPkg: Change use of EFI_D_* to DEBUG_*
  586fda4800 SourceLevelDebugPkg: Change use of EFI_D_* to DEBUG_*
  96e1cba5c1 UefiCpuPkg: Change use of EFI_D_* to DEBUG_*
  1871d28eaf ArmPkg: Change OPTIONAL keyword usage style
  2863ba97ca ArmPlatformPkg: Change OPTIONAL keyword usage style
  9607597a74 ArmVirtPkg: Change OPTIONAL keyword usage style
  c8f46130f8 CryptoPkg: Change OPTIONAL keyword usage style
  fe2d81892f DynamicTablesPkg: Change OPTIONAL keyword usage style
  792433088c EmbeddedPkg: Change OPTIONAL keyword usage style
  c69fc80c80 EmulatorPkg: Change OPTIONAL keyword usage style
  9c721071d3 FmpDevicePkg: Change OPTIONAL keyword usage style
  e3917e22e7 MdeModulePkg: Change OPTIONAL keyword usage style
  d0e2f8232a MdePkg: Change OPTIONAL keyword usage style
  8874fa199d NetworkPkg: Change OPTIONAL keyword usage style
  79d49e162e OvmfPkg: Change OPTIONAL keyword usage style
  237295f46d PcAtChipsetPkg: Change OPTIONAL keyword usage style
  dc8fe5ec95 RedfishPkg: Change OPTIONAL keyword usage style
  12710fe93b SecurityPkg: Change OPTIONAL keyword usage style
  9b8507cabe ShellPkg: Change OPTIONAL keyword usage style
  18908e6131 SignedCapsulePkg: Change OPTIONAL keyword usage style
  f9c9215b55 SourceLevelDebugPkg: Change OPTIONAL keyword usage style
  902e76de19 StandaloneMmPkg: Change OPTIONAL keyword usage style
  4ec586b9f6 UefiCpuPkg: Change OPTIONAL keyword usage style
  e35dd32821 UefiPayloadPkg: Change OPTIONAL keyword usage style
  78bc3bdd2a UnitTestFrameworkPkg: Change OPTIONAL keyword usage style
  ea85f0fe13 ArmVirtPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  e3b855f283 CryptoPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  4a9d411662 DynamicTablesPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  db52c7f755 MdeModulePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  098307e082 MdePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  ed7f7c9168 NetworkPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  8e875037bf OvmfPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  deba54761a PcAtChipsetPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  f9f4fb2329 SecurityPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  7c2a6033c1 UefiCpuPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  429309e0c6 ArmPkg: Apply uncrustify changes
  40b0b23ed3 ArmPlatformPkg: Apply uncrustify changes
  2b16a4fb91 ArmVirtPkg: Apply uncrustify changes
  7c34237831 CryptoPkg: Apply uncrustify changes
  731c67e1d7 DynamicTablesPkg: Apply uncrustify changes
  e7108d0e96 EmbeddedPkg: Apply uncrustify changes
  a550d468a6 EmulatorPkg: Apply uncrustify changes
  bcdcc4160d FatPkg: Apply uncrustify changes
  45ce0a67bb FmpDevicePkg: Apply uncrustify changes
  111f2228dd IntelFsp2Pkg: Apply uncrustify changes
  7c7184e201 IntelFsp2WrapperPkg: Apply uncrustify changes
  1436aea4d5 MdeModulePkg: Apply uncrustify changes
  2f88bd3a12 MdePkg: Apply uncrustify changes
  d1050b9dff NetworkPkg: Apply uncrustify changes
  ac0a286f4d OvmfPkg: Apply uncrustify changes
  5220bd211d PcAtChipsetPkg: Apply uncrustify changes
  39de741e2d RedfishPkg: Apply uncrustify changes
  c411b485b6 SecurityPkg: Apply uncrustify changes
  47d20b54f9 ShellPkg: Apply uncrustify changes
  b878648967 SignedCapsulePkg: Apply uncrustify changes
  c1e126b119 SourceLevelDebugPkg: Apply uncrustify changes
  91415a36ae StandaloneMmPkg: Apply uncrustify changes
  053e878bfb UefiCpuPkg: Apply uncrustify changes
  e5efcf8be8 UefiPayloadPkg: Apply uncrustify changes
  7c0ad2c338 UnitTestFrameworkPkg: Apply uncrustify changes
  dc453b5164 .pytool/Plugin/UncrustifyCheck: Add Uncrustify CI plugin
  1832eb15aa UefiPayloadPkg/UefiPayloadPkg.fdf: Update DXE Apriori list
  ca78281c25 UefiPayloadPkg/PayloadEntry: Inherit 4/5-level paging from bootloader
  b2f7ee2ded UefiPayloadPkg: Increase SystemMemoryUefiRegionSize from 32M to 64M
  94e0a7bddb UefiPayloadPkg: Add missing Guid gUefiAcpiBoardInfoGuid
  2527723de9 UefiPayloadPkg: Add performance measurement feature
  ffdde9d719 UefiPayloadPkg: Skip ModuleInfo HOB in Payload
  965292135b UefiPayloadPkg/UefiPayloadPkg.dsc:Add BootManagerLib for BootManagerMenuApp
  85a678bf76 UefiPayloadPkg: Add integration instruction for coreboot common error
  7b28310008 BaseTools: Increase the DevicePath length for support more PCD value.
  d25b803e51 MdeModulePkg/Bus/Pci/UhciDxe: Fix the UsbHc memory allocate and free issue
  c82ab4d8c1 BaseTools/VfrCompile: Correct Bit Field Flags for numeric/one of
  2ddacfb6b8 OvmfPkg/SecMain: move SEV specific routines in AmdSev.c
  e2289d19d8 UefiCpuPkg/MpInitLib: move SEV specific routines in AmdSev.c
  2fe8edfe55 OvmfPkg/ResetVector: move clearing GHCB in SecMain
  3053183d41 OvmfPkg/ResetVector: introduce SEV metadata descriptor for VMM use
  707c71a01b OvmfPkg: reserve SNP secrets page
  cca9cd3dd6 OvmfPkg: reserve CPUID page
  f2dc28f0b6 OvmfPkg/ResetVector: pre-validate the data pages used in SEC phase
  34819f2cac OvmfPkg/ResetVector: use SEV-SNP-validated CPUID values
  d9822304ce OvmfPkg/MemEncryptSevLib: add MemEncryptSevSnpEnabled()
  7c3b2892ea OvmfPkg/SecMain: register GHCB gpa for the SEV-SNP guest
  d2b998fbdc OvmfPkg/VmgExitLib: use SEV-SNP-validated CPUID values
  a19b648952 OvmfPkg/PlatformPei: register GHCB gpa for the SEV-SNP guest
  19914edc5a OvmfPkg/AmdSevDxe: do not use extended PCI config space
  ade62c18f4 OvmfPkg/MemEncryptSevLib: add support to validate system RAM
  d706f8fec2 OvmfPkg/MemEncryptSevLib: add function to check the VMPL0
  11b15336f0 OvmfPkg/BaseMemEncryptSevLib: skip the pre-validated system RAM
  d39f8d88ec OvmfPkg/MemEncryptSevLib: add support to validate &gt; 4GB memory in PEI phase
  202fb22be6 OvmfPkg/SecMain: validate the memory used for decompressing Fv
  8eb79b5f4f OvmfPkg/PlatformPei: validate the system RAM when SNP is active
  26210f9436 MdePkg: Define ConfidentialComputingGuestAttr
  504ae26b80 OvmfPkg/PlatformPei: set PcdConfidentialComputingAttr when SEV is active
  b95908e043 UefiCpuPkg/MpInitLib: use PcdConfidentialComputingAttr to check SEV status
  f4e3ce5f53 UefiCpuPkg: add PcdGhcbHypervisorFeatures
  f5a6e1bab5 OvmfPkg/PlatformPei: set the Hypervisor Features PCD
  2c354252be MdePkg/GHCB: increase the GHCB protocol max version
  9c703bc0f1 UefiCpuPkg/MpLib: add support to register GHCB GPA when SEV-SNP is enabled
  d4d7c9ad5f UefiCpuPkg/MpInitLib: use BSP to do extended topology check
  b928eb44d5 OvmfPkg/MemEncryptSevLib: change the page state in the RMP table
  b7b8872031 OvmfPkg/MemEncryptSevLib: skip page state change for Mmio address
  ea3a12d970 OvmfPkg/PlatformPei: mark cpuid and secrets memory reserved in EFI map
  67484aed69 OvmfPkg/AmdSev: expose the SNP reserved pages through configuration table
  06544455d0 UefiCpuPkg/MpInitLib: Use SEV-SNP AP Creation NAE event to launch APs
  0f1d7477c0 OvmfPkg: Remove unused print service driver (PrintDxe)
  30631f0a26 MdePkg: Add missing Cache ID (in)valid define
  0077c22f6d MdePkg: Remove PPTT ID type structure
  a50b65ce22 ShellPkg: Update Acpiview PPTT parser to ACPI 6.4
  8cf2bdfcfb ShellPkg: Add Cache ID to PPTT parser
  b2bbe3df54 DynamicTablesPkg: Remove PPTT ID structure from ACPI 6.4 generator
  e139829dd6 DynamicTablesPkg: Update PPTT generator to ACPI 6.4
  e81a81e584 DynamicTablesPkg: Add CacheId to PPTT generator
  9afcd48a94 OvmfPkg: Handle Cloud Hypervisor host bridge
  2ccefa32a6 OvmfPkg: Create global entry point for SMBIOS parsing
  d8ef774346 OvmfPkg: Retrieve SMBIOS from Cloud Hypervisor
  66bce05f6d OvmfPkg: Generalize AcpiPlatformDxe
  7594c5bfe2 OvmfPkg: Install ACPI tables for Cloud Hypervisor
  f6df289a1c OvmfPkg/OvmfXen: Fix Xen build
  2b20a34fd5 OvmfPkg-EmuVariableFvbRuntimeDxe: Support Access To Memory Above 4G
  d5efc875ef MdePkg: Introduce CcMeasurementProtocol for CC Guest firmware
  a124cd4ef9 SecurityPkg: Support CcMeasurementProtocol in DxeTpm2MeasureBootLib
  8c06c53b58 SecurityPkg: Support CcMeasurementProtocol in DxeTpmMeasurementLib
  adf070ff56 OvmfPkg/Microvm: add PcdConfidentialComputingGuestAttr
  2686468c43 OvmfPkg/Bhyve: add MemEncryptSevLib
  61be49e0f7 OvmfPkg/PlatformCI: factor out PlatformBuildLib.py
  21ee379407 OvmfPkg/PlatformCI: add QEMU_SKIP
  64bccda534 OvmfPkg/PlatformCI: add BhyveBuild.py
  04eacd3943 OvmfPkg/PlatformCI: add MicrovmBuild.py
  8b8ae609a7 OvmfPkg/PlatformCI: add AmdSevBuild.py
  2722856a87 OvmfPkg/PlatformCI: dummy grub.efi for AmdSev
  1203eba58e OvmfPkg/PlatformCI: add XenBuild.py
  64ef0dd1d3 OvmfPkg/Microvm/fdt: add device tree support
  79dcaf7054 OvmfPkg/Microvm/fdt: load fdt from fw_cfg
  c802f8935c OvmfPkg/Microvm/fdt: add empty fdt
  2a68abf6ee OvmfPkg/Microvm/virtio: add virtio-mmio support
  e07d27e24d OvmfPkg/Microvm: add README
  7f1861be2b DynamicTablesPkg: AML Code generation for memory ranges
  0e7147fe75 DynamicTablesPkg: AML Code generation to create a named Package()
  fd5fc4bbb7 DynamicTablesPkg: AML Code generation to create a named ResourceTemplate()
  b2b8def4e3 DynamicTablesPkg: AML Code generation to add _PRT entries
  69ddfee1c3 DynamicTablesPkg: Add AmlAttachNode()
  ce306e48eb DynamicTablesPkg: Add Pci related objects
  e35a746cf5 DynamicTablesPkg: SSDT Pci express generator
  ec37fd9c1f DynamicTablesPkg: Fix multiple objects parsing
  557dede8a6 OvmfPkg/PlatformPei: ScanOrAdd64BitE820Ram improvements
  759e3c6d21 OvmfPkg/PlatformPei: prefer etc/e820 for memory detection
  41d8bb3038 OvmfPkg/PlatformPei: stop using cmos for memory detection
  7a6e6ae933 EmulatorPkg: Update lldbefi.py to work with current lldb which uses python3
  4d30352445 ArmPkg: Add SMC helper functions
  c039fa7ff0 ArmPkg: Update SMC calls to use the new ArmCallSmc0/1/2/3 functions
  90ad4b3b34 DynamicTablesPkg: Definition for HwInfoParser interface
  d59c5a20f8 DynamicTablesPkg: FdtHwInfoParser: CM Object descriptor helper
  5d8b5d171c DynamicTablesPkg: FdtHwInfoParser: Add FDT utility functions
  8d2691c3d5 DynamicTablesPkg: FdtHwInfoParser: Add Boot Arch parser
  3ebe1ff5c9 DynamicTablesPkg: FdtHwInfoParser: Generic Timer Parser
  51941f7558 DynamicTablesPkg: FdtHwInfoParser: Add Serial port parser
  e366a41ef0 DynamicTablesPkg: FdtHwInfoParser: Add GICC parser
  0fa1217726 DynamicTablesPkg: FdtHwInfoParser: Add GICD parser
  b04cf355a0 DynamicTablesPkg: FdtHwInfoParser: Add MSI Frame parser
  d250d408cf DynamicTablesPkg: FdtHwInfoParser: Add ITS parser
  7b6c8b30a5 DynamicTablesPkg: FdtHwInfoParser: Add GICR parser
  26bf034a59 DynamicTablesPkg: FdtHwInfoParser: Add GIC dispatcher
  c67bf628c8 DynamicTablesPkg: FdtHwInfoParser: Add PCI config parser
  deb01dfd7f DynamicTablesPkg: Add FdtHwInfoParser library
  9006967c8d DynamicTablesPkg: Handle 16550_WITH_GAS id
  b2d0ed20fd DynamicTablesPkg: Definition for DynamicPlatRepoLib interface
  2e2db65e39 DynamicTablesPkg: DynamicPlatRepo: Add TokenGenerator
  740e3bb634 DynamicTablesPkg: DynamicPlatRepo: Add TokenFixer
  5fe5b6f94f DynamicTablesPkg: DynamicPlatRepo: Add TokenMapper
  38f6d78c3b DynamicTablesPkg: Add DynamicPlatRepo library
  f14fff5135 StandaloneMmPkg/FvLib: Support large file with EFI_FFS_FILE_HEADER2.
  3a72ec71cd OvmfPkg: remove unused TPM options from MicrovmX64.dsc
  b47575801e OvmfPkg: move tcg configuration to dsc and fdf include files
  5711ff4d0b OvmfPkg: drop TPM_CONFIG_ENABLE
  b819388772 OvmfPkg: create Tcg12ConfigPei.inf
  4de8d61bce OvmfPkg: rework TPM configuration
  e6ea1464a8 OvmfPkg/PlatformPei: Revert "stop using cmos for memory detection"
  a6c0418651 ArmPkg/SmbiosMiscDxe: Remove duplicate HII string definition
  45e3842970 ArmPkg/SmbiosMiscDxe: Get full SMBIOS strings from OemMiscLib
  b451c69088 ArmPkg/ProcessorSubClassDxe: Get serial and part number from OemMiscLib
  8ed8568922 SecurityPkg: Debug code to audit BIOS TPM extend operations
  195f011973 SecurityPkg: Reallocate TPM Active PCRs based on platform support
  ab5ab2f603 SecurityPkg: TPM must go to Idle state on CRB command completion
  c63a10ecb7 EmbeddedPkg/AcpiLib: Add more helper functions
  f129b1f06f OvmfPkg/Bhyve: fix tls-enabled build
  ee1f8262b8 OvmfPkg: Call PlatformInitializeConsole for GPU passthrough case
  de9e5b7dc7 IntelFsp2WrapperPkg : FSPM/S UPD data address based on Build Type
  9ec2cc1f31 IntelFsp2WrapperPkg : Remove EFIAPI from local functions.
  ae8272ef78 MdeModulePkg/UsbBusDxe: fix NOOPT build error
  15c596aeeb OvmfPkg: Bhyve: Delete unused AcpiTables/Ssdt.asl file
  6612ff8561 UefiCpuPkg: Extend measurement of microcode patches to TPM
  e910f076ad BaseTools: Fix the bug of --cmd-len build option
  7935be0fbd IntelFsp2Pkg/FspSecCore: ExtendedImageRevision was not printed.
  c095122d4b MdeModulePkg/PciBusDxe: Enumerator to check for RCiEP before looking for RP
  d463c56ddd MdeModulePkg: Replace with UFS_UNIT_DESC to fix timeout problem
  45920941d9 MdeModulePkg: Refactoring UFS DME request and fix timing problem
  13d9e8ec98 MdeModulePkg: Put off UFS HCS.DP checking to fix timing problem
  079a58276b OvmfPkg/AmdSev/SecretPei: Mark SEV launch secret area as reserved
  9dd14fc91c MdePkg: Add registers of boot partition feature
  14a731096d UnitTestFrameworkPkg: CI YAML: Grant cmockery spell check exception
  6062002bd5 MdeModulePkg/PartitionDxe: Add break to handle invalid LBA0 in MBR
  7438a85bf1 BaseTools: Fix wrong variable header size
  c712ce2bb1 OvmfPkg/CloudHv: Add new target for Cloud Hypervisor
  a2da72b2ca OvmfPkg/CloudHv: Replace legacy 8254 PIT with local APIC timer
  6ecdda71fe OvmfPkg/CloudHv: Connect serial console
  1552050ce7 OvmfPkg/CloudHv: Remove legacy 8259 PIC support
  fdcea7ff6f OvmfPkg/CloudHv: Remove Q35 specifics
  71082d3d1b OvmfPkg/CloudHv: Reduce dependency on QemuFwCfg
  196be601f9 OvmfPkg/CloudHv: Remove video support
  7b6cbe0a81 OvmfPkg/CloudHv: Remove USB support
  e73d1bf96a OvmfPkg/CloudHv: Remove CSM support
  b66056ef21 OvmfPkg/CloudHv: add Maintainers.txt entry
  5302bd81d9 OvmfPkg: Add CloudHvX64 to the CI
  59c48c9314 UefiPayloadPkg: Change the user interface name of the Uiapp
  5801910013 UefiPayloadPkg: Not use BaseCpuTimerLib by default.
  772c5bb8dc FmpDevicePkg/FmpDxe: Update FmpDeviceCheckImageWithStatus() handling
  7709988dd8 RedfishPkg/RedfishRestExDxe:Simplify status check
  21320ef669 MdeModulePkg/Variable: Make only EFI_VARIABLE_NON_VOLATILE invalid
  7e5c603cba MdeModulePkg/SdMmcPciHcDxe: Robust improvements for SD card 1.8V switch
  ee67067f17 MdeModulePkg: VariableSmmRuntimeDxe: Fix Variable Policy Message Length
  5b39832e18 MdePkg: MmCommunication2: Update MM communicate2 function description
  ce37f45955 ArmPkg: MmCommunicationDxe: MM communicate function argument attributes
  541a077bd1 ArmPkg: MmCommunicationDxe: Update MM communicate `CommBuffer**` checks
  1aa1ec4574 ArmPkg: MmCommunicationDxe: Update MM communicate `CommSize` check
  8cc5590eab ArmPkg: MmCommunicationDxe: Update MM communicate `MessageLength` check
  6777e67383 EmbeddedPkg: Fix a build error in FwVol.c in X64 arch
  a867f3a704 UefiPayloadPkg: Use BaseCpuTimerLib for Universal Payload by default
  f4b7b473b4 MdeModulePkg/UefiBootManagerLib: Convert BmLoadOption to Variable Policy
  76b3d45b75 ShellPkg: Add the missing VariablePolicyHelperLib in ShellPkg.dsc
  8542fc5f95 NetworkPkg: Add the missing VariablePolicyHelperLib in NetworkPkg.dsc
  ae35314e7b Maintainers.txt: Add Sami Mujawar as reviewer for ArmPkg
  862ea6e836 OvmfPkg: change qemu default resolution to 1280x800
  e95b44c90e ArmVirtPkg: change qemu default resolution to 1280x800
  929804b172 OvmfPkg: add PcdVideoResolutionSource
  7f25ddbc03 OvmfPkg/QemuVideoDxe: simplify InitializeBochsGraphicsMode
  336da55ca8 OvmfPkg/QemuVideoDxe: drop QEMU_VIDEO_BOCHS_MODES-&gt;ColorDepth
  55c05427b9 OvmfPkg/QemuVideoDxe: factor out QemuVideoBochsAddMode
  49a2d8cbf5 OvmfPkg/QemuVideoDxe: parse edid blob, detect display resolution
  ba79becd55 OvmfPkg/BaseCachingPciExpressLib: Migrate BaseCachingPciExpressLib
  103fa647d1 ArmPkg: Replace CoreId and ClusterId with Mpidr in ARM_CORE_INFO struct
  742dafd2cc DynamicTablesPkg: Print specifier macro for CM_OBJECT_ID
  13136cc311 DynamicTablesPkg: FdtHwInfoParserLib: Parse Pmu info
  5751d60821 DynamicTablesPkg: AmlLib: AmlAddPrtEntry() to handle GSI
  5816bd3eab DynamicTablesPkg: AcpiSsdtPcieLibArm: Remove link device generation
  dc1118fa0d ArmVirtPkg: Add cspell exceptions
  0dbd356983 ArmVirtPkg/Kvmtool: Add DSDT ACPI table
  312ef7a0a4 ArmVirtPkg/Kvmtool: Add Configuration Manager
  17a02163bd ArmVirtPkg/Kvmtool: Enable ACPI support
  5b3c682d91 ArmVirtPkg/Kvmtool: Enable Acpiview
  017564d637 ArmPkg/ArmMmuLib AARCH64: avoid EL0 accessible mappings
  45b1612659 DynamicTablesPkg: Add Memory32Fixed function
  007a95055b DynamicTablesPkg: Remove redundant cast in AmlCodeGenReturn
  33189f0527 DynamicTablesPkg: Add AmlCodeGenMethodRetInteger function
  a4b7aa362d MdeModulePkg/Bus/Pci/PciBusDxe: Support platform PCI ROM override
  6fb09da89f ShellPkg: Fix incorrect PPTT FlagName dereference
  c09dbc92e9 BaseTools/Conf: Add new macro for customizing dll file reduction.
  d4ac53aa91 BaseTools: Fix error leg in DscBuildData.py
  f78b937c95 MdeModulePkg/RuntimeDxe: clear mVirtualMapMaxIndex
  96b8b5fd10 MdeModulePkg/UiApp: Fix spelling of 'FRONTPAGE'
  bd676f080a Maintainers.txt: add missing github IDs to OvmfPkf/Fdt reviewers
  1f54eaa725 Maintainers.txt: update email for Leif Lindholm
  b360b0b589 Maintainers.txt: Update email address
  c9b7c6e0cc BaseTools: Update CLANG{35,38}_WARNING_OVERRIDES to ignore unused vars
  42af706dfb BaseTools: Update brotli submodule
  1193aa2dfb MdeModulePkg: update brotli submodule
  85589ddbf6 OvmfPkg/VmgExitLib: Fix uninitialized variable warning with XCODE5
  c28e376edc OvmfPkg/FvbServicesSmm: use the VmgExitLibNull
  8a57673316 ShellPkg: Fix Ping GetTimerPeriod API failure
  b24306f15d NetworkPkg: Fix incorrect unicode string of the AKM/Cipher Suite
- Add amd-sev-es to the following descriptors because James Fehlig
  tested them (bsc#1196879):
    60-ovmf-x86_64.json
    60-ovmf-x86_64-2m.json
    60-ovmf-x86_64-ms.json
    60-ovmf-x86_64-2m-ms.json
- Backported patches in ovmf-bsc1196879-sev-fix.patch for fixing SEV:
    de463163d9 OvmfPkg/AmdSev: reserve snp pages
  63c50d3ff2 OvmfPkg/ResetVector: cache the SEV status MSR value in workarea
  f1d1c337e7 OvmfPkg/BaseMemEncryptLib: use the SEV_STATUS MSR value from workarea</changelog>
  <changelog author="fvogt@suse.com" date="1647345600">- TPM_ENABLE got renamed to TPM2_ENABLE and TPM_CONFIG_ENABLE removed
  (except on ARM for some reason) (boo#1197104)</changelog>
  <changelog author="jlee@suse.com" date="1651406400">- Respin amd-sev and amd-sev-es features
  After more testing, we found that not all descriptors can support
  both amd-sev with amd-sev-es. So we removed all amd-sev and amd-sev-es
  feature tags but only keep them in ovmf-x86_64-2m.json and
  60-ovmf-x86_64.json. (bsc#1198246#c75)</changelog>
  <changelog author="jlee@suse.com" date="1662465600">- Add patches to disable option ROM on sev (bsc#1199156)
  - Backported the following patches:
  - ovmf-MdeModulePkg-Update-PciEnumeratorSupport-to-ignore-O.patch
  cb8349f01a        MdeModulePkg: Update PciEnumeratorSupport to ignore OptionRom if needed
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch
  c477b2783f        OvmfPkg/IncompatiblePciDeviceSupportDxe: Ignore OptionRom in Td guest
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Refine-the-c.patch
  149ed8e421        OvmfPkg/IncompatiblePciDeviceSupportDxe: Refine the configuration
  - To disable option ROM both on tdx and sev:
  ovmf-bsc1199156-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch</changelog>
  <changelog author="jlee@suse.com" date="1665144000">- Add patches to fix detection issue of NVME controller (bsc#1203825)
  - ovmf-MdeModulePkg-NvmExpressDxe-fix-check-for-Cap.Css.patch
  - ovmf-MdeModulePkg-NvmExpressPei-fix-check-for-NVM-command.patch</changelog>
  <changelog author="jlee@suse.com" date="1681128000">- Add ovmf-Revert-OvmfPkg-OvmfXen-Set-PcdFSBClock.patch to revert
  71cdb91f313380152d7bf38cfeebe76f5b2d39ac patch (bsc#1205613)
  - 71cdb91f313380152d7bf38cfeebe76f5b2d39ac OvmfPkg/OvmfXen: Set PcdFSBClock
  - We are waiting better upsteam patch, revert the issue patch first.
    Then PcdFSBClock will back to fixed variable.
  - Reference: https://edk2.groups.io/g/devel/topic/94891128#96077
  https://bugzilla.tianocore.org/show_bug.cgi?id=4340</changelog>
  <changelog author="jlee@suse.com" date="1683979200">- Add ovmf-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch
  to check result of GetEfiGlobalVariable2 (CVE-2019-14560, bsc#1174246)</changelog>
  <changelog author="jlee@suse.com" date="1683979201">- Add ovmf-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch
  for MdeModulePkg/PiSmmCore: SmmEntryPoint underflow (CVE-2021-38578)
  (bsc#1196741)</changelog>
</package>
<package pkgid="4f0fc6034c67ef2fe82725df8b8332d1435790f6d4844e618f8a59b6ca7ca7da" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="97150c37e7fe62a8e5a5a39e91d7506abf5fbf088d3b5c6bc262f2c1ebe073b6" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="9f2423451b05a6bb26dc9ab0999fd8833c39841568cf8b3fbc3f2d6d35ba7f7b" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="9ed26041a4e7dfccafa08854738397e880e0ac1118b6f5bef43b58f7dc3cefba" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="6d17143ef54768e93325988b102a691af816ec4db4bf74725f3ace5cc20605f1" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="e31111bbbcf38f8115c9025bd67c439e95ce66a83b28bcb45d413bcdaa624d4f" name="qemu-s390x" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="71673bfee29ca88bb6a86e70f12cdbebb6df40a770a5f6be6035e4597479b026" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="00c8c405aae972566968b9aea344683bc09870320c4d17811fc3883116baf1f5" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="c30987bf571c36c701a0efdd5d1a41d6f3cd1152326c4f587297c11113df0df1" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="87a705bceb5a42b361f29bfa77d05b60ccc41bc5c61999b2533f97eb4dffbcdb" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="2ccde4108b19328f19aee1921aebf15bf946ca7963511510f4787fa2a2a76627" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="c2e62b3d5add9750b401e8332948e8c573c1808f771b9669dd9cc9db0e687cc8" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="77fac3c08baa11c5a14c1e43a06fd3d35cae756b5a70cffb8c6ed9afb397e2c9" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="7c68ac46c29bee6c930ebc454d871057e2d6853207507d240c78d414bf3b2bf2" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="2e04688d6cecc1dd1bf15ec633f3374831b8ba572ee6fb1814467fa8e55522c1" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="d18a94822abb2ad90166f8834491905d7fa59736d2bb5056a785a7f71b0301dd" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="70d29f8fcb2592aaaa267ffb60a2e969c90f1c857706f5a367ceaab3e721ab70" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="9fb047f256fea856f33922628c64873682778e0f8c946c2dd6ef20f8c841b3cb" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="85f4364dc4a8871ee0afc80993c229c4651865a96cb5ac0f4590da4d01e08929" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="3108541463a0d7b4bef3c34afb6c29b7d6d80c5237c321d15a6d717a82cd99e4" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="fa5513f3dd6fa0d98355e0a59159e5f85817aabe640868438e3b33cef5725582" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="441191c36e0e0badb3716da6169374dd06d7252043c705473e72d3d7d6b59cf9" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="ef0603475f9bdf742a44e939328fe8925bbf438dca378623b11ee749fef1dc01" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="0078a41135c78627d27fdee4b3761824f7125f95f90c9ffd7d0051542213c0fc" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="a0d48b694b23e340f257761466595424be4b4e7f7ba98b8f0dc0d7131a26db22" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="a025d166e35a80dd88cb9f927cb6354442c09ab939cab07ed45c653e3e758568" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="126cef5d8fe000ff09012c5aaca1fc295fd27807ea4f7f9723b7a9c2ee0a4b65" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="43965a04979cb7fa12558d0666983a74aa9f5456237d0e6d03ba6104bff65cb1" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="a1c6f71338adedab41ae10da60ef8a52ea916f57a8ce6d10e6fe633e92b70551" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="d504d8816317d4ba44fdb57b21bedbbf50257f2c94e90404bdec77f582a24c83" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="912915a971dd2f339881ca9cc1d07097b7ccf26afc0f3742d12bf25925c9acf6" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="c4eddf48261f040486c87ec87447f54cf33eb25ac750513cad26107c59833c12" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="4efe660597ed667aec30bcf3acb27a616317dd894726125ca86f8220966f1b8c" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="f11cfce6702f6bbe8c54aac7dc41d7acebe50194505710f1c6a3b6fa68afd77c" name="qemu-tools" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="912f3e1cf2867efc119d6837387e95b80b1fd95416f8dbf15d72780634a18db4" name="qemu-tools" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="f1f73e04a350a825356ff1b513682ab0467dd20cfd5fd6965df17a4c025fb29e" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="8b7c4cb2a5133de8d1b97d6a8fcef89c03ffab9aaf640a126b65d844377b64c2" name="qemu-uefi-aarch64" arch="noarch">
  <version epoch="0" ver="202202" rel="150400.5.10.1"/>
  <changelog author="glin@suse.com" date="1625832000">- Add ovmf-fix-xen-s3-detection.patch to fix the S3 detection in
  ovmf-xen
- Add ovmf-xen-add-qemu-kernel-loader-fs.patch to add
  QemuKernelLoaderFsDxe to ovmf-xen to load kernel from qemu fw_cfg</changelog>
  <changelog author="jlee@suse.com" date="1634212800">- Update to edk2-stable202108
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg: remove Xen support from OvmfPkg*.dsc, in favor of OvmfXen.dsc
  Add CLANGDWARF toolchain for generating ELF+DWARF
  NetworkPkg/IScsiDxe: remotely exploitable buffer overflows
  NetworkPkg/IScsiDxe: add sha256 support to CHAP
  Create header files and multiple Hobs for Universal Payload
  Add search feature in config editor
  Add additional build option to treat Dynamic Pcd as DynamicEx Pcd
  Add a new MicrocodeLib for microcode loading
  Implement key enrolment from default key variables
  StandaloneMm support for 32bit Arm machines
  Add firmware support for Cloud Hypervisor on arm64
  Support architecture-specific openssl acceleration
  Support measured AMD SEV boot with kernel/initrd/cmdline
  Add ACPI 6.4 header
  Add new BootDiscoveryPolicyUiLib
  - Patches (git log --oneline --reverse edk2-stable202105~..edk2-stable202108):
  e1999b264f ArmPkg/ArmGic: Fix maximum number of interrupts in GICv3
  b8ed8c0fb2 Maintainers.txt: add Sami Mujawar as top-level ArmVirtPkg reviewer
  dbc22a1785 UefiCpuPkg/MpInitLib: Allocate a separate SEV-ES AP reset stack area
  0095070e70 MdePkg/Register/Amd: expand the SEV MSR to include the SNP definition
  f828fc9876 MdePkg/Register/Amd: realign macros with more space for future expansion
  34e16ff883 MdePkg/Register/Amd: define GHCB macros for hypervisor feature detection
  f0983b2074 MdePkg/Register/Amd: define GHCB macro for Register GPA structure
  4665fa6503 MdePkg/Register/Amd: define GHCB macro for the Page State Change
  dfd41aef78 MdePkg/Register/Amd: define GHCB macros for SNP AP creation
  5a7cbd54a1 MdePkg/BaseLib: add support for PVALIDATE instruction
  2b5b2ff04d MdePkg/BaseLib: add support for RMPADJUST instruction
  901a9bfc3a OvmfPkg/BaseMemEncryptSevLib: introduce MemEncryptSevClearMmioPageEncMask()
  c394fa4c9e OvmfPkg/AmdSevDxe: use MemEncryptSevClearMmioPageEncMask() to clear EncMask
  8ee4e52ba8 OvmfPkg/QemuFlashFvbServicesRuntimeDxe: use Mmio helper to clear enc mask
  b4a8de5d27 OvmfPkg/TpmMmioSevDecryptPei: use MemEncryptSevClearMmioPageEncMask()
  adfa3327d4 OvmfPkg/BaseMemEncryptSevLib: remove Flush parameter
  fe5da0927a IntelFsp2WrapperPkg: Remove microcode related PCDs
  d3ff5dbe1d MdePkg: MmControl: Fix function and structure definition mismatches
  197e27c90a MdePkg: Add new 16550-compatible Serial Port Subtypes to DBG2
  fdf3666f01 MdePkg: Update DBG2 and SPCR header with NVIDIA 16550 Subtype
  b233eb1849 EmbeddedPkg/RealTimeClockRuntimeDxe: Improve GetWakeupTime
  b5379899b3 MdeModulePkg/Xhci: Fix TRT when data length is 0
  039e07f626 MdePkg/MdeModulePkg: Move AML_NAME_SEG_SIZE definition
  1f515342d8 DynamicTablesPkg: Use AML_NAME_SEG_SIZE define
  75e9154f81 OvmfPkg/VirtioMmioDeviceLib: Add EFIAPI to VirtioMmioSetQueueAddress
  c410ad4da4 MdePkg/BaseLib: Fix AsmReadSs() with GCC toolchain
  c1aa3bab12 BaseTools: Add ClangBase.lds for CLANG8 tool chain with max-page-size
  c6b872c6ab BaseTools GenFw: Support CLANG8ELF with conversion ELF to PE/COFF image
  cf9959adff BaseTools: Update build_rule to skip CLANG resource section generation
  4b56ad2049 BaseTools: Add new CLANG8ELF tool chain for new LLVM/CLANG8
  e1636fe18f BaseTools: Update ClangBase.lds to keep dynamic section
  924c2b847f BaseTools: Change CLANG8ELF to CLANGDWARF
  e25566cd2b OvmfPkg: remove the Xen drivers from the IA32, IA32X64, and X64 platforms
  aa7f19f480 OvmfPkg: remove the Xen drivers from the AmdSev platform
  7bc04a75a7 OvmfPkg: switch IA32, IA32X64, X64 to the fw_cfg-only ACPI platform driver
  d697037446 OvmfPkg: switch the AmdSev platform to the fw_cfg-only ACPI platform driver
  ae4aa4a346 OvmfPkg/README: bump minimum QEMU version to 1.7.1, machine types to 1.7
  2a85d9b07e OvmfPkg/AcpiPlatformDxe: fix header file warts
  180f1908b3 OvmfPkg/AcpiPlatformDxe: sort #includes and [LibraryClasses]
  6d1e56e715 OvmfPkg/AcpiPlatformDxe/QemuLoader.h: remove QemuFwCfgLib class dependency
  747b1ef725 OvmfPkg/AcpiPlatformDxe: move "QemuLoader.h" to IndustryStandard
  cc302b799e OvmfPkg/AcpiPlatformDxe: consolidate #includes and [LibraryClasses]
  c9bba52fc7 OvmfPkg/XenAcpiPlatformDxe: create from AcpiPlatformDxe
  a31fcb5096 OvmfPkg/AcpiPlatformDxe: remove the "AcpiPlatformDxe.inf" driver
  4115840c28 OvmfPkg/XenAcpiPlatformDxe: remove the QEMU ACPI linker/loader client
  d6ba8aa6ef OvmfPkg/XenAcpiPlatformDxe: remove QEMU fw_cfg dependency
  3f975ee570 OvmfPkg/XenAcpiPlatformDxe: remove the InstallAcpiTable() helper function
  8f8d3d90c5 OvmfPkg/XenAcpiPlatformDxe: remove OVMF's built-in ACPI tables
  4174c5c787 OvmfPkg/Bhyve/AcpiPlatformDxe: fix file path typo in comment
  d491c88a0c OvmfPkg/AcpiTables: remove unused module
  e7641171b6 OvmfPkg/OvmfXen: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  3357ac7380 OvmfPkg/XenAcpiPlatformDxe: remove delayed ACPI table installation
  d06eb2d1d9 OvmfPkg/PlatformPei: remove Xen support
  8899e3fe6a OvmfPkg: drop PcdPciDisableBusEnumeration from the IA32, IA32X64, X64 DSCs
  2833589ad0 OvmfPkg: drop PcdPciDisableBusEnumeration from the AmdSev platform
  e43cca74ad OvmfPkg/Bhyve: make "PcdPciDisableBusEnumeration" Fixed-at-Build
  b005f9f1f5 OvmfPkg/OvmfXen: remove IncompatiblePciDeviceSupport DXE driver
  8c8f886f27 OvmfPkg/Bhyve: remove IncompatiblePciDeviceSupport DXE driver
  984c93ece3 OvmfPkg/IncompatiblePciDeviceSupportDxe: remove PcdPciDisableBusEnumeration
  32fef03563 OvmfPkg/PciHostBridgeLib: consolidate #includes and INF file sections
  e120c962f5 OvmfPkg/PciHostBridgeLibScan: create from PciHostBridgeLib
  c2f24ba321 OvmfPkg/Bhyve: consume PciHostBridgeLibScan
  307763c3da OvmfPkg/OvmfXen: consume PciHostBridgeLibScan
  242678da2a OvmfPkg/PciHostBridgeLib: remove Bhyve and Xen support
  33d4f3e39e OvmfPkg/PciHostBridgeLibScan: remove QEMU (fw_cfg) support
  4c81178cf0 OvmfPkg/PciHostBridgeLibScan: remove PcdOvmfHostBridgePciDevId
  8af38170b5 OvmfPkg/PciHostBridgeLibScan: clean up file names and file-top comments
  7e25086a00 OvmfPkg/SmbiosPlatformDxe: clean up #includes and INF
  5072593738 OvmfPkg/SmbiosPlatformDxe: return EFI_NOT_FOUND if there is no SMBIOS data
  4db374562f OvmfPkg/SmbiosPlatformDxe: locate SMBIOS protocol in InstallAllStructures()
  a8ab14424e OvmfPkg/SmbiosPlatformDxe: split GetXenSmbiosTables() decl. to new header
  9d84e74ca0 OvmfPkg/SmbiosPlatformDxe: declare InstallAllStructures() in header file
  d4a8aaee73 OvmfPkg/SmbiosPlatformDxe: create Xen-specific module INF file
  ce270905bf OvmfPkg/SmbiosPlatformDxe: split Xen entry point from QEMU entry point
  51adb689e1 OvmfPkg: restrict XenPlatformLib to BdsDxe in the IA32, IA32X64, X64 DSCs
  ddb3fdbef3 BaseTools GenFw: Fix regression issue to convert the image to ACPI data
  558d83ab1a OvmfPkg/README: Fix typo in README
  beb443fde0 ShellPkg: Fix typo
  702ba436ed OvmfPkg/PlatformCI: bump QEMU choco package version to 2021.5.5
  83761337ec NetworkPkg/IScsiDxe: wrap IScsiCHAP source files to 80 characters
  29cab43bb7 NetworkPkg/IScsiDxe: simplify "ISCSI_CHAP_AUTH_DATA.InChallenge" size
  95616b8661 NetworkPkg/IScsiDxe: clean up "ISCSI_CHAP_AUTH_DATA.OutChallengeLength"
  e8f28b09e6 NetworkPkg/IScsiDxe: clean up library class dependencies
  cf01b2dc8f NetworkPkg/IScsiDxe: fix potential integer overflow in IScsiBinToHex()
  d90fff40cb NetworkPkg/IScsiDxe: assert that IScsiBinToHex() always succeeds
  dc469f1371 NetworkPkg/IScsiDxe: reformat IScsiHexToBin() leading comment block
  47b76780b4 NetworkPkg/IScsiDxe: fix IScsiHexToBin() hex parsing
  54e90edaed NetworkPkg/IScsiDxe: fix IScsiHexToBin() buffer overflow
  b8649cf2a3 NetworkPkg/IScsiDxe: check IScsiHexToBin() return values
  288bd74a22 Pytool: SpellCheck: Fix incorrect file mask across package matrices
  1ad794b627 MdeModulePkg: Fix device path when boot manager menu is from different FV
  11b1c1d4b9 SecurityPkg: TcgStorageOpalLib: Initialize SupportedAttributes parameter.
  d58016b768 UefiPayloadPkg: Get platform specific logic via protocol for BDS
  d8c18ba3f4 MdeModulePkg: Add Universal Payload general definition header file
  b597b6e24c MdeModulePkg: Add new structure for the PCI Root Bridge Info Hob
  99de2e7e03 UefiPayloadPkg: UefiPayload retrieve PCI root bridge from Guid Hob
  9d53e01efe MdeModulePkg: Add new structure for the Universal Payload SMBios Table Hob
  70e8c9c3bc MdeModulePkg/Universal/SmbiosDxe: Scan for existing tables
  302a8f353c UefiPayloadPkg: Create gUniversalPayloadSmbiosTableGuid Hob
  75293330ea MdeModulePkg: Add new structure for the Universal Payload ACPI Table Hob
  761329ee27 MdeModulePkg/ACPI: Install ACPI table from HOB.
  8c0d678063 UefiPayloadPkg: Create gUniversalPayloadAcpiTableGuid Hob
  fa24b6ed26 UefiPayloadPkg: Use DynamicEx instead of Dynamic to pass PCD across binary
  c511426abe MdeModulePkg/UniversalPayload: Add definition for extra info in payload
  fe471d4a57 UefiPayloadPkg: Add PayloadLoaderPeim which can load ELF payload
  ab2b389e7a PeiCore: Remove assertion when failing to load PE image
  1b380aa603 BaseTools GenFw: Keep read only alloc section as text when convert ELF
  9cf9de668f StandaloneMmPkg: Core: Spelling error in comment
  610385fa3b ArmPlatformPkg: SpellCheck: Switch spellcheck CI to AuditOnly
  04ddd1271e ArmPkg: SpellCheck: Update valid acronyms in ExtendedWords
  cdf7544703 MdeModulePkg PciBusDxe: Increase the width of data read during oprom shadow
  2847c72fda Maintainers.txt: Add Reviewers for Universal Payload definitions
  1162ae8297 Maintainers.txt: Add reviewers for ACPI and SMBIOS modules
  a63914d3f6 ArmPkg: Move cache defs used in Universal/Smbios into ArmCache.h
  6cfeeb71c4 UefiCpuPkg/CpuCommonFeaturesLib: Correct the CPU location check
  d9a7612f8d MdeModulePkg/BdsDxe: Update BdsEntry to use Variable Policy
  5959879e92 ArmVirtPkg: Add PCIe host bridge utility lib for ArmVirtPkg
  4dda0f7ab4 ArmVirtPkg: Enable PCIe support for Kvmtool
  1e5e58d39b UefiPayloadPkg/UefiPayloadEntry: Improve bootloader memrange parsing
  7471751a4d UefiPayloadPkg/UefiPayloadEntry: Remove 4GB memory WA
  20ca528828 CryptoPkg: BaseCryptLib: Update Salt length requirement for RSA-PSS scheme.
  18b2272e4d Azurepipeline: SpellCheck: Enforce Node dependency to use version 14.x
  eba32695ee CryptoPkg/BaseCryptLib: Enabled CryptSha512 for Smm/Runtime drivers
  12e34cd2f7 OvmfPkg/Bhyve: clean up TPM_ENABLE remnants
  82f727c4af UefiPayloadPkg: Add HobLib for UniversalPayload
  ea0bd5f6a7 MdeModulePkg: Add new structure for the Universal Payload Serial Port Info
  a75c029f60 UefiPayloadPkg: Add a separate PlatformHookLib for Universal Payload
  d63595c3c9 UefiPayloadPkg: Update the function definition of HobConstructor
  0ff6de9358 UefiPayloadPkg: Create separate Payload Entry for UniversalPayload
  b208d37c73 UefiPayloadPkg: Get and enter DxeCore for Universal Payload
  27cb64fffc UefiPayloadPkg: Fix up UPL Pcd database
  6b69f73b59 UefiPayloadPkg: Include UniversalPayLoad modules in UefiPayloadPkg.dsc
  86e6948cfb UefiPayloadPkg: Remove assert when reserve MMIO/IO resource for devices
  2db0ed93ff UefiPayloadPkg: Add macro to enable and disable some drivers
  3eb72b308a UefiPayloadPkg: Add PcdInstallAcpiSdtProtocol feature in UefiPayloadPkg
  caa139fe17 UefiPayloadPkg: Add PcdResetOnMemoryTypeInformationChange in UefiPayloadPkg
  8efd912baf UefiPayloadPkg: Add new structure for BootManagerMenuFile HOB
  19a541d70e UefiPayloadPkg: consume the BootManagerMenuFile HOB
  333a866106 BaseTools: Remove check for Split.exe in toolset.bat
  f0a3f6d9c3 BaseTools: Fix spelling of "overwrite" and "overwriting" in toolset.bat
  17143c4837 BaseTools: Reset ERRORLEVEL in toolsetup.bat after edk2basetools check
  abfff7c45d BaseTools GenFw: Add support for RISCV GOT/PLT relocations
  27b8a52957 MdePkg: MmConfiguration: Move definition of EFI_MM_RESERVED_MMRAM_REGION
  d1fc3d7ef3 MdePkg: MmConfiguration: Added definition of MM Configuration PPI
  5a2e030f73 OvmfPkg/GenericQemuLoadImageLib: plug cmdline blob leak on success
  932449710c OvmfPkg/X86QemuLoadImageLib: plug cmdline blob leak on success
  24b0e9d128 Revert "OvmfPkg/QemuKernelLoaderFsDxe: don't expose kernel command line"
  cf20302474 OvmfPkg/GenericQemuLoadImageLib: Read cmdline from QemuKernelLoaderFs
  9421f5ab8d OvmfPkg/X86QemuLoadImageLib: State fw_cfg dependency in file header
  b37cfdd280 OvmfPkg/XenPlatformPei: Relocate shared_info page mapping
  55dee4947b MdePkg : Add IPMI Macro and Structure Defintions to resolve build errors
  580b11201e IntelFsp2Pkg: Add Config Editor tool support
  939ed3a592 UefiPayloadPkg/PayloadLoader: Fix bug in locating relocation section
  3cde0d553d UefiPayloadPkg/PayloadLoader: Remove assertion
  49eeda113a NetworkPkg/IScsiDxe: re-set session-level authentication state before login
  7eba9f698e NetworkPkg/IScsiDxe: add horizontal whitespace to IScsiCHAP files
  7b6c2b2a26 NetworkPkg/IScsiDxe: distinguish "maximum" and "selected" CHAP digest sizes
  903ce1d8f8 NetworkPkg/IScsiDxe: support multiple hash algorithms for CHAP
  47fea2abcb NetworkPkg/IScsiDxe: support SHA256 in CHAP
  bb33c27fbe NetworkPkg: introduce the NETWORK_ISCSI_MD5_ENABLE feature test macro
  8697dc60cc Maintainers.txt: Update Maintainers and reviewers for UefiPayloadPkg
  fea7901dba UefiPayloadPkg: Fix the build failure
  1e0c441c92 OvmfPkg/Bhyve: add USB support
  44ced03798 OvmfPkg/Bhyve: use static PCI32Base address
  b3db0cb1f8 MdeModulePkg/PartitionDxe: Ignore PMBR BootIndicator per UEFI spec
  0a6b303dce UefiCpuPkg/ExceptionLib: Conditionally clear shadow stack token busy bit
  d10e058016 MdeModulePkg/RegularExpressionDxe: Fix memory assert in FreePool()
  4c051c2c65 MdeModulePkg: Update YAML file to fix CI error
  31fcee6d99 ArmVirtPkg: Add PlatformHasAcpiDtDxe for Cloud Hypervisor
  c28fc8ab3b ArmVirtPkg: Install Acpi tables for Cloud Hypervisor
  0e3b6bd0ee ArmVirtPkg: support Cloud Hypervisor in edk2
  b560e9d9b6 IntelFsp2Pkg: PatchFv parseInfFile function modification
  f47c4676dd Pytool: SpellCheck: Defer path expansion in cspell parameters
  cc89d245f9 Maintainers.txt: remove Laszlo Ersek's entries
  84af6ea320 BaseTools/Scripts: Ignore Mergify merge commits in PatchCheck.py
  b491eace37 .mergify: Simplify Mergify rules using GitHub status checks
  5ef08a49e3 .azurepipelines: Remove FINISHED and FAILED states
  ad1009ec62 MdePkg/Include: Add STATIC_ASSERT for L'' and L"" strings
  3de3c24755 BaseTools: Remove non-ascii character of StructurePcd comment
  40a9066439 BaseTools: Enable the flag to treat dynamic pcd as dynamicEx
  22fe311bd2 .pytool/EccCheck: Locate BaseTools dir with EDK_TOOLS_PATH
  a050c599df .pytool/EccCheck: Rename edk2_path as workspace_path
  50672d2692 .pytool/EccCheck: Check ecc_csv exists
  fb5b6220a9 .pytool/EccCheck: Set PACKAGES_PATH env var in Ecc
  fda5226aa3 UefiPayloadPkg: Dump hob information from boot loader
  7d748705b1 MdeModulePkg: Change the PldHeader to Header in ExtraData.h
  9bf4aee734 UefiPayloadPkg: Assign the length of UniversalPayload ExtraData
  d0b6596b8e MdeModulePkg/RamDiskDxe: Init list head before registering RamDisk protocol
  91f5d3b410 IntelFsp2Pkg: BaseCacheLib EfiProgramMtrr MtrrNumber Should be UINT32
  be282b1493 UefiPayloadPkg: Add PCD_DYNAMIC_AS_DYNAMICEX and set to True
  cac83b6f3b IntelFsp2Pkg: Add search function for Config Editor
  4bac086e8e UefiPayloadPkg: Add FV Guid for DXEFV and PLDFV
  fddb8d24ec ArmPlatformPkg/Scripts: Infer dll load address from console output
  885efcd3f9 MdePkg/Include: Smbios Specification 3.4.0 changes
  83b43c4cb1 MdeModulePkg PCD: Print which PCD was unable to be found
  c32c5911c4 BaseTools GenFw: Add support for R_RISCV_PCREL_LO12_S relocation
  097aeeb119 MdePkg/BaseLib: Add MemoryFence implementation for RiscV64
  391cffcb61 MdeModulePkg PiSmmCore: Change MemoryAttributes message to DEBUG_VERBOSE
  8781b143de BaseTools/Scripts: Fix GetMaintainer.py line endings
  28ef05ce10 BaseTools/Scripts: Allow GitHub ID at end Maintainers.txt lines
  2f5ad3f451 Maintainers.txt: Add GitHub IDs
  332632abf3 Maintainers.txt: Add Jiewen Yao as OvmfPkg Maintainer
  4d28a1c2fd BaseTools: Remove COMMON section from the GCC discard list
  878a92a887 CryptoPkg/OpensslLib: Add native instruction support for X64
  147f34b56c CryptoPkg/OpensslLib: Commit the auto-generated assembly files for X64
  ac70e71b1f NetworkPkg: Making the HTTP IO timeout value programmable with PCD
  ab796d3e2a NetworkPkg: Add HTTP Additional Event Notifications
  b461d67639 OvmfPkg/ResetVector: move SEV specific code in a separate file
  7f05102f65 OvmfPkg/ResetVector: add the macro to invoke MSR protocol based VMGEXIT
  dc485c556d OvmfPkg/ResetVector: add the macro to request guest termination
  f05eb2dfe5 OvmfPkg/AmdSev/SecretDxe: fix header comment to generic naming
  35e267cb34 OvmfPkg/AmdSev: use GenericQemuLoadImageLib in AmdSev builds
  a26a08dc1f OvmfPkg: PlatformBootManagerLibGrub: Allow executing kernel via fw_cfg
  0cb48007f7 OvmfPkg: add library class BlobVerifierLib with null implementation
  c73e31f54d OvmfPkg: add BlobVerifierLibNull to DSC
  6bf5580a3d ArmVirtPkg: add BlobVerifierLibNull to DSC
  d10ad8444f OvmfPkg/QemuKernelLoaderFsDxe: call VerifyBlob after fetch from fw_cfg
  5ace477f34 OvmfPkg/AmdSev/SecretPei: build hob for full page
  0deeab36d1 OvmfPkg/AmdSev: reserve MEMFD space for for firmware config hashes
  385b9d80a0 OvmfPkg/AmdSev: add BlobVerifierLibSevHashes
  514b3aa08e OvmfPkg/AmdSev: Enforce hash verification of kernel blobs
  8e6bb64fe4 EmbeddedPkg/VirtualRealTimeClockLib: Fix SetTime issues
  610bcc69ed ArmVirtPkg: Remove meaningless comment
  3445058aea MdeModulePkg/CapsuleApp: Fix typo in error message
  2e1fb41339 build: Fix python3.10 threading DeprecationWarnings
  0b1b0a9674 python: Replace distutils.utils.split_quotes with shlex.split
  fc50df0d8e BaseTools: Drop check for distutils.utils
  03e77558d4 BaseTools: use shutil.copyfile instead shutil.copy2
  2b47aaecef MdeModulePkg: Add BootDiscoveryPolicyUiLib.
  bb806a6e88 SecurityPkg: Create SecureBootVariableLib.
  9732659698 SecurityPkg: Create library for enrolling Secure Boot variables.
  12a4d0cb9d ArmVirtPkg: add SecureBootVariableLib class resolution
  3d427c5f83 OvmfPkg: add SecureBootVariableLib class resolution
  b926956418 EmulatorPkg: add SecureBootVariableLib class resolution
  db959018b6 SecurityPkg: Remove duplicated functions from SecureBootConfigDxe.
  a97e9e327e ArmPlatformPkg: Create include file for default key content.
  94e065582b SecurityPkg: Add SecureBootDefaultKeysDxe driver
  19107590b6 SecurityPkg: Add EnrollFromDefaultKeys application.
  45f3dd2ce9 SecurityPkg: Add new modules to Security package.
  55266a9b8a SecurityPkg: Add option to reset secure boot keys.
  6355287206 Maintainers.txt: Add new maintainer and reviewer to EmbeddedPkg/
  9abc60f9f7 EmbeddedPkg/libfdt: Add strcmp and strncpy to libfdt_env.h
  0856cdc89e MdePkg: add definition of LINUX_EFI_INITRD_MEDIA_GUID
  97fdcbda4e OvmfPkg: Remove Initrd LINUX_EFI_INITRD_MEDIA_GUID
  4de77ae989 UefiCpuPkg/CpuCacheInfoLib: Sort CpuCacheInfo array
  3c6107758b SecurityPkg: Fix GetSupportedAndActivePcrs counter calculation
  b40bdd6ecd UefiPayloadPkg: Add Fixed PCDs and use Macro to define the default value.
  d497eace3b UefiPayloadPkg: define some PCD as DynamicEX PCD
  ac6e5d6b41 UefiPayloadPkg: change the default value of some PCDs.
  672bd1c711 UefiPayloadPkg: Add a macro to enable or diable the serial driver.
  d02dbb53cd UefiPayloadPkg: Fix the non-ascii character in UniversalPayloadEntry.c
  a7ddc7847c RedfishPkg/JsonLib: Add more JsonLib functions
  5963ce5d28 MdePkg: Add ACPI 6.4 header file
  4d7137f261 MdePkg: Increment FADT version
  d910e83299 MdePkg: Rename SBSA Generic Watchdog to Arm Generic Watchdog
  ad3dea9861 MdePkg: Update PMTT to ACPI 6.4
  ced4cb7609 MdePkg: Add SPA Location Cookie field to SPA Range structure
  c82d6dd4a3 MdePkg: Remove DPPT table
  357383bc4f MdePkg: Add flags and MinTransferSize to Generic Initiator
  7b17bcd9a0 MdePkg: Add 'Type 5' PCC structure
  0938f9235c MdePkg: Add Multiprocessor Wakeup structure
  75c4a8e10d MdePkg: Add the Platform Health Assessment Table (PHAT)
  1803757a9b MdePkg: Add Secure Access Components in the SDEV table
  605c4a1ff2 MdePkg: Add Cache ID to PPTT
  3d359ff905 MdePkg: Fix broken coding style in Acpi64.h
  7311e96417 RedfishPkg/RefishCrtLib: Public RefishCrtLib
  03e19e6bc8 ArmPkg/IndustryStandard: 32b/64b agnostic FF-A, Mm SVC and Std SMC IDs
  aee0098faf ArmPkg: prepare 32bit ARM build of StandaloneMmPkg
  ca1773878d GenFv: Arm: support images entered in Thumb mode
  b7f0226a46 StandaloneMmPkg: fix pointer/int casts against 32bit architectures
  a776bbabd9 StandaloneMmPkg: build for 32bit arm machines
  ac826886c9 MdeModulePkg/UefiSortLib:Add UefiSortLib unit test
  6fdd1c13a7 MdeModulePkg PCD: Reinstall PCD service PPIS when memory available
  ef56f55d19 EmbeddedPkg/NonCoherentDmaLib: Avoid dereferencing unset Map field
  8dd4fc5be6 UefiCpuPkg/CpuCacheInfoLib: Correct logical for identifying cache type
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  - Removed patches which are merged to mainline:
  ovmf-bsc1186151-fix-iscsi-overflows.patch
  ovmf-xen-relocate-shared_info_page-map.patch
  - Updated patches
  ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
  ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - Added patches
  ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="jlee@suse.com" date="1634904000">- Removed edk2-stable202105.tar.gz because we updated to edk2-stable202108</changelog>
  <changelog author="jlee@suse.com" date="1635249600">- Removed patches which are merged to mainline:
    ovmf-bsc1186151-fix-iscsi-overflows.patch
    ovmf-xen-relocate-shared_info_page-map.patch
- Removed patches because replaced:
    ovmf-fix-xen-s3-detection.patch -&gt; ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
    ovmf-xen-add-qemu-kernel-loader-fs.patch -&gt; ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1636372800">- Update rpmlintrc (fixes aarch64 build)</changelog>
  <changelog author="jlee@suse.com" date="1638532800">- Merge the difference from SLE for pushing back to SLE15-SP4
  - Add/Update 50-xen-hvm-x86_64.json in descriptors.tar.xz
  - Add the json descriptor for xen-hvm (bsc#1180050)
  - Add "nvram-template" and change the firmware file to
  ovmf-x86_64-ms-4m.bin (bsc#1180050, bsc#1181264)
  - The following patches in SLE are already in edk2-edk2-stable202108
    in factory, so they will be removed from 15-SP4
  - ovmf-bsc1177789-cryptopkg-fix-null-dereference.patch to fix
    the potential NULL dereference in AuthenticodeVerify()
    (bsc#1177789, CVE-2019-14584)
  - 26442d11e620a9	edk2-stable202011~124
  - ovmf-bsc1180079-amd-sev-es-mitigation.patch to mitigate the
  potential AMD SEV-ES security issues
  (bsc#1180079)
  - a91b700e385e74	edk2-stable202102~181
  - ovmf-jscSLE-16075-SEV-ES-use-physical-address.patch as the
  follow-up patch for SEV-ES to fix the flash writing
  (jsc#SLE-16075)
  - 3a3501862f7309	edk2-stable202102~105
  - ovmf-bsc1183578-lzma-catch-4GB.patch to fix the possible
  heap corruption
  (bsc#1183578, CVE-2021-28211)
  - e7bd0dd26db7e5	edk2-stable202011~7
  - ovmf-bsc1183579-fix-fv-recursion.patch to fix unlimited FV
  recursion
  (bsc#1183579, CVE-2021-28210)
  - b9bdfc72853fe9	edk2-stable202011~9
  - Add ovmf-bsc1186151-fix-iscsi-overflows.patch to fix the possible
  overflows in IScsiDxe
  (bsc#1186151)
  - 83761337ec91fb	edk2-stable202108-rc0~171</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638792000">- cross-i386-binutils and cross-i386-gcc have been dropped from
  Factory, so use only cross-x86_64-* - boo#1193424</changelog>
  <changelog author="jlee@suse.com" date="1638964800">- For preparing push to SLE15-SP4, add more notes:
  - Drop upstreamed ovmf-jscSLE-16075-SEV-ES-fixes.patch from 15-SP4
  - All patches in the above big patch are in edk2-stable202011
  - Some changes in ovmf.spec file of 15-SP4:
  - brotli-v1.0.7-17-g666c328-c.tar.xz and "add brotli" section
  be removed because ovmf-disable-brotli.patch.
  - Using %{_prefix} instead of /usr hard code.
  - Redundant %defattr(-,root,root) are removed.
  - BuildRoot be removed because factory doesn't have it.
  - Sync some differences in the change log between 15-SP3 with openSUSE
    TW since "Wed Jan 24 06:31:21 UTC 2018":
  - Add TLS and IPv6 supports for ArmVirtQemu.
  - ovmf-bsc1119454-additional-scsi-drivers.patch to support more
  SCSI drivers (PvScsi, MptScsi, and LsiScsi) (bsc#1119454)
  - already in edk2-stable202008
  - Drop the build requirement of python2</changelog>
  <changelog author="jlee@suse.com" date="1640088000">- Update to edk2-stable202111
  - Features (https://github.com/tianocore/edk2/releases):
  Add SSDT CPU topology generator
  Support ACPI 6.4 in GTDT parser and generator
  Support ACPI 6.4 in DynamicTables FADT parser
  Support ACPI 6.4 in Acpiview PCCT parser
  Support ACPI 6.4 in Acpiview HMAT parser
  Add support for the microvm machine type (qemu)
  OVMF/ArmVirt: add support for virtio-mmio 1.0
  IntelFsp2Pkg: adopt FSP 2.3 specification
  UefiCpuPkg VTF0 X64: Build page tables using Linear-Address Translation to a 1-GByte Page
  Enable wildcard host name matching in HTTPS/TLS implementation
  Add QuickSort function into BaseLib
  Add SMM NV variable support in universal UEFI payload
  Add TDVF to OvmfPkg
  Make package and platform builds reproducible across source format changes
  - Patches (git log --oneline --reverse edk2-stable202108~..edk2-stable202111):
  7b4a99be8a CryptoPkg: BaseCryptLib fix incorrect param order
  82f7e315d6 MdeModulePkg/PeiCore: Remove MigrateSecModulesInFv()
  8b15024dc7 Maintainers: Add kraxel as Reviewer to ArmVirtPkg and OvmfPkg
  80e67af9af OvmfPkg: introduce a common work area
  ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
  b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm
  a82bad9730 ArmPkg/GicV3Dxe: Don't signal EOI on arbitrary interrupts
  94e465e5cb OvmfPkg/Virtio10: Add virtio-mmio 1.0 defines
  08293e43da OvmfPkg/VirtioMmioDeviceLib: Add virtio 1.0 detection.
  212a2b9bb8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetPageSize.
  537a724421 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Fix SetQueueAddress
  6a3e9576b8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Add default QueueNum
  ae12188cf8 OvmfPkg/VirtioMmioDeviceLib: virtio 1.0: Adapt feature bit handling
  77d5fa8024 OvmfPkg/VirtioMmioDeviceLib: enable virtio 1.0
  b04453d36b MdeModulePkg/EbcDxe: Mitigate memcpy intrinsics
  dc995ce906 MdeModulePkg: Add BootDiscoveryPolicyOld variable.
  443300be46 MdePkg:Update IndustryStandard/Nvme.h with Nvme amdin controller data
  0f11537548 MdeModulePkg:Increase Nvme capacity display
  cae735f613 ArmPkg: Enable boot discovery policy for ARM package.
  cb0d24637d OvmfPkg/OvmfXen: set PcdAcpiS3Enable at initialization
  28152333bc OvmfPkg/LockBoxLib: use PcdAcpiS3Enable to detect S3 support
  52e2dabc0f OvmfPkg/PlatformBootManagerLib: use PcdAcpiS3Enable to detect S3 support
  5b5f10d746 OvmfPkg/SmmControl2Dxe: use PcdAcpiS3Enable to detect S3 support
  9f3eda177a OvmfPkg/OvmfXen: add QemuKernelLoaderFsDxe
  f0fe55bca4 UefiPayloadPkg: Fix the build error when enable Core ci for UefiPayloadPkg
  5d34cc49d5 UefiCpuPkg/PiSmmCpuDxeSmm: Update mPatchCetSupported set condition
  cdda3f74a1 UefiPayloadPkg/UefiPayloadEntry: Fix memory corruption
  3b3f882288 MdeModulePkg/PiSmmCore: Drop deprecated image profiling commands
  b170806518 UefiCpuPkg: Clean up save state boundary checks and comments.
  12e33dca4c IntelFsp2Pkg: Support Config File and Binary delta comparison
  63fddc98e0 UefiPayloadPkg: Create .yaml file in UefiPayloadPkg
  e3ee8c8dbd .azurepipelines: Add UefiPayloadPkg in gate-build-job.yml and CISetting.py
  b6bc203375 MdeModulePkg/HiiDatabaseDxe:remove dead code block
  c5e805ffe1 MdeModulePkg: Fix typo of "memory" in RamDiskDxe debug message
  81d71fb86e Maintainers.txt: Update maintainer/reviewer roles in MdeModulePkg
  edf8bc6d24 SecurityPkg/MemoryOverwriteControl: Add missing argument to DEBUG print
  4473834e7d OvmfPkg/OvmfXen: Fix build with QemuKernelLoaderFsDxe
  a7cf2c5664 RedfishPkg: Fix various typos
  851785ea67 UefiPayloadPkg: Include more modules in UefiPayloadPkg.
  d248516b3a UefiPayloadPkg: Include Network modules in UefiPayloadPkg.
  6c7d6d4a5e UefiCpuPkg: ResetVector Tool Support for Python 3
  cf7c650592 UefiCpuPkg: ResetVector Tool additional debug prints
  d96df7e993 UefiPayloadPkg: Fix the bug in dump guid HOB info functions
  dcd3d63f4f UefiPayloadPkg: Dump hob info from gEdkiiBootManagerMenuFileGuid
  610d8073f2 SecurityPkg/TPM: Import PeiDxeTpmPlatformHierarchyLib.c from edk2-platforms
  4d5f39cd22 SecurityPkg/TPM: Fix bugs in imported PeiDxeTpmPlatformHierarchyLib
  ebbc8ab2cd SecrutiyPkg/Tcg: Import Tcg2PlatformDxe from edk2-platforms
  2906e572c6 SecurityPkg/Tcg: Make Tcg2PlatformDxe buildable and fix style issues
  f108178c56 SecurityPkg: Introduce new PCD PcdRandomizePlatformHierarchy
  a4867dea2a SecurityPkg/Tcg: Import Tcg2PlatformPei from edk2-platforms
  2fa89c8e11 SecurityPkg/Tcg: Make Tcg2PlatformPei buildable and fix style issues
  3b69fcf5f8 SecurityPkg: Add references to header and inf files to SecurityPkg
  6c80564b89 MdeModulePkg/Core/Pei: Fix typo in function descriptions
  6f501a7c9b MdeModulePkg/Core/Pei: Make migrated PEIM message verbose
  c19d18136e MdeModulePkg/Core/Pei: Fix pointer size mismatch in EvacuateTempRam()
  f4e72cf9d6 UefiPayloadPkg: Add script to build UniversalPayload in UefiPayloadPkg
  bda3546c55 UefiPayloadPkg: Fix the warning when building UefiPayloadPkg with IA32+X64
  010753b7e7 UefiCpuPkg: Refactor initialization of CPU features during S3 resume
  89f7ed8b29 UefiCpuPkg: Prevent from re-initializing CPU features during S3 resume
  60d8bb9f28 UefiCpuPkg: VTF0 Linear-Address Translation to a 1-GByte Page till 512GB
  ac6388add4 ArmPkg/ProcessorSubClassDxe: Fix the format of ProcessorId
  e3e47d7963 UefiCpuPkg: SecCoreNative without ResetVector
  542cba73d2 SecurityPkg: Add debug log for indicating IBB verified OBB successfully
  f334c5a41d IntelFsp2WrapperPkg: Make PcdFspModeSelection dynamic
  79019c7a42 OvmfPkg: set a default value for the WorkAreaHeader PCD
  fdeff3fdae EmbeddedPkg: Remove duplicate libfdt.h include
  f2a7e24e38 EmbeddedPkg: AndroidBootImgBoot error handling updates
  c0cd26f43c EmbeddedPkg: Install FDT if UpdateDtb is not present
  7ea7f9c077 EmbeddedPkg: Add LoadFile2 for linux initrd
  d60915b751 UefiPayloadPkg: Add Macro to enable or disable some drivers.
  46b4606ba2 MdeModulePkg/PciBusDxe: Improve the flow of testing support attributes
  f57040b038 MdeModulePkg/BootManagerMenuApp: Limit string drawing within one line
  b0f1b1c5fd MdePkg: Fix DEVICE_SECURITY_EVENT_DATA_HEADER version definition
  cc5a67269e UefiPayloadPkg: Build a HOB from bootloader ACPI table
  dc430ccf3f UefiPayloadPkg: Use dummy constructor for PlatformHookLib
  4a1899dd79 UefiPayloadPkg: Add ".upld_info" in universal payload
  2ea0a0a414 BaseTools: Switch to downloading the ARM compiler from Arm's site
  1ce6ceb75b BaseTools: Switch to downloading the AARCH64 compiler from Arm's site
  c214128a38 BaseTools/GenMake: Use ToolDefinition as fallback option
  259c184c8f BaseTools/build: Set MakefileName
  445c39f757 BaseTools: Remove Makefile/MakefileName fields
  c7d5b046d9 BaseTools: Remove hard-coded strings for target and tools_def
  442e46d3b6 UefiPayloadPkg: Update maximum logic processor to 256
  499c4608b1 OvmfPkg/TPM PPI: Connect default consoles for user interaction
  b8675deaa8 OvmfPkg: Handle TPM 2 physical presence opcodes much earlier
  8ab8fbc016 OvmfPkg: Reference new Tcg2PlatformDxe in the build system for compilation
  bd298d7593 OvmfPkg: Reference new Tcg2PlatformPei in the build system
  f86de75862 MdePkg: MmCommunication: Added definition of MM Communication PPI
  8b4bb94f64 MdePkg: CI YAML: Added new GUID to ignore duplicate list
  9e950cda6a MdeModulePkg: CI YAML: Added new GUID to ignore duplicate list
  2273799677 SecurityPkg: Fix SecureBootDefaultKeysDxe failed to start
  422e5d2f7f UefiPayloadPkg: Remove asm code and sharing libraries
  0875443f7e DynamicTablesPkg: Extract AcpiHelperLib from TableHelperLib
  20775950c6 DynamicTablesPkg: Update TableHelperLib.inf
  1ad5182500 DynamicTablesPkg: Rename single char input parameter
  653113412f DynamicTablesPkg: Add HexFromAscii() to AcpiHelperLib
  72ab552554 DynamicTablesPkg: Add AmlGetEisaIdFromString() to AcpiHelperLib
  96e006b37e DynamicTablesPkg: Add Configuration Manager Object parser
  235ff9fcd1 DynamicTablesPkg: Use %a formatter in AmlDbgPrint
  7a8c037e9e DynamicTablesPkg: Update DynamicTablesPkg.ci.yaml
  691c5f7762 DynamicTablesPkg: Deprecate Crs specific methods in AmlLib
  22873f58c4 DynamicTablesPkg: Rework AmlResourceDataCodegen.c/h
  4cc1458dbe IntelFsp2Pkg: Adopt FSP 2.3 specification.
  c49cb8f30e ArmPkg: SmbiosMiscDxe: Don't populate ExtendedBiosSize when size &lt; 16MB
  282122ec5f ArmVirtPkg/TPM: Add a NULL implementation of TpmPlatformHierarchyLib
  b3685956d2 ArmVirtPkg: Reference new TPM classes in the build system for compilation
  c806b76865 ArmVirtPkg: Disable the TPM2 platform hierarchy
  606340fba3 OvmfPkg/Microvm: copy OvmfPkgX64 files as-is
  4932f05a00 OvmfPkg/Microvm: rename output files, fix includes
  2a49c19b9e OvmfPkg/Microvm: no smm
  60d55c4156 OvmfPkg/Microvm: no secure boot
  0569c52b15 OvmfPkg/Microvm: no tpm
  06fa1f1931 OvmfPkg/Microvm: no sev
  6073bf6cd8 OvmfPkg/Microvm: no csm
  b9dd64b80e OvmfPkg/Microvm: no emulated scsi
  27de86ae41 OvmfPkg/Microvm: use MdePkg/Library/SecPeiDxeTimerLibCpu
  76602f45dc OvmfPkg/Microvm: use XenTimerDxe (lapic timer)
  6a8e9ad24b OvmfPkg/Microvm: PlatformPei/MemDetect tweaks
  8583b57c5c OvmfPkg/Microvm: PlatformPei/Platform memory map tweaks
  bf02d73e74 OvmfPkg/Microvm: PlatformPei/Platform: add id.
  1d3e89f349 OvmfPkg/ResetSystemLib: add driver for microvm
  2c467c9be2 OvmfPkg/Microvm: BdsPlatform: PciAcpiInitialization tweak.
  8456785986 OvmfPkg/Microvm: use PciHostBridgeLibNull
  55f47d2299 OvmfPkg/Microvm: wire up serial console, drop super-io
  862e814de4 OvmfPkg/Microvm: add Maintainers.txt entry
  06a326caf1 DynamicTablesPkg: Update FADT generator to ACPI 6.4
  f09dbf20b9 DynamicTablesPkg: Rename SBSA generic watchdog
  942c9bd357 ShellPkg: Update Acpiview GTDT parser to ACPI 6.4
  80e67bcb23 ShellPkg: Update Acpiview PCCT parser to ACPI 6.4
  b4da6c29f1 ShellPkg: Add Type 5 PCC Subspace Structure parser
  5ece2ad36c MdeModulePkg/Core/Dxe: Add lock protection in CoreLocateHandleBuffer()
  30400318a2 ShellPkg: Update Acpiview HMAT parser to ACPI spec version 6.4
  71c3c9c0c4 DynamicTablesPkg: Remove unnecessary includes
  25cf58a163 DynamicTablesPkg: Add missing parameter check
  bfaf7c8b9e DynamicTablesPkg: Add AddSsdtAcpiHeader()
  28b2df475f DynamicTablesPkg: Add AmlRdSetEndTagChecksum()
  74addfeab6 DynamicTablesPkg: Add AmlSetRdListCheckSum()
  7b2022d39e DynamicTablesPkg: Set EndTag's Checksum if RdList is modified
  2dd7dd3952 DynamicTablesPkg: Clear pointer in node creation fcts
  37bd08176c DynamicTablesPkg: Update error handling for node creation
  6d2777d85f DynamicTablesPkg: Make AmlNodeGetIntegerValue public
  f995f8672b DynamicTablesPkg: AML Code generation for Register()
  9454d1ebcb DynamicTablesPkg: AML Code generation for Resource data EndTag
  1e33479b39 DynamicTablesPkg: AML code generation for a Package
  12e65fd258 DynamicTablesPkg: Helper function to compute package length
  ce15936f2f DynamicTablesPkg: AML code generation for a ResourceTemplate
  de62ccbf4f DynamicTablesPkg: AML code generation for a Method
  e2d7b4950b DynamicTablesPkg: AML code generation to Return a NameString
  3e958e93ce DynamicTablesPkg: AML code generation for a Method returning a NS
  018a962d92 DynamicTablesPkg: AML code generation for a _LPI object
  a5e36ad9bc DynamicTablesPkg: AML code generation to add an _LPI state
  f17ef10e63 DynamicTablesPkg: Add CM_ARM_LPI_INFO object
  769e63999f DynamicTablesPkg: SSDT CPU topology and LPI state generator
  19ee56c4b3 UefiPayloadPkg: Add a macro to select the SecurityStubDxe driver.
  782d018703 MdePkg: Add ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  ba4ae92234 ShellPkg: Support ProcessorUpgradeSocketLGA4677 from SMBIOS 3.5.0
  f22feb0e3b CryptoPkg/BaseCryptLib: Eliminate extra buffer copy in Pkcs7Verify()
  4225a464c6 MdePkg/BaseLib: Add QuickSort function on BaseLib
  6ed6abd6c1 BaseTools: Change RealPath to AbsPath
  978d428ec3 UefiPayloadPkg: Add PCI root bridge info hob support for SBL
  43b3840873 MdeModulePkg/Sd: Corrections for Extra.uni files
  a7fcab7aa3 MdeModulePkg/Core/Dxe: Acquire a lock when iterating gHandleList
  e40fefafa9 ArmVirtPkg/FdtClintDxe: Move FdtClientDxe to EmbeddedPkg
  fb759b8b73 MdePkg: Add PcdPciIoTranslation PCD
  7d78a86ecf ArmPkg: Use PcdPciIoTranslation PCD from MdePkg
  77e9b3a7c6 ArmVirtPkg/FdtPciPcdProducerLib: Relocate PciPcdProducerLib to OvmfPkg
  d881c6ddf5 ArmVirtPkg/HighMemDxe: Relocate HighMemDxe to OvmfPkg
  47bd85e9f9 OvmfPkg/HighMemDxe: Add RISC-V in the supported arch.
  f8d0501ded ArmVirtPkg/QemuFwCfgLib: Relocate QemuFwCfgLib to OvmfPkg
  26aa241d2f OvmfPkg/QemuFwCfgLibMmio: Add RISC-V arch support
  c6770f4b88 MdePkg: Add PcdPciMmio32(64)Translation PCDs
  9a7509e465 ArmVirtPkg/FdtPciHostBridgeLib: Relocate FdtPciHostBridgeLib to OvmfPkg/Fdt
  b21c6794de OvmfPkg/FdtPciHostBridgeLib: Add RISC-V in the supported arch.
  e0c23cba5e ArmVirtPkg/VirtioFdtDxe: Relocate VirtioFdtDxe to OvmfPkg/Fdt
  f2400e06db BaseTools: add edk2-test repo to SetupGit.py
  785cfd3305 UefiPayloadPkg: Use SECURITY_STUB_ENABLE to control the SecurityStubDxe
  7e43d3e086 ArmPkg/Smbios: Fix max cache size 2 wrong issue
  f10a112f08 UefiPayloadPkg: Fix the build issue for coreboot
  2108698346 StandaloneMmPkg: Support CLANGPDB builds
  11a4af85a4 Ovmfpkg: update Ia32 build to use new work area
  36b561623a OvmfPkg/AmdSev: update the fdf to use new workarea PCD
  91a978ce7e UefiPayloadPkg: Replace MEMROY_ENTRY by MEMORY_ENTRY
  6ef5797447 UefiPayloadPkg: Fix ECC reported issues
  90246a6d9f UefiPayloadPkg: Fix the build failure for non-universal payload
  37a33f02aa UefiCpuPkg: Cpu feature data stored in memory may be migrated
  4fdf843c75 DynamicTablesPkg: Fix unitialized variable use
  6893865b30 DynamicTablesPkg: Fix void pointer arithmetic
  99325a8b65 MdeModulePkg/SortLib: Add QuickSort function on BaseLib
  305fd6bee0 UefiCpuPkg/CpuCacheInfoLib: Add QuickSort function on BaseLib
  2f286930a8 ShellPkg: Parse I/O APIC and x2APIC structure
  bd5ec03d87 NetworkPkg/HttpBootDxe: make file extension check case-insensitive
  6254037223 ArmPkg: Implement PlatformBootManagerLib for LinuxBoot
  f079e9b450 OvmfPkg: Copy Main.asm from UefiCpuPkg to OvmfPkg's ResetVector
  5a2411784b OvmfPkg: Clear WORK_AREA_GUEST_TYPE in Main.asm
  c9ec74a198 OvmfPkg: Add IntelTdxMetadata.asm
  8b76f23534 OvmfPkg: Enable TDX in ResetVector
  87a34ca0cf UefiPayloadPkg: Add a common SmmAccessDxe module
  e7e8ea27d4 UefiPayloadPkg: Add a common SMM control Runtime DXE module
  bed990aae6 UefiPayloadPkg: Add bootloader SMM support module
  1d66480aa4 UefiPayloadPkg: Add SpiFlashLib
  04714cef46 UefiPayloadPkg: Add FlashDeviceLib
  ae8acce8ae UefiPayloadPkg: Add a common FVB SMM module
  242dcfe30f UefiPayloadPkg: Add a SMM dispatch module
  b80c17b62d UefiPayloadPkg: Add SMM support and SMM variable support
  2f6f3329ad FmpDevicePkg/FmpDxe: Use new Variable Lock interface
  9a95d11023 IntelFsp2Pkg/SplitFspBin.py: adopt FSP 2.3 specification.
  bb146ce32d MdePkg Cpuid.h: Define CPUID.(EAX=7,ECX=0):EDX[30]
  1bc232aae3 RedfishPkg: Update link to staging/RedfishClientPkg in Readme.md
  e7663fdd82 UefiPayloadPkg: Remove SystemTableInfo GUID.
  91b772ab62 RedfishPkg: Add more information to Readme.md
  c8594a5311 SecurityPkg/FvReportPei: Remove the ASSERT to allow neither M nor V
  939c2355da IntelFsp2Pkg SplitFspBin.py: Correct file name in file header
  6f9e83f757 NetworkPkg/HttpDxe: Enable wildcard host name matching for HTTP+TLS.
  b258f12889 BaseTools/VrfCompile: Fix uninitialized field from unnamed field
  0f4cdad25b DynamicTablesPkg: Add missing BaseStackCheckLib instance
  e13e53cb2f NetworkPkg/NetworkPkg.dsc: Add RngLib mapping for ARM and RISCV64
  c1f2287635 SecurityPkg/SecurityPkg.dsc: Add missing RngLib for ARM and RISCV64
  b0a03ca4a9 SignedCapsulePkg/SignedCapsulePkg.dsc: Add RngLib mapping
  15e635d1b5 UefiCpuPkg/MtrrLib/UnitTest: Fix 32-bit GCC build issues
  4050c873b5 MdeModulePkg/Variable/RuntimeDxeUnitTest: Fix 32-bit GCC builds
  d79df34beb BaseTools: Fix StructurePcd offset error.
  b5d4a35d90 MdeModulePkg/XhciSched: Fix missing DEBUG arguments
  48452993ad MdePkg/Include: Enhance DebugLib to support reproduce builds
  5948ec3647 MdePkg: Reproduce builds across source format changes
  f331310a10 ArmPkg: Reproduce builds across source format changes
  77dcd03ecf MdeModulePkg: Reproduce builds across source format changes
  45137bca2f NetworkPkg: Reproduce builds across source format changes
  d939a25d41 SecurityPkg: Reproduce builds across source format changes
  fd42dcb1fc OvmfPkg: Reproduce builds across source format changes
  8c1b1fe634 ShellPkg: Add comment that ItemPtr is set after validation
  d6e6337cd6 MdePkg: Fix ACPI memory aggregator/device type mismatch
  c974257821 MdeModulePkg AtaAtapiPassThru: Always do S.M.A.R.T. check if device support
  aab6bb3d32 MdeModulePkg/DxeCapsuleLibFmp: Capsule on Disk file name capsule
  a7b35aae13 MdeModulePkg\UfsBlockIoPei: UFS MMIO address size support both 32/64 bits
  f826b20811 UefiCpuPkg/UefiCpuLib: Add GetCpuFamilyModel and GetCpuSteppingId
  8c8867c5da MdeModulePkg/DxeCapsuleLibFmp: Use new Variable Lock interface
  22c3b5a865 BaseTools: Add authenticated variable store support
  a92559671a OvmfPkg/Xen: Fix VS2019 build issues
  4c495e5e3d OvmfPkg/Bhyve/PlatformPei: Fix VS2019 X64 NOOPT build issue
  466ebdd2e0 MdeModulePkg/FPDT: Lock boot performance table address variable at EndOfDxe
  455b0347a7 UefiCpuPkg/PiSmmCpuDxeSmm: Use SMM Interrupt Shadow Stack
  e1e7306b54 OvmfPkg/Library/ResetSystemLib: Fix Microvm VS2019 NOOPT build issue
  4c7ce0d285 MdeModulePkg AtaAtapiPassThru: Skip the potential NULL pointer access
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  - Removed patches which are merged to mainline:
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch to fix the
    S3 detection in ovmf-xen
  - cb0d24637d    edk2-stable202111-rc1~220
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch to add QemuKernelLoaderFsDxe
    to ovmf-xen to load kernel from qemu fw_cfg
  - 9f3eda177a    edk2-stable202111-rc1~216
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - 4473834e7d    edk2-stable202111-rc1~203
  - The edk2-stable202111 includes the following patches for bsc#1192126
    to fix unlimited reset. (bsc#1192126)
    80e67af9af OvmfPkg: introduce a common work area
    ab77b6031b OvmfPkg/ResetVector: update SEV support to use new work area format
    b9af5037b2 OvmfPkg/ResetVector: move the GHCB page setup in AmdSev.asm</changelog>
  <changelog author="jlee@suse.com" date="1640260800">- Removed useless patch files because they are merged to edk2-stable202111
  - ovmf-OvmfPkg-OvmfXen-Fix-build-with-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-add-QemuKernelLoaderFsDxe.patch
  - ovmf-OvmfPkg-OvmfXen-set-PcdAcpiS3Enable-at-initializatio.patch
- Updated URL to the edk2 repo on github
- Use downloaded edk2-edk2-stable%{version}.tar.gz instead of the URL
  for Source0 because the edk2-edk2-stable202111 tarball is broken
  in tianocore repo which can not pass the "osc service runall download_files"
  testing.
  - We ill change it back to the following setting when upstream fixed tarball:
  Source0:        https://github.com/tianocore/edk2/releases/download/edk2-stable%{version}/edk2-edk2-stable%{version}.tar.gz</changelog>
  <changelog author="jlee@suse.com" date="1641211200">- Modified gdb_uefi.py.in for python3 (bsc#1192126)
  - change 'long' to 'int'
  - using
    print ('
    instead of
    print "</changelog>
  <changelog author="bwiedemann@suse.com" date="1645099200">- Sort file lists for reproducible build results</changelog>
  <changelog author="jlee@suse.com" date="1646913600">- Update to edk2-stable202202
  - Features (https://github.com/tianocore/edk2/releases):
  OvmfPkg Add new target for Cloud Hypervisor
  Add TDVF to OvmfPkg
  Add new APIs to UefiCpuPkg/UefiCpuLib
  Add AMD Secure Nested Paging Support
  Add SSDT PCI generator in DynamicTablesPkg
  Support ACPI 6.4 PPTT changes
  Add FdtHwInfoParser library
  Add DynamicPlatRepo library
  Make package and platform builds reproducible across source format changes
  Add Uncrustify CI Plugin
  Apply uncrustify changes to all package C and H files
  - Patches (git log --oneline --reverse edk2-stable202111~..edk2-stable202202):
  bb1bba3d77 NetworkPkg: Fix invalid pointer for DNS response token on error
  ef9a059cdb EmulatorPkg/Win/Host: Update CC_FLAGS
  69877614fd .pytool/Plugin/EccCheck: Remove RevertCode()
  854462bd34 .pytool/Plugin/EccCheck: Remove temp directory on exception
  3019f1bbab .pytool/Plugin/EccCheck: Add performance optimizations
  99f84ff473 .pytools/Plugin/LicenseCheck: Use temp directory for git diff output
  76a1ce4d5f .azurepipelines/templates: Update max pipeline job time to 2 hours
  365dced2c3 ArmPkg: Update YAML to ignore specific ECC files/errors
  1939fc9569 ArmPlatformPkg: Update YAML to ignore specific ECC files/errors
  c97fee87f0 ArmVirtPkg: Update YAML to ignore specific ECC files/errors
  d5744ecba8 CryptoPkg: Update YAML to ignore specific ECC files/errors
  d7d30e8f21 EmulatorPkg: Update YAML to ignore specific ECC files/errors
  9deb937076 MdeModulePkg: Update YAML to ignore specific ECC files/errors
  df790cd6b3 MdePkg: Update YAML to ignore specific ECC files/errors
  60fa40be45 SecurityPkg: Update YAML to ignore specific ECC files/errors
  9944508e85 ShellPkg: Update YAML to ignore specific ECC files/errors
  c30c40d6c6 StandaloneMmPkg: Update YAML to ignore specific ECC files/errors
  c057347977 UefiPayloadPkg: Update YAML to ignore specific ECC files/errors
  f0f3f5aae7 UnitTestFrameworkPkg: Update YAML to ignore specific ECC files/errors
  dfafa8e453 MdeModulePkg/DxeCorePerformanceLib:Variable Initial
  a4a582e180 ArmPkg: Change use of EFI_D_* to DEBUG_*
  1d2482e1e3 ArmPlatformPkg: Change use of EFI_D_* to DEBUG_*
  c5b3a56e4f ArmVirtPkg: Change use of EFI_D_* to DEBUG_*
  a1878955b2 EmbeddedPkg: Change use of EFI_D_* to DEBUG_*
  9c7da8d804 EmulatorPkg: Change use of EFI_D_* to DEBUG_*
  917e98f3e5 FatPkg: Change use of EFI_D_* to DEBUG_*
  87000d7708 MdeModulePkg: Change use of EFI_D_* to DEBUG_*
  5f289f3ae3 MdePkg: Change use of EFI_D_* to DEBUG_*
  c49ca4a29e NetworkPkg: Change use of EFI_D_* to DEBUG_*
  47719926e8 OvmfPkg: Change use of EFI_D_* to DEBUG_*
  ca56749b0e PcAtChipsetPkg: Change use of EFI_D_* to DEBUG_*
  e905fbb05a SecurityPkg: Change use of EFI_D_* to DEBUG_*
  4a1aee13d8 ShellPkg: Change use of EFI_D_* to DEBUG_*
  586fda4800 SourceLevelDebugPkg: Change use of EFI_D_* to DEBUG_*
  96e1cba5c1 UefiCpuPkg: Change use of EFI_D_* to DEBUG_*
  1871d28eaf ArmPkg: Change OPTIONAL keyword usage style
  2863ba97ca ArmPlatformPkg: Change OPTIONAL keyword usage style
  9607597a74 ArmVirtPkg: Change OPTIONAL keyword usage style
  c8f46130f8 CryptoPkg: Change OPTIONAL keyword usage style
  fe2d81892f DynamicTablesPkg: Change OPTIONAL keyword usage style
  792433088c EmbeddedPkg: Change OPTIONAL keyword usage style
  c69fc80c80 EmulatorPkg: Change OPTIONAL keyword usage style
  9c721071d3 FmpDevicePkg: Change OPTIONAL keyword usage style
  e3917e22e7 MdeModulePkg: Change OPTIONAL keyword usage style
  d0e2f8232a MdePkg: Change OPTIONAL keyword usage style
  8874fa199d NetworkPkg: Change OPTIONAL keyword usage style
  79d49e162e OvmfPkg: Change OPTIONAL keyword usage style
  237295f46d PcAtChipsetPkg: Change OPTIONAL keyword usage style
  dc8fe5ec95 RedfishPkg: Change OPTIONAL keyword usage style
  12710fe93b SecurityPkg: Change OPTIONAL keyword usage style
  9b8507cabe ShellPkg: Change OPTIONAL keyword usage style
  18908e6131 SignedCapsulePkg: Change OPTIONAL keyword usage style
  f9c9215b55 SourceLevelDebugPkg: Change OPTIONAL keyword usage style
  902e76de19 StandaloneMmPkg: Change OPTIONAL keyword usage style
  4ec586b9f6 UefiCpuPkg: Change OPTIONAL keyword usage style
  e35dd32821 UefiPayloadPkg: Change OPTIONAL keyword usage style
  78bc3bdd2a UnitTestFrameworkPkg: Change OPTIONAL keyword usage style
  ea85f0fe13 ArmVirtPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  e3b855f283 CryptoPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  4a9d411662 DynamicTablesPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  db52c7f755 MdeModulePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  098307e082 MdePkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  ed7f7c9168 NetworkPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  8e875037bf OvmfPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  deba54761a PcAtChipsetPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  f9f4fb2329 SecurityPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  7c2a6033c1 UefiCpuPkg: Change complex DEBUG_CODE() to DEBUG_CODE_BEGIN/END()
  429309e0c6 ArmPkg: Apply uncrustify changes
  40b0b23ed3 ArmPlatformPkg: Apply uncrustify changes
  2b16a4fb91 ArmVirtPkg: Apply uncrustify changes
  7c34237831 CryptoPkg: Apply uncrustify changes
  731c67e1d7 DynamicTablesPkg: Apply uncrustify changes
  e7108d0e96 EmbeddedPkg: Apply uncrustify changes
  a550d468a6 EmulatorPkg: Apply uncrustify changes
  bcdcc4160d FatPkg: Apply uncrustify changes
  45ce0a67bb FmpDevicePkg: Apply uncrustify changes
  111f2228dd IntelFsp2Pkg: Apply uncrustify changes
  7c7184e201 IntelFsp2WrapperPkg: Apply uncrustify changes
  1436aea4d5 MdeModulePkg: Apply uncrustify changes
  2f88bd3a12 MdePkg: Apply uncrustify changes
  d1050b9dff NetworkPkg: Apply uncrustify changes
  ac0a286f4d OvmfPkg: Apply uncrustify changes
  5220bd211d PcAtChipsetPkg: Apply uncrustify changes
  39de741e2d RedfishPkg: Apply uncrustify changes
  c411b485b6 SecurityPkg: Apply uncrustify changes
  47d20b54f9 ShellPkg: Apply uncrustify changes
  b878648967 SignedCapsulePkg: Apply uncrustify changes
  c1e126b119 SourceLevelDebugPkg: Apply uncrustify changes
  91415a36ae StandaloneMmPkg: Apply uncrustify changes
  053e878bfb UefiCpuPkg: Apply uncrustify changes
  e5efcf8be8 UefiPayloadPkg: Apply uncrustify changes
  7c0ad2c338 UnitTestFrameworkPkg: Apply uncrustify changes
  dc453b5164 .pytool/Plugin/UncrustifyCheck: Add Uncrustify CI plugin
  1832eb15aa UefiPayloadPkg/UefiPayloadPkg.fdf: Update DXE Apriori list
  ca78281c25 UefiPayloadPkg/PayloadEntry: Inherit 4/5-level paging from bootloader
  b2f7ee2ded UefiPayloadPkg: Increase SystemMemoryUefiRegionSize from 32M to 64M
  94e0a7bddb UefiPayloadPkg: Add missing Guid gUefiAcpiBoardInfoGuid
  2527723de9 UefiPayloadPkg: Add performance measurement feature
  ffdde9d719 UefiPayloadPkg: Skip ModuleInfo HOB in Payload
  965292135b UefiPayloadPkg/UefiPayloadPkg.dsc:Add BootManagerLib for BootManagerMenuApp
  85a678bf76 UefiPayloadPkg: Add integration instruction for coreboot common error
  7b28310008 BaseTools: Increase the DevicePath length for support more PCD value.
  d25b803e51 MdeModulePkg/Bus/Pci/UhciDxe: Fix the UsbHc memory allocate and free issue
  c82ab4d8c1 BaseTools/VfrCompile: Correct Bit Field Flags for numeric/one of
  2ddacfb6b8 OvmfPkg/SecMain: move SEV specific routines in AmdSev.c
  e2289d19d8 UefiCpuPkg/MpInitLib: move SEV specific routines in AmdSev.c
  2fe8edfe55 OvmfPkg/ResetVector: move clearing GHCB in SecMain
  3053183d41 OvmfPkg/ResetVector: introduce SEV metadata descriptor for VMM use
  707c71a01b OvmfPkg: reserve SNP secrets page
  cca9cd3dd6 OvmfPkg: reserve CPUID page
  f2dc28f0b6 OvmfPkg/ResetVector: pre-validate the data pages used in SEC phase
  34819f2cac OvmfPkg/ResetVector: use SEV-SNP-validated CPUID values
  d9822304ce OvmfPkg/MemEncryptSevLib: add MemEncryptSevSnpEnabled()
  7c3b2892ea OvmfPkg/SecMain: register GHCB gpa for the SEV-SNP guest
  d2b998fbdc OvmfPkg/VmgExitLib: use SEV-SNP-validated CPUID values
  a19b648952 OvmfPkg/PlatformPei: register GHCB gpa for the SEV-SNP guest
  19914edc5a OvmfPkg/AmdSevDxe: do not use extended PCI config space
  ade62c18f4 OvmfPkg/MemEncryptSevLib: add support to validate system RAM
  d706f8fec2 OvmfPkg/MemEncryptSevLib: add function to check the VMPL0
  11b15336f0 OvmfPkg/BaseMemEncryptSevLib: skip the pre-validated system RAM
  d39f8d88ec OvmfPkg/MemEncryptSevLib: add support to validate &gt; 4GB memory in PEI phase
  202fb22be6 OvmfPkg/SecMain: validate the memory used for decompressing Fv
  8eb79b5f4f OvmfPkg/PlatformPei: validate the system RAM when SNP is active
  26210f9436 MdePkg: Define ConfidentialComputingGuestAttr
  504ae26b80 OvmfPkg/PlatformPei: set PcdConfidentialComputingAttr when SEV is active
  b95908e043 UefiCpuPkg/MpInitLib: use PcdConfidentialComputingAttr to check SEV status
  f4e3ce5f53 UefiCpuPkg: add PcdGhcbHypervisorFeatures
  f5a6e1bab5 OvmfPkg/PlatformPei: set the Hypervisor Features PCD
  2c354252be MdePkg/GHCB: increase the GHCB protocol max version
  9c703bc0f1 UefiCpuPkg/MpLib: add support to register GHCB GPA when SEV-SNP is enabled
  d4d7c9ad5f UefiCpuPkg/MpInitLib: use BSP to do extended topology check
  b928eb44d5 OvmfPkg/MemEncryptSevLib: change the page state in the RMP table
  b7b8872031 OvmfPkg/MemEncryptSevLib: skip page state change for Mmio address
  ea3a12d970 OvmfPkg/PlatformPei: mark cpuid and secrets memory reserved in EFI map
  67484aed69 OvmfPkg/AmdSev: expose the SNP reserved pages through configuration table
  06544455d0 UefiCpuPkg/MpInitLib: Use SEV-SNP AP Creation NAE event to launch APs
  0f1d7477c0 OvmfPkg: Remove unused print service driver (PrintDxe)
  30631f0a26 MdePkg: Add missing Cache ID (in)valid define
  0077c22f6d MdePkg: Remove PPTT ID type structure
  a50b65ce22 ShellPkg: Update Acpiview PPTT parser to ACPI 6.4
  8cf2bdfcfb ShellPkg: Add Cache ID to PPTT parser
  b2bbe3df54 DynamicTablesPkg: Remove PPTT ID structure from ACPI 6.4 generator
  e139829dd6 DynamicTablesPkg: Update PPTT generator to ACPI 6.4
  e81a81e584 DynamicTablesPkg: Add CacheId to PPTT generator
  9afcd48a94 OvmfPkg: Handle Cloud Hypervisor host bridge
  2ccefa32a6 OvmfPkg: Create global entry point for SMBIOS parsing
  d8ef774346 OvmfPkg: Retrieve SMBIOS from Cloud Hypervisor
  66bce05f6d OvmfPkg: Generalize AcpiPlatformDxe
  7594c5bfe2 OvmfPkg: Install ACPI tables for Cloud Hypervisor
  f6df289a1c OvmfPkg/OvmfXen: Fix Xen build
  2b20a34fd5 OvmfPkg-EmuVariableFvbRuntimeDxe: Support Access To Memory Above 4G
  d5efc875ef MdePkg: Introduce CcMeasurementProtocol for CC Guest firmware
  a124cd4ef9 SecurityPkg: Support CcMeasurementProtocol in DxeTpm2MeasureBootLib
  8c06c53b58 SecurityPkg: Support CcMeasurementProtocol in DxeTpmMeasurementLib
  adf070ff56 OvmfPkg/Microvm: add PcdConfidentialComputingGuestAttr
  2686468c43 OvmfPkg/Bhyve: add MemEncryptSevLib
  61be49e0f7 OvmfPkg/PlatformCI: factor out PlatformBuildLib.py
  21ee379407 OvmfPkg/PlatformCI: add QEMU_SKIP
  64bccda534 OvmfPkg/PlatformCI: add BhyveBuild.py
  04eacd3943 OvmfPkg/PlatformCI: add MicrovmBuild.py
  8b8ae609a7 OvmfPkg/PlatformCI: add AmdSevBuild.py
  2722856a87 OvmfPkg/PlatformCI: dummy grub.efi for AmdSev
  1203eba58e OvmfPkg/PlatformCI: add XenBuild.py
  64ef0dd1d3 OvmfPkg/Microvm/fdt: add device tree support
  79dcaf7054 OvmfPkg/Microvm/fdt: load fdt from fw_cfg
  c802f8935c OvmfPkg/Microvm/fdt: add empty fdt
  2a68abf6ee OvmfPkg/Microvm/virtio: add virtio-mmio support
  e07d27e24d OvmfPkg/Microvm: add README
  7f1861be2b DynamicTablesPkg: AML Code generation for memory ranges
  0e7147fe75 DynamicTablesPkg: AML Code generation to create a named Package()
  fd5fc4bbb7 DynamicTablesPkg: AML Code generation to create a named ResourceTemplate()
  b2b8def4e3 DynamicTablesPkg: AML Code generation to add _PRT entries
  69ddfee1c3 DynamicTablesPkg: Add AmlAttachNode()
  ce306e48eb DynamicTablesPkg: Add Pci related objects
  e35a746cf5 DynamicTablesPkg: SSDT Pci express generator
  ec37fd9c1f DynamicTablesPkg: Fix multiple objects parsing
  557dede8a6 OvmfPkg/PlatformPei: ScanOrAdd64BitE820Ram improvements
  759e3c6d21 OvmfPkg/PlatformPei: prefer etc/e820 for memory detection
  41d8bb3038 OvmfPkg/PlatformPei: stop using cmos for memory detection
  7a6e6ae933 EmulatorPkg: Update lldbefi.py to work with current lldb which uses python3
  4d30352445 ArmPkg: Add SMC helper functions
  c039fa7ff0 ArmPkg: Update SMC calls to use the new ArmCallSmc0/1/2/3 functions
  90ad4b3b34 DynamicTablesPkg: Definition for HwInfoParser interface
  d59c5a20f8 DynamicTablesPkg: FdtHwInfoParser: CM Object descriptor helper
  5d8b5d171c DynamicTablesPkg: FdtHwInfoParser: Add FDT utility functions
  8d2691c3d5 DynamicTablesPkg: FdtHwInfoParser: Add Boot Arch parser
  3ebe1ff5c9 DynamicTablesPkg: FdtHwInfoParser: Generic Timer Parser
  51941f7558 DynamicTablesPkg: FdtHwInfoParser: Add Serial port parser
  e366a41ef0 DynamicTablesPkg: FdtHwInfoParser: Add GICC parser
  0fa1217726 DynamicTablesPkg: FdtHwInfoParser: Add GICD parser
  b04cf355a0 DynamicTablesPkg: FdtHwInfoParser: Add MSI Frame parser
  d250d408cf DynamicTablesPkg: FdtHwInfoParser: Add ITS parser
  7b6c8b30a5 DynamicTablesPkg: FdtHwInfoParser: Add GICR parser
  26bf034a59 DynamicTablesPkg: FdtHwInfoParser: Add GIC dispatcher
  c67bf628c8 DynamicTablesPkg: FdtHwInfoParser: Add PCI config parser
  deb01dfd7f DynamicTablesPkg: Add FdtHwInfoParser library
  9006967c8d DynamicTablesPkg: Handle 16550_WITH_GAS id
  b2d0ed20fd DynamicTablesPkg: Definition for DynamicPlatRepoLib interface
  2e2db65e39 DynamicTablesPkg: DynamicPlatRepo: Add TokenGenerator
  740e3bb634 DynamicTablesPkg: DynamicPlatRepo: Add TokenFixer
  5fe5b6f94f DynamicTablesPkg: DynamicPlatRepo: Add TokenMapper
  38f6d78c3b DynamicTablesPkg: Add DynamicPlatRepo library
  f14fff5135 StandaloneMmPkg/FvLib: Support large file with EFI_FFS_FILE_HEADER2.
  3a72ec71cd OvmfPkg: remove unused TPM options from MicrovmX64.dsc
  b47575801e OvmfPkg: move tcg configuration to dsc and fdf include files
  5711ff4d0b OvmfPkg: drop TPM_CONFIG_ENABLE
  b819388772 OvmfPkg: create Tcg12ConfigPei.inf
  4de8d61bce OvmfPkg: rework TPM configuration
  e6ea1464a8 OvmfPkg/PlatformPei: Revert "stop using cmos for memory detection"
  a6c0418651 ArmPkg/SmbiosMiscDxe: Remove duplicate HII string definition
  45e3842970 ArmPkg/SmbiosMiscDxe: Get full SMBIOS strings from OemMiscLib
  b451c69088 ArmPkg/ProcessorSubClassDxe: Get serial and part number from OemMiscLib
  8ed8568922 SecurityPkg: Debug code to audit BIOS TPM extend operations
  195f011973 SecurityPkg: Reallocate TPM Active PCRs based on platform support
  ab5ab2f603 SecurityPkg: TPM must go to Idle state on CRB command completion
  c63a10ecb7 EmbeddedPkg/AcpiLib: Add more helper functions
  f129b1f06f OvmfPkg/Bhyve: fix tls-enabled build
  ee1f8262b8 OvmfPkg: Call PlatformInitializeConsole for GPU passthrough case
  de9e5b7dc7 IntelFsp2WrapperPkg : FSPM/S UPD data address based on Build Type
  9ec2cc1f31 IntelFsp2WrapperPkg : Remove EFIAPI from local functions.
  ae8272ef78 MdeModulePkg/UsbBusDxe: fix NOOPT build error
  15c596aeeb OvmfPkg: Bhyve: Delete unused AcpiTables/Ssdt.asl file
  6612ff8561 UefiCpuPkg: Extend measurement of microcode patches to TPM
  e910f076ad BaseTools: Fix the bug of --cmd-len build option
  7935be0fbd IntelFsp2Pkg/FspSecCore: ExtendedImageRevision was not printed.
  c095122d4b MdeModulePkg/PciBusDxe: Enumerator to check for RCiEP before looking for RP
  d463c56ddd MdeModulePkg: Replace with UFS_UNIT_DESC to fix timeout problem
  45920941d9 MdeModulePkg: Refactoring UFS DME request and fix timing problem
  13d9e8ec98 MdeModulePkg: Put off UFS HCS.DP checking to fix timing problem
  079a58276b OvmfPkg/AmdSev/SecretPei: Mark SEV launch secret area as reserved
  9dd14fc91c MdePkg: Add registers of boot partition feature
  14a731096d UnitTestFrameworkPkg: CI YAML: Grant cmockery spell check exception
  6062002bd5 MdeModulePkg/PartitionDxe: Add break to handle invalid LBA0 in MBR
  7438a85bf1 BaseTools: Fix wrong variable header size
  c712ce2bb1 OvmfPkg/CloudHv: Add new target for Cloud Hypervisor
  a2da72b2ca OvmfPkg/CloudHv: Replace legacy 8254 PIT with local APIC timer
  6ecdda71fe OvmfPkg/CloudHv: Connect serial console
  1552050ce7 OvmfPkg/CloudHv: Remove legacy 8259 PIC support
  fdcea7ff6f OvmfPkg/CloudHv: Remove Q35 specifics
  71082d3d1b OvmfPkg/CloudHv: Reduce dependency on QemuFwCfg
  196be601f9 OvmfPkg/CloudHv: Remove video support
  7b6cbe0a81 OvmfPkg/CloudHv: Remove USB support
  e73d1bf96a OvmfPkg/CloudHv: Remove CSM support
  b66056ef21 OvmfPkg/CloudHv: add Maintainers.txt entry
  5302bd81d9 OvmfPkg: Add CloudHvX64 to the CI
  59c48c9314 UefiPayloadPkg: Change the user interface name of the Uiapp
  5801910013 UefiPayloadPkg: Not use BaseCpuTimerLib by default.
  772c5bb8dc FmpDevicePkg/FmpDxe: Update FmpDeviceCheckImageWithStatus() handling
  7709988dd8 RedfishPkg/RedfishRestExDxe:Simplify status check
  21320ef669 MdeModulePkg/Variable: Make only EFI_VARIABLE_NON_VOLATILE invalid
  7e5c603cba MdeModulePkg/SdMmcPciHcDxe: Robust improvements for SD card 1.8V switch
  ee67067f17 MdeModulePkg: VariableSmmRuntimeDxe: Fix Variable Policy Message Length
  5b39832e18 MdePkg: MmCommunication2: Update MM communicate2 function description
  ce37f45955 ArmPkg: MmCommunicationDxe: MM communicate function argument attributes
  541a077bd1 ArmPkg: MmCommunicationDxe: Update MM communicate `CommBuffer**` checks
  1aa1ec4574 ArmPkg: MmCommunicationDxe: Update MM communicate `CommSize` check
  8cc5590eab ArmPkg: MmCommunicationDxe: Update MM communicate `MessageLength` check
  6777e67383 EmbeddedPkg: Fix a build error in FwVol.c in X64 arch
  a867f3a704 UefiPayloadPkg: Use BaseCpuTimerLib for Universal Payload by default
  f4b7b473b4 MdeModulePkg/UefiBootManagerLib: Convert BmLoadOption to Variable Policy
  76b3d45b75 ShellPkg: Add the missing VariablePolicyHelperLib in ShellPkg.dsc
  8542fc5f95 NetworkPkg: Add the missing VariablePolicyHelperLib in NetworkPkg.dsc
  ae35314e7b Maintainers.txt: Add Sami Mujawar as reviewer for ArmPkg
  862ea6e836 OvmfPkg: change qemu default resolution to 1280x800
  e95b44c90e ArmVirtPkg: change qemu default resolution to 1280x800
  929804b172 OvmfPkg: add PcdVideoResolutionSource
  7f25ddbc03 OvmfPkg/QemuVideoDxe: simplify InitializeBochsGraphicsMode
  336da55ca8 OvmfPkg/QemuVideoDxe: drop QEMU_VIDEO_BOCHS_MODES-&gt;ColorDepth
  55c05427b9 OvmfPkg/QemuVideoDxe: factor out QemuVideoBochsAddMode
  49a2d8cbf5 OvmfPkg/QemuVideoDxe: parse edid blob, detect display resolution
  ba79becd55 OvmfPkg/BaseCachingPciExpressLib: Migrate BaseCachingPciExpressLib
  103fa647d1 ArmPkg: Replace CoreId and ClusterId with Mpidr in ARM_CORE_INFO struct
  742dafd2cc DynamicTablesPkg: Print specifier macro for CM_OBJECT_ID
  13136cc311 DynamicTablesPkg: FdtHwInfoParserLib: Parse Pmu info
  5751d60821 DynamicTablesPkg: AmlLib: AmlAddPrtEntry() to handle GSI
  5816bd3eab DynamicTablesPkg: AcpiSsdtPcieLibArm: Remove link device generation
  dc1118fa0d ArmVirtPkg: Add cspell exceptions
  0dbd356983 ArmVirtPkg/Kvmtool: Add DSDT ACPI table
  312ef7a0a4 ArmVirtPkg/Kvmtool: Add Configuration Manager
  17a02163bd ArmVirtPkg/Kvmtool: Enable ACPI support
  5b3c682d91 ArmVirtPkg/Kvmtool: Enable Acpiview
  017564d637 ArmPkg/ArmMmuLib AARCH64: avoid EL0 accessible mappings
  45b1612659 DynamicTablesPkg: Add Memory32Fixed function
  007a95055b DynamicTablesPkg: Remove redundant cast in AmlCodeGenReturn
  33189f0527 DynamicTablesPkg: Add AmlCodeGenMethodRetInteger function
  a4b7aa362d MdeModulePkg/Bus/Pci/PciBusDxe: Support platform PCI ROM override
  6fb09da89f ShellPkg: Fix incorrect PPTT FlagName dereference
  c09dbc92e9 BaseTools/Conf: Add new macro for customizing dll file reduction.
  d4ac53aa91 BaseTools: Fix error leg in DscBuildData.py
  f78b937c95 MdeModulePkg/RuntimeDxe: clear mVirtualMapMaxIndex
  96b8b5fd10 MdeModulePkg/UiApp: Fix spelling of 'FRONTPAGE'
  bd676f080a Maintainers.txt: add missing github IDs to OvmfPkf/Fdt reviewers
  1f54eaa725 Maintainers.txt: update email for Leif Lindholm
  b360b0b589 Maintainers.txt: Update email address
  c9b7c6e0cc BaseTools: Update CLANG{35,38}_WARNING_OVERRIDES to ignore unused vars
  42af706dfb BaseTools: Update brotli submodule
  1193aa2dfb MdeModulePkg: update brotli submodule
  85589ddbf6 OvmfPkg/VmgExitLib: Fix uninitialized variable warning with XCODE5
  c28e376edc OvmfPkg/FvbServicesSmm: use the VmgExitLibNull
  8a57673316 ShellPkg: Fix Ping GetTimerPeriod API failure
  b24306f15d NetworkPkg: Fix incorrect unicode string of the AKM/Cipher Suite
- Add amd-sev-es to the following descriptors because James Fehlig
  tested them (bsc#1196879):
    60-ovmf-x86_64.json
    60-ovmf-x86_64-2m.json
    60-ovmf-x86_64-ms.json
    60-ovmf-x86_64-2m-ms.json
- Backported patches in ovmf-bsc1196879-sev-fix.patch for fixing SEV:
    de463163d9 OvmfPkg/AmdSev: reserve snp pages
  63c50d3ff2 OvmfPkg/ResetVector: cache the SEV status MSR value in workarea
  f1d1c337e7 OvmfPkg/BaseMemEncryptLib: use the SEV_STATUS MSR value from workarea</changelog>
  <changelog author="fvogt@suse.com" date="1647345600">- TPM_ENABLE got renamed to TPM2_ENABLE and TPM_CONFIG_ENABLE removed
  (except on ARM for some reason) (boo#1197104)</changelog>
  <changelog author="jlee@suse.com" date="1651406400">- Respin amd-sev and amd-sev-es features
  After more testing, we found that not all descriptors can support
  both amd-sev with amd-sev-es. So we removed all amd-sev and amd-sev-es
  feature tags but only keep them in ovmf-x86_64-2m.json and
  60-ovmf-x86_64.json. (bsc#1198246#c75)</changelog>
  <changelog author="jlee@suse.com" date="1662465600">- Add patches to disable option ROM on sev (bsc#1199156)
  - Backported the following patches:
  - ovmf-MdeModulePkg-Update-PciEnumeratorSupport-to-ignore-O.patch
  cb8349f01a        MdeModulePkg: Update PciEnumeratorSupport to ignore OptionRom if needed
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch
  c477b2783f        OvmfPkg/IncompatiblePciDeviceSupportDxe: Ignore OptionRom in Td guest
  - ovmf-OvmfPkg-IncompatiblePciDeviceSupportDxe-Refine-the-c.patch
  149ed8e421        OvmfPkg/IncompatiblePciDeviceSupportDxe: Refine the configuration
  - To disable option ROM both on tdx and sev:
  ovmf-bsc1199156-OvmfPkg-IncompatiblePciDeviceSupportDxe-Ignore-Optio.patch</changelog>
  <changelog author="jlee@suse.com" date="1665144000">- Add patches to fix detection issue of NVME controller (bsc#1203825)
  - ovmf-MdeModulePkg-NvmExpressDxe-fix-check-for-Cap.Css.patch
  - ovmf-MdeModulePkg-NvmExpressPei-fix-check-for-NVM-command.patch</changelog>
  <changelog author="jlee@suse.com" date="1681128000">- Add ovmf-Revert-OvmfPkg-OvmfXen-Set-PcdFSBClock.patch to revert
  71cdb91f313380152d7bf38cfeebe76f5b2d39ac patch (bsc#1205613)
  - 71cdb91f313380152d7bf38cfeebe76f5b2d39ac OvmfPkg/OvmfXen: Set PcdFSBClock
  - We are waiting better upsteam patch, revert the issue patch first.
    Then PcdFSBClock will back to fixed variable.
  - Reference: https://edk2.groups.io/g/devel/topic/94891128#96077
  https://bugzilla.tianocore.org/show_bug.cgi?id=4340</changelog>
  <changelog author="jlee@suse.com" date="1683979200">- Add ovmf-SecurityPkg-DxeImageVerificationLib-Check-result-of-.patch
  to check result of GetEfiGlobalVariable2 (CVE-2019-14560, bsc#1174246)</changelog>
  <changelog author="jlee@suse.com" date="1683979201">- Add ovmf-MdeModulePkg-PiSmmCore-SmmEntryPoint-underflow-CVE-2.patch
  for MdeModulePkg/PiSmmCore: SmmEntryPoint underflow (CVE-2021-38578)
  (bsc#1196741)</changelog>
</package>
<package pkgid="e729f9481d939cc35d1664d9d720c457e6a769e1a12f4dea7be7310d02bf6988" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="15c45c5e29155036bb767100803fc239c11854fff257ebf52f6b09336bb9c300" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="5dcb3b3783bf96e265d588bc51de6c144adc924bd5466788464ec9b2b55782d6" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="4f3e2b9614b4bc92cd1b08f63d8cd7a6f1cf070bcd0813cc3b315701191665df" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="5f6bf878b2e567445ee26fc8ff0f30d7a3f75e9f08f982282664f3af56934291" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="a87e2c027c5a5a4c2563ea273081ba32339a3f7837120d83a68a3c3fe9cf5c52" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="a52da36e2a1da25d6a25098175eaac2f1fd8639a782e46b815b1f458d380cb85" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="9ec69a40cd76c5dc98727d124e573bad74b5431178e2a0b65d1347c5a1192dea" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="35be4226907ab2b6776c7454747e1ffa6fbefeb91b9cc47f2fd1c74ab6121c07" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="e38d7a20e7e58b3e181fec75e88cf7baa65769208ce878c825900f7c2421e7fa" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="993d83314587f38d4e41c587fdafa56ada5c490b7d025336770fb25809ea77ba" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="15f852bcf859d22b6ec7a35cf4e8ce130dfd395494b1cd48c0f0e62dc0d4a541" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="7fb438727af07f2f9381a6aab20fe09790196d902aa1d824b0060a3bb3a66b5f" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="6a1f1c2b899d3d4a8f483a0833e474692d73db5c6fb82c99dfaa018ecc2fb9e4" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="3dfc73cd60ffdf03148903e635e2e49eae60a81d93efc2870ea199bd007031a1" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="3f9cc9ecf47c7f4b68038d4739e049b495b6be85c11cb4b6cf5cead99c387de8" name="qemu-ui-opengl" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="dc386a05e512df957b096d2592a3aaf1d44d67a4ea13aa1335b6f53ef6c70413" name="qemu-ui-opengl" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="792d6fbc060d971c371a67fb0e7218ac9db9b885594d4c47c65016c7261971a3" name="qemu-ui-opengl" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="a74b414bcce6f44df4cc07546f2aa8e00f340d387d11e5582c6e2cd785000fa2" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="e41771888a3dd322a8b19f55e67bd7a859a61ad510892b8806ee3f6a57c8ce5a" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="2b5b4901c5c57ad5f99b85a215e86c2566f8866c449ac909f9ff63dd55fadb57" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="224b16ae4fcf1a946ede6ef1c1e39b69e12c956912c527056be4a6e7fdedf3a9" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="1236c75a61d541a9b1fae4ea2305259989507c172052ca457313c04d8e95890a" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="ad91ff9e66aa25923c4def66f7dd8cfeb7b230871eea0a6b7c12dc3ecf4de62d" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="91f75795280525ef0b9fd4ddf4386a492f8580f82374863bf9163c0dca256a68" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="8b804398051da5379b927385a34c40f17a80c2ef8e461aecae4d8c1d6f611f1e" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="b5f8aa814cd619ff6cb3f2416df862a247220a106681102372e6bb68fecfa3fd" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="6a2138ce14a9c650b733259393ee8a4cb5f0b0ca0e80b1724b02623c34a76dd1" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="f654c852d2121ea8445e7ce3b371f584b8a8ccbbd8fd7e304e0db97705f0a3ab" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="129a43d96a73448d77aa285dd084b1d06ba733427dfaa95a4d82b4163f703df2" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="27bdb2500b9cd65c52a543b7409d02b597ff0f9e3d4379ce7d27e86110c5cfeb" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="deae32409b3ca9c3b9dc9064fa05c745bf26d045ca3f8613805a83a1bd77db25" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="004b0693b2780641937ea4cd984c30eda76e33db932d4f0d339a36db0e9e9aa5" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="867a9ee7bb0921c26eb5684ad44b2059ceefd14448d9436cacdcac42c5e18375" name="qemu-ui-spice-core" arch="aarch64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="4bc31f25f8aeb8fcc22320880ecafa0c4bd85525ac57ba836f12b53ffca3967d" name="qemu-ui-spice-core" arch="s390x">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="09ad861fa6fa1c1684058f7745b93a45eb7edc91d114fec621fd4fef396772d6" name="qemu-ui-spice-core" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="181eaaa509d3c424184b05246e6d14e80cdb3698b9a8ea1515f87b991db3a8f3" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="fddb1c76c14b880b0b5d2d17cefe88755dafa2ae54d10233cc2027d9462a0808" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="a7f3e72004e43be17df221b69c255c82e28d2214c909681084fa20a5ff5e0a9e" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="547c2b935882cb0ed64f836528782c9b3ecb9a12e3c00585d2051a54bde375c3" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="85f168089b99bb69537dc5f16397cf012929a42eda4f28a32250530be1a94101" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="47856a97c4dbe47fae500315e32c659ee90fd52d95a865e6e26331e189c89710" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.15.0_0_g2dd4b9b" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="0cc3981f5c8f096559cc0405b76378c42a127cb95fc2693df8c2ef9e7f869be3" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.14.2"/>
  <changelog author="dfaggioli@suse.com" date="1648209600">- Kill downstream patches around bifmt handling that makes
  cumbersome to run multi-arch containers, and switch to the
  upstream behavior, which is well documented and valid on
  all other distros. This is possible thanks to Linux kernel
  commit 2347961b11d4 and QEMU commit 6e1c0d7b951e19c53 (so
  it can only work on Leap/SLE 15.4 and higher). (bsc#1197298)
  * Patches dropped:
  qemu-binfmt-conf.sh-allow-overriding-SUS.patch
  qemu-binfmt-conf-use-qemu-ARCH-binfmt.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
</package>
<package pkgid="d739bd6f0155cee5cda8d9d7c0392233bbf13aa23e1540908718b2aa48ac9cff" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.17.1"/>
  <changelog author="dfaggioli@suse.com" date="1648555200">- Add missing patch from a PTFs (bsc#1194938)
  * Patches added:
  scsi-generic-check-for-additional-SG_IO-.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555201">- The patches from upstream cause testsuit failures (bsc#1197150 bsc#1197528)
  * Patches added:
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648555202">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
</package>
<package pkgid="97cf21b61f56047ecbb32891ec75dd4162d51cc3a07268221fe2e7ebbfee45ae" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.20.1"/>
  <changelog author="li.zhang@suse.com" date="1648555200">- Backport CVE-2021-3929 (bsc#1193880)
  * Patches added:
  hw-nvme-fix-CVE-2021-3929.patch</changelog>
  <changelog author="li.zhang@suse.com" date="1648728000">- Support the SGX feature (bsc#1197807)
  * Patches added:
  doc-Add-the-SGX-numa-description.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch</changelog>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
</package>
<package pkgid="76ad944414109d59c31700a302230846702d224b5ae0ade4a94dae0be87bd7fd" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.23.1"/>
  <changelog author="dmueller@suse.com" date="1650369600">- enable aio=io_uring on all kvm architectures (bsc#1197699)</changelog>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
</package>
<package pkgid="fe429839f52425fec6f003b7fe6d82ddba9ad09dbeb53738816d039f46f6938e" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.26.1"/>
  <changelog author="dfaggioli@suse.com" date="1652443200">- Backport SeaBIOS patches for fixing bsc#1199018
  * Patches added:
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
</package>
<package pkgid="0803061f3cf095e1e875826f2d534b547424829c85ba4dd0e5deceef487a471f" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="6.2.0" rel="150400.37.29.1"/>
  <changelog author="dfaggioli@suse.com" date="1653307200">- Backport a GCC 12 aarch64 build fix (bsc#1199625)
  * Patches added:
  block-qdict-Fix-Werror-maybe-uninitializ.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307201">- Fix bsc#1198037, CVE-2021-4207
- Fix bsc#1198035, CVE-2021-4206
  * Patches added:
  display-qxl-render-fix-race-condition-in.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653307202">- Fix bsc#1198712, CVE-2022-26354
- Fix bsc#1198711, CVE-2022-26353
  * Patches added:
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1653393600">- Get rid of downstream patches breaking s390 modules. Replace
  them with the upstream proposed and Acked (but never committed)
  solution (bsc#1199015)
  * Patches added:
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  * Patches dropped:
  Fix-the-module-building-problem-for-s390.patch
  modules-quick-fix-a-fundamental-error-in.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1654257600">- Improve the output of update_git.sh, by including the list of
  repos to which we have downstream patches.
- Fix bsc#1197084 and bsc#1199924
  * Patches added:
  hostmem-default-the-amount-of-prealloc-t.patch
  pci-fix-overflow-in-snprintf-string-form.patch</changelog>
  <changelog author="lma@suse.com" date="1656676800">- Fix usb ehci boot failure (bsc#1192115)
  * Patches added:
  hw-usb-hcd-ehci-fix-writeback-order.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1657886400">- Fix: bsc#1198038, CVE-2022-0216
- Fix: bsc#1201367, CVE-2022-35414
  * Patches added:
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  softmmu-Always-initialize-xlat-in-addres.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1664539200">- Fix bsc#1198038, CVE-2022-0216
  * Patches added:
  scsi-lsi53c895a-really-fix-use-after-fre.patch</changelog>
  <changelog author="lma@suse.com" date="1668600000">- Fix qemu "block limits" VPD emulation broken (bsc#1202364)
  * Patches added:
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  scsi-generic-Fix-emulated-block-limits-V.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1676980800">- Fix bsc#1206527
  * Patches added:
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677067200">- Fixes bsc#1205808 (CVE-2022-4144), bsc#1203788  (CVE-2022-3165),
  bsc#1197653 (CVE-2022-1050)
  * Patches added:
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1677758400">- Fix: bsc#1185000, CVE-2021-3507
  * Patches added:
  hw-block-fdc-Prevent-end-of-track-overru.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1678276800">- Fix bsc#1180207 (CVE-2020-14394)
  * Patches added:
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1685620800">- Fix bsc#1211000
  * Patches added:
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-coroutine-wrapper.py-support-also-.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977600">- Switch the packaging workflow to git, like the one we have in place
  already for Factory and for SLE15-SP5
  * Patches no longer present as patch files, but applied as commits:
  AIO-Reduce-number-of-threads-for-32bit-h.patch
  Allow-bdrv_get_allocated_file_size-to-ru.patch
  Convert-query-block-info_block-to-corout.patch
  Convert-query-named-block-nodes-to-corou.patch
  Ignore-spurious-GCC-12-warning.patch
  Make-char-muxer-more-robust-wrt-small-FI.patch
  Make-installed-scripts-explicitly-python.patch
  Makefile-Don-t-check-pc-bios-as-pre-requ.patch
  Makefile-define-endianess-for-cross-buil.patch
  Makefile-fix-build-with-binutils-2.38.patch
  PPC-KVM-Disable-mmu-notifier-check.patch
  Raise-soft-address-space-limit-to-hard-l.patch
  Revert-python-iotests-replace-qmp-with-a.patch
  Revert-python-machine-add-instance-disam.patch
  Revert-python-machine-add-sock_dir-prope.patch
  Revert-python-machine-handle-fast-QEMU-t.patch
  Revert-python-machine-move-more-variable.patch
  Revert-python-machine-remove-_remove_mon.patch
  Revert-qht-constify-qht_statistics_init.patch
  Revert-roms-efirom-tests-uefi-test-tools.patch
  Run-fstat-asynchronously-inside-coroutin.patch
  Silence-GCC-12-spurious-warnings.patch
  XXX-dont-dump-core-on-sigabort.patch
  acpi-validate-hotplug-selector-on-access.patch
  acpi_piix4-Fix-migration-from-SLE11-SP2.patch
  ath5k-Add-missing-AR5K_EEPROM_READ-in-at.patch
  block-Convert-bdrv_get_allocated_file_si.patch
  block-backend-Retain-permissions-after-m.patch
  block-coroutine-wrapper.py-support-also-.patch
  block-qdict-Fix-Werror-maybe-uninitializ.patch
  brotli-fix-actual-variable-array-paramet.patch
  build-be-explicit-about-mx86-used-note-n.patch
  configure-only-populate-roms-if-softmmu.patch
  configure-remove-pkgversion-from-CONFIG_.patch
  display-qxl-render-fix-race-condition-in.patch
  doc-Add-the-SGX-numa-description.patch
  doc-add-our-support-doc-to-the-main-proj.patch
  enable-cross-compilation-on-ARM.patch
  help-compiler-out-by-initializing-array.patch
  hostmem-default-the-amount-of-prealloc-t.patch
  hw-block-fdc-Prevent-end-of-track-overru.patch
  hw-display-qxl-Assert-memory-slot-fits-i.patch
  hw-display-qxl-Avoid-buffer-overrun-in-q.patch
  hw-display-qxl-Document-qxl_phys2virt.patch
  hw-display-qxl-Have-qxl_log_command-Retu.patch
  hw-display-qxl-Pass-requested-buffer-siz.patch
  hw-i386-amd_iommu-Fix-maybe-uninitialize.patch
  hw-intc-exynos4210_gic-provide-more-room.patch
  hw-nvme-fix-CVE-2021-3929.patch
  hw-nvram-at24-return-0xff-if-1-byte-addr.patch
  hw-pvrdma-Protect-against-buggy-or-malic.patch
  hw-scsi-megasas-check-for-NULL-frame-in-.patch
  hw-scsi-scsi-generic-Fixup-VPD-block-lim.patch
  hw-smbios-handle-both-file-formats-regar.patch
  hw-usb-hcd-ehci-fix-writeback-order.patch
  hw-usb-hcd-xhci-Fix-unbounded-loop-in-xh.patch
  i8254-Fix-migration-from-SLE11-SP2.patch
  increase-x86_64-physical-bits-to-42.patch
  iotest-065-explicit-compression-type.patch
  iotest-214-explicit-compression-type.patch
  iotest-302-use-img_info_log-helper.patch
  iotest-303-explicit-compression-type.patch
  iotest-39-use-_qcow2_dump_header.patch
  iotests-60-more-accurate-set-dirty-bit-i.patch
  iotests-MRCE-Write-data-to-source.patch
  iotests-bash-tests-filter-compression-ty.patch
  iotests-common.rc-introduce-_qcow2_dump_.patch
  iotests-declare-lack-of-support-for-comp.patch
  iotests-drop-qemu_img_verbose-helper.patch
  iotests-massive-use-_qcow2_dump_header.patch
  iotests-specify-some-unsupported_imgopts.patch
  iotests.py-filter-out-successful-output-.patch
  iotests.py-img_info_log-rename-imgopts-a.patch
  iotests.py-implement-unsupported_imgopts.patch
  iotests.py-qemu_img-create-support-IMGOP.patch
  iotests.py-rewrite-default-luks-support-.patch
  ipxe-Makefile-fix-issues-of-build-reprod.patch
  linux-user-Fake-proc-cpuinfo.patch
  linux-user-add-binfmt-wrapper-for-argv-0.patch
  linux-user-binfmt-support-host-binaries.patch
  linux-user-lseek-explicitly-cast-non-set.patch
  linux-user-use-target_ulong.patch
  meson-build-all-modules-by-default.patch
  meson-install-ivshmem-client-and-ivshmem.patch
  modules-generates-per-target-modinfo.patch
  modules-introduces-module_kconfig-direct.patch
  numa-Enable-numa-for-SGX-EPC-sections.patch
  numa-Support-SGX-numa-in-the-monitor-and.patch
  pc-bios-s390-ccw-net-avoid-warning-about.patch
  pci-fix-overflow-in-snprintf-string-form.patch
  pci-let-firmware-reserve-IO-for-pcie-pci.patch
  pci-reserve-resources-for-pcie-pci-bridg.patch
  qboot-add-cross.ini-file-to-handle-aarch.patch
  qcow2-simple-case-support-for-downgradin.patch
  qemu-binfmt-conf-Modify-default-path.patch
  qemu-binfmt-conf.sh-should-use-F-as-shor.patch
  qemu-bridge-helper-reduce-security-profi.patch
  qemu-cvs-gettimeofday.patch
  qemu-cvs-ioctl_debug.patch
  qemu-cvs-ioctl_nodirection.patch
  qht-Revert-some-constification-in-qht.c.patch
  qom-handle-case-of-chardev-spice-module-.patch
  roms-Makefile-add-cross-file-to-qboot-me.patch
  roms-Makefile-pass-a-packaging-timestamp.patch
  roms-change-cross-compiler-naming-to-be-.patch
  roms-sgabios-Fix-csum8-to-be-built-by-ho.patch
  s390x-tod-kvm-don-t-save-restore-the-TOD.patch
  scsi-generic-Fix-emulated-block-limits-V.patch
  scsi-generic-check-for-additional-SG_IO-.patch
  scsi-generic-replace-logical-block-count.patch
  scsi-lsi53c895a-fix-use-after-free-in-ls.patch
  scsi-lsi53c895a-really-fix-use-after-fre.patch
  seabios-switch-to-python3-as-needed.patch
  seabios-use-python2-explicitly-as-needed.patch
  sgabios-Makefile-fix-issues-of-build-rep.patch
  softmmu-Always-initialize-xlat-in-addres.patch
  stub-out-the-SAN-req-s-in-int13.patch
  test-add-mapping-from-arch-of-i686-to-qe.patch
  tests-Fix-block-tests-to-be-compatible-w.patch
  tests-change-error-message-in-test-162.patch
  tests-qemu-iotests-040-Skip-TestCommitWi.patch
  tests-qemu-iotests-Fix-051-for-binaries-.patch
  tests-qemu-iotests-Triple-timeout-of-i-o.patch
  tests-qemu-iotests-testrunner-Quote-case.patch
  tools-virtiofsd-Add-rseq-syscall-to-the-.patch
  ui-cursor-fix-integer-overflow-in-cursor.patch
  ui-vnc-clipboard-fix-integer-underflow-i.patch
  usb-Help-compiler-out-to-avoid-a-warning.patch
  vhost-vsock-detach-the-virqueue-element-.patch
  virtio-net-fix-map-leaking-on-error-duri.patch
  virtiofsd-Drop-membership-of-all-supplem.patch
  xen-add-block-resize-support-for-xen-dis.patch
  xen-ignore-live-parameter-from-xen-save-.patch
  xen_disk-Add-suse-specific-flush-disable.patch</changelog>
  <changelog author="dfaggioli@suse.com" date="1690977601">- Fix bsc#1212968, bsc#1213414, bsc#1213001
- Patches added:
  9pfs: prevent opening special files (CVE-2023-2861)
  vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (CVE-2023-3301)
  ui/vnc-clipboard: fix infinite loop in inflate_buffer (CVE-2023-3255)</changelog>
  <changelog author="dfaggioli@suse.com" date="1691409600">- Maintenance and Security updates
- Patches added::
  * hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (bsc#1188609, CVE-2021-3638)
  * io: remove io watch if TLS channel is closed during handshake (bsc#1212850, CVE-2023-3354)
  * hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (bsc#1207205, CVE-2023-0330)</changelog>
  <changelog author="dfaggioli@suse.com" date="1696593600">- Fixes:
  * virtio-crypto: verify src&amp;dst buffer length for sym request bsc#1213925 (CVE-2023-3180)
  * roms/ipxe: Backport 0aa2e4ec9635, in preparation of binutils 2.41 (bsc#1215311)
  * memory: prevent dma-reentracy issues (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Introduce MemTxAttrs::memory field and MEMTX_ACCESS_ERROR (bsc#1190011, CVE-2021-3750)
  * softmmu/physmem: Simplify flatview_write and address_space_access_valid (bsc#1190011, CVE-2021-3750)
  * nbd/server: Fix drained_poll to wake coroutine in right AioContext (bsc#1213663)
  * block/nbd: Move s-&gt;ioc on AioContext change (bsc#1213663)
  * hw/ide/piix: properly initialize the BMIBA register (bsc#1179993, bsc#1181740)</changelog>
  <changelog author="dfaggioli@suse.com" date="1701172800">- Fixes and improvements:
  * [openSUSE] piix4 migration: force disable transfer of acpi_index (bsc#1216985)
  * memory: Fix qemu crash on starting dirty log twice with stopped VM (bsc#1214367)
  * memory: Fix incorrect calls of log_global_start/stop (bsc#1214367)
  * [openSUSE][RPM] pass -p1 to autosetup in qemu.spec</changelog>
  <changelog author="dfaggioli@suse.com" date="1713441600">- Backports and bugfixes:
  * net: Update MemReentrancyGuard for NIC (bsc#1213269, CVE-2023-3019)
  * net: Provide MemReentrancyGuard * to qemu_new_nic() (bsc#1213269, CVE-2023-3019)
  * ui/clipboard: mark type as not available when there is no data (bsc#1218889, CVE-2023-6683)
  * hw/virtio/virtio-crypto: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/char/virtio-serial-bus: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/display/virtio-gpu: Protect from DMA re-entrancy bugs (bsc#1222843, CVE-2024-3446)
  * hw/virtio: Introduce virtio_bh_new_guarded() helper (bsc#1222843, CVE-2024-3446)
  * apic: disable reentrancy detection for apic-msi (bsc#1222843, CVE-2024-3446)
  * raven: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * bcm2835_property: disable reentrancy detection for iomem (bsc#1222843, CVE-2024-3446)
  * lsi53c895a: disable reentrancy detection for script RAM (bsc#1222843, CVE-2024-3446)
  * hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (bsc#1222843, CVE-2024-3446)
  * checkpatch: add qemu_bh_new/aio_bh_new checks (bsc#1222843, CVE-2024-3446)
  * async: Add an optional reentrancy guard to the BH API (bsc#1222843, CVE-2024-3446)
  * hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (bsc#1222845, CVE-2024-3447)
  * esp: restrict non-DMA transfer length to that of available data (bsc#1220134, CVE-2024-24474)</changelog>
</package>
<package pkgid="7b332c7f36928fc7a2401cd31d4f564561365ca734b4874adcb68cafe14af00b" name="raspberrypi-firmware-dt" arch="noarch">
  <version epoch="0" ver="2021.11.19" rel="150400.5.3.1"/>
  <changelog author="nsaenzjulienne@suse.com" date="1585224000">- Add upstream-cma.patch unifying CMA handling on all RPis (bsc#1167761)
- Remove rpi4-cma-overlay.dts since not needed anymore (bsc#1167761)
- Rename emmc2bus.patch to upstream-emmc2bus.patch to mark this is a reality upstream
- Rename pcie-dma-ranges.patch to upstream-pcie-dma-ranges.patch to mark this is a reality upstream</changelog>
  <changelog author="ptesarik@suse.com" date="1585310400">- Add a modalias Supplements, so the package gets selected
  automatically on a Raspberry Pi.</changelog>
  <changelog author="ptesarik@suse.com" date="1585656000">- Use proper quoting for the modalias Supplements (see also
  https://github.com/openSUSE/libzypp/issues/216).</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1586174400">- Update to b08ce72793b5 (2020-04-02) (bsc#1167761)
  * Based on v5.6.y
  * Uses upstream's CMA handling
  * Introduces GPIO labels
  * Fixes DMA issues with firmware DT node
  * Introduces thermal nodes
- Remove rpi4-thermal.dts as it's now available in the stock device-tree.
- Remove rpi4-gpio-names-overlay.dts as it's now available in the stock device-tree.
- Remove rpi4-firmware-dma-ranges-overlay.dts as it's now available in the stock device-tree.
- Remove upstream-cma.patch as it's now available in the stock device-tree.
- Remove upstream-pcie-dma-ranges.patch as it's now available in the stock device-tree.
- Refresh upstream-emmc2bus.patch so it applies on v5.6.y</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1588075200">- Update to d7b4d5935198 (2020-05-02)
  * Adds gpio labels for rpi4 (bsc#1164722)
  * Get rid of upstream-emmc2bus.patch, not needed anymore</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1595332800">- Add vl805-firware-loader-overlay.dts which registers a reset controller
  that'll take care of triggering vl805's firmware load.</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1603972800">- Update to 2dc96ad40979 (2020-10-26):
  * Introduce firmware-clocks
  * Introduce firmware-reset
  * Add reset controller in xHCI node
- Get rid of vl805-firmware-loader-overlay.dts, not needed anymore</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1606392000">- Introduce upstream-overlay-rpi-poe.patch to adapt the overlay to our driver (jsc#SLE-16543)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1607515200">- Update to f77383ec0ed3 (2020-12-07) (jsc#SLE-16676):
  * Introduce RPi400 device-tree</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611316800">- Introduce upstream-blconfig-rmem.patch for firmware to be able to define
  firmware's configuration reserved memory (jsc#SLE-16616)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611576000">- Update to 02dbfea28f (2021-01-22):
  * Add reserved memory template to hold firmware configuration
- Drop upstream-blconfig-rmem.patch as it's now available upstream.</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611748800">- Introduce disable-v3d-overlay.dts, in order to be able to selectively disable
  v3d while using vc4 as the display controller (jsc#SLE-15928).</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1614600000">- Introduce enable-bt-overlay.dts (bsc#1182759)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1615809600">- Update to 16991af20b (2021-03-15) (bsc#1183238):
  * overlays: Add pcie-32bit-dma overlay</changelog>
  <changelog author="mbrugger@suse.com" date="1617969600">- Add overlay for smbios information (bsc#1183079)
  * smbios-overlay.dts</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1631880000">- Update to 2425833c7ff5 (2021-09-17)
  * Switch to 5.14 branch
  * Drop upstream-overlay-rpi-poe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638273600">Enable RaspberryPi Zero 2 (jsc#SLE-23131).
- Update to 14c1845ff9 (2021-11-19):
  * Add DTS:
  - bcm2710-rpi-zero-2-w.dts
  - bcm2710-rpi-zero-2.dts
  * Add overlays:
  - adafruit-st7735r-overlay.dts
  - fbtft-overlay.dts
  - imx519-overlay.dts
  - mcp2515-overlay.dts
  - mlx90640-overlay.dts</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1648555200">- With recent Linux kernel gpio-ranges Device Tree property is now
  required. Add following patches to fix immediate issue described
  in bsc#1197578.
    ARM-dts-gpio-ranges-property-is-now-required.patch
    ARM-dts-Add-GPIO-line-names-for-downstream-RPis.patch
  We do not update whole package because this will create new
  issues like the one described in comment#12 in bsc#1193434
  and comment#2 in bsc#1196632. Once patches referenced in
  bsc#1196632 are accepted upstream. _This_ package could be
  upgraded too.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1650456000">- Switch back to platform driver until upstream gain support for
  VEC clock in clk-raspberrypi driver. Add following patch to fix
  immediate issue described in bsc#1198061.
  Revert-dt-Move-VEC-clock-to-clk-raspberrypi.patch</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1689768000">- Use compatible string which is supported by spidev module (bsc#1212791):
  * ARM-dts-bcm27xx-Use-better-name-for-spidev.patch-</changelog>
</package>
<package pkgid="c0566ada1a749d168efccc6c465a18dd30b4de56c53b0620127d898ed4975ddb" name="raspberrypi-firmware-dt" arch="src">
  <version epoch="0" ver="2021.11.19" rel="150400.5.3.1"/>
  <changelog author="nsaenzjulienne@suse.com" date="1585224000">- Add upstream-cma.patch unifying CMA handling on all RPis (bsc#1167761)
- Remove rpi4-cma-overlay.dts since not needed anymore (bsc#1167761)
- Rename emmc2bus.patch to upstream-emmc2bus.patch to mark this is a reality upstream
- Rename pcie-dma-ranges.patch to upstream-pcie-dma-ranges.patch to mark this is a reality upstream</changelog>
  <changelog author="ptesarik@suse.com" date="1585310400">- Add a modalias Supplements, so the package gets selected
  automatically on a Raspberry Pi.</changelog>
  <changelog author="ptesarik@suse.com" date="1585656000">- Use proper quoting for the modalias Supplements (see also
  https://github.com/openSUSE/libzypp/issues/216).</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1586174400">- Update to b08ce72793b5 (2020-04-02) (bsc#1167761)
  * Based on v5.6.y
  * Uses upstream's CMA handling
  * Introduces GPIO labels
  * Fixes DMA issues with firmware DT node
  * Introduces thermal nodes
- Remove rpi4-thermal.dts as it's now available in the stock device-tree.
- Remove rpi4-gpio-names-overlay.dts as it's now available in the stock device-tree.
- Remove rpi4-firmware-dma-ranges-overlay.dts as it's now available in the stock device-tree.
- Remove upstream-cma.patch as it's now available in the stock device-tree.
- Remove upstream-pcie-dma-ranges.patch as it's now available in the stock device-tree.
- Refresh upstream-emmc2bus.patch so it applies on v5.6.y</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1588075200">- Update to d7b4d5935198 (2020-05-02)
  * Adds gpio labels for rpi4 (bsc#1164722)
  * Get rid of upstream-emmc2bus.patch, not needed anymore</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1595332800">- Add vl805-firware-loader-overlay.dts which registers a reset controller
  that'll take care of triggering vl805's firmware load.</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1603972800">- Update to 2dc96ad40979 (2020-10-26):
  * Introduce firmware-clocks
  * Introduce firmware-reset
  * Add reset controller in xHCI node
- Get rid of vl805-firmware-loader-overlay.dts, not needed anymore</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1606392000">- Introduce upstream-overlay-rpi-poe.patch to adapt the overlay to our driver (jsc#SLE-16543)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1607515200">- Update to f77383ec0ed3 (2020-12-07) (jsc#SLE-16676):
  * Introduce RPi400 device-tree</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611316800">- Introduce upstream-blconfig-rmem.patch for firmware to be able to define
  firmware's configuration reserved memory (jsc#SLE-16616)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611576000">- Update to 02dbfea28f (2021-01-22):
  * Add reserved memory template to hold firmware configuration
- Drop upstream-blconfig-rmem.patch as it's now available upstream.</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611748800">- Introduce disable-v3d-overlay.dts, in order to be able to selectively disable
  v3d while using vc4 as the display controller (jsc#SLE-15928).</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1614600000">- Introduce enable-bt-overlay.dts (bsc#1182759)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1615809600">- Update to 16991af20b (2021-03-15) (bsc#1183238):
  * overlays: Add pcie-32bit-dma overlay</changelog>
  <changelog author="mbrugger@suse.com" date="1617969600">- Add overlay for smbios information (bsc#1183079)
  * smbios-overlay.dts</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1631880000">- Update to 2425833c7ff5 (2021-09-17)
  * Switch to 5.14 branch
  * Drop upstream-overlay-rpi-poe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638273600">Enable RaspberryPi Zero 2 (jsc#SLE-23131).
- Update to 14c1845ff9 (2021-11-19):
  * Add DTS:
  - bcm2710-rpi-zero-2-w.dts
  - bcm2710-rpi-zero-2.dts
  * Add overlays:
  - adafruit-st7735r-overlay.dts
  - fbtft-overlay.dts
  - imx519-overlay.dts
  - mcp2515-overlay.dts
  - mlx90640-overlay.dts</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1648555200">- With recent Linux kernel gpio-ranges Device Tree property is now
  required. Add following patches to fix immediate issue described
  in bsc#1197578.
    ARM-dts-gpio-ranges-property-is-now-required.patch
    ARM-dts-Add-GPIO-line-names-for-downstream-RPis.patch
  We do not update whole package because this will create new
  issues like the one described in comment#12 in bsc#1193434
  and comment#2 in bsc#1196632. Once patches referenced in
  bsc#1196632 are accepted upstream. _This_ package could be
  upgraded too.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1650456000">- Switch back to platform driver until upstream gain support for
  VEC clock in clk-raspberrypi driver. Add following patch to fix
  immediate issue described in bsc#1198061.
  Revert-dt-Move-VEC-clock-to-clk-raspberrypi.patch</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1689768000">- Use compatible string which is supported by spidev module (bsc#1212791):
  * ARM-dts-bcm27xx-Use-better-name-for-spidev.patch-</changelog>
</package>
<package pkgid="7080924fb4b6c3b5ad72415c8a2192296ba2554c82e222c6320c4b77b9f2556b" name="raspberrypi-firmware-dt" arch="noarch">
  <version epoch="0" ver="2021.11.19" rel="150400.5.6.1"/>
  <changelog author="ptesarik@suse.com" date="1585310400">- Add a modalias Supplements, so the package gets selected
  automatically on a Raspberry Pi.</changelog>
  <changelog author="ptesarik@suse.com" date="1585656000">- Use proper quoting for the modalias Supplements (see also
  https://github.com/openSUSE/libzypp/issues/216).</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1586174400">- Update to b08ce72793b5 (2020-04-02) (bsc#1167761)
  * Based on v5.6.y
  * Uses upstream's CMA handling
  * Introduces GPIO labels
  * Fixes DMA issues with firmware DT node
  * Introduces thermal nodes
- Remove rpi4-thermal.dts as it's now available in the stock device-tree.
- Remove rpi4-gpio-names-overlay.dts as it's now available in the stock device-tree.
- Remove rpi4-firmware-dma-ranges-overlay.dts as it's now available in the stock device-tree.
- Remove upstream-cma.patch as it's now available in the stock device-tree.
- Remove upstream-pcie-dma-ranges.patch as it's now available in the stock device-tree.
- Refresh upstream-emmc2bus.patch so it applies on v5.6.y</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1588075200">- Update to d7b4d5935198 (2020-05-02)
  * Adds gpio labels for rpi4 (bsc#1164722)
  * Get rid of upstream-emmc2bus.patch, not needed anymore</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1595332800">- Add vl805-firware-loader-overlay.dts which registers a reset controller
  that'll take care of triggering vl805's firmware load.</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1603972800">- Update to 2dc96ad40979 (2020-10-26):
  * Introduce firmware-clocks
  * Introduce firmware-reset
  * Add reset controller in xHCI node
- Get rid of vl805-firmware-loader-overlay.dts, not needed anymore</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1606392000">- Introduce upstream-overlay-rpi-poe.patch to adapt the overlay to our driver (jsc#SLE-16543)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1607515200">- Update to f77383ec0ed3 (2020-12-07) (jsc#SLE-16676):
  * Introduce RPi400 device-tree</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611316800">- Introduce upstream-blconfig-rmem.patch for firmware to be able to define
  firmware's configuration reserved memory (jsc#SLE-16616)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611576000">- Update to 02dbfea28f (2021-01-22):
  * Add reserved memory template to hold firmware configuration
- Drop upstream-blconfig-rmem.patch as it's now available upstream.</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611748800">- Introduce disable-v3d-overlay.dts, in order to be able to selectively disable
  v3d while using vc4 as the display controller (jsc#SLE-15928).</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1614600000">- Introduce enable-bt-overlay.dts (bsc#1182759)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1615809600">- Update to 16991af20b (2021-03-15) (bsc#1183238):
  * overlays: Add pcie-32bit-dma overlay</changelog>
  <changelog author="mbrugger@suse.com" date="1617969600">- Add overlay for smbios information (bsc#1183079)
  * smbios-overlay.dts</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1631880000">- Update to 2425833c7ff5 (2021-09-17)
  * Switch to 5.14 branch
  * Drop upstream-overlay-rpi-poe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638273600">Enable RaspberryPi Zero 2 (jsc#SLE-23131).
- Update to 14c1845ff9 (2021-11-19):
  * Add DTS:
  - bcm2710-rpi-zero-2-w.dts
  - bcm2710-rpi-zero-2.dts
  * Add overlays:
  - adafruit-st7735r-overlay.dts
  - fbtft-overlay.dts
  - imx519-overlay.dts
  - mcp2515-overlay.dts
  - mlx90640-overlay.dts</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1648555200">- With recent Linux kernel gpio-ranges Device Tree property is now
  required. Add following patches to fix immediate issue described
  in bsc#1197578.
    ARM-dts-gpio-ranges-property-is-now-required.patch
    ARM-dts-Add-GPIO-line-names-for-downstream-RPis.patch
  We do not update whole package because this will create new
  issues like the one described in comment#12 in bsc#1193434
  and comment#2 in bsc#1196632. Once patches referenced in
  bsc#1196632 are accepted upstream. _This_ package could be
  upgraded too.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1650456000">- Switch back to platform driver until upstream gain support for
  VEC clock in clk-raspberrypi driver. Add following patch to fix
  immediate issue described in bsc#1198061.
  Revert-dt-Move-VEC-clock-to-clk-raspberrypi.patch</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1689768000">- Use compatible string which is supported by spidev module (bsc#1212791):
  * ARM-dts-bcm27xx-Use-better-name-for-spidev.patch-</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1707566400">- Extend "ARM: dts: bcm27xx: Use better name for spidev" patch coverage.
  Change compatible "spidev" to "rohm,dh2228fv" in overlay files too.
  Fixes bsc#1219094.</changelog>
</package>
<package pkgid="612b0fe03d5003c84562067334579e8d76b67c473bf7eb009f24879e8072ef21" name="raspberrypi-firmware-dt" arch="src">
  <version epoch="0" ver="2021.11.19" rel="150400.5.6.1"/>
  <changelog author="ptesarik@suse.com" date="1585310400">- Add a modalias Supplements, so the package gets selected
  automatically on a Raspberry Pi.</changelog>
  <changelog author="ptesarik@suse.com" date="1585656000">- Use proper quoting for the modalias Supplements (see also
  https://github.com/openSUSE/libzypp/issues/216).</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1586174400">- Update to b08ce72793b5 (2020-04-02) (bsc#1167761)
  * Based on v5.6.y
  * Uses upstream's CMA handling
  * Introduces GPIO labels
  * Fixes DMA issues with firmware DT node
  * Introduces thermal nodes
- Remove rpi4-thermal.dts as it's now available in the stock device-tree.
- Remove rpi4-gpio-names-overlay.dts as it's now available in the stock device-tree.
- Remove rpi4-firmware-dma-ranges-overlay.dts as it's now available in the stock device-tree.
- Remove upstream-cma.patch as it's now available in the stock device-tree.
- Remove upstream-pcie-dma-ranges.patch as it's now available in the stock device-tree.
- Refresh upstream-emmc2bus.patch so it applies on v5.6.y</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1588075200">- Update to d7b4d5935198 (2020-05-02)
  * Adds gpio labels for rpi4 (bsc#1164722)
  * Get rid of upstream-emmc2bus.patch, not needed anymore</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1595332800">- Add vl805-firware-loader-overlay.dts which registers a reset controller
  that'll take care of triggering vl805's firmware load.</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1603972800">- Update to 2dc96ad40979 (2020-10-26):
  * Introduce firmware-clocks
  * Introduce firmware-reset
  * Add reset controller in xHCI node
- Get rid of vl805-firmware-loader-overlay.dts, not needed anymore</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1606392000">- Introduce upstream-overlay-rpi-poe.patch to adapt the overlay to our driver (jsc#SLE-16543)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1607515200">- Update to f77383ec0ed3 (2020-12-07) (jsc#SLE-16676):
  * Introduce RPi400 device-tree</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611316800">- Introduce upstream-blconfig-rmem.patch for firmware to be able to define
  firmware's configuration reserved memory (jsc#SLE-16616)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611576000">- Update to 02dbfea28f (2021-01-22):
  * Add reserved memory template to hold firmware configuration
- Drop upstream-blconfig-rmem.patch as it's now available upstream.</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1611748800">- Introduce disable-v3d-overlay.dts, in order to be able to selectively disable
  v3d while using vc4 as the display controller (jsc#SLE-15928).</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1614600000">- Introduce enable-bt-overlay.dts (bsc#1182759)</changelog>
  <changelog author="nsaenzjulienne@suse.com" date="1615809600">- Update to 16991af20b (2021-03-15) (bsc#1183238):
  * overlays: Add pcie-32bit-dma overlay</changelog>
  <changelog author="mbrugger@suse.com" date="1617969600">- Add overlay for smbios information (bsc#1183079)
  * smbios-overlay.dts</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1631880000">- Update to 2425833c7ff5 (2021-09-17)
  * Switch to 5.14 branch
  * Drop upstream-overlay-rpi-poe.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1638273600">Enable RaspberryPi Zero 2 (jsc#SLE-23131).
- Update to 14c1845ff9 (2021-11-19):
  * Add DTS:
  - bcm2710-rpi-zero-2-w.dts
  - bcm2710-rpi-zero-2.dts
  * Add overlays:
  - adafruit-st7735r-overlay.dts
  - fbtft-overlay.dts
  - imx519-overlay.dts
  - mcp2515-overlay.dts
  - mlx90640-overlay.dts</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1648555200">- With recent Linux kernel gpio-ranges Device Tree property is now
  required. Add following patches to fix immediate issue described
  in bsc#1197578.
    ARM-dts-gpio-ranges-property-is-now-required.patch
    ARM-dts-Add-GPIO-line-names-for-downstream-RPis.patch
  We do not update whole package because this will create new
  issues like the one described in comment#12 in bsc#1193434
  and comment#2 in bsc#1196632. Once patches referenced in
  bsc#1196632 are accepted upstream. _This_ package could be
  upgraded too.</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1650456000">- Switch back to platform driver until upstream gain support for
  VEC clock in clk-raspberrypi driver. Add following patch to fix
  immediate issue described in bsc#1198061.
  Revert-dt-Move-VEC-clock-to-clk-raspberrypi.patch</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1689768000">- Use compatible string which is supported by spidev module (bsc#1212791):
  * ARM-dts-bcm27xx-Use-better-name-for-spidev.patch-</changelog>
  <changelog author="ivan.ivanov@suse.com" date="1707566400">- Extend "ARM: dts: bcm27xx: Use better name for spidev" patch coverage.
  Change compatible "spidev" to "rohm,dh2228fv" in overlay files too.
  Fixes bsc#1219094.</changelog>
</package>
<package pkgid="866df6b6a3f56c3b0002d4d4d84f2c66749518a43369911404d8ed61d30ad6e7" name="rdma-core" arch="aarch64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="f16b807df62f93bcc054c7da2c250507b7ade15416101df8ae0ee358909222c2" name="rdma-core" arch="s390x">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="11dc5250b98b494021f112f91da4fc197582635c8478730d691f3f8b4f9e1b23" name="rdma-core" arch="src">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="be4b729835f526168cf7e4b7fe4a654a092cc955a671702c49eb53d92e69ee7c" name="rdma-core" arch="x86_64">
  <version epoch="0" ver="38.3" rel="150400.6.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1576065600">- Remove file listed twice
- Disable pyverbs build for older releases that do not have python3-Cython &gt;= 0.25</changelog>
  <changelog author="dimstar@opensuse.org" date="1576238400">- Fix post scripts to work with systemd 244: udevadm has been moved
  from /sbin to /usr/bin and systemd is dropping the compat links
  now.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1578657600">- Update to v27.0 (bsc#1160338)
  - No release notes available
- Dropped patches merged upstream:
  - bnxt_re-lib-Add-remaining-pci-ids-for-gen-P5-devices.patch
  - bnxt_re-lib-Recognize-additional-5750x-device-ID-s.patch
- Add patches to support older HW (nes, cxgb3) that was dropped upstream
  - Revert-Update-kernel-headers.patch
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - Revert-libnes-Remove-libnes-from-rdma-core.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1579867200">- Add disable-rdma-interface-renaming.patch to disable interface renaming which causes
  mvapich2 to fail (bsc#1161794)</changelog>
  <changelog author="dimstar@opensuse.org" date="1582372800">- Eliminate the curl-mini trickery for Tumbleweed: curl-mini is
  being eliminated in favor of cmake-mini: the original plan to
  split the cycle at curl did not work out in the long run.</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1586865600">- Update to v27.1
  - Many bugfixes (memory leaks, use after free, etc.)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1595592000">- Update to v30.0
  - No release notes available
- Add cxgb3-nes-fix-declaration-of-free_context.patch to fix support
  of older providers with newer rdma-core internal ABI</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1599566400">- Update to v31.0 (jsc#SLE-15657, jsc#SLE-15731, jsc#SLE-15743, jsc#SLE-15810)
  - No release notes available</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1611316800">- Add srp_daemon-Fix-systemd-dependency.patch to make sure srp_daemon
  is loaded at boot if enabled (bsc#1180196)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1612958400">- Update to rdma-core v31.3
  - No release notes available
- Fix patch to systemd-modules-load script (bsc#1178539)
- Drop srp_daemon-Fix-systemd-dependency.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1613736000">- Update to rdma-core v33.1
  - No release notes available
  - Drop support for libnes
- Drop support for libnes by removing patch:
  - Revert-libnes-Remove-libnes-from-rdma-core.patch
- Refresh patches against latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - cxgb3-nes-fix-declaration-of-free_context.patch has been replaced by
    cxgb3-fix-declaration-of-free_context.patch
- Add patches for cxgb3 support against newest API
  - cxgb3-fix-support-for-new-uquery-API.patch
- Enable LTO support
- Trigger udevadm in rdma-ndd %post (bsc#1182391)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1621339200">- Update to rdma-core v35.0
  - Bugfixes on all providers
  - Many improvements on pyverbs
  - Fixes dracut path issues on Tumbleweed
- Refresh patches to latest sources:
  - Revert-libcxgb3-Remove-libcxgb3-from-rdma-core.patch
  - disable-rdma-interface-renaming.patch</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1628251200">- Update to rdma-core v36.0:
  - Bugfixes on all providers</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1634299200">- Update to rdma-core v37.1 (jsc#SLE-18381, jsc#SLE-19249)
  - Bugfixes on all providers
- Fix cmake flags to correct paths for .pc files</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446400">- Add rdma-ndd to recommended depencies of rdma-core</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1638446401">- Update to v38.0 (jsc#SLE-18383)
  - Bugfixes on all providers
  - New provider for irdma support</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1641556800">- Update to v38.1
  - Major fixes for hns provider</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1645185600">- Add srp_daemon-Detect-proper-path-to-systemctl.patch to fix path to systemctl (bsc#1195874)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1646913600">- Update spec file from upstream
  - install modprobe.conf files to %_modprobedir (bsc#1196275, jsc#SLE-20639)
  - fix build support for riscv
- Added cmake-Make-modprobe.d-path-configurable.patch
  - Backport from upstream to allow modprobe files to be installed in a
    configurable directory</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1666699200">- Update to rdma-core v38.3 (bsc#1204271, bsc#1212069)
  - Updates from version 38.2
  - Fix spelling mistake of underlying
  - pyverbs: Increment the correct rkey in test_qpex
  - providers/irdma: Use s/g array in post send only when its valid
  - providers/irdma: Explicitly set QP modify attributes for reflush
  - Install xprtrdma/svcrdma kmods in redhat/suse dracut modules
  - mlx5: DR, Fix missing comma in matcher builder dump line
  - mlx5: Adjust Crypto BSF size if signature is used
  - cma: Release allocated port array
  - mlx5: Fix check for SQ overflow in bind_mw
  - tests: Fix mlx5dr dest port test
  - tests: Change a duplicate field name in a prm struct
  - rdma_xserver/xclient: Make recv/send WQs disjunctive
  - libhns: Fix the shift size of SQ WQE
  - librdmacm: Don't rely on IB device index if not available
  - Updates from version 38.1
  - cmake: Add default for SYSTEMCTL_BIN option.
  - librdmacm: Make rping with external qp compliant to IB spec
  - mlx5: DR, Fix handling of different actions on the same STE in STEv1
  - srp_daemon: Detect proper path to systemctl
  - cmake: Fix cmake link property for static library
  - redhat: fix CMake flags
  - mlx5: DR, Fix SW steering dump tool dr_match_param structs
  - providers: Move input validation for memory window bind to core
  - providers/rxe: Replace '%' with '&amp;' in check_qp_queue_full()
  - verbs: Fix description of manual for ibv wc read byte len function
  - verbs: Fix a typo
  - libhns: Fix wrong HIP08 version macro
  - libhns: Fix out-of-bounds write when filling inline data into extended sge space
  - bnxt_re/lib: Check pointer validity while freeing queue pointers
  - mlx5: Initialize wr_data when post a work request
- Remove srp_daemon-Detect-proper-path-to-systemctl.patch as it was
  fixed upstream.</changelog>
</package>
<package pkgid="11eda5b82184a0e16dbb39fc00513ae3468765c43128ae5a531559c8a8149011" name="regionServiceClientConfigAzure" arch="noarch">
  <version epoch="0" ver="2.0.1" rel="150000.3.19.1"/>
  <changelog author="ms@suse.com" date="1413460800">- regionServiceClientConfigAzure
  + update the configuration to match the new command line arguments</changelog>
  <changelog author="rschweikert@suse.com" date="1420545600">- Include in SLE 12 (FATE 318302, bnc#911856)</changelog>
  <changelog author="rjschwei@suse.com" date="1423742400">- Update to version 0.0.3
  + Use the new command for the meta data (azuremetadata)
  + Fix the package dependencies, requires azuremetadata</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Update to version 0.0.4
  + Use region hint to get SMT data in pre for IPv6 support (bsc#1029162)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Update to version 0.0.5
  + Don't specify root device name explicitly (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Update to version 0.0.6
  + Report subscriptionId during registration (bsc#1170605, bsc#1170606)</changelog>
  <changelog author="rjschwei@suse.com" date="1588852800">- Update to version 1.0.0 (bsc#1171465, bsc#1171465)
  + Merge region server setup for SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 1.0.5 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic
  + Use latest API to query the metadata server and send additional data</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 2.0.0 (bsc#1199668)
  + Move the certs to /usr from /var to accomodate ro filesystem of
    SLE-Micro
  + Fix source url in spec file</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 2.0.1 (bsc#1217537)
  + Replacing 104.45.31.195.pem 191.237.254.253.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
</package>
<package pkgid="b7042c457468cd9a671a4895c7d1110fd9211cb41616ac52bdad1946827d60de" name="regionServiceClientConfigAzure" arch="src">
  <version epoch="0" ver="2.0.1" rel="150000.3.19.1"/>
  <changelog author="ms@suse.com" date="1413460800">- regionServiceClientConfigAzure
  + update the configuration to match the new command line arguments</changelog>
  <changelog author="rschweikert@suse.com" date="1420545600">- Include in SLE 12 (FATE 318302, bnc#911856)</changelog>
  <changelog author="rjschwei@suse.com" date="1423742400">- Update to version 0.0.3
  + Use the new command for the meta data (azuremetadata)
  + Fix the package dependencies, requires azuremetadata</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Update to version 0.0.4
  + Use region hint to get SMT data in pre for IPv6 support (bsc#1029162)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1585656000">- Update to version 0.0.5
  + Don't specify root device name explicitly (bsc#1158698, bsc#1158707)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1587988800">- Update to version 0.0.6
  + Report subscriptionId during registration (bsc#1170605, bsc#1170606)</changelog>
  <changelog author="rjschwei@suse.com" date="1588852800">- Update to version 1.0.0 (bsc#1171465, bsc#1171465)
  + Merge region server setup for SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 1.0.5 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic
  + Use latest API to query the metadata server and send additional data</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 2.0.0 (bsc#1199668)
  + Move the certs to /usr from /var to accomodate ro filesystem of
    SLE-Micro
  + Fix source url in spec file</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 2.0.1 (bsc#1217537)
  + Replacing 104.45.31.195.pem 191.237.254.253.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
</package>
<package pkgid="902ab988f8ad683fb8c28a3516dbbe44d6502e39e023b49e67a97c83271d20db" name="regionServiceClientConfigEC2" arch="noarch">
  <version epoch="0" ver="4.1.1" rel="150000.3.27.1"/>
  <changelog author="rschweikert@suse.com" date="1413374400">- Update to version 1.0.1
  + Add region server for China region</changelog>
  <changelog author="aosthof@suse.de" date="1417521600">- Removed /etc/regionserverclnt.cfg~ from tarball</changelog>
  <changelog author="rjschwei@suse.com" date="1486987200">- Update to version 2.0.0 (bsc#1025004)
  + Delete old certificate of server we no longer operate
  + Add certificate for new server 34.197.223.242</changelog>
  <changelog author="rjschwei@suse.com" date="1512820800">- Fix dependency for SLE 15 (bsc#1071292)</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Update to version 2.0.1
  + Use region hint to get SMT data in pre for IPv6 support (bsc#1029162)</changelog>
  <changelog author="jmason@suse.com" date="1526299200">- Update to version 2.1.0 (bsc#1093189, bsc#1121114)
  + Drop lost server IP address; realign IPs with certs
  + Add 34.197.223.242 to configuration</changelog>
  <changelog author="rjschwei@suse.com" date="1588766400">- Update to version 2.2.0 (bsc#1171232, bsc#1171233)
  + Send a region hint using the plugin
  + Consolidate SLES and SLES For SAP certs</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 2.2.1 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic</changelog>
  <changelog author="rjschwei@suse.com" date="1598961600">- Update to version 3.0.0 (bsc#1176005, bsc#1176007)
  + Reduce the number of region servers
  + Require python3-ec2metadata to support IMDSv2 only setups</changelog>
  <changelog author="jmason@suse.com" date="1636718400">- Update to version 3.1.0 (bsc#1029162)
  + Add IPv6 addresses to config
  + Include IPv6 certificates
  + Requires cloud-regionsrv-client &gt;= v9.3.0</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 4.0.0 (bsc#1199668)
  + Move cert location to usr form var to accomodate ro filesystem of
    SLE-Micro
  + Fix source location in spec file</changelog>
  <changelog author="rjschwei@suse.com" date="1662552000">- Update to version 4.1.0 (bsc#1203215)
  + New certs for 52.79.82.165 and 54.247.166.75</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.1.1 (bsc#1217536)
  + Replace 54.247.166.75.pem and 54.253.118.149.pem old soon to expired certs
    with new generated ones that expire in 8 years and have longer length (4096)</changelog>
</package>
<package pkgid="8e24eb76623b369705d98e190f8139466cbc9cf569affbc5fd1a11beca3d8a03" name="regionServiceClientConfigEC2" arch="src">
  <version epoch="0" ver="4.1.1" rel="150000.3.27.1"/>
  <changelog author="rschweikert@suse.com" date="1401537600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1401710400">- Update to version 1.0.0
  + use ful path for data collector
  + fix provides</changelog>
  <changelog author="rschweikert@suse.com" date="1413374400">- Update to version 1.0.1
  + Add region server for China region</changelog>
  <changelog author="aosthof@suse.de" date="1417521600">- Removed /etc/regionserverclnt.cfg~ from tarball</changelog>
  <changelog author="rjschwei@suse.com" date="1486987200">- Update to version 2.0.0 (bsc#1025004)
  + Delete old certificate of server we no longer operate
  + Add certificate for new server 34.197.223.242</changelog>
  <changelog author="rjschwei@suse.com" date="1512820800">- Fix dependency for SLE 15 (bsc#1071292)</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Update to version 2.0.1
  + Use region hint to get SMT data in pre for IPv6 support (bsc#1029162)</changelog>
  <changelog author="jmason@suse.com" date="1526299200">- Update to version 2.1.0 (bsc#1093189, bsc#1121114)
  + Drop lost server IP address; realign IPs with certs
  + Add 34.197.223.242 to configuration</changelog>
  <changelog author="rjschwei@suse.com" date="1588766400">- Update to version 2.2.0 (bsc#1171232, bsc#1171233)
  + Send a region hint using the plugin
  + Consolidate SLES and SLES For SAP certs</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 2.2.1 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic</changelog>
  <changelog author="rjschwei@suse.com" date="1598961600">- Update to version 3.0.0 (bsc#1176005, bsc#1176007)
  + Reduce the number of region servers
  + Require python3-ec2metadata to support IMDSv2 only setups</changelog>
  <changelog author="jmason@suse.com" date="1636718400">- Update to version 3.1.0 (bsc#1029162)
  + Add IPv6 addresses to config
  + Include IPv6 certificates
  + Requires cloud-regionsrv-client &gt;= v9.3.0</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 4.0.0 (bsc#1199668)
  + Move cert location to usr form var to accomodate ro filesystem of
    SLE-Micro
  + Fix source location in spec file</changelog>
  <changelog author="rjschwei@suse.com" date="1662552000">- Update to version 4.1.0 (bsc#1203215)
  + New certs for 52.79.82.165 and 54.247.166.75</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.1.1 (bsc#1217536)
  + Replace 54.247.166.75.pem and 54.253.118.149.pem old soon to expired certs
    with new generated ones that expire in 8 years and have longer length (4096)</changelog>
</package>
<package pkgid="5faeaa9db3871523eff3778ca68f7142478f1383abf0fd7e85d18dc5bbfd9064" name="regionServiceClientConfigGCE" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="150000.4.12.1"/>
  <changelog author="rschweikert@suse.com" date="1411732800">- New certificate for new region servers</changelog>
  <changelog author="rschweikert@suse.com" date="1411732801">- Bump to version 2.0.1
  + fix spec file file list</changelog>
  <changelog author="rschweikert@suse.com" date="1412942400">- Enable use of plugin to send region hints to region server</changelog>
  <changelog author="rjschwei@suse.com" date="1450180800">- Bump to version 2.1.1 (bsc#959244)
  + Point to the proper region servers</changelog>
  <changelog author="rjschwei@suse.com" date="1503489600">- Update to version 2.1.2 (bsc#1053695, bsc#1053696)
  + Configure the client to send license verification data to the SMT server</changelog>
  <changelog author="rjschwei@suse.com" date="1512820800">- Fix dependency for SLE 15 (bsc#1071292)</changelog>
  <changelog author="rjschwei@suse.com" date="1588939200">- Update to version 3.0.0 (bsc#1171467, bsc#1171469)
  + Unify the configuration between SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 3.0.1 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 4.0.0 (bsc#1199668)
  + Move the cert location to /usr for compatibility with ro setup of
    SLE-Micro
  + Fix url in spec file to pint to the proper location of the source</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.0.1 (bsc#1217538)
  + Replace 130.211.242.136.pem and 130.211.88.88.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
</package>
<package pkgid="88500f51a6bb07e41acb1113535c4ea446198c624b88897fb276493d64728c7c" name="regionServiceClientConfigGCE" arch="src">
  <version epoch="0" ver="4.0.1" rel="150000.4.12.1"/>
  <changelog author="rschweikert@suse.com" date="1398168000">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1398168001">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1398254400">- Fix license string</changelog>
  <changelog author="rschweikert@suse.com" date="1399291200">- Properly handle licensing, use Apache v2</changelog>
  <changelog author="rschweikert@suse.com" date="1399896000">- Fix provides, package also provides the region server certs</changelog>
  <changelog author="rschweikert@suse.com" date="1399896001">- Re-add previously removed provide, need all 3</changelog>
  <changelog author="rschweikert@suse.com" date="1411732800">- New certificate for new region servers</changelog>
  <changelog author="rschweikert@suse.com" date="1411732801">- Bump to version 2.0.1
  + fix spec file file list</changelog>
  <changelog author="rschweikert@suse.com" date="1412942400">- Enable use of plugin to send region hints to region server</changelog>
  <changelog author="rjschwei@suse.com" date="1450180800">- Bump to version 2.1.1 (bsc#959244)
  + Point to the proper region servers</changelog>
  <changelog author="rjschwei@suse.com" date="1503489600">- Update to version 2.1.2 (bsc#1053695, bsc#1053696)
  + Configure the client to send license verification data to the SMT server</changelog>
  <changelog author="rjschwei@suse.com" date="1512820800">- Fix dependency for SLE 15 (bsc#1071292)</changelog>
  <changelog author="rjschwei@suse.com" date="1588939200">- Update to version 3.0.0 (bsc#1171467, bsc#1171469)
  + Unify the configuration between SLES and SLES For SAP</changelog>
  <changelog author="rjschwei@suse.com" date="1596715200">- Update to version 3.0.1 (bsc#1174791, bsc#1174937)
  + New configuration to switch to https only outgoing traffic</changelog>
  <changelog author="rjschwei@suse.com" date="1652875200">- Update to version 4.0.0 (bsc#1199668)
  + Move the cert location to /usr for compatibility with ro setup of
    SLE-Micro
  + Fix url in spec file to pint to the proper location of the source</changelog>
  <changelog author="jesus.bv@suse.com" date="1701172800">- Update to version 4.0.1 (bsc#1217538)
  + Replace 130.211.242.136.pem and 130.211.88.88.pem certs
    expiring in 8 years and new length of 4096
    These certs will replace the current certs that
    expire soon</changelog>
</package>
<package pkgid="26a00e07db13916a6a5317fe5e33fe15bb29abe4de881c8dbc716ecccbd2aaa8" name="rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="5282c79211302576ba5999ca16fce26283430d9e2e1954b84439f53e020b3e20" name="rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="fd86090d5968b53c29914077252fc7ccf8b78fef44b00df345fb89b1fe620aaa" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="11c10c40a77e3d3032a28cf4e04ad33fbd7c7a2d9ef0dd8e92166bfdf23c9a45" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="3c6c045d5f6665d6ccc63f9280313ab402627f4d5daa06e1ed7f51804fe1e256" name="rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
</package>
<package pkgid="2ae5ee2133c21a3622ad26971a75ede12048690bc62cbf57b67492348276b46c" name="rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
</package>
<package pkgid="d451e82ed0367b538c7da39eb2ac967b2cb72ea0fff3b9dcc7b12ade7c6d465d" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
</package>
<package pkgid="dcbc16895c091753665da15f400c20696bb9090638dd4f55f53041d3a86d80cf" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
</package>
<package pkgid="afbc132c8973db44499c174559848d42736a019b4fb084b97cb743df1a28dbc1" name="rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
</package>
<package pkgid="73f0de492e9abeea1bd813be78d486a3c1ecfbec55ea6b98f23bfee6a7e3d335" name="rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
</package>
<package pkgid="df4e239e745b060c9f4a99f41f0e8fe5e6947138a4742ea4a2bd0600707862a9" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
</package>
<package pkgid="41fc116c97375ce8193c8d0144d7fadd0f63218a1c7dffdddac2dba92b2f5613" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
</package>
<package pkgid="4b319c0699bfaaa6e5cd2f92276d9c40a5f0d40be16aed92331f39b77d8ac057" name="rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="7bdaadba078a8ebb58cdac5d83c956c33f791c4893f7fa41d5d69d23bfbf4897" name="rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="80d0d37497a4c37d4ae26ec00658cf8d51a62ed4000506e968d3bed0dd15b614" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="642a540bad1d2879abe3d2eb8e4a83188c371c2b5bbc44bf56620cae7ce9aa34" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608724800">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
  <changelog author="mls@suse.de" date="1708689600">- turn on imaevm file signature support and move the imaevm code
  that needs the libimaevm library into a plugin. Put this
  plugin into a new "rpm-imaevmsign" subpackage. [jsc#PED-7246]
  * new patch: imaevmsignplugin.diff</changelog>
  <changelog author="mls@suse.de" date="1709294400">- backport signature reserved space handling from upstream
  * new patch: sigreserved.diff</changelog>
  <changelog author="mls@suse.de" date="1714046400">- accept more signature subpackets marked as critical [bsc#1218686]
  * new patch: accept-crit-subpkt.diff
- backport limit support for the autopatch macro [bsc#1189495]
  * new patch: autopatch.diff</changelog>
  <changelog author="mls@suse.de" date="1714392000">- implement subkey binding signature checking [bsc#1191175]
  * new patch: verifybindingsig.diff</changelog>
</package>
<package pkgid="70b53b69b21036bcf9e9146b5435202d82500e73318365c12d1c58f7c4ac03f7" name="rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="4a2cbc8fc701b0a2f6fa5f52291c39e46e88da5433b79b3e6430432555f51782" name="rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="2b59f56ca278700a601e2bd7e6d13b5b083070c75d38804732bec440dcb31d18" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="58f4630582e8e104747647fb6ba1c7510177c1f0e7ac24cfeceef3a857797e22" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1586347200">- Fix verification of DSA2 signatures with libgrcypt [bnc#1165731]
  * new patch: gcryptdsa2.diff</changelog>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
</package>
<package pkgid="35cd6bac6367586c1842b861562d1a44129e68e4412b4ec26ffb7821759d633c" name="rpm" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
</package>
<package pkgid="8a042fc31ef998a2c179d592753e2c41d40a201817069c0d1b3453982f96a5b6" name="rpm" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
</package>
<package pkgid="e63436c0e0ff11868e88d4d77abe7118179664fb315a8bd269efe02eff54b1f2" name="rpm" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
</package>
<package pkgid="27c9e8b497d1ec1ae0e06fb00af229df6cdecb1f24ae73d893f45c2b7ab8b232" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1586865600">- Do not map the index database read-write all the time [bnc#1168735]
  * new patch: ndb_backport2.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1590321600">- Add reproducible-debuginfo.patch to generate debuginfo
  in a reproducible way [bsc#1172173]</changelog>
  <changelog author="lpechacek@suse.com" date="1603800000">- Backport support for compressed kernel modules (jsc#SLE-10886)
  * added patch: compressed-kernel-modules.diff
  * modified file: find-requires.ksyms
  * modified file: find-provides.ksyms
- Fix obvious bugs in find-provides.ksyms
  * https://github.com/openSUSE/rpm-config-SUSE/pull/34</changelog>
  <changelog author="mls@suse.de" date="1607428800">- Handle xz compressed kernels in find-provides.ksyms [bsc#1179251]
  * modified file: find-requires.ksyms</changelog>
  <changelog author="mls@suse.de" date="1607515200">- Backport FA_TOUCH fixes from upsteam [bnc#1175025] [bnc#1177428]
  * new patch: touch_backport.diff
- Backport read-only berkeley db support and enable it if we
  disable berkeley db [jsc#SLE-7272]
  * new patch: bdb_ro_backport.diff</changelog>
  <changelog author="mls@suse.de" date="1608638400">- Finish split of SUSE macros and some helpers into rpm-config-SUSE
  [jsc#SLE-17074]
  * new patch: findsupplements.diff
  * modified patches: fileattrs.diff, brp.diff, macrosin.diff,
    enable-postin-scripts-error.diff
  * dropped files: rpm-suse_macros
  * dropped patches: firmware.diff, initscriptsprov.diff,
    modalias-encode.diff, modalias.diff,
    compressed-kernel-modules.diff, findksyms.diff</changelog>
  <changelog author="mls@suse.de" date="1611921600">- Increase the maximum size of the signature header so that rpms
  containing file signatures can be queried [bsc#1181568]
  * new patch: sigheadersize.diff</changelog>
  <changelog author="mls@suse.de" date="1612958400">- Do not require the signature header to be in a contiguous
  region when signing [bnc#1181805]
  * new patch: signbadregion.diff</changelog>
  <changelog author="bwiedemann@suse.com" date="1613995200">- Add rpm-4.14.1-initialize-verifyflags.diff [bsc#1180279]</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3 [jsc#SLE-17817]
  * add support for enforcing signature policy and payload
    verification step to transactions
  * add :humansi and :hmaniec query formatters for human readable output
  * add query selectors –-whatobsoletes and –-whatconflicts
  * add support for sorting caret (‘^’) higher than base version
- refreshed patches:
  * checksepwarn.diff
  * dbrointerruptable.diff
  * finddebuginfo.diff
  * ndb-backport.diff
  * pythondistdeps.diff
  * remove-brp-strips.diff
  * whatrequires-doc.diff
- dropped patches:
  * debugedit-bnc1076819.diff
  * debugedit-riscv.patch
  * disttag-macro.diff
  * hardlinks.diff
  * reproducible-debuginfo.patch
  * rpm-4.14.1-initialize-verifyflags.diff
  * safesymlinks.diff
  * signbadregion.diff
  * verifynodup.diff</changelog>
  <changelog author="mls@suse.de" date="1619006400">- set default package verification level to 'none' to be compatible
  to rpm-4.14.1
  new patch: verifylevel_none.diff
- make illegal obsoletes a warning
  new patch: badobsoletewarn.diff
- backport header check security fixes from upstream [CVE-2021-3421]
  [CVE-2021-20271] [CVE-2021-20266]
  [bsc#1183543] [bsc#1183545]
  new patch: headerchk3.diff
- fix potential access of freed mem in ndb's glue code [bnc#1179416]
  new patch: ndbglue.diff
- permit secondary index open to fail for bdb_ro
  new patch: bdbro_missingidx.diff</changelog>
  <changelog author="mls@suse.de" date="1633521600">- backport zstd detection fix [bsc#1187670]
  new patch: zstddetection.diff
- backport ndb rofs support [bsc#1188548]
  new patch: ndbrofs.diff
- backport pgp hardening changes from upstream [bsc#1185299]
  new patch: pgpharden.diff
- fix deadlock when multiple rpm processes try tp acquire the
  database lock [bsc#1183659]
  new patch: deadlock.diff</changelog>
  <changelog author="mcepl@suse.com" date="1639483200">- Add explicit requirement on python-rpm-macros to avoid widespread
  breakage by package mistakenly ignoring their requirement of
  python-rpm-macros (bsc#1180125, bsc#1193711).</changelog>
  <changelog author="mls@suse.de" date="1640174400">- Backport header check changes so that old rpms get no longer
  rejected [bsc#1190824]
  updated patch: headerchk3.diff</changelog>
  <changelog author="mls@suse.de" date="1642680000">- Revert unwanted /usr/bin/python -&gt; /usr/bin/python2 change we
  got with the update to 4.14.3 [bsc#1194968]
  new patch: no-python2.diff</changelog>
  <changelog author="mls@suse.de" date="1657627200">- Support Ed25519 signatures [jsc#SLE-24714]
  * new patch: ed25519.diff</changelog>
  <changelog author="mls@suse.de" date="1666699200">- Strip critical bit in signature subpackage parsing
  * modified patch: pgpharden.diff
- Add workaround to make newer dnf versions no longer deadlock
  after it imported a pubkey [bnc#1202750]
  * new patch: keyimportdeadlock.diff</changelog>
  <changelog author="dmueller@suse.com" date="1674129600">- add pythondeps-python310.diff
  and add match-python-version-if-minor.diff:
  * fix missing python(abi) for 3.XX versions (bsc#1207294)</changelog>
  <changelog author="daniel.garcia@suse.com" date="1674129601">- update pythondeps-python310.diff: replace with minimal fix to
  support python 3.xx (bsc#1207294)</changelog>
  <changelog author="mls@suse.de" date="1707912000">- backport lua support for rpm.execute to ease migrating [bnc#1216752]
  * new patch: luaexecute.diff</changelog>
</package>
<package pkgid="3a8ce6f2d5c78e29eaf845985aa69500ad71339647a7092f6780966c45599ae7" name="rpm-ndb" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="4e6da2c9120eb6ce035424af6804f1280f9c7201eccb160fedb6e1d1ff1413ad" name="rpm-ndb" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="c1c2f2f4e3afb8ee5e73ee160809edc8e7787741756f933b066d4f24ddc051bf" name="rpm-ndb" arch="src">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="fe254b90ec4a31c8972fe06b6b816c70bde0234bce2863cfea3e5ba28567a567" name="rpm-ndb" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150300.55.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="33117807daf94e3e20f4cae91c489ee34e617b820305b6f18f47e4b0d33530eb" name="rpm-ndb" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="ccaca3889f13b5ca282f2c46ee88010d3345080e18fb9fbb1ff44c6727389cf6" name="rpm-ndb" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="aba4a427f32054b2ab0a9f3e649069fad7e7e1098db1a67f2268511d457bd995" name="rpm-ndb" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="ffecdd21071118abaf1e398d93da264e24a932f8343ce8c9daa8ace70d07f994" name="rpm-ndb" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.10.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="cb6a12a2add5476e0295a078472bf97bf1726bacaae690175aeec606bb1e5899" name="rpm-ndb" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="2d5ae70a4ce138fb9389946126d47829994c572fce923c52123866e9058da52f" name="rpm-ndb" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="043e84015cdff3d4f3d8d99c17907997b855fa1fa2744785e87e11cd1bdbb5fb" name="rpm-ndb" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="4d9b02c0bfe73617a8773f804844bff059bc6118d88f258a6919aad42888e75c" name="rpm-ndb" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.13.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="87174fa7c562ecc43c0b48e4f2c75d02d2ad5d828846e760656a778f8f05d3de" name="rpm-ndb" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="4edc61ca4b9a784a2e98e2a3a2a22b1de3e78c8d5911a55ec4e9ab4a276ce554" name="rpm-ndb" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="b43382ead3587a7d29dc344aa7cdde7c3f4a975b18471e05da199b3d58d4a7a3" name="rpm-ndb" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="b03e8ec84e318f55b8358d135ce3ef468e4779aa43711497d2dc87f14dea292b" name="rpm-ndb" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.16.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618488000">- update to rpm-4.14.3</changelog>
  <changelog author="mls@suse.de" date="1712145600">- remove imaevmsign plugin from rpm-ndb [bsc#1222259]</changelog>
</package>
<package pkgid="25f075e6cf114d44e06a7aec5e8967859aeb0f437add564882d6b318468adeee" name="rpm-ndb" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="43aa2bc219496dc67aadd4ef0103eb6c4847a21137673aba2eb2750c4a705e21" name="rpm-ndb" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="04b76addb98247dc7c7380336b8c941a95759885024cae2c6e619de9c6da1483" name="rpm-ndb" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="6d66fd0b1dc74e1547e16228887a80be83592258edafed29de09dd7109718c85" name="rpm-ndb" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.3.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="18cbfac33ba12975498c5ccfa41b3f8cab1f889709569a215bbe80b7fbdb35ba" name="rpm-ndb" arch="aarch64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="23d6151c13543fcd0e2331bc5c91649e22c9c317abdcf53b0b66c7079467f016" name="rpm-ndb" arch="s390x">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="6f0ece19d7c10d18cba86ac07f83e07b50359e46fcb1880cec3448eddbfb5b04" name="rpm-ndb" arch="src">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="2e8261161e6a7aba3c2cf5e6e85481423ff0b01d976bc2c19207e3b34e1c72fb" name="rpm-ndb" arch="x86_64">
  <version epoch="0" ver="4.14.3" rel="150400.59.7.1"/>
  <changelog author="mls@suse.de" date="1579176000">- Initial revision</changelog>
  <changelog author="ngompa13@gmail.com" date="1618401600">- update to rpm-4.14.3</changelog>
</package>
<package pkgid="18be2603c36df17076d01692c17abb849095b7632334938bf4f2da68c50ab26a" name="rt-tests" arch="src">
  <version epoch="0" ver="2.4" rel="150400.3.3.1"/>
  <changelog author="mgalbraith@suse.de" date="1435665600">- Update to 0.89
  This is the last release suitable for SLE11
- Drop legacy/unbuildable backfire/sendme
- Drop legacy SLERT10 scripts
- We now ship virgin source with only hwlatency detect and broken
  legacy code removed.</changelog>
  <changelog author="cdenicolo@suse.com" date="1436356800">-
- license update: GPL-2.0
- please use SPDX  license sytnax.</changelog>
  <changelog author="jcheung@suse.com" date="1436443200">-
- license update: GPL-2.0
- We now use SPDX license sytnax.
-</changelog>
  <changelog author="jcheung@suse.com" date="1436529600">-
- Add the "COPYING" file in the %doc section
-</changelog>
  <changelog author="jcheung@suse.com" date="1452772800">- Apply this version to SLE-12-SP1</changelog>
  <changelog author="jcheung@suse.com" date="1481198400">- Apply this version to SLE-12-SP2</changelog>
  <changelog author="jcheung@suse.com" date="1493121600">- Submit to SLERT12-SP3</changelog>
  <changelog author="jcheung@suse.com" date="1532692800">- Submit to SLERT12 SP4</changelog>
  <changelog author="jcheung@suse.com" date="1532952000">- Update to 1.0
  Fate#323312 - Upgrade rt-tests to v1.0
  cyclictest: stop any tracing after hitting a breaktrace threshold
  rt-tests: Makefile: Assume numa_parse_cpustring_all available
  rt-tests: Add man page for rt-migrate-test
  rt-tests: Update the cyclictest man page
  rt-tests: Add missing option to hwlatdetect man page
  rt-tests: Housekeeping fix some spelling errors.
  rt-tests: hwlat.txt: smidetect renamed to hwlatdetect
  rt-tests: Remove doc/release-checklist.txt
  rt-tests: Makefile - bump version to 1.0</changelog>
  <changelog author="jcheung@suse.com" date="1536840000">- This is initial to SLERT15 SP1 [fate#326547]</changelog>
  <changelog author="mpluskal@suse.com" date="1536840001">- Update to version 1.3
- Cleanup spec file</changelog>
  <changelog author="jengelh@inai.de" date="1536840002">- Fix grammar in description.
- Have some more %make_install.</changelog>
  <changelog author="jcheung@suse.com" date="1592308800">- Update to version 1.6:
  * New feature to get a snapshot of a running instance of cyclictest without stopping it by
    sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful
    if running cyclictest over a long period of time
  * Add SPDX tags V3
  * Some fixes
- Changes from version 1.5
  * Mostly small clean-ups and bug fixes
- Changes from version 1.4
  * Added a number of new programs to the rt-tests suite
  - queuelat : simulates a network queue checking for latency violations in packet processing.
  - cyclicdeadline : used to test the deadline scheduler (SCHED_DEADLINE)
  - deadline_test : tests the deadline scheduler in a cyclictest manner
  - ssdd : a tracer to do a bunch of PTRACE_SINGLESTEPs
- Add rt-tests-1.6-Makefile.patch</changelog>
  <changelog author="jcheung@suse.com" date="1609848000">- Update to upstream version 1.10 (SLE-12981)
  * rt-tests: queuelat: Remove get_cpuinfo_mhz.sh and old Makefile
  * rt-tests: determine_maximum_mpps.sh: Add a menu to get user settings.
  * rt-numa: Introduce NUMA helpers
  * cyclictest: Only report the first incident
  * Streamline usage and man page
- Add rt-tests-1.10-Makefile.patch and remove  rt-tests-1.6-Makefile.patch
- Cleanup spec file
- Changes from version 1.9
  * signaltest: Only print from the first thread stats when quiet
  * rt-tests: cyclictest: Move ftrace helpers into rt-utils.[ch]
  * pi_stress: limit the number of inversion groups to the number of online cores
  * rt-tests: Install new man page get_cyclictest_snapshot.8
  * rt-tests: Add a man page for get_cyclictest_snapshot
  * rt-tests: ptsematest.8: Update the ptsematest man page
  * rt-tests: improvements to the python style in get_cyclictest_snapshot
  * cyclictest: Fix setaffinity error on large NUMA machines
- Changes from version 1.8
  * cyclictest: Make the affinity mask apply to the main thread too
  * Remove support for compiling without NUMA
  * cyclictest: Only run on runtime affinity and user supplied affinity
  * cyclictest: Only run on available cpus according to the affinity
  * cyclictest: Report all errors from pthread_setaffinity_np
- Changes from version 1.7
  * Add get_cyclictest_snapshot to Makefile
  * Add the get_cyclictest_snapshot.py utility
  * determine_maximum_mpps.sh: Fix quoting and other shell issue
  * queuelat: get_cpuinfo_mhz.sh highest value
  * cyclicdeadline: Add a simple manpage for cyclicdeadline</changelog>
  <changelog author="daniel.wagner@suse.com" date="1624622400">- Update to upstream version 2.0
  * All test programs can output their results in JSON format
  * cyclictest: Allow to specify main thread affinity</changelog>
  <changelog author="daniel.wagner@suse.com" date="1625054400">- Update to upstream version 2.1
  * Avoid pagefault at startup which made the first cycle
    in cyclictest measure a huge latency spike.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1627560000">- Enable build on all architectures.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1630411200">- Update to upstream version v2.2
  * signaltest: Fix JSON output latency values for 32bit machines
  * oslat: Don't take trace_threshold into account during preheat
  * sched_deadline: Update HRTICK_DL location
  * Allow static builds by dropping dependency on pthread_getaffinity_np</changelog>
  <changelog author="pvorel@suse.cz" date="1669291200">- Update to upstream version v2.4
  https://lore.kernel.org/linux-rt-users/20220708150017.13462-1-jkacur@redhat.com/
- Update to upstream version v2.3
  https://lore.kernel.org/linux-rt-users/20211210184649.11084-1-jkacur@redhat.com/
- Remove old patch rt-tests-1.10-Makefile.patch, which installed
  src/cyclictest/get_cyclictest_snapshot.8. Upstream guarded it with PYLIB in
  3d1976b ("Makefile: manpages: only add get_cyclictest_snapshot if PYLIB")
  but PYLIB should be defined due BuildRequires:  python3-base
- Backport runtime fixes from upcomming release:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch
- Use %autosetup (not having to add -p1 for patches)</changelog>
  <changelog author="mpluskal@suse.com" date="1669377600">- Use sources which are actually published</changelog>
</package>
<package pkgid="350b67b41da5b519d85499a14bec4dae894a68f8d957be130249d1338fc7780d" name="rt-tests" arch="x86_64">
  <version epoch="0" ver="2.4" rel="150400.3.3.1"/>
  <changelog author="mgalbraith@suse.de" date="1435665600">- Update to 0.89
  This is the last release suitable for SLE11
- Drop legacy/unbuildable backfire/sendme
- Drop legacy SLERT10 scripts
- We now ship virgin source with only hwlatency detect and broken
  legacy code removed.</changelog>
  <changelog author="cdenicolo@suse.com" date="1436356800">-
- license update: GPL-2.0
- please use SPDX  license sytnax.</changelog>
  <changelog author="jcheung@suse.com" date="1436443200">-
- license update: GPL-2.0
- We now use SPDX license sytnax.
-</changelog>
  <changelog author="jcheung@suse.com" date="1436529600">-
- Add the "COPYING" file in the %doc section
-</changelog>
  <changelog author="jcheung@suse.com" date="1452772800">- Apply this version to SLE-12-SP1</changelog>
  <changelog author="jcheung@suse.com" date="1481198400">- Apply this version to SLE-12-SP2</changelog>
  <changelog author="jcheung@suse.com" date="1493121600">- Submit to SLERT12-SP3</changelog>
  <changelog author="jcheung@suse.com" date="1532692800">- Submit to SLERT12 SP4</changelog>
  <changelog author="jcheung@suse.com" date="1532952000">- Update to 1.0
  Fate#323312 - Upgrade rt-tests to v1.0
  cyclictest: stop any tracing after hitting a breaktrace threshold
  rt-tests: Makefile: Assume numa_parse_cpustring_all available
  rt-tests: Add man page for rt-migrate-test
  rt-tests: Update the cyclictest man page
  rt-tests: Add missing option to hwlatdetect man page
  rt-tests: Housekeeping fix some spelling errors.
  rt-tests: hwlat.txt: smidetect renamed to hwlatdetect
  rt-tests: Remove doc/release-checklist.txt
  rt-tests: Makefile - bump version to 1.0</changelog>
  <changelog author="jcheung@suse.com" date="1536840000">- This is initial to SLERT15 SP1 [fate#326547]</changelog>
  <changelog author="mpluskal@suse.com" date="1536840001">- Update to version 1.3
- Cleanup spec file</changelog>
  <changelog author="jengelh@inai.de" date="1536840002">- Fix grammar in description.
- Have some more %make_install.</changelog>
  <changelog author="jcheung@suse.com" date="1592308800">- Update to version 1.6:
  * New feature to get a snapshot of a running instance of cyclictest without stopping it by
    sending SIGUSR2 to the PID and reading a shared memory segment. This is especially useful
    if running cyclictest over a long period of time
  * Add SPDX tags V3
  * Some fixes
- Changes from version 1.5
  * Mostly small clean-ups and bug fixes
- Changes from version 1.4
  * Added a number of new programs to the rt-tests suite
  - queuelat : simulates a network queue checking for latency violations in packet processing.
  - cyclicdeadline : used to test the deadline scheduler (SCHED_DEADLINE)
  - deadline_test : tests the deadline scheduler in a cyclictest manner
  - ssdd : a tracer to do a bunch of PTRACE_SINGLESTEPs
- Add rt-tests-1.6-Makefile.patch</changelog>
  <changelog author="jcheung@suse.com" date="1609848000">- Update to upstream version 1.10 (SLE-12981)
  * rt-tests: queuelat: Remove get_cpuinfo_mhz.sh and old Makefile
  * rt-tests: determine_maximum_mpps.sh: Add a menu to get user settings.
  * rt-numa: Introduce NUMA helpers
  * cyclictest: Only report the first incident
  * Streamline usage and man page
- Add rt-tests-1.10-Makefile.patch and remove  rt-tests-1.6-Makefile.patch
- Cleanup spec file
- Changes from version 1.9
  * signaltest: Only print from the first thread stats when quiet
  * rt-tests: cyclictest: Move ftrace helpers into rt-utils.[ch]
  * pi_stress: limit the number of inversion groups to the number of online cores
  * rt-tests: Install new man page get_cyclictest_snapshot.8
  * rt-tests: Add a man page for get_cyclictest_snapshot
  * rt-tests: ptsematest.8: Update the ptsematest man page
  * rt-tests: improvements to the python style in get_cyclictest_snapshot
  * cyclictest: Fix setaffinity error on large NUMA machines
- Changes from version 1.8
  * cyclictest: Make the affinity mask apply to the main thread too
  * Remove support for compiling without NUMA
  * cyclictest: Only run on runtime affinity and user supplied affinity
  * cyclictest: Only run on available cpus according to the affinity
  * cyclictest: Report all errors from pthread_setaffinity_np
- Changes from version 1.7
  * Add get_cyclictest_snapshot to Makefile
  * Add the get_cyclictest_snapshot.py utility
  * determine_maximum_mpps.sh: Fix quoting and other shell issue
  * queuelat: get_cpuinfo_mhz.sh highest value
  * cyclicdeadline: Add a simple manpage for cyclicdeadline</changelog>
  <changelog author="daniel.wagner@suse.com" date="1624622400">- Update to upstream version 2.0
  * All test programs can output their results in JSON format
  * cyclictest: Allow to specify main thread affinity</changelog>
  <changelog author="daniel.wagner@suse.com" date="1625054400">- Update to upstream version 2.1
  * Avoid pagefault at startup which made the first cycle
    in cyclictest measure a huge latency spike.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1627560000">- Enable build on all architectures.</changelog>
  <changelog author="daniel.wagner@suse.com" date="1630411200">- Update to upstream version v2.2
  * signaltest: Fix JSON output latency values for 32bit machines
  * oslat: Don't take trace_threshold into account during preheat
  * sched_deadline: Update HRTICK_DL location
  * Allow static builds by dropping dependency on pthread_getaffinity_np</changelog>
  <changelog author="pvorel@suse.cz" date="1669291200">- Update to upstream version v2.4
  https://lore.kernel.org/linux-rt-users/20220708150017.13462-1-jkacur@redhat.com/
- Update to upstream version v2.3
  https://lore.kernel.org/linux-rt-users/20211210184649.11084-1-jkacur@redhat.com/
- Remove old patch rt-tests-1.10-Makefile.patch, which installed
  src/cyclictest/get_cyclictest_snapshot.8. Upstream guarded it with PYLIB in
  3d1976b ("Makefile: manpages: only add get_cyclictest_snapshot if PYLIB")
  but PYLIB should be defined due BuildRequires:  python3-base
- Backport runtime fixes from upcomming release:
  * 0001-cyclictest-Fix-threads-being-affined-even-when-a-isn.patch
  * 0002-rt-tests-Remove-arbitrary-num-of-threads-limits.patch
  * 0003-rt-tests-hackbench-Add-error-checking-to-connect-and.patch
  * 0004-rt-tests-hwlatdetect-Update-to-integer-division.patch
- Use %autosetup (not having to add -p1 for patches)</changelog>
  <changelog author="mpluskal@suse.com" date="1669377600">- Use sources which are actually published</changelog>
</package>
<package pkgid="4d5857f926be19d12c7adb9981854b94b9ba0ef4c7a8c8de1ce9c410b54fa78f" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.10" rel="150000.55.1"/>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
</package>
<package pkgid="1875f6166c9e5e7af956eae919ada1183c3b127dc20474bf4fca49c71ee4fa35" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.10" rel="150000.55.1"/>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
</package>
<package pkgid="663fbd4f3b44939cb4eec4c3c20c1cb906d19d0312b4c5fd5b26adb8f72165f1" name="runc" arch="src">
  <version epoch="0" ver="1.1.10" rel="150000.55.1"/>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
</package>
<package pkgid="36ac0b44dbf69865a174273b7055966f82bbf2b46a7b93a0c4ff12ee1bac0c7f" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.10" rel="150000.55.1"/>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
</package>
<package pkgid="4e9583018bdc6fc8b67f71e304dbcbabe2cf7a8619af12219fdd385b41a47d0b" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.11" rel="150000.58.1"/>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
</package>
<package pkgid="2766ab0e703ccda9397fd16c17e27a77604788e0af21e39f4c2a1244e10973e2" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.11" rel="150000.58.1"/>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
</package>
<package pkgid="cfaa3dde63943fabec0a74573c12c954aae82daca87fec53a610adad6ed9a050" name="runc" arch="src">
  <version epoch="0" ver="1.1.11" rel="150000.58.1"/>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
</package>
<package pkgid="35a49e413ad45524d45a9331d8cdf9767bb4e9bbdd228868eb32d0274c20f728" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.11" rel="150000.58.1"/>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
</package>
<package pkgid="8ad8cb3b979832b2a66e2c8f5c454f04f6375dd9ee9fc039f27aa1535cecac0a" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.12" rel="150000.61.2"/>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
</package>
<package pkgid="572d43600f8576d8427e91b77a72c4941e2969c242e03a69a924bc56b6c99d53" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.12" rel="150000.61.2"/>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
</package>
<package pkgid="b2f42c8fcb1f7d9c232a87d5585987ab6aa752b230c9f5ffd3e5fc57aae774e3" name="runc" arch="src">
  <version epoch="0" ver="1.1.12" rel="150000.61.2"/>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
</package>
<package pkgid="b06b5970734b4d2cee0fb771bc2c39455722403050152661c8426884e523a160" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.12" rel="150000.61.2"/>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
</package>
<package pkgid="d89e4a044dab8c06eb1da4133778ae76d7dcb5fb1f217f514d7673be8fb601b1" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.12" rel="150000.64.1"/>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
  <changelog author="asarai@suse.com" date="1711022400">- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch</changelog>
</package>
<package pkgid="cbcce22c062b71834a6933096d693d13ed93aade45ba8629e71f17d1cc8246bc" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.12" rel="150000.64.1"/>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
  <changelog author="asarai@suse.com" date="1711022400">- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch</changelog>
</package>
<package pkgid="7369e472eaefb0b1dd36262a8a167f11076b9cb8a804d588c9a7cebeda57222d" name="runc" arch="src">
  <version epoch="0" ver="1.1.12" rel="150000.64.1"/>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
  <changelog author="asarai@suse.com" date="1711022400">- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch</changelog>
</package>
<package pkgid="e9dcafb6278af00b5b448914faa83a42599988feb22d06eb9e96cbc342994811" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.12" rel="150000.64.1"/>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1698840000">- Update to runc v1.1.10. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.10&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1704196800">- Update to runc v1.1.11. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.11&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1705579200">[ This was only ever released for SLES. ]
- Add upstream patch to fix embargoed issue CVE-2024-21626. bsc#1218894
  &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  + CVE-2024-21626.patch</changelog>
  <changelog author="asarai@suse.com" date="1706702400">- Update to runc v1.1.12. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.12&gt;. bsc#1218894
  * This release fixes a container breakout vulnerability (CVE-2024-21626). For
    more details, see the upstream security advisory:
    &lt;https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv&gt;
  * Remove upstreamed patches:
  - CVE-2024-21626.patch
  * Update runc.keyring to match upstream changes.</changelog>
  <changelog author="asarai@suse.com" date="1711022400">- Add upstream patch &lt;https://github.com/opencontainers/runc/pull/4219&gt; to
  properly fix -ENOSYS stub on ppc64le. bsc#1192051 bsc#1221050
  + 0001-bsc1221050-libct-seccomp-patchbpf-rm-duplicated-code.patch
  + 0002-bsc1221050-seccomp-patchbpf-rename-nativeArch-linuxA.patch
  + 0003-bsc1221050-seccomp-patchbpf-always-include-native-ar.patch</changelog>
</package>
<package pkgid="65574c479d3bd899d6715909026abe8f009046c4639e2fa1f47282d12790872f" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.5" rel="150000.43.1"/>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
</package>
<package pkgid="2b8f29e67b441fbb2e69df4b50607eec2bed12d7b3c52eb98300013ac9dafbc2" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.5" rel="150000.43.1"/>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
</package>
<package pkgid="afbbf810578dd9ef39b9deb4680e861f847afeae4b01dc73dbb5de46bb95ddd5" name="runc" arch="src">
  <version epoch="0" ver="1.1.5" rel="150000.43.1"/>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
</package>
<package pkgid="7dafc507cee79869aafeaf8d0e08f9714feac3d28655f57b824bc7370467534e" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.5" rel="150000.43.1"/>
  <changelog author="rhafer@suse.com" date="1598616000">- Upgrade to runc v1.0.0~rc92 (bsc#1175821). Upstream changelog is available
  from https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc92
  * Updates to CRIU support.
  * Improvements to cgroupfs performance and correctness.</changelog>
  <changelog author="asarai@suse.com" date="1612267200">- Update to handle the docker-runc removal. bsc#1181677
- Modernise go building for runc now that it has go.mod.</changelog>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container.
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1168481
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
</package>
<package pkgid="9c1ceb762b5d09532cf21561d4590012c2d1bffe153c6dfb6b710beb875b6a5a" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.7" rel="150000.46.1"/>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
</package>
<package pkgid="91e79abfd37825829fd6f5a571703dc2f64595c124bcb47914900827a5ce720f" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.7" rel="150000.46.1"/>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
</package>
<package pkgid="c837bfe774fb0059d0b7e7574745a29456ed71ef439f0fd4c8605d008bf9c27b" name="runc" arch="src">
  <version epoch="0" ver="1.1.7" rel="150000.46.1"/>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
</package>
<package pkgid="515437286255b94bc491f2f16216c2992a3d4a33851d06ef6fce19b0d02ab443" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.7" rel="150000.46.1"/>
  <changelog author="asarai@suse.com" date="1612353600">- Update to runc v1.0.0~rc93. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc93
  bsc#1182451 bsc#1184962
  * Cgroupv2 support is no longer considered experimental.
  * Mountinfo parsing code has been reworked significantly.
  * Special ENOSYS handling for seccomp profiles to avoid making new
    syscalls unusable for glibc.
  * Various rootless containers improvements.
  * The "selinux" and "apparmor" buildtags have been removed, and now all runc
    builds will have SELinux and AppArmor support enabled.</changelog>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
</package>
<package pkgid="d634542d591dada94158be1beebf6335f563b8595feb7a92bb2057baa4a2cfad" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.8" rel="150000.49.1"/>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
</package>
<package pkgid="dd11e7c19bf6b73c06cc371b9e2be99d34003757aef0d7093a8266143f787a8c" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.8" rel="150000.49.1"/>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
</package>
<package pkgid="fa68f187f5d24519db4a73fc7be537e5dfacb69623b5b3a0e438fcd70821a4a5" name="runc" arch="src">
  <version epoch="0" ver="1.1.8" rel="150000.49.1"/>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
</package>
<package pkgid="6342f2ce05a79bda1b519e49797136f480c61000f734ee363adc62ddbbb5059e" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.8" rel="150000.49.1"/>
  <changelog author="asarai@suse.com" date="1619438400">- Backport patch to fix build on SLE-12 ppc64le.
  + 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
</package>
<package pkgid="8b7377bf978c2f179878bce11bbe8c80d60d9b7a5bcccfdff7e8a65514debb89" name="runc" arch="aarch64">
  <version epoch="0" ver="1.1.9" rel="150000.52.2"/>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
</package>
<package pkgid="2dd425528a08e7badd9fe0e7ca80041c7a5333f21a3156faeed0c37ce365e8cb" name="runc" arch="s390x">
  <version epoch="0" ver="1.1.9" rel="150000.52.2"/>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
</package>
<package pkgid="6a8b25ae2fc95e24f5c35186e4bd0e5df933338110ec274d629b57b38f08b4f6" name="runc" arch="src">
  <version epoch="0" ver="1.1.9" rel="150000.52.2"/>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
</package>
<package pkgid="e5d2ac196ce3f17f43afc5cdc10a5306306f1f12136e384b8d2e31ab01517b64" name="runc" arch="x86_64">
  <version epoch="0" ver="1.1.9" rel="150000.52.2"/>
  <changelog author="asarai@suse.com" date="1620820800">- Update to runc v1.0.0~rc94. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc94
  Breaking Changes:
  * cgroupv1: kernel memory limits are now always ignored, as kmemcg has
    been effectively deprecated by the kernel. Users should make use of regular
    memory cgroup controls.
  Regression Fixes:
  * seccomp: fix 32-bit compilation errors
  * runc init: fix a hang caused by deadlock in seccomp/ebpf loading code
  * runc start: fix "chdir to cwd: permission denied" for some setups
- Remove upstreamed patches:
  - 0001-cloned_binary-switch-from-error-to-warning-for-SYS_m.patch</changelog>
  <changelog author="asarai@suse.com" date="1621425600">- Update to runc v1.0.0~rc95. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0-rc95
  This release of runc contains a fix for CVE-2021-30465, and users are
  strongly recommended to update (especially if you are providing
  semi-limited access to spawn containers to untrusted users). bsc#1185405</changelog>
  <changelog author="asarai@suse.com" date="1622548800">- Update to runc v1.0.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.0
  ! The usage of relative paths for mountpoints will now produce a warning
    (such configurations are outside of the spec, and in future runc will
    produce an error when given such configurations).
  * cgroupv2: devices: rework the filter generation to produce consistent
    results with cgroupv1, and always clobber any existing eBPF
    program(s) to fix runc update and avoid leaking eBPF programs
    (resulting in errors when managing containers).
  * cgroupv2: correctly convert "number of IOs" statistics in a
    cgroupv1-compatible way.
  * cgroupv2: support larger than 32-bit IO statistics on 32-bit architectures.
  * cgroupv2: wait for freeze to finish before returning from the freezing
    code, optimize the method for checking whether a cgroup is frozen.
  * cgroups/systemd: fixed "retry on dbus disconnect" logic introduced in rc94
  * cgroups/systemd: fixed returning "unit already exists" error from a systemd
    cgroup manager (regression in rc94)
  + cgroupv2: support SkipDevices with systemd driver
  + cgroup/systemd: return, not ignore, stop unit error from Destroy
  + Make "runc --version" output sane even when built with go get or
    otherwise outside of our build scripts.
  + cgroups: set SkipDevices during runc update (so we don't modify
    cgroups at all during runc update).
  + cgroup1: blkio: support BFQ weights.
  + cgroupv2: set per-device io weights if BFQ IO scheduler is available.</changelog>
  <changelog author="asarai@suse.com" date="1625140800">- Backport &lt;https://github.com/opencontainers/runc/pull/3055&gt; to fix issues
  with runc under openSUSE MicroOS's SELinux policy. boo#1187704
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1626609600">- Update to runc v1.0.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.1
  * Fixed occasional runc exec/run failure ("interrupted system call") on an
    Azure volume.
  * Fixed "unable to find groups ... token too long" error with /etc/group
    containing lines longer than 64K characters.
  * cgroup/systemd/v1: fix leaving cgroup frozen after Set if a parent cgroup is
    frozen. This is a regression in 1.0.0, not affecting runc itself but some
    of libcontainer users (e.g Kubernetes).
  * cgroupv2: bpf: Ignore inaccessible existing programs in case of
    permission error when handling replacement of existing bpf cgroup
    programs. This fixes a regression in 1.0.0, where some SELinux
    policies would block runc from being able to run entirely.
  * cgroup/systemd/v2: don't freeze cgroup on Set.
  * cgroup/systemd/v1: avoid unnecessary freeze on Set.
- Remove upstreamed patches:
  + boo1187704-0001-cgroupv2-ebpf-ignore-inaccessible-existing-programs.patch</changelog>
  <changelog author="asarai@suse.com" date="1629720000">- Update to runc v1.0.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.2
  * Fixed a failure to set CPU quota period in some cases on cgroup v1.
  * Fixed the inability to start a container with the "adding seccomp filter
    rule for syscall ..." error, caused by redundant seccomp rules (i.e. those
    that has action equal to the default one). Such redundant rules are now
    skipped.
  * Made release builds reproducible from now on.
  * Fixed a rare debug log race in runc init, which can result in occasional
    harmful "failed to decode ..." errors from runc run or exec.
  * Fixed the check in cgroup v1 systemd manager if a container needs to be
    frozen before Set, and add a setting to skip such freeze unconditionally.
    The previous fix for that issue, done in runc 1.0.1, was not working.</changelog>
  <changelog author="asarai@suse.com" date="1638792000">- Update to runc v1.0.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.0.3. CVE-2021-43784
  bsc#1193436
  * A potential vulnerability was discovered in runc (related to an internal
    usage of netlink), however upon further investigation we discovered that
    while this bug was exploitable on the master branch of runc, no released
    version of runc could be exploited using this bug. The exploit required
    being able to create a netlink attribute with a length that would overflow a
    uint16 but this was not possible in any released version of runc. For more
    information see GHSA-v95c-p5hm-xq8f and CVE-2021-43784.
    Due to an abundance of caution we decided to do an emergency release with
    this fix, but to reiterate we do not believe this vulnerability was
    possible to exploit. Thanks to Felix Wilhelm from Google Project Zero for
    discovering and reporting this vulnerability so quickly.
  * Fixed inability to start a container with read-write bind mount of a
    read-only fuse host mount.
  * Fixed inability to start when read-only /dev in set in spec.
  * Fixed not removing sub-cgroups upon container delete, when rootless cgroup
    v2 is used with older systemd.
  * Fixed returning error from GetStats when hugetlb is unsupported (which
    causes excessive logging for kubernetes).</changelog>
  <changelog author="asarai@suse.com" date="1639483200">- Update to runc v1.1.0~rc1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0-rc.1.
  + Add support for RDMA cgroup added in Linux 4.11.
  * runc exec now produces exit code of 255 when the exec failed.
    This may help in distinguishing between runc exec failures
    (such as invalid options, non-running container or non-existent
    binary etc.) and failures of the command being executed.
  + runc run: new --keep option to skip removal exited containers artefacts.
    This might be useful to check the state (e.g. of cgroup controllers) after
    the container has￼exited.
  + seccomp: add support for SCMP_ACT_KILL_PROCESS and SCMP_ACT_KILL_THREAD
    (the latter is just an alias for SCMP_ACT_KILL).
  + seccomp: add support for SCMP_ACT_NOTIFY (seccomp actions). This allows
    users to create sophisticated seccomp filters where syscalls can be
    efficiently emulated by privileged processes on the host.
  + checkpoint/restore: add an option (--lsm-mount-context) to set
    a different LSM mount context on restore.
  + intelrdt: support ClosID parameter.
  + runc exec --cgroup: an option to specify a (non-top) in-container cgroup
    to use for the process being executed.
  + cgroup v1 controllers now support hybrid hierarchy (i.e. when on a cgroup v1
    machine a cgroup2 filesystem is mounted to /sys/fs/cgroup/unified, runc
    run/exec now adds the container to the appropriate cgroup under it).
  + sysctl: allow slashes in sysctl names, to better match sysctl(8)'s
    behaviour.
  + mounts: add support for bind-mounts which are inaccessible after switching
    the user namespace. Note that this does not permit the container any
    additional access to the host filesystem, it simply allows containers to
    have bind-mounts configured for paths the user can access but have
    restrictive access control settings for other users.
  + Add support for recursive mount attributes using mount_setattr(2). These
    have the same names as the proposed mount(8) options -- just prepend r
    to the option name (such as rro).
  + Add runc features subcommand to allow runc users to detect what features
    runc has been built with. This includes critical information such as
    supported mount flags, hook names, and so on. Note that the output of this
    command is subject to change and will not be considered stable until runc
    1.2 at the earliest. The runtime-spec specification for this feature is
    being developed in opencontainers/runtime-spec#1130.
  * system: improve performance of /proc/$pid/stat parsing.
  * cgroup2: when /sys/fs/cgroup is configured as a read-write mount, change
    the ownership of certain cgroup control files (as per
    /sys/kernel/cgroup/delegate) to allow for proper deferral to the container
    process.
  * runc checkpoint/restore: fixed for containers with an external bind mount
    which destination is a symlink.
  * cgroup: improve openat2 handling for cgroup directory handle hardening.
    runc delete -f now succeeds (rather than timing out) on a paused
    container.
  * runc run/start/exec now refuses a frozen cgroup (paused container in case of
    exec). Users can disable this using --ignore-paused.
- Update version data embedded in binary to correctly include the git commit of
  the release.
- Drop runc-rpmlintrc because we don't have runc-test anymore.</changelog>
  <changelog author="asarai@suse.com" date="1642420800">- Update to runc v1.1.0. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.0.
  - libcontainer will now refuse to build without the nsenter package being
    correctly compiled (specifically this requires CGO to be enabled). This
    should avoid folks accidentally creating broken runc binaries (and
    incorrectly importing our internal libraries into their projects). (#3331)</changelog>
  <changelog author="asarai@suse.com" date="1648555200">- Update to runc v1.1.1. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.1.
  * runc run/start can now run a container with read-only /dev in OCI spec,
    rather than error out. (#3355)
  * runc exec now ensures that --cgroup argument is a sub-cgroup. (#3403)
    libcontainer systemd v2 manager no longer errors out if one of the files
    listed in /sys/kernel/cgroup/delegate do not exist in container's
    cgroup. (#3387, #3404)
  * Loosen OCI spec validation to avoid bogus "Intel RDT is not supported"
    error. (#3406)
  * libcontainer/cgroups no longer panics in cgroup v1 managers if stat
    of /sys/fs/cgroup/unified returns an error other than ENOENT. (#3435)</changelog>
  <changelog author="asarai@suse.com" date="1652270400">- Update to runc v1.1.2. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.2.
  CVE-2022-29162 bsc#1199460
  * A bug was found in runc where runc exec --cap executed processes with
    non-empty inheritable Linux process capabilities, creating an atypical Linux
    environment. For more information, see [GHSA-f3fp-gc8g-vw66][] and
    CVE-2022-29162. bsc#1199460
  * `runc spec` no longer sets any inheritable capabilities in the created
    example OCI spec (`config.json`) file.</changelog>
  <changelog author="asarai@suse.com" date="1652356800">- Add ExcludeArch for s390 (not s390x) since we've never supported it.</changelog>
  <changelog author="asarai@suse.com" date="1653307200">- Backport &lt;https://github.com/opencontainers/runc/pull/3474&gt; to fix issues
  with newer syscalls (namely faccessat2) on older kernels on s390(x) caused by
  that platform's syscall multiplexing semantics. bsc#1192051 bsc#1199565
  + bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="asarai@suse.com" date="1654776000">- Update to runc v1.1.3. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.3.
  (Includes a fix for bsc#1200088.)
  * Our seccomp `-ENOSYS` stub now correctly handles multiplexed syscalls on
    s390 and s390x. This solves the issue where syscalls the host kernel did not
    support would return `-EPERM` despite the existence of the `-ENOSYS` stub
    code (this was due to how s390x does syscall multiplexing).
  * Retry on dbus disconnect logic in libcontainer/cgroups/systemd now works as
    intended; this fix does not affect runc binary itself but is important for
    libcontainer users such as Kubernetes.
  * Inability to compile with recent clang due to an issue with duplicate
    constants in libseccomp-golang.
  * When using systemd cgroup driver, skip adding device paths that don't exist,
    to stop systemd from emitting warnings about those paths.
  * Socket activation was failing when more than 3 sockets were used.
  * Various CI fixes.
  * Allow to bind mount /proc/sys/kernel/ns_last_pid to inside container.
  * runc static binaries are now linked against libseccomp v2.5.4.
- Remove upstreamed patches:
  - bsc1192051-0001-seccomp-enosys-always-return-ENOSYS-for-setup-2-on-s390x.patch</changelog>
  <changelog author="fvogt@suse.com" date="1661947200">- Update to runc v1.1.4. Upstream changelog is available from
  https://github.com/opencontainers/runc/releases/tag/v1.1.4.
  bsc#1202021
  * Fix mounting via wrong proc fd. When the user and mount namespaces are
    used, and the bind mount is followed by the cgroup mount in the spec,
    the cgroup was mounted using the bind mount's mount fd.
  * Switch kill() in libcontainer/nsenter to sane_kill().
  * Fix "permission denied" error from runc run on noexec fs.
  * Fix failed exec after systemctl daemon-reload. Due to a regression
    in v1.1.3, the DeviceAllow=char-pts rwm rule was no longer added and
    was causing an error open /dev/pts/0: operation not permitted: unknown when systemd was reloaded.
    (boo#1202821)</changelog>
  <changelog author="asarai@suse.com" date="1680091200">- Update to runc v1.1.5. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.5&gt;.
  Includes fixes for the following CVEs:
  - CVE-2023-25809 bsc#1209884
  - CVE-2023-27561 bsc#1208962
  - CVE-2023-28642 bsc#1209888
  * Fix the inability to use `/dev/null` when inside a container. bsc#1168481
  * Fix changing the ownership of host's `/dev/null` caused by fd redirection
    (a regression in 1.1.1). bsc#1207004
  * Fix rare runc exec/enter unshare error on older kernels.
  * nsexec: Check for errors in `write_log()`.
- Drop version-specific Go requirement.</changelog>
  <changelog author="asarai@suse.com" date="1681300800">- Update to runc v1.1.6. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.6&gt;.</changelog>
  <changelog author="asarai@suse.com" date="1682596800">- Update to runc v1.1.7. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.7&gt;.
- Update runc.keyring to upstream version.</changelog>
  <changelog author="asarai@suse.com" date="1689768000">- Update to runc v1.1.8. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.8&gt;.</changelog>
  <changelog author="danish.prakash@suse.com" date="1694001600">- Update to runc v1.1.9. Upstream changelog is available from
  &lt;https://github.com/opencontainers/runc/releases/tag/v1.1.9&gt;.</changelog>
</package>
<package pkgid="4ca8681b504a8d26459cf7752c8e861444eecc81c5ca5a3d344be5d8d638e6d5" name="s390-tools" arch="s390x">
  <version epoch="0" ver="2.19.0" rel="150400.7.21.1"/>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
</package>
<package pkgid="2cc3611ce0c9fa5494193bbb61f0aac1a6be12763c7b30f04121fef9c7a4617c" name="s390-tools" arch="src">
  <version epoch="0" ver="2.19.0" rel="150400.7.21.1"/>
  <changelog author="mpost@suse.com" date="1618401600">- Added s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  dasd: change default scheduler to reduce CPU consumption (bsc#1183810)
- Modified s390-tools-sles12-create-filesystem-links.patch to fit after
  applying s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
- Removed 59-dasd.rules-wait_for.patch obsoleted by bsc#1183810.</changelog>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
</package>
<package pkgid="ce62e8db4fe16ded22d38fc48cf04a6502b8b4e228835ffb8e8501c4113bf801" name="s390-tools" arch="s390x">
  <version epoch="0" ver="2.19.0" rel="150400.7.24.1"/>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="tabraham@suse.com" date="1696248000">- Applied patch (bsc#1205528)
  - Fixes error 'zgetdump: Trying to seek past file end "/dev/crash"'
  * s390-tools-sles15sp4-zdump-fix-dev-mem-reading.patch</changelog>
</package>
<package pkgid="2db26e152c7deb51ce1c70bc40746d848b55ee5c477d89c1a43ab587bf14719f" name="s390-tools" arch="src">
  <version epoch="0" ver="2.19.0" rel="150400.7.24.1"/>
  <changelog author="mpost@suse.com" date="1620302400">- Modified s390-tools-sles15-Implement-Y-yast_mode.patch by adding
  a fflush(stdout) statement so that the dasdfmt command would
  produce the  correct output for YaST. (bsc#1182816, bsc#1182820)
- Modified s390-tools-sles15-Implement-f-for-backwards-compability.patch
  to have the correct offset for hunk #2 to apply without warnings.</changelog>
  <changelog author="mpost@suse.com" date="1622030400">- Modified the following patches to correct the output from the
  dasdfmt command when *not* using "YaST mode." (bsc#1182816, bsc#1182820)
  * s390-tools-sles15sp3-Format-devices-in-parallel.patch
  * s390-tools-sles15sp3-Implement-Y-yast_mode.patch</changelog>
  <changelog author="mpost@suse.com" date="1624017600">- Reworked s390-tools-sles15sp2-Implement-Y-yast_mode.patch (yet
  again). If more DASD volumes are to be formatted than are allowed
  by the "maximum number to do in parallel" parameter, dasdfmt
  waits until one of the child processes ends before starting another.
  For YaST to be able to figure out how many cylinders a particular
  DASD volume has, that information has to be output for _all_ of the
  volumes, before any of the child processes are spawned.
  (bsc#1187012)</changelog>
  <changelog author="mpost@suse.com" date="1634558400">- Updated the spec file to correspond to the changes made to the
  location and name of the kernel image in the kernel-zfcpdump
  package (bsc#1189841)
- Did some spec file cleanup based on the recommendations from
  spec-cleaner.</changelog>
  <changelog author="mpost@suse.com" date="1636718400">- Added s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
  Reading /sys/kernel/mm/page_idle/bitmap can cause hang up on
  reading offline pages. (bsc#1192599)
- Added %{version} to the Requires: libekmfweb1 for the
  libekmfweb1-devel package.</changelog>
  <changelog author="mpost@suse.com" date="1641988800">- Upgraded to version 2.19.0 (jsc#SLE-18324)
  * v2.19.0 (2021-11-10)__
    Add new tools / libraries:
  - chreipl-fcp-mpath: New toolset that uses multipath information to change
    the configured FCP re-IPL path on detecting issues with the current path
    Changes of existing tools:
  - dbginfo.sh: Add retry timeout and remove possible blocking "blockdev --report"
  - dbginfo.sh: Collect config- and debug-data for chreipl-fcp-mpath
  - hsci: Add support for multiple MAC addresses
    Bug Fixes:
  - lshwc: Fix compile error for gcc &lt;8.1
  - zdump: Various clean-ups and fixes
  - ziomon: Correct throughput calculation in ziorep_printers
  - zipl: Fix segmentation fault when setting stage3_parms
  * v2.18.0 (2021-10-01)__
    Add new tools:
  - scripts: Add tool for parsing sclp s390dbf logs
  - zdev: Add udev rule helper tool
  - zipl-editenv: Add tool to operate with zIPL environment installed in the boot record
    Changes of existing tools:
  - Makefile: Fix order of build of libraries for parallel builds
  - dbginfo.sh: Add collection in area of timedate, coredump and --check option
  - dbginfo.sh: Add exception on dump2tar for /sys/kernel/mm/page_idle/bitmap
  - dbginfo.sh: Cleanup of outdated sections and general code rework
  - dbginfo.sh: Collect zipl boot menu entries from boot loader specification
  - lszcrypt: Add support for vfio-ap status field
  - lszcrypt: Improved output for deconfig cards and queues
  - lszfcp: Add linkdown case to host marker of extended output
  - zdev: Add auto-config for PCI and crypto devices
  - zdump: Introduce multi-level message logging
  - zipl: Add support for environment block interpretation
  - zkey-cryptsetup: Support LUKS2 volumes with integrity support enabled
    Bug Fixes:
  - hsavmcore: Avoid recompilation of overlay during install step
  - libkmipclient: Fix parsing of hex values for XML and JSON encoding
  - vmur/vmur.cpp: Fix error handling on transfer failure
  - zdump: Lots of smaller fixes across the board
  * v2.17.0 (2021-07-07)__
    Add new tools / libraries:
  - hsavmcore: New utility to make the dump process with kdump more efficient
  - libkmipclient: Add KMIP client shared library
  - libseckey: Add a secure key library
  - lshwc: New tool to extract and list complete counter sets
    Changes of existing tools:
  - genprotimg: Add '--(enable|disable)-pckmo' options
  - genprotimg: Add OpenSSL 3.0 support
  - genprotimg: Change plaintext control flags defaults so PCKMO functions are allowed
  - libutil: Introduce multi-level message logging (util_log)
  - libutil: Introduce util_arch module
  - udev/dasd: Change DASD udev-rule to set none scheduler
  - zdsfs: Add transparent codepage conversion
  - zkey: Add support for KMIP-based key management systems
    Bug Fixes:
  - ttyrun-getty: Avoid conflicts with serial-getty@
  - dbginfo: add /proc/kallsyms - refresh zVM, lscpu - fix WORKARCHIVE handling
  - dbginfo: add KVM data collection for server and guest - fix lszdev
  - genprotimg: Add missing return values in error paths
  - zkey: Fix conversion of CCA DATA keys to CCA CIPHER keys
  - znetconf: avoid conflict with "chzdev -e"
  * v2.16.0 (2021-02-19)__
    Add new tool:
  - hsci: New tool to manage HSCI (HiperSockets Converged Interfaces)
    Changes of existing tools:
  - genprotimg: Add host-key document verification support
  - genprotimg: boot: Make boot loader -march=z900 compatible
  - libekmfweb: Make install directory for shared libraries configurable
  - lsdasd: Add FC Endpoint Security information
  - make: Add address sanitizer support
  - netboot: Add version information to scripts
  - netboot: Bump busybox version in pxelinux.0 build
  - zdev: Add FC Endpoint Security information for DASD devices
  - zdev: Add build option to update initial RAM-disk by default
  - zkey-ekmfweb: Avoid sequence number clash when generating keys
  - zkey/zkey-ekmfweb: Install KMS plugins into configurable location
  - zkey: Add support to store LUKS2 dummy passphrase in key repository
    Bug Fixes:
  - dasdfmt: Fix segfault when an incorrect option is specified
  - genprotimg: Fix several build issues
  - genprotimg: Require argument for 'ramdisk' and 'parmfile' options
  - zcryptstats: Fix handling of partial results with many domains
  - zfcpdbf: Deal with crash 7.2.9 change in caller name formatting
  - zipl/boot: Fix memory use after free in stage2
  - zipl/boot: Fix potential heap overflow in stage2
  - zipl: Fix reading 4k disk's geometry
- Added the following two IBM patches:
  * s390-tools-sles15sp4-chreipl-fcp-mpath-don-t-compress-the-manpage-before-.patch
  * s390-tools-sles15sp4-chreipl-fcp-mpath-remove-shebang-from-chreipl-fcp-mp.patch
- Removed the following obsolete patches
  * s390-tools-sles15sp3-dasdfmt-Fix-segfault-when-an-incorrect-option-is-spe.patch
  * s390-tools-sles15sp3-libutil-Compare-proc-entries-to-vfstype.patch
  * s390-tools-sles15sp3-01-zdev-Add-FC-Endpoint-Security-information-for-DASD-d.patch
  * s390-tools-sles15sp3-02-lsdasd-Add-FC-Endpoint-Security-information.patch
  * s390-tools-sles15sp3-hsci-Add-new-tool-to-control-HiperSockets-Converged-.patch
  * s390-tools-sles15sp3-zcryptstats-Fix-handling-of-partial-results-with-man.patch
  * s390-tools-sles15sp3-01-genprotimg-abort-if-one-of-the-recursive-targets-is-.patch
  * s390-tools-sles15sp3-02-genprotimg-fix-two-memory-leaks.patch
  * s390-tools-sles15sp3-03-genprotimg-require-argument-for-ramdisk-and-parmfile.patch
  * s390-tools-sles15sp3-04-genprotimg-add-host-key-document-verification-suppor.patch
  * s390-tools-sles15sp3-zkey-Fix-APQN-property-names.patch
  * s390-tools-sles15sp3-zipl-fix-4k-scsi-ipl.patch
  * s390-tools-sles15sp3-dasd-change-DASD-udev-rule-to-set-none-scheduler.patch
  * s390-tools-sles15sp3-check-return-code-from-util_file_read_l.patch
  * s390-tools-sles15sp3-dbginfo.sh-exclude-page_idle-bitmap.patch
- Removed an obsolete "export ROOT_BUILD_DIR" statement from the spec file.
- Removed unnecessary defattr statements in the files section.</changelog>
  <changelog author="mpost@suse.com" date="1645531200">- Added s390-tools-sles15sp4-zdev-modify-the-lsblk-output-parser-in-lszdev.patch
  for bsc#1196255. Version 2.37+ of util-linux modified the output
  characters of lsblk,which breaks the parser function.
- Added s390-tools-sles15sp4-zdev-Fix-path-resolution-for-multi-mount-point-file-.patch
  for bsc#1196254. Path resolution fails when a device provides
  multiple mount points such as, for example, when using btrfs
  subvolumes, or when mounting the same file system at multiple
  mount points.</changelog>
  <changelog author="mwilck@suse.com" date="1646395200">- install modprobe.conf files into %_modprobedir (bsc#1196275, jsc#SLE-20639)</changelog>
  <changelog author="mpost@suse.com" date="1649678400">- Added the following patches for bsc#1198285:
  s390-tools-sles15sp4-01-genprotimg-remove-DigiCert-root-CA-pinning.patch
  s390-tools-sles15sp4-02-genprotimg-check_hostkeydoc-relax-default-issuer-che.patch
  The certificate verification of check_hostkeydoc is too strict and
  doesn't match the checking performed by genprotimg.
- Added the following patch for bsc#1198284:
  s390-tools-sles15sp4-libseckey-Fix-re-enciphering-of-EP11-secure-key.patch
  When re-enciphering the identity key and/or wrapping key of the
  zkey KMIP plugin via 'zkey kms reencipher', the operation
  completes without an error, but the secure keys are left
  un-reenciphered.</changelog>
  <changelog author="mpost@suse.com" date="1649937600">- Updated the cputype script to include the model number of IBM's
  recently announced z16 processor.</changelog>
  <changelog author="mpost@suse.com" date="1651579200">- Added s390-tools-sles15sp4-zdump-fix-segfault-due-to-double-free.patch
  for bsc#1199128. zgetdump --info may lead to a core dump when
  issued for the device node (not a partition) right after
  installing multi-volume dump tool (without taking actual dump).</changelog>
  <changelog author="mpost@suse.com" date="1653566400">- Added s390-tools-sles15sp4-libseckey-Adapt-keymgmt_match-implementation-to-Open.patch
  for bsc#1199649. zkey: KMIP plugin fails to connection to KMIP server
  When a zkey key repository is bound to the KMIP plugin, and the
  connection to the KMIP server is to be configired using command
  'zkey kms configure --kmip-server &lt;server&gt;', it fails to connect
  to the specified KMIP server.</changelog>
  <changelog author="mpost@suse.com" date="1654171200">- Added s390-tools-sles15sp4-genprotimg-boot-disable-Warray-bounds-for-now.patch
  to fix a build failure with gcc12. With gcc12, a "false positive"
  of "array subscript 0 is outside array bounds" is seen in
  genprotimg/boot/stage3a.c (bsc#1200131).</changelog>
  <changelog author="mpost@suse.com" date="1658145600">- Added s390-tools-sles15sp4-hyptop-increase-initial-update-interval.patch
  for bsc#1201412. Initial iteration of hyptop can produce bloated values
  independent from the update delay set by the user.</changelog>
  <changelog author="mpost@suse.com" date="1667476800">- Added s390-tools-sles15sp4-zipl-boot-add-secure-boot-trailer.patch
  for bsc#1204965. New IBM Z firmware requires all signed boot
  images to contain a trailing data block with a specific format.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1672747200">-  Added the following patches for
  KVM: Secure Execution Attestation Userspace Tool (s390-tools)
  (jsc#SLE-24831, jsc#SLE-22854, bsc#1206706)
  * s390-tools-sles15sp4-libpv-New-library-for-PV-tools.patch
  * s390-tools-sles15sp4-pvattest-tools-Add-tool-for-attestation.patch
  * s390-tools-sles15sp4-pvattest-Improve-error-reporting.patch
  * s390-tools-sles15sp4-pvattest-Create-perform-and-verify-attestation-measu.patch
  * s390-tools-sles15sp4-pvattest-Improve-logging.patch
  * s390-tools-sles15sp4-pvattest-Add-more-information-to-verbose-logging.patch</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1674475200">- Added the following patches for bsc#1207175, jsc#SLE-2285, and
  ECO jsc#SLE-24835:
  ap_tools: add ap-check and the ap device type to zdev. This
  feature adds multiple components in support of persistent
  configuration of vfio-ap mediated devices.
  * s390-tools-sles15sp4-01-libutil-add-util_exit_code.patch
  * s390-tools-sles15sp4-02-libutil-Move-some-zdev-file-reading-functions-into-u.patch
  * s390-tools-sles15sp4-03-libutil-Introduce-util_udev.patch
  * s390-tools-sles15sp4-04-libap-Add-library-for-ap-vfio-ap-management-tools.patch
  * s390-tools-sles15sp4-05-ap_tools-Introduce-ap_tools-and-the-ap-check-tool.patch
  * s390-tools-sles15sp4-06-zdev-Introduce-the-ap-device-type.patch
  * s390-tools-sles15sp4-07-libutil-introduce-util_lockfile.patch
  * s390-tools-sles15sp4-08-libutil-add-example-for-util_lockfile.patch
  * s390-tools-sles15sp4-09-libap-use-util_lockfile-and-remove-liblockfile-depen.patch
  * s390-tools-sles15sp4-10-ap_tools-ap-check-use-new-mdevctl-install-location.patch
  * s390-tools-sles15sp4-11-util_lockfile-fix-includes.patch
- Updated the spec file to:
  * Add %dir entries for:
    %{_sysconfdir}/mdevctl.d
    %{_sysconfdir}/mdevctl.d/scripts.d
    %{_sysconfdir}/mdevctl.d/scripts.d/callouts
    %{_prefix}/lib/mdevctl,
    %{_prefix}/lib/mdevctl/scripts.d, and
    %{_prefix}/lib/mdevctl/scripts.d/callouts
    NOTE that these directories do not belong to this package, but
    the mdevctl package has yet to be updated to claim them. So,
    until that happens, we have to temporarily claim ownership of
    them for the s390-tools package to build.
  * Modify the find/grep commands that generate the list of files
    for the package to avoid having files listed more than once.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1678449600">- Added the folowing patches (bsc#1209002, and bsc#1209003)
  - Fixes vmcp buffer evalutaion
  * s390-tools-sles15sp4-dbginfo.sh-fix_vmcp_buffer.patch
  - Adds support for kubernetes data collection
  * s390-tools-sles15sp4-dbginfo.sh-add_kubernetes.patch
- Updated cputype (bsc#1208983)
  * Changed the script to avoid "/usr/bin/cputype: line xx: nnnn: command not found",
  when machine type was found more than once in the /proc/cpuinfo.</changelog>
  <changelog author="nikolay.gueorguiev@suse.com" date="1684324800">- Applied patches (bsc#1211318)
  * s390-tools-sles15sp4-01-ziomon-ziorep_config-fix-missing-SG-major-minor-for-.patch
  * s390-tools-sles15sp4-02-ziomon-ziorep_config-fix-for-SCSI-devices-of-type-di.patch</changelog>
  <changelog author="tabraham@suse.com" date="1696248000">- Applied patch (bsc#1205528)
  - Fixes error 'zgetdump: Trying to seek past file end "/dev/crash"'
  * s390-tools-sles15sp4-zdump-fix-dev-mem-reading.patch</changelog>
</package>
<package pkgid="4f7c7d23374b5ba952f5e4459997ad708d7c5fcc067e44cf5263f6b01dc90ef2" name="salt" arch="aarch64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="d1024d6888ab52ff43f1680ae34adfbba84040f9334679c2cb439cf4a3e01a15" name="salt" arch="s390x">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="2919e2e6f967e2d0741cb7df6db1de389c9afd43f136bbada3c594bc6935211c" name="salt" arch="src">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="31b630427a1750dc53b176c55f25c705658f8cae93f7619074911026abe594ce" name="salt" arch="x86_64">
  <version epoch="0" ver="3004" rel="150400.8.25.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348800">- Exclude the full path of a download URL to prevent injection
  of malicious code (bsc#1190265) (CVE-2021-21996)
- Added:
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348801">- Update to Salt release version 3003.3 (jsc#SLE-22204)
  * See release notes: https://docs.saltstack.com/en/latest/topics/releases/3003.3.html
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * support-transactional-systems-microos.patch
  * allow-vendor-change-option-with-zypper.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * virt-enhancements.patch
- Modified:
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * include-aliases-in-the-fqdns-grains.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * improvements-on-ansiblegate-module-354.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * x509-fixes-111.patch
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * debian-info_installed-compatibility-50453.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch
  * fix-bsc-1065792.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * async-batch-implementation.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * adds-explicit-type-cast-for-port.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * add-custom-suse-capabilities-as-grains.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * early-feature-support-config.patch
- Removed:
  * virt-pass-emulator-when-getting-domain-capabilities-.patch
  * fix-virt.update-with-cpu-defined-263.patch
  * fix-unit-tests-for-batch-async-after-refactor.patch
  * opensuse-3000.3-spacewalk-runner-parse-command-250.patch
  * python3.8-compatibility-pr-s-235.patch
  * support-for-btrfs-and-xfs-in-parted-and-mkfs.patch
  * fixed-bug-lvm-has-no-parttion-type.-the-scipt-later-.patch
  * do-not-break-repo-files-with-multiple-line-values-on.patch
  * fix-failing-unit-tests-for-batch-async.patch
  * prevent-command-injection-in-the-snapper-module-bsc-.patch
  * accumulated-changes-from-yomi-167.patch
  * add-docker-logout-237.patch
  * use-threadpool-from-multiprocessing.pool-to-avoid-le.patch
  * get-os_arch-also-without-rpm-package-installed.patch
  * loosen-azure-sdk-dependencies-in-azurearm-cloud-driv.patch
  * add-hold-unhold-functions.patch
  * fix-zypper-pkg.list_pkgs-expectation-and-dpkg-mockin.patch
  * improve-batch_async-to-release-consumed-memory-bsc-1.patch
  * support-config-non-root-permission-issues-fixes-u-50.patch
  * virt-use-dev-kvm-to-detect-kvm-383.patch
  * fix-unit-test-for-grains-core.patch
  * do-not-make-ansiblegate-to-crash-on-python3-minions.patch
  * open-suse-3002.2-xen-grub-316.patch
  * transactional_update-detect-recursion-in-the-executo.patch
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
  * grains-master-can-read-grains.patch
  * remove-arch-from-name-when-pkg.list_pkgs-is-called-w.patch
  * fix-batch_async-obsolete-test.patch
  * remove-deprecated-usage-of-no_mock-and-no_mock_reaso.patch
  * backport-thread.is_alive-fix-390.patch
  * backport-virt-patches-from-3001-256.patch
  * fix-cve-2020-25592-and-add-tests-bsc-1178319.patch
  * handle-volumes-on-stopped-pools-in-virt.vm_info-373.patch
  * loop-fix-variable-names-for-until_no_eval.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * do-not-raise-streamclosederror-traceback-but-only-lo.patch
  * add-new-custom-suse-capability-for-saltutil-state-mo.patch
  * exclude-the-full-path-of-a-download-url-to-prevent-i.patch
  * zypperpkg-filter-patterns-that-start-with-dot-244.patch
  * virt._get_domain-don-t-raise-an-exception-if-there-i.patch
  * add-batch_presence_ping_timeout-and-batch_presence_p.patch
  * ensure-virt.update-stop_on_reboot-is-updated-with-it.patch
  * opensuse-3000-virt-defined-states-222.patch
  * changed-imports-to-vendored-tornado.patch
  * add-virt.all_capabilities.patch
  * fix-for-some-cves-bsc1181550.patch
  * fix-grains.test_core-unit-test-277.patch
  * path-replace-functools.wraps-with-six.wraps-bsc-1177.patch
  * implement-network.fqdns-module-function-bsc-1134860-.patch
  * prevent-race-condition-on-sigterm-for-the-minion-bsc.patch
  * ansiblegate-take-care-of-failed-skipped-and-unreacha.patch
  * do-not-crash-when-there-are-ipv6-established-connect.patch
  * grains.extra-support-old-non-intel-kernels-bsc-11806.patch
  * fall-back-to-pymysql.patch
  * virt-uefi-fix-backport-312.patch
  * reintroducing-reverted-changes.patch
  * allow-extra_filerefs-as-sanitized-kwargs-for-ssh-cli.patch
  * virt-adding-kernel-boot-parameters-to-libvirt-xml-55.patch
  * calculate-fqdns-in-parallel-to-avoid-blockings-bsc-1.patch
  * batch_async-avoid-using-fnmatch-to-match-event-217.patch
  * fix-memory-leak-produced-by-batch-async-find_jobs-me.patch
  * make-profiles-a-package.patch
  * handle-master-tops-data-when-states-are-applied-by-t.patch
  * 3002.2-xen-spicevmc-dns-srv-records-backports-314.patch
  * sanitize-grains-loaded-from-roster_grains.json.patch
  * pkgrepo-support-python-2.7-function-call-295.patch
  * integration-of-msi-authentication-with-azurearm-clou.patch
  * fix-regression-on-cmd.run-when-passing-tuples-as-cmd.patch
  * opensuse-3000-libvirt-engine-fixes-251.patch
  * revert-add-patch-support-for-allow-vendor-change-opt.patch
  * allow-passing-kwargs-to-pkg.list_downloaded-bsc-1140.patch
  * prevent-import-errors-when-running-test_btrfs-unit-t.patch
  * transactional_update-unify-with-chroot.call.patch
  * batch-async-catch-exceptions-and-safety-unregister-a.patch
  * fix-novendorchange-option-284.patch
  * fix-async-batch-race-conditions.patch
  * regression-fix-of-salt-ssh-on-processing-targets-353.patch
  * move-vendor-change-logic-to-zypper-class-355.patch
  * fixes-cve-2018-15750-cve-2018-15751.patch
  * virt.network_update-handle-missing-ipv4-netmask-attr.patch
  * add-supportconfig-module-for-remote-calls-and-saltss.patch
  * use-current-ioloop-for-the-localclient-instance-of-b.patch
  * prevent-systemd-run-description-issue-when-running-a.patch
  * backport-a-few-virt-prs-272.patch
  * fix-issue-parsing-errors-in-ansiblegate-state-module.patch
  * fix-__mount_device-wrapper-254.patch
  * provide-the-missing-features-required-for-yomi-yet-o.patch
  * move-server_id-deprecation-warning-to-reduce-log-spa.patch
  * strip-trailing-from-repo.uri-when-comparing-repos-in.patch
  * xfs-do-not-fails-if-type-is-not-present.patch
  * add-cpe_name-for-osversion-grain-parsing-u-49946.patch
  * avoid-traceback-when-http.query-request-cannot-be-pe.patch
  * fix-a-wrong-rebase-in-test_core.py-180.patch
  * remove-vendored-backports-abc-from-requirements.patch
  * remove-deprecated-warning-that-breaks-miniion-execut.patch
  * re-adding-function-to-test-for-root.patch
  * fix-async-batch-multiple-done-events.patch
  * 3002-set-distro-requirement-to-oldest-supported-vers.patch
  * backport-of-upstream-pr59492-to-3002.2-404.patch
  * fix-error-handling-in-openscap-module-bsc-1188647-40.patch
  * accumulated-changes-required-for-yomi-165.patch
  * add-pkg.services_need_restart-302.patch
  * remove-unnecessary-yield-causing-badyielderror-bsc-1.patch
  * add-all_versions-parameter-to-include-all-installed-.patch
  * prevent-test_mod_del_repo_multiline_values-to-fail.patch
  * fix-for-temp-folder-definition-in-loader-unit-test.patch
  * opensuse-3000.2-virt-backports-236-257.patch
  * drop-wrong-mock-from-chroot-unit-test.patch
  * option-to-en-disable-force-refresh-in-zypper-215.patch
  * fix-failing-unit-tests-for-systemd.patch
  * fix-the-removed-six.itermitems-and-six.-_type-262.patch
  * fixing-streamclosed-issue.patch
  * fix-onlyif-unless-when-multiple-conditions-bsc-11808.patch
  * invalidate-file-list-cache-when-cache-file-modified-.patch
  * add-almalinux-and-alibaba-cloud-linux-to-the-os-fami.patch
  * allow-vendor-change-option-with-zypper-313.patch
  * xen-disk-fixes-264.patch
  * fix-git_pillar-merging-across-multiple-__env__-repos.patch
  * drop-wrong-virt-capabilities-code-after-rebasing-pat.patch
  * do-noop-for-services-states-when-running-systemd-in-.patch
  * open-suse-3002.2-bigvm-310.patch
  * fix-for-log-checking-in-x509-test.patch
  * open-suse-3002.2-virt-network-311.patch
  * async-batch-implementation-fix-320.patch
  * apply-patch-from-upstream-to-support-python-3.8.patch
  * add-multi-file-support-and-globbing-to-the-filetree-.patch
  * add-patch-support-for-allow-vendor-change-option-wit.patch
  * fix-ipv6-scope-bsc-1108557.patch
  * remove-msgpack-1.0.0-requirement-in-the-installed-me.patch
  * fix-aptpkg-systemd-call-bsc-1143301.patch
  * prevent-ansiblegate-unit-tests-to-fail-on-ubuntu.patch
  * support-transactional-systems-microos-271.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1633348802">- Do not break master_tops for minion with version lower to 3003
- Support querying for JSON data in external sql pillar
- Added:
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1634126400">- Fix issues with salt-ssh's extra-filerefs
- Fix crash when calling manage.not_alive runners
- Do not consider skipped targets as failed for ansible.playbooks state (bsc#1190446)
- Added:
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
</package>
<package pkgid="5331ea99c40aeebbfbeb1d25d7133f5e042c4b528377c39399a7281208e8a94b" name="salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="e40c41b496b5a613fe5b0adb184ae52a5d25c939e6fc8adb8bed6340d5117024" name="salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="3c9f020ec15c080a93bf4de17ab19402a1e28574b745dfb2ada3fcd066915bd8" name="salt" arch="src">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="bf02a5aa937ca19bdceea3016916fecb5eea14cc97e743f2ea36a854955b0b9b" name="salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.34.2"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1637236800">- Simplify "transactional_update" module to not use SSH wrapper and allow more flexible execution
- Add "--no-return-event" option to salt-call to prevent sending return event back to master.
- Make "state.highstate" to acts on concurrent flag.
- Use dnfnotify instead yumnotify for relevant distros
- dnfnotify pkgset plugin implementation
- Add rpm_vercmp python library support for version comparison
- Prevent pkg plugins errors on missing cookie path (bsc#1186738)
- Make "tar" as required for "salt-transactional-update" package
- Make "salt-api" package to require python3-cherrypy on RHEL systems
- Fix ip6_interface grain to not leak secondary IPv4 aliases (bsc#1191412)
- Added:
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
</package>
<package pkgid="8fbd02082467cce35545e9af5ffe58628c7b4d1e2ee46008c45a21b9d53a8353" name="salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.37.2"/>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
</package>
<package pkgid="6cfd3df5b4bd1693dd673b25f281acb5fa02d0d347917c6c7d30269a825793c0" name="salt" arch="s390x">
  <version epoch="0" ver="3006.0" rel="150400.8.37.2"/>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
</package>
<package pkgid="8295dccb5cc1a61c37835d0d9f156782af362fffde12b98e0d5c81ed5387a853" name="salt" arch="src">
  <version epoch="0" ver="3006.0" rel="150400.8.37.2"/>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
</package>
<package pkgid="d5a3d27527eebd9030316ffaf44c8a04e68759d9030fd2a05e9b82c56e41f224" name="salt" arch="x86_64">
  <version epoch="0" ver="3006.0" rel="150400.8.37.2"/>
  <changelog author="alexander.graul@suse.com" date="1643630400">- Update to version 3004 (jsc#SLE-23675)
  * See release notes: https://docs.saltproject.io/en/master/topics/releases/3004.html
- Don't check for cached pillar errors on state.apply (bsc#1190781)
- Fix exception in batch_async caused by a bad function call
- Fix inspector module export function (bsc#1097531)
- Wipe NOTIFY_SOCKET from env in cmdmod (bsc#1193357)
- Added:
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
- Modified:
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-custom-suse-capabilities-as-grains.patch
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * debian-info_installed-compatibility-50453.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * info_installed-works-without-status-attr-now.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * improvements-on-ansiblegate-module-354.patch
  * support-transactional-systems-microos.patch
  * x509-fixes-111.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * include-aliases-in-the-fqdns-grains.patch
- Removed:
  * parsing-epoch-out-of-version-provided-during-pkg-rem.patch
  * add-missing-aarch64-to-rpm-package-architectures-405.patch
  * better-handling-of-bad-public-keys-from-minions-bsc-.patch
  * don-t-call-zypper-with-more-than-one-no-refresh.patch
  * templates-move-the-globals-up-to-the-environment-jin.patch
  * adding-preliminary-support-for-rocky.-59682-391.patch
  * do-not-monkey-patch-yaml-bsc-1177474.patch
  * fix-save-for-iptables-state-module-bsc-1185131-372.patch
  * fix-a-test-and-some-variable-names-229.patch
  * add-alibaba-cloud-linux-2-by-backporting-upstream-s-.patch
  * virt-enhancements.patch
  * fix-aptpkg.normalize_name-when-package-arch-is-all.patch
  * figure-out-python-interpreter-to-use-inside-containe.patch
  * do-not-break-master_tops-for-minion-with-version-low.patch
  * prevent-logging-deadlock-on-salt-api-subprocesses-bs.patch
  * add-astra-linux-common-edition-to-the-os-family-list.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1644321600">- Expose missing "ansible" module functions in Salt 3004 (bsc#1195625)
- Added:
  * add-missing-ansible-module-functions-to-whitelist-in.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1646049600">- Add salt-ssh with Salt Bundle support (venv-salt-minion)
  (bsc#1182851, bsc#1196432)
- Fix issues found around pre_flight_script_args
- Restrict "state.orchestrate_single" to pass a pillar value if it exists (bsc#1194632)
- Fix salt-call event.send with pillar or grains
- Update generated documentation to 3004
- Added:
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1664193600">- Handle non-UTF-8 bytes in core grains generation (bsc#1202165)
- Fix Syndic authentication errors (bsc#1199562)
- Add Amazon EC2 detection for virtual grains (bsc#1195624)
- Fix the regression in schedule module releasded in 3004 (bsc#1202631)
- Fix state.apply in test mode with file state module on user/group checking (bsc#1202167)
- Change the delimeters to prevent possible tracebacks on some packages with dpkg_lowpkg
- Make zypperpkg to retry if RPM lock is temporarily unavailable (bsc#1200596)
- Fix test_ipc unit test
- Added:
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * fix-test_ipc-unit-tests.patch
  * backport-syndic-auth-fixes.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1668686400">- Pass the context to pillar ext modules
- Align Amazon EC2 (Nitro) grains with upstream (bsc#1203685)
- Detect module run syntax version
- Implement automated patches alignment for the Salt Bundle
- Ignore extend declarations from excluded SLS files (bsc#1203886)
- Clarify pkg.installed pkg_verify documentation
- Enhance capture of error messages for Zypper calls in zypperpkg module
- Make pass renderer configurable and fix detected issues
- Workaround fopen line buffering for binary mode (bsc#1203834)
- Added:
  * detect-module.run-syntax.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1673524800">- Control the collection of lvm grains via config (bsc#1204939)
- Added:
  * control-the-collection-of-lvm-grains-via-config.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677153600">- Fixes pkg.version_cmp on openEuler systems and a few other OS flavors
- Make pkg.remove function from zypperpkg module to handle also PTF packages
- Added:
  * 3004-implement-zypper-removeptf-574.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1677499200">- Fix problem with detecting PTF packages (bsc#1208691)
- Added:
  * skip-package-names-without-colon-bsc-1208691-578.patch</changelog>
  <changelog author="alexander.graul@suse.com" date="1683288000">- Update to Salt release version 3006.0 (jsc#PED-4360)
  * See release notes: https://docs.saltproject.io/en/latest/topics/releases/3006.0.html
- Add missing patch after rebase to fix collections Mapping issues
- Add python3-looseversion as new dependency for salt
- Add python3-packaging as new dependency for salt
- Allow entrypoint compatibility for "importlib-metadata&gt;=5.0.0" (bsc#1207071)
- Create new salt-tests subpackage containing Salt tests
- Drop conflictive patch dicarded from upstream
- Fix SLS rendering error when Jinja macros are used
- Fix version detection and avoid building and testing failures
- Prevent deadlocks in salt-ssh executions
- Require python3-jmespath runtime dependency (bsc#1209233)
- Added:
  * 3005.1-implement-zypper-removeptf-573.patch
  * control-the-collection-of-lvm-grains-via-config.patch
  * fix-version-detection-and-avoid-building-and-testing.patch
  * make-sure-the-file-client-is-destroyed-upon-used.patch
  * skip-package-names-without-colon-bsc-1208691-578.patch
  * use-rlock-to-avoid-deadlocks-in-salt-ssh.patch
- Modified:
  * activate-all-beacons-sources-config-pillar-grains.patch
  * add-custom-suse-capabilities-as-grains.patch
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch
  * add-migrated-state-and-gpg-key-management-functions-.patch
  * add-publish_batch-to-clearfuncs-exposed-methods.patch
  * add-salt-ssh-support-with-venv-salt-minion-3004-493.patch
  * add-sleep-on-exception-handling-on-minion-connection.patch
  * add-standalone-configuration-file-for-enabling-packa.patch
  * add-support-for-gpgautoimport-539.patch
  * allow-vendor-change-option-with-zypper.patch
  * async-batch-implementation.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * bsc-1176024-fix-file-directory-user-and-group-owners.patch
  * change-the-delimeters-to-prevent-possible-tracebacks.patch
  * debian-info_installed-compatibility-50453.patch
  * dnfnotify-pkgset-plugin-implementation-3002.2-450.patch
  * do-not-load-pip-state-if-there-is-no-3rd-party-depen.patch
  * don-t-use-shell-sbin-nologin-in-requisites.patch
  * drop-serial-from-event.unpack-in-cli.batch_async.patch
  * early-feature-support-config.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch
  * enhance-openscap-module-add-xccdf_eval-call-386.patch
  * fix-bsc-1065792.patch
  * fix-for-suse-expanded-support-detection.patch
  * fix-issue-2068-test.patch
  * fix-missing-minion-returns-in-batch-mode-360.patch
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch
  * fix-salt.utils.stringutils.to_str-calls-to-make-it-w.patch
  * fix-the-regression-for-yumnotify-plugin-456.patch
  * fix-traceback.print_exc-calls-for-test_pip_state-432.patch
  * fixes-for-python-3.10-502.patch
  * include-aliases-in-the-fqdns-grains.patch
  * info_installed-works-without-status-attr-now.patch
  * let-salt-ssh-use-platform-python-binary-in-rhel8-191.patch
  * make-aptpkg.list_repos-compatible-on-enabled-disable.patch
  * make-setup.py-script-to-not-require-setuptools-9.1.patch
  * pass-the-context-to-pillar-ext-modules.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch
  * prevent-pkg-plugins-errors-on-missing-cookie-path-bs.patch
  * prevent-shell-injection-via-pre_flight_script_args-4.patch
  * read-repo-info-without-using-interpolation-bsc-11356.patch
  * restore-default-behaviour-of-pkg-list-return.patch
  * return-the-expected-powerpc-os-arch-bsc-1117995.patch
  * revert-fixing-a-use-case-when-multiple-inotify-beaco.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * save-log-to-logfile-with-docker.build.patch
  * switch-firewalld-state-to-use-change_interface.patch
  * temporary-fix-extend-the-whitelist-of-allowed-comman.patch
  * update-target-fix-for-salt-ssh-to-process-targets-li.patch
  * use-adler32-algorithm-to-compute-string-checksums.patch
  * use-salt-bundle-in-dockermod.patch
  * x509-fixes-111.patch
  * zypperpkg-ignore-retcode-104-for-search-bsc-1176697-.patch
- Removed:
  * 3003.3-do-not-consider-skipped-targets-as-failed-for.patch
  * 3003.3-postgresql-json-support-in-pillar-423.patch
  * add-amazon-ec2-detection-for-virtual-grains-bsc-1195.patch
  * add-missing-ansible-module-functions-to-whitelist-in.patch
  * add-rpm_vercmp-python-library-for-version-comparison.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * adds-explicit-type-cast-for-port.patch
  * align-amazon-ec2-nitro-grains-with-upstream-pr-bsc-1.patch
  * backport-syndic-auth-fixes.patch
  * batch.py-avoid-exception-when-minion-does-not-respon.patch
  * check-if-dpkgnotify-is-executable-bsc-1186674-376.patch
  * clarify-pkg.installed-pkg_verify-documentation.patch
  * detect-module.run-syntax.patch
  * do-not-crash-when-unexpected-cmd-output-at-listing-p.patch
  * enhance-logging-when-inotify-beacon-is-missing-pyino.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-crash-when-calling-manage.not_alive-runners.patch
  * fixes-pkg.version_cmp-on-openeuler-systems-and-a-few.patch
  * fix-exception-in-yumpkg.remove-for-not-installed-pac.patch
  * fix-for-cve-2022-22967-bsc-1200566.patch
  * fix-inspector-module-export-function-bsc-1097531-481.patch
  * fix-ip6_interface-grain-to-not-leak-secondary-ipv4-a.patch
  * fix-issues-with-salt-ssh-s-extra-filerefs.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * fix-multiple-security-issues-bsc-1197417.patch
  * fix-salt-call-event.send-call-with-grains-and-pillar.patch
  * fix-salt.states.file.managed-for-follow_symlinks-tru.patch
  * fix-state.apply-in-test-mode-with-file-state-module-.patch
  * fix-test_ipc-unit-tests.patch
  * fix-the-regression-in-schedule-module-releasded-in-3.patch
  * fix-wrong-test_mod_del_repo_multiline_values-test-af.patch
  * fixes-56144-to-enable-hotadd-profile-support.patch
  * fopen-workaround-bad-buffering-for-binary-mode-563.patch
  * force-zyppnotify-to-prefer-packages.db-than-packages.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * ignore-extend-declarations-from-excluded-sls-files.patch
  * ignore-non-utf8-characters-while-reading-files-with-.patch
  * implementation-of-held-unheld-functions-for-state-pk.patch
  * implementation-of-suse_ip-execution-module-bsc-10999.patch
  * improvements-on-ansiblegate-module-354.patch
  * include-stdout-in-error-message-for-zypperpkg-559.patch
  * make-pass-renderer-configurable-other-fixes-532.patch
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch
  * mock-ip_addrs-in-utils-minions.py-unit-test-443.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * notify-beacon-for-debian-ubuntu-systems-347.patch
  * refactor-and-improvements-for-transactional-updates-.patch
  * retry-if-rpm-lock-is-temporarily-unavailable-547.patch
  * set-default-target-for-pip-from-venv_pip_target-envi.patch
  * state.apply-don-t-check-for-cached-pillar-errors.patch
  * state.orchestrate_single-does-not-pass-pillar-none-4.patch
  * support-transactional-systems-microos.patch
  * wipe-notify_socket-from-env-in-cmdmod-bsc-1193357-30.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1684929600">- Avoid conflicts with Salt dependencies versions (bsc#1211612)
- Added:
  * avoid-conflicts-with-dependencies-versions-bsc-12116.patch</changelog>
  <changelog author="yeray.gutierrez@suse.com" date="1685361600">- Avoid failures due transactional_update module not available in Salt 3006.0 (bsc#1211754)
- Added:
  * define-__virtualname__-for-transactional_update-modu.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687176000">- Make master_tops compatible with Salt 3000 and older minions (bsc#1212516) (bsc#1212517)
- Added:
  * make-master_tops-compatible-with-salt-3000-and-older.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1687867200">- Prevent _pygit2.GitError: error loading known_hosts when $HOME is not set (bsc#1210994)
- Fix ModuleNotFoundError and other issues raised by salt-support module (bsc#1211591)
- tornado: Fix an open redirect in StaticFileHandler (CVE-2023-28370, bsc#1211741)
- Added:
  * 3006.0-prevent-_pygit2.giterror-error-loading-known_.patch
  * tornado-fix-an-open-redirect-in-staticfilehandler-cv.patch
  * fix-some-issues-detected-in-salt-support-cli-module-.patch</changelog>
</package>
<package pkgid="1fe0f3bb618008477dc9a3b68ff0871a196eaaa5ea4508d2bc112e0942cc55fe" name="salt" arch="aarch64">
  <version epoch="0" ver="3006.0" rel="150400.8.44.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728000">- Fix multiple security issues (bsc#1197417)
  * Sign authentication replies to prevent MiTM (CVE-2022-22935)
  * Sign pillar data to prevent MiTM attacks. (CVE-2022-22934)
  * Prevent job and fileserver replays (CVE-2022-22936)
  * Fixed targeting bug, especially visible when using syndic and user auth. (CVE-2022-22941)
- Added:
  * fix-multiple-security-issues-bsc-1197417.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1648728001">- Fix salt-ssh opts poisoning (bsc#1197637)
- Added:
  * fix-salt-ssh-opts-poisoning-bsc-1197637-3004-501.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1649764800">- Fix regression preventing bootstrapping new clients caused by
  redundant dependency on psutil (bsc#1197533)
- Prevent data pollution between actions proceesed at the same time (bsc#1197637)
- Added:
  * fix-regression-with-depending-client.ssh-on-psutil-b.patch
  * prevent-affection-of-ssh.opts-with-lazyloader-bsc-11.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1651665600">- Fixes for Python 3.10
- Added:
  * fixes-for-python-3.10-502.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1652961600">- Make sure SaltCacheLoader use correct fileclient (bsc#1199149)
- Added:
  * make-sure-saltcacheloader-use-correct-fileclient-519.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1655380800">- Fix PAM auth issue due missing check for PAM_ACCT_MGM return value (CVE-2022-22967) (bsc#1200566)
- Added:
  * fix-for-cve-2022-22967-bsc-1200566.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1659960000">- Add support for gpgautoimport in zypperpkg module
- Update Salt to work with Jinja &gt;= and &lt;= 3.1.0 (bsc#1198744)
- Fix salt.states.file.managed() for follow_symlinks=True and test=True (bsc#1199372)
- Make Salt 3004 compatible with pyzmq &gt;= 23.0.0 (bsc#1201082)
- Add support for name, pkgs and diff_attr parameters to upgrade function for zypper and yum (bsc#1198489)
- Fix ownership of salt thin directory when using the Salt Bundle
- Set default target for pip from VENV_PIP_TARGET environment variable
- Normalize package names once with pkg.installed/removed using yum (bsc#1195895)
- Save log to logfile with docker.build
- Use Salt Bundle in dockermod
- Ignore erros on reading license files with dpkg_lowpkg (bsc#1197288)
- Added:
  * fix-ownership-of-salt-thin-directory-when-using-the-.patch
  * add-support-for-name-pkgs-and-diff_attr-parameters-t.patch
  * save-log-to-logfile-with-docker.build.patch
  * add-support-for-gpgautoimport-539.patch
  * fix-jinja2-contextfuntion-base-on-version-bsc-119874.patch
  * normalize-package-names-once-with-pkg.installed-remo.patch
  * use-salt-bundle-in-dockermod.patch
  * ignore-erros-on-reading-license-files-with-dpkg_lowp.patch
  * fix-62092-catch-zmq.error.zmqerror-to-set-hwm-for-zm.patch
  * fix-salt.states.file.managed-for-f
[file cut: first 33554432 bytes kept]
[document cut: first 32040402 of 33551713 characters kept]
